last executing test programs: 3m7.176063902s ago: executing program 2 (id=3): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, r0) keyctl$chown(0x4, r0, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000140), 0x0) sched_setaffinity(0x0, 0xfffffffffffffd58, &(0x7f00000002c0)=0x2) io_setup(0x239f, &(0x7f0000000380)=0x0) io_submit(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x19, 0x7a, 0xb0, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x1d}, 0x0, 0x70, 0xb0, 0x0, {0x0, 0xffffffffa0028000}}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "c4078287ad3ba56be24b73b2d025ce7e4384c45e4d0086dddf24bdd8dff3"}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffff00, 0xffffff00, 'batadv_slave_0\x00', 'rose0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x41}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) fcntl$addseals(r3, 0x409, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfd, 0x7fff7ffc}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80281, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 3m6.631577839s ago: executing program 2 (id=9): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@any, 0x4}, 0x1, 0x0, 0x2ff}) 3m4.627076301s ago: executing program 3 (id=17): fallocate(0xffffffffffffffff, 0x0, 0xffffffffffff8001, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES64=r0, @ANYBLOB="b8fa6975e1d9eb668eb2c958da93d5a13c49222cec615dabc7cbc1983db2d21f493620dee43c19c5"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000400", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000004e00000000000010001000000000000000000000000000005635abcadc"], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@o_path={0x0, 0x0, 0x8000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000500400008000b4000000000400004803c0001800b00010074756e6e656c00002c0002800800034000000000080001400000000108000340000000020800014000000000080002400000000c0900010073797a30"], 0x5d54}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0xffffd6c0, r3, 0x0, 0x20}, 0x38) socket(0x10, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x400, 0x0, 0x1}, 0x18, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfffffffffffffc39) listen(r5, 0x402) r6 = socket$unix(0x1, 0x5, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) io_setup(0x4, &(0x7f0000000080)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 3m3.965066548s ago: executing program 0 (id=18): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x700}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x70, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 3m3.616009867s ago: executing program 0 (id=21): syz_usb_connect(0x0, 0x5f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) socket$kcm(0xa, 0x1, 0x106) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300032f0000002cbd7000fbdbdf2502000900080000051c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc01000000000000000000000000000107000000000000001f000800800700"], 0x178}, 0x1, 0x7}, 0x0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, 0x0) 3m3.506926721s ago: executing program 3 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x401c800}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x172) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0xfffffffffffffffd, 0x2) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff00d4137a000000000000000000000000100000004d51773fb789c2f86f3a3f97267f231c9c9260640eb2d6449af15af6cbfa8b87bf667082908169bd5294eb1831a524b668d56e2ace8f50a815b8d08bef51cb42440e59366cc519c4817e04d4bfaddd3479cce70382d713aeb506e7a7eef01904795c9d092bf3534156ae5f14d6563b078f156325c1c3602ead8da9f36ea685b4f931f0468485408783f80c276a1a935cb7b0fdd050591c2621c9421aa9a036bd0f64fdaca75b3236534eb4205822d4240fd694586dcc6c8171b74bd4f72465bb1bbbfb480632f8ea0ccd17a87eff9eaa1c7786e9"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800ed000015d500000000000008000188c1180018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207d9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000000000000b70000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x807, 0x403, 0xffdffffd, {0x5, 0xff, 0x7ff, 0x4, 0x0, 0xd615, 0x9, 0x0, 0x3, 0x2000, 0x4000000, 0x0, 0x0, 0x5, 0x5}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="480400001000391100"/20, @ANYRES32=0x0, @ANYBLOB="21010000000000001c0012800b00010062726964676500000c00028006002700a10000000a00010014fd06cfb0c10000"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) io_submit(0x0, 0x40000000000000f4, &(0x7f00000000c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x3, r2, 0x0, 0x0, 0xa, 0x0, 0x0, r4}]) 3m2.173239015s ago: executing program 3 (id=26): ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)=0x1) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x1406, 0x800, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc331befb8450a7a4}, 0x20008840) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x95, 0x0, 0x1, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x9d57, 0x40, 0xfffffffb, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x40, 0x8}, 0xc) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x4, 0x79, &(0x7f0000000480)=""/121, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x2, 0x6, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0x1, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, r8, r9, r10], 0x0, 0x10, 0x6}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000880)={0x0, 0x0}) ptrace$setregs(0xd, r12, 0x2, &(0x7f0000000900)="8e2d39ea8fbdcfd34cb6c27809e3923903d5dc04c9f5b56c1953f8b651f990c33851fcf9870957dea00515d4c947714cae394aed35091e772cfcb4966d55ef8454afd48787b6702017d82470d2e86a") ptrace$cont(0x18, 0xffffffffffffffff, 0x200, 0x100000000) ptrace$setregs(0xd, r12, 0x180000000, &(0x7f0000000980)) r13 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000a00), 0xf01) sendmsg$nl_generic(r5, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xbc, 0x35, 0x300, 0x70bd25, 0x25dfdbfd, {0x9}, [@nested={0xc, 0xb5, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @fd=r13}]}, @nested={0x94, 0x11, 0x0, 0x1, [@generic="bf921a7d3dc44815026135a47867fe64651500b91cf97b92665ab7014e4737ad0e8c9f36530e04470c9dd5629d71811998573f5bb816cc2ec39f3585999d52ba1c5a5662adee6def4b5279b4cb1cce644586520f0fa8c2314651356a2cc91938f8dba4120a89bab250a3aa7d5dcf13feb04b9604cb965c3fd6a08df4623b17b696e689933afbde0f2678e14b6cf7843e"]}, @typed={0x8, 0xb8, 0x0, 0x0, @uid=r6}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x40001) ptrace$cont(0x20, r12, 0x6, 0xf37) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000b80)={'macsec0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r5) sendmsg$DEVLINK_CMD_SB_GET(r15, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xd8, r16, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9a}}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc001}, 0x8004) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1c, 0x5, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@generic={0x9, 0x9, 0x1, 0x7, 0x4}, @call={0x85, 0x0, 0x0, 0xca}]}, &(0x7f0000000e00)='GPL\x00', 0x7de, 0xb4, &(0x7f0000000e40)=""/180, 0x40f00, 0x22, '\x00', r14, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f00)={0x1, 0x6, 0x8, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)=[r10, r8], &(0x7f0000000f80)=[{0x4, 0x3, 0x6, 0x1}, {0x5, 0x4, 0x0, 0xc}, {0x4, 0x4, 0x10, 0xa}, {0x0, 0x2, 0xa, 0x2}, {0x4, 0x1, 0xb, 0x8}, {0x7fff, 0x5, 0x2, 0x6}, {0x4, 0x5, 0xe, 0x1}, {0x0, 0x3, 0xa, 0xc}], 0x10, 0x54}, 0x94) r19 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000001300), 0x800, 0x0) r20 = getegid() sendmmsg$unix(r9, &(0x7f0000004d40)=[{{&(0x7f00000010c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001140)="567e717862dc7d03c10f73b779763bf090443bc79a08d6b77f51fcb5eebab7089cb2f0e637fc933e106b9ded68384b33649b4915a8158953d29452fe6f277f17f32cabc2deb7992faf78f16137c74fcbe57942080e05897f6f91b3a4e8e1c7002e3ebee6fb8dae18d5b7600764873223616ab31122edc1e8dd306c9c6bab5fe09e84182e0719a13d8fbc6975f94465369808301d8e4bb2ac8799496ab3e27865d85bf715660a75913e4886c23da4243b39613811ad94ef6c6091d43108c72affb841fb80b76bbf6854cbebdd3772d666b5f70623000e92c62b5d2523b3e4ea9bee1ccdbdda00c9478ac587e3df40756bbeaf3da7c4d4", 0xf6}, {&(0x7f0000001240)="5877467a77ba9c2f4890fc76d8ea81eee0d8d6c5911786662599b794658e564a950250388d63bcf7f674bd4ba6f77f3598feb1b93bdcbb4c7a7a91a23473ff841c0feaf593af", 0x46}], 0x2, &(0x7f0000001440)=[@rights={{0x14, 0x1, 0x1, [r19]}}, @rights={{0x14, 0x1, 0x1, [r17]}}, @cred={{0x1c, 0x1, 0x2, {r12, r6, r20}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r12, r6, r7}}}, @rights={{0x1c, 0x1, 0x1, [r15, r10, r10]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee01, r7}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r13, r5, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0x108, 0x10}}, {{&(0x7f0000001580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001600)="a04e47c2b981c6794896d10a", 0xc}, {&(0x7f0000001640)="78b2e69f7494e181d96eef8544aa6c0c423fda6e52a18e06628a4004a24fc798b7d0322c8e83065fe60b5ecdb7e3c524d9c40d5132e69714", 0x38}, {&(0x7f0000001680)="b90656a589ed8b9209b040f2a23d2c71849593aca2e35957629c1f7665b8f5b1f13cc46696a485dfaf3995e94c6343d1e8107e7e3aea8c02cdfd07af4b38bdebb00eece7f9dde14db1d88214da36a96368f8fdb5d408a5679273d384647a8cf50d0616a22f558ef52220dca00d6f7610ed52e72be97dcfa94135c885f3e0c1c99221e66db4412ca23ce7d77b09ed7963c157953bf5b44036e2bca42095e67ce7285d4ae384a20f96e2280a31f528bf15f62044e9e24e47aed0bbd67999fc5d89d0d1140d663878efe655c922a3e0f8dd4dfcf2bf821eb1bd912da0a3c421a2225683", 0xe2}, {&(0x7f0000001780)="8eebc32b034d76e9fe600fa71bc228dce316a8b9692d252b1c308fea5952414d9d6927bf6e712dbc49ef1fe0fc500c6f925c938a7f86ba80f43e59ede98734aded964283f75e1cca0db467e32a89c98a4037caf903b6028fd2d5039f472ae2b10af33727276e6c3bf5918b2fa803ea072a55bd5c9cb39541927942765d2f21a6d69f56a9d266b6135f74c196748d2861e4a7a26758895448ef3bbad1918c0970618545ce11408cd720e1920fb5463440bb9a8ddfd64a53883d0e", 0xba}, {&(0x7f0000001840)="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", 0xff}, {&(0x7f0000001940)="1222084c6561eb248931a177da61b426bc06d6f94e0726f382b318ddef5cd95767a925524ffeebb585621f0cf027014e46090039b38d2368bc40dfa627c40a", 0x3f}], 0x6, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {r12, r6, r7}}}, @rights={{0x18, 0x1, 0x1, [r18, r2]}}, @cred={{0x1c, 0x1, 0x2, {r12, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r12}}}, @rights={{0x24, 0x1, 0x1, [r17, 0xffffffffffffffff, r15, r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {r12, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r12, r6, r7}}}], 0x100, 0x4000810}}, {{&(0x7f0000001c80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d00)="4ad9d6874fa315e280ada64ca9a86c17e0", 0x11}, {&(0x7f0000001d40)="663ffdebff2fd6658a3ef3b5a589a0d7d580b4646926da7b2682a9a5c0d7670b3b64a7e76cd9314ae37845ef37", 0x2d}, {&(0x7f0000001d80)="98393538ff59a0b4c28933be3827c64e01786fcb9bbb014c22dedc885a2b5d4f4914802c44635d730b2ca050230067268aedae0ac165e4e641ad44246d131e93a50b80de90963075ebfaac0b6dca0a596856a68fa1b47b0c21d4e5c1bc0b05646483bd4834fd898748ee7746273a619ef0d893df5cf465e88da9ab2b447c6702702ea0a31e2065187b7fe2ec0df3a04e6d25a8b0c2ea971fef9e54b2e401", 0x9e}, {&(0x7f0000001e40)="9e1679a18bbbc7611d8b1bdb1a84a62de09f2d90a613b1570c39e9b65c1063456f87e01c5e145de4e4253bd728acdd3aea372f8162db64695a8b134dbfa259d527652722116a1e67344e1518567ca9ba70f01744ce1bae478151ae3cc4033592de99da0097f42f57a7d43214d4c1df7ad3b5021d2112e797544753f25e6fa4445988badd63adeaac60969d249ddc579f2f285a4eb656eefa30920554d5bec2b88abf579850c54fdc746e150ba19e9945e7080134b2d26c1ad2", 0xb9}], 0x4, &(0x7f0000001f40)=[@cred={{0x1c, 0x1, 0x2, {r12, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r12, r6, r7}}}], 0x70, 0x814}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000001fc0)="fd1492c70e1e16d3946e0edfb91f0cea5c108290b636afc46ebb8f036b27ec228cd5e3424488e9b4c83828a0163b26c574b2d75494918029317d71a4d552dcbce1f92660722b31ca9aa8c82163a6ff373f36d37a1f075bd56695f54e90d73e399c306be12b1f189363ee2ef32d8a0f7a68d5e5994e02739c1db807a51d4db3be9952fa254ece9d845f26b0a9e3886e1527f0be7668bac07267fabc3280376eb55b63627602366f2f02cd8bc4b51195c35ec31a7ac755f9aec0bfbe5e86c2da8ac9fd4a1866366aeb719a65ba678c327f08b04b3dd06be7042691091c", 0xdc}, {&(0x7f00000020c0)="e83b4f1058a61faf3f55f0c24729e964cdf57385c4ecbcd5c0ba064152c0cab37c2f6d2e22dc37176bae6233fee31cec6240438319a72b7d2a307852341b9047b8c797fbbabf37998b28d7161b17b9e78e7b62fd4869669954d32f6c76b62e91a36e2f23c76cd9609cd878ffc2531217e0f273d7c03b73c226faf1509c54777bc017ba0a897c3d296dbdfde93da28336addee189f49c0982c67e0f4ec5905127ecd208040ef39db8ca8b18e99aaa7122728051dcba7de71f62d33c9a1fbfef2a0caf6cd8c6789d6c93de82cc5b4af3859da8cec3e6d4944c3c7f1872bba7d22a219577e5d8", 0xe5}, {&(0x7f00000021c0)="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", 0xff}, {&(0x7f00000022c0)="ae0c9f45b74d92f67a1034dbfea31d5f906aa835c59bcff492659026ec8b0e769e803c098374486ef075", 0x2a}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="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", 0xff}], 0x6, &(0x7f0000003680)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @rights={{0x1c, 0x1, 0x1, [r1, r11, r9]}}, @rights={{0x34, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r1, r9, r10, r1, r3, r11]}}, @rights={{0x1c, 0x1, 0x1, [r4, r13, r15]}}, @cred={{0x1c, 0x1, 0x2, {r12, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r12, r6, r7}}}], 0xf8, 0x8000}}, {{&(0x7f0000003780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000003800)="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", 0xfc}, {&(0x7f0000003900)="d0fe4cc6408b0759992508770f9194f4749d22ecccc32ff13eaaf8bf2e2132a36b2feb27b1672062e896a4a2e21ab11b3d56061c76dd27497f0f840c4bb90c38068e7146aa394a052e43ede237f0fb9bf3f18f25e50d82b198d5f9ab8b8ab0d0f5125b6462927cd329af00537cb93522b5b0f240ad732f145f1dda210ec6919a4b2acc65809b5e9ead5063a2b8e236c720b728203fddf253bd7ac23c1375523c9b05bfcb07380321f26b4a1e48119b10320b938a3628b1dfebdf5a560374c48904d1c10b6cc786ece944ea4e4cc517213907ab", 0xd3}, {&(0x7f0000003a00)="c4ea1810fc7381f6a6c9ab30359461cae2ef20d1cb73e1178bcbab746e6e", 0x1e}, {&(0x7f0000003a40)="a9f5f2ab4f673de0dddbb02d20d055724e88bf4ccd91a7ef99cdb95c030159c23c78234449e3cb95648ee93078619279cb6a86c56ff1dee8f0d5dd", 0x3b}, {&(0x7f0000003a80)="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", 0xfd}], 0x5, &(0x7f0000003c40)=[@cred={{0x1c, 0x1, 0x2, {r12, 0x0, r7}}}], 0x20, 0x20040000}}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000003c80)="04269a482477a402807913775f561af36399d37963bfa1c0ed593d20749f0ebf6b704eddfd79db6667d0b1f80e3e8b44ce00af9c2312dc988437bb79f29165134fc24ffd29f30d16611ab2f2456bd86881c3", 0x52}, {&(0x7f0000003d00)="13dd7ae291b1cd2e272ab2bd4ae93261f2daa0b6798865fad39e059fd6083c846a931e4768193c53904ffa22b99ffc8dee3aa7bdd2a284df73092baa6b2a2ae21d9eab329f7c5b", 0x47}, {&(0x7f0000003d80)="bc82bd86c86a7dfa54e7870e6d5fbc65cda5b833fda3f030edf372ae4bbd1f9dd51c658923ef19ea6111e0387ca998aaa329aaff7eddd978135b944cc1a750cc896929d0e6ce164520aa822b8515f9eb6f9667", 0x53}, {&(0x7f0000003e00)="67aec90b5ed8b1c52ed13ac22f7c217d0bbf5c9b7feb609e4185fdafe96f0fd85f27467f525b64f6d40ca9ccf38bce3dfe8c2cbca70261f5bcc3b26fb386a1cbe2df31bb5f6435d49473aaa0dca3bdebb56e4fb00ec71c18dc7429c5014323bf10c26bec8273ed965ca727bceba2aadf4ef5fdb173940a32b54896d2575a81d6d75e105fbdf8a10a311fed1c66006e8e923efae4adfe463fd5633e1f70e2408cea1a32a5ff25ccafd4c5b9c415d81cf9966e", 0xb2}], 0x4, 0x0, 0x0, 0x800}}, {{&(0x7f0000003f00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004380)=[{&(0x7f0000003f80)="18677a607d4ce45c6b2a067293803e3582ada85815863cacd18a2c214fab9036e17432c51914478d8be6b0a0a89c4c9d27eea8ff955de5abf51036656dc4d9b88b830ef21ca9b457cb26e763eed16846a31553212ac891d3e8a3ba15ad223086073b1cf920aedbdeb78fcc8a602bcbe7f1f376d483b6b9758b8760f74b0b90efafb821a46cc959da7b83f519a47cded7bb3a943f8a6968fc6433c743a4682e79505f4a689a631342e5fff9d243b14f0ac19064056a800fe257ee9309aa4175b407203557fbb23ec5e110b607e09676eeeecb0224816b2ac3319f27f0d7a4e8b3006e6e0c349a017b", 0xe8}, {&(0x7f0000004080)}, {&(0x7f00000040c0)="3d477cbb9d2030d7115028c3a3306631a87c4ae3961dc9c5c8b42645fa5294698d09bf20a3ffcb106b2bc484675a03e27a60ee22a93546502dfa7e730f0b9559d73aa20b9f15e3b8c0792d07428e00fc59cf5aadb7137d8fb2cd33037d9522d3927e71be80b2e34d97a8c97a72a4838ca685ab2c38433b152aa3b3212063ad58c55a3007bafad298", 0x88}, {&(0x7f0000004180)="045073da2db53511c1d945eac9d764f7b60d75f1367b26572525d40b1b9265395435bb4775b7a007385b124a4ac5047c509465852a65dd62bf6f22c7c2a992944064efa7505a1cfe4c5ea204f6adcc8a595089c66df3e4688dc1003adbe3f92545468a9c534016ca9188eed9efbadbd1f9bc3f", 0x73}, {&(0x7f0000004200)="aeb543922d1df605edfdc04588c7dfb0fa331f667d6f25d5c2c4bcced5e6afc77ad4a4656df527d527711fe70584b456a970c08f3291090b4fd9c3caa72f67209ad0d06336206082d2f9a440bfe05b129b507a2899ab514ed24f2f454883bffc53341683a23b7b3c6e628bc5481d8cbcabe5eb1ffeffc7a902d3cfed0524c1c1293253844ec978c1fb2ddf426f0f3e8ea6cf62ccd40f19254e1d24a5f91027cadc23bac06fa3d074cc742d1c7b3acbef06a96518427ec0725e8b20b8238cb0bc5ab55b5a85dadc1daea736654187", 0xce}, {&(0x7f0000004300)="197fb98fd1a2a1602261cbc51b72384b0f7521e158be6b3853eb519b95575da39d8a322eca93b55f7d1a5feb077a2bfc515fd0135742eb1f0f993d60a7fbc51e0effab2d903038eaedf793883916e9718a9725d1fd7f082cb158c679175b63cf9a0afc601f33edb6382827c79b", 0x6d}], 0x6, &(0x7f0000004440)=[@rights={{0x18, 0x1, 0x1, [r18, r9]}}, @rights={{0x28, 0x1, 0x1, [r1, r10, r3, 0xffffffffffffffff, r17, 0xffffffffffffffff]}}], 0x40, 0x4}}, {{&(0x7f0000004480)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000004a00)=[{&(0x7f0000004500)="a5f56af62589dacd3efe559ea7d0f2c33f4ecc4960c52a18fb8f16683cd9fdc43bb033356886ee9e959b047fd1cfc799139a4c10e174d3798b2794d9156573d5a6f2d0a7490ce9ba0caa302263ef616042d1117db4c8c35e3e4a5cf8eeb3b2d5a661be1b3234ac711b5d1c46676fa3ffc38b0dd928dd7e2273ef39c2cd2b51e73ad99432e8bee9392ac7ab4b938501e28de70a40cb5c5c0a373b022d12fc7eb2c31adc116ed6fd61bdff57979e37ab3f81ef", 0xb2}, {&(0x7f00000045c0)="659b6bf98dd60ed9906f74d657f719d6afbd6b0a7e467f673365c8465b40a511eb9b3828753c2ba1839b63620e0953063b5abc7df41ab9cb3151e25a570939f280af13aa2b22c96ce4affccc33db81c9abd9072401dba2e2829ca73664f2bd2a3c0d7c08b93bc30133953be0cc0b772f4ce52817c338183b0cc603e9fd715c68bb0a3d670e5c00adb11237a85128f3df4441a889a54de2f6390a6de5cdbdacca04cd585ddd1ffd96910bdc9a0dc0172719e105ddfebdbb840e6bd661571d18d18e8e324cf77bcaee9ed5e587793b7bf3", 0xd0}, {&(0x7f00000046c0)="f415919ae52ef61602ad11df42", 0xd}, {&(0x7f0000004700)="92e833e39f7ed79c77e444adde558e8ad5caf062aa2c5b6aba3e45d963cda710b800eb76a638750be77db538d6d010c8fc2ac6c0fcd024f8adec4169a36ed48f6989867230bffadedfa2be0f401be8fc575c62f363c9aa62ff5db14dc879206a593ac157a8cce5f42e72722a43305d46e4cb08f1f357f32744ead66bd8b7463278e1a45238d5e2482061a038f4f5705ae30ce99f775e11efed8a628643b937cf3781b6a79f7636b6eb891e21a94545d6dc5e809d70ea9dea018fca5aa44ebcf1355938a03956ecaf6250c4", 0xcb}, {&(0x7f0000004800)="d10b57b27bc7cd89544b2b675721dd5132dd95f366f99482d3a786948c869ec02c24cd51764d9ab638e87fd48a1df0c722223589efa60059039c09d2545bec2b18ec76c30a97d300de196e8862f876a1b4ccd532c3de155d0202cb785a780e0f3fc26ed54653e64a373896f557de1654f384b836ed93eb4db75ed1421f29278da8fe5614d419f832a287c6eae28a6c9c261f385a8975f0e27c6e7cdb6f1f24c5dade6ab1d1", 0xa5}, {&(0x7f00000048c0)="0c67e4493a438fde9c57d3badae28263ccc97e3c04ad1a962351b0be600b859d9d29a36107b224902d99cf20378b2213c274fdf6dd68c29e75b5c4513a81d8f158900ef4c311a25858ef02fe27ec811fe7691d", 0x53}, {&(0x7f0000004940)="057e56e0f311fb1a23d5fd2314540dee1f4322dac593767cfb62c4341736df876dc27949a0cd0ca2055b85bda5f8f1f542a9fd94322a5223feaceee139a8c76961326fabc8836ce5e00ac6e96ac67e1f5fba8475c995c0a128dedd79272fa0891258a792cb92ed47ed81346359e9912b069c428cb9eaa034f1bb30bfb2d2714a86ad62e89949d1d2c2e264ba0ce32262870658", 0x93}], 0x7, &(0x7f0000004c00)=[@rights={{0x28, 0x1, 0x1, [r9, r10, r13, r1, r5, r2]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, r7}}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x30, 0x1, 0x1, [r18, r4, r5, r1, r10, 0xffffffffffffffff, r3, r8]}}, @rights={{0x18, 0x1, 0x1, [r9, r3]}}, @cred={{0x1c, 0x1, 0x2, {r12, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r12, r6, r7}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r4, r3, r8, r15, r10, 0xffffffffffffffff, 0xffffffffffffffff, r10]}}], 0x120, 0x4000010}}], 0x8, 0x8080) 3m2.172702493s ago: executing program 2 (id=27): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400f0001100050000000000feffffff07000000", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 3m1.515912223s ago: executing program 2 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="b805000000b972f25f210f01c1c4018573dd00c4a37d04ce40c4e2999ddc410f21172e470f070f3066b8ca000f00d0c74424002b010000c74424023f780000ff1c240f20e035000002000f22e0", 0x4d}], 0x1, 0x43, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x7fd, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) connect$caif(0xffffffffffffffff, &(0x7f0000000080)=@dgm={0x25, 0x2, 0x23}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m1.513980534s ago: executing program 3 (id=29): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r2, 0x1, 0xfffffffe, 0x10000, {0x17, 0x0, 0x300}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m1.405847592s ago: executing program 0 (id=30): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) msgctl$IPC_RMID(0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0xf) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r2 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x81}, 0x4c800) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000140)=0x800001, 0x0) recvmmsg(r6, &(0x7f0000001140), 0x700, 0x2, 0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) read$eventfd(r2, &(0x7f0000000000), 0x8) io_submit(r3, 0x0, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r7, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r8 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000000)=0x639) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r9, 0x4b6a, &(0x7f0000000400)="ff7476f9a6763e26102772ffbd8213775dfc5092b186815fa737a06c8cdda8cc1ef46a5f27d63a4c414199b1daa85f8ad123abe046f372f928118835087a3860cf171b70b6a57d54aa0d6f2fa2dd9a7a22a1a2a94d0dddb50cceb431054c4c15559091bd1e4e286e8bd566d9e6bf0c2fcccbaea29f5c176afa96eb027273fcd618d37139f9dd9f9a9e558f6ce92bfa1d76a2b6a28e06241a6a2cfd62a5c431e1ae67b8b226a0a574eb43d573c1fc24c477b05226725028317de81d0374cba59ebe50bf9d6f7ec38afcf84010e612175bd83342d5566ea58ddcb2927db3298cc90307ee3ebfafe1ec1badf5e0a1e53faf1e0875dcdc733e5bff3215611dba65a5346fa80775636d39433e3e122d48f5c0bb5693cc6cfb9bc9723ca1d8065a7d4e330cc8cfb4134858f586bb9f521b41997044d01fbe3188aab26288088be99c795536324fb6d0facbd7870af7c3ff1b91bb5dfe13b0bb77119a8c807035dcbab0a2e0eb75c14d5f97f33d030110bb43ed6a17af68b9267d627c2e73aff2d510d55d400875d917fb8e9693e8bd6a8d7db3bcf4170858a684886b082830f75c778ab6f4d025beabefa0d26ac05c283b994a0d50d809baed7e1928b3f4dcbdf3e29999a9112cd17e9cd278aa8e92ad328bac69c92b06dd41c90f127ae63a6012846569d83488f054c2e76df9470e0bea076827c0edd15dedb1aad62bb40163dccbba95a3317e54fd20e25db47cc3a661047baecbc57fd847058791cda502839164367b3352155234dcc78128ad7e6e64c71a8ea64c6916ffe14ec8af2da51542fd94da86fe83b5b22375345f30b40e1d4f308a50fc48a6893c6fb2a721081379491a053256a48aefe187380d8c3df2495317acf3739cfc42ad07ce93aa8fdeb88861e1d476d73ef373bea315e04e57515fe2f808214e684b11249f1fc8f037a2ee4dcad764cdaed5fb2f96db37ca0d91d79a2c599d1e329c61fb6e869bc5a97551eeda9e0ef758e25b0aee8f8cda9cca23ae64484bb089e8e8966964ad0105a908a480da0225e37cdb6864a1e7cf655a2ffa07207bc38e146e2c136b5cedd23dcbb5cfdf72147102629dedab9f75fd88a0436be8caa3cf7d2f9dca7ab8f08f4b00c2cb6d6835fd9cd2017fd1de8c159bed3c6abd08a884f8c1b87914a661a7fb2dcb227ce40c19f7ebfdfbbd90cf8b55f11b9c4f62dbf7f30d23a849c14e6e74c384a0325871ab14c27faef0ba4f51093a057199fec29f26b854c4d9e692987097872474c227af449aa28d8a33fdaa2051f9a6b2f33508c79d25202b1d6b37f3cbb4192b58d71f6317e8acaa168cf05234a9aac8eb158825e796bc164b6da6c742797a17ce5f6c923355397287ab81ec62bb058a06c71dd544d738623e7eafad9f80ef6cbd25c885777f295122188e835cc49897e35acc680547708dd2de2cdce5e6eed845396f7db44196d4c884296b88d806a7e82c01f01b8a50e1885d69df213aec7c159b226b4fa748590c65231af8698bf7744676c7abe57c660b3e9e990056149e45f8fc46df2fb2c122b14bae63548b104e41facba2c128afbff3ab571086bececdb7d917d66ad8240d67b073ef714f65b131b9b19b534d54f33ee0b540b538c3af50f77ced397d715854f7608a252d71ded92790936352bb2f483fa8b42b7fa535a8e82c3dd28451e02c88872455051674ff605bd2ca8fceb22a05396d3adb006d75046aad1fa348543eb6fadfee6deeb3caa1199902e8e3026663094e448f7c6245ba9093e7ec18b096d00f8f988910ba2671d9aa179ef24259bb7cd0279cfd659130c7979b22a857e06f0377113f8cf678d5d17923c8329971f97a5a6377159f410f5dfa091addbc24278c8e8583382c9f830a02b90cf65a120f2cbf78448e1c57c35230108663357199cd9408779062d40d6b73f39a0eaef4ef16643334fe24c0435c688f6dc725bc7c4c9a7b6f89719d3408b4a0e590159cb2b135bbdfb89bafcd8cb21a242be008d9cdf1aa73416c3449b835674e23d2ff4f242baca2127ef8d0128d8e21e28abb9e30c4517ae2802d9cf54fe51b45a04fa04c0bc4885e871f1323db81bb4a1d0433403fdfd3d9c30d9bbdbf72f98adbedae4e8103633016630f3cbc268c1ce1ad86b503f4f683b26b0c58b5b4130a83e78a9bc4a9c4e1e7da8a89c256c1b57e32acef267bef8812edb7175d54b26e16fea8b17df2280deb630b0926b29650de1a5e5c355fed7edcbc165434326b595c6cd2c70d7df1415ef524fb8a2c0a2e0ee8966cf1570f28e9e9c0c899a09d5941614e7eb382e1bdcad252c2ac0ac76392d76077ef6bda1c2b26b05fe7b971f5248e9c9d8787f78524930883b0fdf9f2f639b6ab1ac1b353fe117679712e81306a7ea2da240649b93a697b29e7e72870d51daeb379b7bcf05378c372d4b63ee0d63613aeb7831f489959447260270a28ad51c290bd5a29398f41d0ae7728d5ae88fdb974f678a3832aba8989f73ce451ded24d3873af7542093df3a29f0ee1bc6420553be183992c2b9a974a2a3a05f3370c6eaef1cabf38e048365d53522474df846c1a2a027c5dfd17586537019c07acccf987a0eae0dcd88d7ca40b0f9698b64224ada0c5dc50c4974daa3c214b1cf02c7b6260968dac68cfcfce12291e4d88c96567948d5574b919b05864bc49f539b165c590f30fd8369fa3cce6743d61d58c51bada6680795e3a83aa6901962e1a4c1b2a220abf2424a79e0a3dbcf35404066575235f4fcfabc263a689f892b6a2044c36e29b96ab8d47d4ee1d82f5d665c43412e6adb6e1b097d42c02427d639c5282ad2a270c91e5ce62f91245b81fc56002f84c9d12c4e95dce83c99b54b5b762cbab1e69b90fb77473bef0455fb6512ef779e515c1f33ad9508131c0f16c770351198d5c651a59c790e72f4680a642d758797279284758f46c11de0f9c417813c4abf9fedc406a99d517d7318b78f45b1a7a8b041af63fe8ca38cb972b77453cf727a297488ebbd0ef035e4f2cce047ac83f0b24787586f2599124d3de9d8034b98ce28415686271300eac172a5ff4e163e2b7b901fb3b41a9c97e7cc41b7c34e8871ac8e55c36748fb8ddd55bf29aed1328a7144b1d1949a3293748eb013d9a7256cd338738b96b8bfd472751d318f082ffb9c359607de00980f9e5e688aec53c237ec0cae10760f7bbe57337a2f238f0093522ac3025ee5212f60c38af597c0b1db9fff011d65fd63fb24accbe34593cefb16722f378329e5ba518b535d4ffe17131a206156bfe4c243770a0c7a28ab2089cada5ff749d39f00f396e2df7056816d49cb2b78929a2e33ab4bd253f3287bb249c8106faf322cc53bb836a4b42948e2a00462334338a6947ac5490989b78d9aa3bc37429531b193e644363db7229b909cb5c59bebc4face34948be22ec4fe38e5ee11380bad66810491ed72ced6904cc9896d988b8e5b4d914147b5da0e1894df618a9f4841fcbda28f14b1f164f73be35c0b3ede817b552559574cba30106e423a8415269c3efb9901c8b857db613f3c99c8f0021aceff53646bb1400801789fe3a281c8b0b60bd7ca252ee0d631314f446d1d8c4f88fcfe9603cb5bef22f7c09cf9cd43a05603844006ec280901e8b4813b03b4c21bbde9aef1bf90912c71ee783b7ad3f2b4e66b4d43d1a2538dc2fa83e8acdd6964c36c859348dfafdb4b3e7619c1457ac6b7f8e6975870adea624ddab397b6eb21211b372d49843bc79a4ebf481fd84b4bc2a3819cc93e9b5053610561d3bb93a4a60be0b863a34ec9b323213b44d2ace2dbb808ac0d2e79848e16b9f4bac55d2ae999cc113334768f508e78fd6c152f0b14c048c5ab855c883209585d47ae3877d1a06f7f5c6e8565b9837ab47a6467a3c8930f315a9852fe48bfa8c0ab383787007e4f0116de8606dccf4c4d7d0a9ea2b6cba51c2effd889bdf6e5b719dab44e935186f3c4002350a275f12601a7bed2fd7bbeb9ed72815c062044288085f374d878a18195e45804ae2e4a9919145cd1ba0c4229ee0362c9088e9c98b18a4fb11c29e57c6750a2f6dffdcd964781fe88d586e77b2b09817b7b4a4f938fbea975fb54b4c9ecfc3fa8f0d47d1246c19c9572bc7e847d379b4ee1caa015f804aa9ec2ccb00bc5745f152b2db10caba75aa4a84ceeb028ba34ac138e5e99cddef0d08e179a5caf359a2bce46372993fcf2126691d060d55c7d692f64f0ac3094cbc385da19424f6302f73bfe40aae2795fdc6e25e69d368efa16026f5906904f5f35d85d1ef1502f869be436c0d0cc589eb88b925bc1cfed6ed2c0662ce4d8fb65ec3408135af63d087d591f8184ff5bc771e1126638e538f76f440e813004931303f856c2fb641d92ff9e30b4695f2cb4ff1dda4159d97145873137f74a9b23e35c351e780379e614db68fc212e6172304b88d64f146d4d81d446246adb12871afb876b9ab2c71a2c894c18340cd72014acfa3b6b90f1e5fe285d821f80d718dd4a7f21be2e250e540d3d59f61ae9fac980fa000081be2902221fbf165dda151c1e112dd0379fc8958fea89981fef48a5b8c964bee2dd4d1ffc69a909ced08f1e133d9dbf19f5012417a7eead10847be08e770776d280dab3565841501456862df5d84ede4a407548bd49239aadd93d223aede0f92c1fc9b404a29e2b8ba61983785247b38ef6466ccf61395388f9f8067abc8ccdbed052b54a76b17cc92337d3a9225091c2976a9ea0e2beb2fba46c36eb9707982d83c71bebaf36f16f9186a3c56d6ceb58386f7822567d75645539d69a17ea3aa6f3526fc2c25ea34af925b0c3ad0fda1314809e345a475a6c82c15a186736157835486622a99040b482caa4ed259bcd018549ea9c56a81b289523fa9756c15b9c3187c76c8bc9f2b7a539bbd5baef8c77e2512fd21fed455defd8ade1a4f8990b31214400ca2a1d17de98be911d8e3e9bdf0cf610d0e6cb40806d1490dfbc223c51804005d257f4a5252f0aa35b37133c46efffee84094e0bcba12ac632c70f070485116c3ba7cd688cda1da052884da851b9f5824ae9c7cf78983bea1a22b888eb73af9c2461e5842dc5cb8c54d5df0d21e349f138b75c6f42731431cf08edc8419180a1104bb5433af3921f38b5f8e85d0a52f0126007cdc8303f3f67b93ebb35a742388883524e6fbb260a922b3530d40bcfb8e253d3a2a6b097a1e61348bf5c1befe242db875eff95c5527f3a218995d847f4636df99fe147b9c2c766f5a672dad12bc44de2a64c78702fa5dec4d57256633058bce85429d57534bc0a03e9b5743566068ac857e50ac4255d3fbb60155daa8028fe36f447e335b8dc792f2081dd355392f067a2696db793b28dea573ab59d7d6fd872de9feeb004b36bb8c16549121f9d9a671810e7cf3be412fe9ecf9a050be5d3b7aca12292e715117b1af571b66f3b54a8984e96bb7987d93cad9a0f8b477ac1726a000e544293cba85fe7d549923298cbb2e56068ec80ad533e3d9a4ed9c4bae99e805d3e8ff031d208b2010f059e4debbde74bb891871b4824f1a266a371ec1c5c466635e2976fea15839956367a6f1cf6ea7a69b9f277d5e029fabcd290f5d72bbb36816c5a0757a540a1c3e73b64cd9b16851d272fa2cf2e05eb0d27a949b247e013029809e075c827e229258efc07e189eaa92244862d186a53b89fad50e74b194f133b5b72b7f0b87b80541069b2c9befcc06b54997ab47a7c799bfbbe18fcc653f51e551e2a1beef2122947528018085bc46af43fd3ab22852b31fcd2f") read$FUSE(r8, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, r10, 0x0, 0x0, 'syz1\x00', 0x0}) 3m1.181523257s ago: executing program 4 (id=31): openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x50) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000100)={0x0, 0x3, 0x6, 0xc}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x34}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3m0.795614153s ago: executing program 3 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x8800) 3m0.198441124s ago: executing program 0 (id=34): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14) shutdown(r0, 0x1) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x1, {0x7, 0x8000, 0x80000004, 0x5}}) 2m59.829815949s ago: executing program 4 (id=35): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x4c}, 0x1, 0xba01}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x1000, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 2m59.677550304s ago: executing program 4 (id=36): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x8) 2m59.594517453s ago: executing program 4 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x401c800}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x172) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0xfffffffffffffffd, 0x2) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff00d4137a000000000000000000000000100000004d51773fb789c2f86f3a3f97267f231c9c9260640eb2d6449af15af6cbfa8b87bf667082908169bd5294eb1831a524b668d56e2ace8f50a815b8d08bef51cb42440e59366cc519c4817e04d4bfaddd3479cce70382d713aeb506e7a7eef01904795c9d092bf3534156ae5f14d6563b078f156325c1c3602ead8da9f36ea685b4f931f0468485408783f80c276a1a935cb7b0fdd050591c2621c9421aa9a036bd0f64fdaca75b3236534eb4205822d4240fd694586dcc6c8171b74bd4f72465bb1bbbfb480632f8ea0ccd17a87eff9eaa1c7786e9"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800ed000015d500000000000008000188c1180018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207d9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000000000000b70000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x807, 0x403, 0xffdffffd, {0x5, 0xff, 0x7ff, 0x4, 0x0, 0xd615, 0x9, 0x0, 0x3, 0x2000, 0x4000000, 0x0, 0x0, 0x5, 0x5}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="480400001000391100"/20, @ANYRES32=0x0, @ANYBLOB="21010000000000001c0012800b00010062726964676500000c00028006002700a10000000a00010014fd06cfb0c10000"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) io_submit(0x0, 0x40000000000000f4, &(0x7f00000000c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x3, r2, 0x0, 0x0, 0xa, 0x0, 0x0, r4}]) 2m58.535886188s ago: executing program 0 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0x800000008401, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f00000000c0)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400", 0x22) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x100}, 0xc) sendto$inet6(r2, &(0x7f0000000180)="b029653d", 0x4, 0xc840, 0x0, 0x0) iopl(0xd) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x20, r5, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) 2m58.036482416s ago: executing program 0 (id=39): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x200, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4952, &(0x7f0000000300)={0x0, 0xe3d6, 0x2, 0x1, 0x2f9}, 0x0, &(0x7f0000000380)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(r3, 0x24020000) landlock_create_ruleset(0x0, 0x0, 0x0) umount2(&(0x7f0000000400)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) rseq(0x0, 0x0, 0x4, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x810, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m57.98869171s ago: executing program 2 (id=40): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 2m57.979351065s ago: executing program 4 (id=41): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x38a9, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) gettid() futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) 2m57.795668096s ago: executing program 3 (id=42): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r3, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9c", 0xd1}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x810) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f0000000200)=0x7) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2m56.907470396s ago: executing program 4 (id=43): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe4", 0xc) accept4$alg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280), 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r3, 0x0, r4, 0x0, 0x10000000000016, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000000680)=""/102400, 0xffffff94) socket(0x1d, 0x6, 0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m56.554660762s ago: executing program 2 (id=44): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) socketpair(0x6, 0x6, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) 2m19.989076163s ago: executing program 32 (id=33): syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) pipe(0x0) syz_io_uring_setup(0x555a, &(0x7f0000000240)={0x0, 0x696, 0x2000, 0x3, 0x302}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x1}, 0x10) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r1 = dup2(r0, r0) r2 = syz_io_uring_setup(0x110a, &(0x7f0000000880)={0x0, 0x6, 0x80, 0x2, 0x4021e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r2, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r4, @ANYRESDEC], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m19.960660792s ago: executing program 33 (id=39): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x200, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4952, &(0x7f0000000300)={0x0, 0xe3d6, 0x2, 0x1, 0x2f9}, 0x0, &(0x7f0000000380)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(r3, 0x24020000) landlock_create_ruleset(0x0, 0x0, 0x0) umount2(&(0x7f0000000400)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) rseq(0x0, 0x0, 0x4, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x810, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m19.778202492s ago: executing program 34 (id=44): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) socketpair(0x6, 0x6, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140), 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x200004, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) 2m19.508222937s ago: executing program 35 (id=42): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r3, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9c", 0xd1}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x810) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f0000000200)=0x7) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2m19.410886637s ago: executing program 36 (id=43): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe4", 0xc) accept4$alg(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280), 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r3, 0x0, r4, 0x0, 0x10000000000016, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000000680)=""/102400, 0xffffff94) socket(0x1d, 0x6, 0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) fanotify_mark(0xffffffffffffffff, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m55.255119201s ago: executing program 8 (id=73): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x34}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r5 = syz_open_dev$dri(&(0x7f0000000200), 0x400000000000004, 0xe0441) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, r6}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100039040200"/20, @ANYRES32=0x0, @ANYBLOB="4010e300004e040c1800128008ea68b98e50fe5dea00028008000700ac1414aa0800040000000400c89fdbe85f46addc10df7fab3eca65187ef5def55b515aa9bf887f4a44da1aafd938f5dd10483b720101482d6c03cc6dea4d71277cd95a296512baef66e5139b02ae51a668701d12668f69044756d4ab27d8a760831b85efc8010054480ed1895ff5f40c4c6300b1d0a27c05f841b68a39e8e5f60d309b01af780747c20b176bf22ae3303ab32426f8d090592a66269fd8e3f7b28108c89ce44380e2590bf42d05e29aa74629082347e04b77"], 0x40}}, 0x0) write$selinux_access(r0, &(0x7f0000000080)={'system_u:object_r:sudo_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x5}, 0x54) 1m55.071938451s ago: executing program 8 (id=77): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x63, 0x25, 0xa6, 0x40, 0x2040, 0x4900, 0x4d8b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x21, 0x4c, 0x6a}}]}}]}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x15c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400000000, 0x543}, {0x4, 0x7fffffffffffffff}, {0xf011}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) map_shadow_stack(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x101}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000340)="00d400c2dda5296763eced7acadc", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x18) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept4(r3, 0x0, 0x0, 0x800) 1m51.142614612s ago: executing program 8 (id=84): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=ANY=[@ANYBLOB="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"], 0x150}}], 0x1, 0x480e0) 1m50.863822128s ago: executing program 8 (id=87): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockname$tipc(r2, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) 1m49.135736394s ago: executing program 8 (id=90): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x80e2e8) mkdir(0x0, 0x4d72b0d01b3df027) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r4, @ANYRES64=r0, @ANYRES32=r2, @ANYRES8=r0], 0x68}}, 0x20000090) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) write$selinux_load(r3, 0x0, 0xfd44) 1m48.911185635s ago: executing program 8 (id=93): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x48) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'mpc624\x00', [0x6d33cb08, 0x2, 0x10000, 0x14, 0x10, 0x0, 0x3, 0x7, 0x9, 0x1, 0x8001, 0x2, 0xbf6b, 0x801, 0x1, 0x1e6, 0x7, 0x2, 0x3, 0xbe, 0x978, 0xfffffff8, 0x1ff, 0x20001e58, 0xb, 0xe6b, 0x3c, 0x8, 0x65c, 0xfffffffd, 0xfffffff8]}) 1m33.841631577s ago: executing program 37 (id=93): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x48) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'mpc624\x00', [0x6d33cb08, 0x2, 0x10000, 0x14, 0x10, 0x0, 0x3, 0x7, 0x9, 0x1, 0x8001, 0x2, 0xbf6b, 0x801, 0x1, 0x1e6, 0x7, 0x2, 0x3, 0xbe, 0x978, 0xfffffff8, 0x1ff, 0x20001e58, 0xb, 0xe6b, 0x3c, 0x8, 0x65c, 0xfffffffd, 0xfffffff8]}) 8.402946852s ago: executing program 9 (id=418): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xc, 0x3, &(0x7f00000000c0)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xb8}}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) 7.92391068s ago: executing program 9 (id=420): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) ioctl$TCSBRKP(r0, 0x5425, 0x0) gettid() ioctl$TIOCGICOUNT(r0, 0x5409, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000600), 0x10000, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000640)=0xfffffffa) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0xfffffe00) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x72}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_usb_connect(0x4, 0x2ee, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x6d, 0x8, 0x80, 0x28, 0x3f0, 0xf7f, 0x627d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2dc, 0x2, 0x4, 0xf0, 0xc0, 0x70, [{{0x9, 0x4, 0x85, 0x9, 0x0, 0xcc, 0xf9, 0x17, 0x3}}, {{0x9, 0x4, 0xa1, 0x8, 0x9, 0x78, 0xe9, 0x51, 0x4, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x1, 0x1, 0x14, "ae", "e8ee"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x1, 0x4, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2b, 0x3, 0x33, 0x7, "", "bafc"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x2, 0x6, 0x8, "db9b1ccf"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x10, 0x1, 0xf, 0xd6, "fe746079f0"}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xc, 0x6, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x1000}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x4}, @dmm={0x7, 0x24, 0x14, 0x7, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x3a3b, 0x3, 0xe, 0x8, 0x8}, @dmm={0x7, 0x24, 0x14, 0x7fff, 0x5}]}], [{{0x9, 0x5, 0xa, 0x0, 0x400, 0x5, 0xda, 0x3, [@generic={0xcb, 0x2, "ed4de961bbc6390c0d8567c4eef0d75e337fd467e4e489b3b24d414e0a222ea4fc989b48cc92bc21e27609532cb1db9b71cfbcf3eca9ab7c52368b9aa092d21c97d263b993f751bceb0e1a4045eb7df839c597d074332c0a4312bea1759c2976353173dd4ae3e836bbc0e4af1647111ccdb3f69ca414169b68c64da698e754cea8226380cc62704fe7994d199130cb31fcde8b3f714cf3cb473cd279f9e3eaf67dae94147a41d9770be743d008182062f730b339c3c3e21bee39062c12ce34dab056e6a439bc389fa9"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x8, 0xd, 0x2}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x5, 0xfb, 0xa}}, {{0x9, 0x5, 0xe07a8c7ccef03afc, 0x0, 0x3f7, 0x7f, 0x5e, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x2}, @generic={0x52, 0x23, "bd7238d225349daf6cdadb28430854caa2fe3dbd84b46c778172f10f99836babeb5be88cb5aa3b6a5d0b285d7046cf122ecaffda174151c8e7bb7e6b4aac2900c63748e3f42c4c9b836e9053d898c1bf"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x10, 0x0, 0x8}}, {{0x9, 0x5, 0x0, 0x13, 0x40, 0x8, 0x10, 0xc7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0xd5d}, @generic={0xa6, 0x2, "06c9dabf4328889b7f4f9aa0a4e0a7015af69feb72e656cb27604c334bb42e19670305df9104af5182825370e345395ccc3e19f103a4500d2c4b4dae20162951b3e92087ba7a10c36435bd2b706ccfbf326326a8358d6e820bb8a879e8eb3e01243727c2fc92d12f4141bf0dccbc0617e34c48dfb259690f1cbbbea255a44d21f5af153d9145ad3a19fe14071bc32149b964a06cea5ee99b4a7512639b68150ee0778ece"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x10, 0x0, 0xfc}}, {{0x9, 0x5, 0x80, 0x3, 0x400, 0xe4, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0xf801}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x6, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x134b}]}}]}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x9, 0x4, 0x7f, 0x20, 0x6}, 0x30, &(0x7f0000000080)={0x5, 0xf, 0x30, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x4, 0xff0f, 0x1b4d, [0xff00f0, 0xff0000, 0x3f, 0x3fcf, 0x0, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x8, 0x7}]}, 0x3, [{0xae, &(0x7f0000000400)=@string={0xae, 0x3, "d7f6f87ad11b41e86899ef05e5ee062b2f2ea63e0bff25afd67efd5f71dd68a520123cd47cabb5c5923bd4bbdfe058fb0f02e050146dd72348dd8d34d19b4b0da0166e90f6cf8fa2791ce51aa61ac6912857da7fbe6e51582e1ad2a78003fa5626569bc8ff50e9f625b693e88c7e42975c2a9548608b663781393dbbeb5942df19aa460d96a1fe471c26bc068878c20e32fd8bee481e0c348920f2c3de99ec3202a9b35e455ec4243788d84f"}}, {0xb3, &(0x7f00000004c0)=@string={0xa9, 0x3, "59a92848729fa237856cb3fb0d3e3a7e72e99b55eec348eb17239d40859db9b6b65ba28cf931770ddcd3184ac06f759a553e51d1a0fc514fc9e2e8294f57733959e311772eae95022a29b64cde449b0d82e2d256cdfbbc9440329d16f2fdefd136df93c5462ea483d0affee65c7cd59d54b3075a4b03adb47a83cf367329752ffa133bb78fad25affd0f1a8ca6735228eec59ea71da3196475a0ebdc9f31ef3d342b0c65948bfe91b9ca8b3ddc1da99ce4"}}, {0x40, &(0x7f0000000580)=@string={0x16, 0x3, "0e96752cda9ec5c042c68b9d8ff1c4ae0d45f57ff68d6bcc506d4bd371f35843e82e5ce2db4a1d35ebd33782258fbb2a552060b1651ada177a586b252ecf"}}]}) 7.899828166s ago: executing program 1 (id=421): mremap(&(0x7f00000d5000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00000fb000/0x4000)=nil) socket$kcm(0x29, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1000000003) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 7.296142861s ago: executing program 7 (id=423): syz_usb_connect(0x0, 0x5f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) socket$kcm(0xa, 0x1, 0x106) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300032f0000002cbd7000fbdbdf2502000900080000001c0000000000000001000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc01000000000000000000000000000107000000000000001f000800800700"], 0x178}, 0x1, 0x7}, 0x0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, 0x0) 6.90812553s ago: executing program 1 (id=424): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00'}) (async) recvmmsg(r4, &(0x7f00000001c0), 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r5 = syz_create_resource$binfmt(&(0x7f0000000200)='./file0\x00') (rerun: 32) r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) (async, rerun: 64) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) (rerun: 64) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0)={[&(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r7 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x439, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r10, 0x59801, 0x51341}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004890}, 0x80) r11 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) r12 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r12, 0x80044dff, 0x1000000000000) 6.74791074s ago: executing program 1 (id=427): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x401c800}, 0x24000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x40800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x172) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0xfffffffffffffffd, 0x2) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff00d4137a000000000000000000000000100000004d51773fb789c2f86f3a3f97267f231c9c9260640eb2d6449af15af6cbfa8b87bf667082908169bd5294eb1831a524b668d56e2ace8f50a815b8d08bef51cb42440e59366cc519c4817e04d4bfaddd3479cce70382d713aeb506e7a7eef01904795c9d092bf3534156ae5f14d6563b078f156325c1c3602ead8da9f36ea685b4f931f0468485408783f80c276a1a935cb7b0fdd050591c2621c9421aa9a036bd0f64fdaca75b3236534eb4205822d4240fd694586dcc6c8171b74bd4f72465bb1bbbfb480632f8ea0ccd17a87eff9eaa1c7786e9"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800ed000015d500000000000008000188c1180018110000", @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x807, 0x403, 0xffdffffd, {0x5, 0xff, 0x7ff, 0x4, 0x0, 0xd615, 0x9, 0x0, 0x3, 0x2000, 0x4000000, 0x0, 0x0, 0x5, 0x5}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="480400001000391100"/20, @ANYRES32=0x0, @ANYBLOB="21010000000000001c0012800b00010062726964676500000c00028006002700a10000000a00010014fd06cfb0c10000"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) io_submit(0x0, 0x40000000000000f4, &(0x7f00000000c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x3, r2, 0x0, 0x0, 0xa, 0x0, 0x0, r4}]) 5.665664122s ago: executing program 7 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x50, 0x18, 0x1, 0x70bd28, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'gact\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x62, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0xffffffdd}, 0x1, 0x0, 0x0, 0x4001}, 0x200408c4) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0xff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r1, 0x5452, &(0x7f0000002480)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect$uac1(0x0, 0xe4, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0x3, 0x10, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x4}, [@selector_unit={0xb, 0x24, 0x5, 0x3, 0x4, "37a551659872"}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x6, 0x1, "142d"}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0xa4a8, 0x3, '`'}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x1, 0x0, 0xc, 0x1, 0x24}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x26}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x5, 0x4, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3, 0xd, 0x7, "bebeb7"}, @as_header={0x7, 0x24, 0x1, 0x7f, 0xf7, 0x1001}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0xdf7b, 0x10, "8b4338cf13970bc36e"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xf, 0x5, 0xfe, "a05e87cdf47c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x5, 0x7, 0xb, {0x7, 0x25, 0x1, 0x1, 0x8, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xa, 0x9, 0xd}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x2, 0x4, 0x5, {0x7, 0x25, 0x1, 0x80, 0x40, 0x3}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xff, 0x6, 0x8, 0xff, 0x5}, 0xf6, &(0x7f0000000380)={0x5, 0xf, 0xf6, 0x2, [@ptm_cap={0x3}, @generic={0xee, 0x10, 0x0, "7a7017cce5fd49228d5f8a1db0100825c933d45f3cf58bc81a0c27819527e406fc30e6f66353e9b227224287bac6ad8e83acb0a1dcf633b34af6a64d2e4dac4eff4a4311d31e83851221b922062c9a53dfe1498b94f1b9d8f810178551ef54e654b2e1cece5bda3b7cb1af1689b10a88faf3eb66201c8d2f97ec00b5de03f1caeb13e7529c22e16b44d191649f859ed4b90af18d35a3677667bde1fcad54e2e0385e65d5680a89f6642a7a0056220111c4251acc34a4ce5ccfbc30947065726784c2e69da713091112c946e1b57a72935340654e400a87886b1ee4e9320db5508da4c570f604ea2d281d6a"}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44e}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000000540)={0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES64=r3], &(0x7f00000004c0)=ANY=[@ANYBLOB="00030400400004030134"]}, &(0x7f0000000a00)={0x44, &(0x7f0000000740)={0x20, 0x16, 0xca, "1b6874a5d58a44512e055d1f2e40600b530756d0a9630238013f1c74d371958156378b1dd4d1ac8b1ccfadf0a388060b291158bb9c4b7c1b8f263c5c1ce71b2f7154a70aa725e7acbfb86b5927c2755b2e9aab2a2598e8b1c20da82b68a173eca520f204ccc29bc39a764808d7d9681d9bb003a4b8ecb671f1188bb969d7900cd15af83444404f03a2583141480e58e201c372c03b504a29a99977ecc97b6ce8a9b575b3dc05a88fa88c602d2c93f3bf1fd96d25df433156aa4d4a6690c43b93fe144f0f107034dbb8a9"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xc3}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000008c0)={0x20, 0x81, 0x1, "c0"}, &(0x7f0000000640)={0x20, 0x82, 0x3, "be05a4"}, &(0x7f0000000940)={0x20, 0x83, 0x1, "e9"}, &(0x7f0000000680)=ANY=[@ANYBLOB="2084ebffffffceca27d01b7b73881e5e20bc7679fa9621353acb002e3331cfb93ab204656ae4fa88bedbead0b3050f"], &(0x7f0000000600)={0x20, 0x85, 0x3, "bf8f95"}}) syz_io_uring_setup(0x2c0, &(0x7f0000000580)={0x0, 0xec1e, 0x8, 0x40000001, 0x40000333}, &(0x7f0000000500)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x50) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) 5.664936414s ago: executing program 9 (id=430): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000071e0000000c00018008000100", @ANYRES32=r8, @ANYBLOB="0500030001"], 0x28}}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0x5e}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a3, 0x5, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0xfece, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x0, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x2, 0x491, 0x9, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x100006, 0x8000, 0x404, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x3, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}]}, 0x18, 0x0) 4.619693552s ago: executing program 9 (id=432): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r0, 0x0, 0x51}, 0x18) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200), 0x22140, 0x0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000500)={@default, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000378000/0x2000)=nil, &(0x7f0000579000/0x3000)=nil, &(0x7f00002f3000/0x1000)=nil, &(0x7f0000169000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00007ba000/0x3000)=nil, &(0x7f0000052000/0x3000)=nil, &(0x7f00004fa000/0x2000)=nil, &(0x7f0000e78000/0x1000)=nil, &(0x7f0000958000/0x1000)=nil, &(0x7f0000454000/0x3000)=nil, &(0x7f00000001c0)="001302865505e9a404a342870eb67413665e0dbbc94574c6163a5488850a08369daadeb94cbf72e481191dd298aa4e6b02dd18dc", 0x34, r0}, 0x68) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@deltclass={0x4c, 0x29, 0x20, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x9, 0x8}, {0xffff, 0x1}}, [@tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x8, 0x5}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_prio={0x9}]}, 0x4c}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x6, 0x2, {0x2, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004001}, 0x8000) (async) r7 = socket(0x8000000010, 0x2, 0x0) write(r7, &(0x7f00000008c0)="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", 0xfc) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.283617488s ago: executing program 9 (id=433): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xfffffffffffffe01, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSW2(r2, 0x402c542c, 0x0) io_uring_setup(0x3ef, 0x0) sendmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000440)="4c87868aef1e263fd16fdf2a55ca2e8212a53a7064f27230082e6eae3aa781cccce872b13c4bf4213e06283ca1602e49635347a2b034c039320fe320c160bf7a8f9f7a9ebb31f5a7fcc24aac8f15c112f46cbd5bd499666be1de87e6d80840ffb8b5596a7a04125520f7e635cefd3ccd40f078896c5bef1a9107c7", 0x7b}], 0x1, 0x0, 0x0, 0x4008804}, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x25, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@private=0xa010101, 0x4e20, 0x10000, 0xf8}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x4000000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) brk(0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) 4.230833127s ago: executing program 1 (id=434): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(r0, 0xa, 0x0, &(0x7f0000000300)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xa) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d0, 0x1e0, 0x148, 0x1e0, 0x148, 0x1e0, 0x338, 0x338, 0x338, 0x338, 0x338, 0x6, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2, 0x41}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x0, 0xfc}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xb78e19162b0a7f00, 0xffff00, 'pimreg1\x00', '\x00', {}, {0xff}, 0x0, 0x0, 0x10}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'sit0\x00', 'wg2\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x31, 0x0, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_usb_connect(0x2, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff09050c02200006060309050710003e8fad67020102070824"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040400000900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00,\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0d00000003000000040000000700000011000000", @ANYRES32=r4], 0x50) sched_setscheduler(0x0, 0x6, &(0x7f0000000340)=0x400) 3.64896593s ago: executing program 6 (id=436): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x12, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1}) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000001d000/0x4000)=nil, 0x4000, 0xb635773f04ebbee8, 0x8031, 0xffffffffffffffff, 0x13b1c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.492624092s ago: executing program 5 (id=437): openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6fb4007134cf6ee0800005000000d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000100)={0x0, 0x3, 0x6, 0xc}) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.487073756s ago: executing program 6 (id=438): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000080bfa300000000000007030000fffeffff7a0af0fff8ffff1971a4f0ff00000000b7050000080000001e2400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x2800, 0x0, 0x0, 0xa}, 0x54) 2.411766461s ago: executing program 7 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ca97a9d3c979552c15a9b538000000", @ANYRES32=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.144694948s ago: executing program 6 (id=440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18900000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_create(0x8, 0x0, &(0x7f0000000000)=0x0) timer_delete(r1) 1.980424374s ago: executing program 6 (id=441): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @local, 0x9}, @in={0x2, 0x4e23, @broadcast}], 0x2c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x9, @private0, 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000400)='nT', 0x2}], 0x1}, 0xfec0}], 0x1, 0x5d9) 1.915315727s ago: executing program 5 (id=442): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x24008800) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000004c0)="2cbcd11c0faf6ab412aab35fe5ae41d7f35fdfc8f3521fd99376491cf052d2c833fa2467652203d08fec5781efd1299798e56625d65fef809c2b6602f31de611030add547d5e327feb8fbb52e8bb074f25d0895f8ec4eaee7f4f6ed5ac387200"/105, 0xfffffffffffffed5, 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0xfffffffffffffdd7, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) sendto$unix(r4, &(0x7f0000000200)="9a0878cb89dc045b5d92fbd3d0a3078c0f615ffebd5822a8b46be56ad13631fa348c127c25783e55022ca4eabae33ab33950f8985a266e574bea22704234990152b989e2", 0x44, 0x4000045, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 1.423959952s ago: executing program 6 (id=443): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0xc0c00) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000020fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.423686264s ago: executing program 5 (id=444): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040810}) 1.345007443s ago: executing program 7 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="f3a4c4a281919c719bd49cf6420f01ca0f01c90f30470f072e43a766ba2000ec0f01c026672e460f01c3", 0x2a}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x69, &(0x7f0000000340)=[@flags={0x3, 0x202100}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 557.353323ms ago: executing program 7 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x80) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x59}, {0x4}}}}, 0xd) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000047c0)=r7, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000011040)=@newtaction={0x18, 0x30, 0x216822a75a8bd32d, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x48010) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) (async) timer_create(0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 379.827943ms ago: executing program 6 (id=447): r0 = epoll_create(0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x5, 0x4000000080000001, 0x80000000000c}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x20, &(0x7f0000000180)={&(0x7f0000000700)=""/4093, 0xffd, 0x0, &(0x7f0000000080)=""/202, 0xca}}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903"], 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) openat$comedi(0xffffff9c, 0x0, 0x80220, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xa, 0xd0e0000, 0x0, 0x100, 0x1a8, 0x1d8, 0x1d8, 0x1a8, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @rand_addr=0x64010101, 0xff, 0xff, 'veth0\x00', 'ipvlan0\x00', {0xff}, {}, 0x2, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xffff, 0x800, 0x1, 'syz1\x00', 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x5, 0x0, 0x0, 0x7], 0x5, 0x5}, {0x0, [0x6, 0x2, 0x1, 0x7, 0x5, 0x5], 0x5, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000240)={0x2f, {0x1, 0xfffffffc, 0x4, 0x3, 0x30ec0751, 0x80000001}}) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000e6100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000e6300)={0x0, 0x0, "1ec7f225daf56680725b70ffe503f06287c2a10f7040d8f0a36ddaddc8e37217eba7d2282f21d9ba6f778ca38969afe27cb4000c533d6a6cea9c46ce00034aa870cac7fa9939aa0bb98fb43191de52b86b0fb5552cbb8c910568cd2fd886d7a8910fac55112b444dbbef6d2b8fae725342e24a1c05a4955cc78ac986c9316e9d07f830a84d2c913095339a3578e6733fbee43629c9e0b060d3576886c54cbf0ad130e94c560397e7dd8ec983da544f3b2cea7c025e93b606da1de34c6568aea8366b1811f41e1515f32d1168be4ca11429f74fc91d2f04f71bcc00f9563020fda4aae50fefc07d8498f0192569c0bbaf2dd5c6d1da998b284b53cfd040a5e6af", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000e7300)={0x8001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {r8}], 0x80, "aac33569f188f0"}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000000200)=0x7, 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) 346.83347ms ago: executing program 1 (id=448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x14d4}}, 0x0) 231.796343ms ago: executing program 9 (id=449): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=@acquire={0x148, 0x17, 0x1, 0x0, 0x0, {{@in6=@local}, @in=@multicast2, {@in6=@mcast2, @in=@multicast1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}, @XFRMA_IF_ID={0x8}, @offload={0xc}]}, 0x148}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0xfffffffffffffc91) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x6, 0x40, 0xc, 0xfffffff8, 0x4, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000, 0x8000, 0x7, 0x8}}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000006000000000000000100008d"], 0x0, 0x32, 0x0, 0x1, 0x1}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x109301) memfd_create(&(0x7f0000002240)='key_or_keyring:', 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder1\x00', 0xc02, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) eventfd(0x80000b) r10 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000100)={0x4, 0x1, 0x0, r7, 0x0, 0x0}) 195.218996ms ago: executing program 5 (id=450): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) close(0xffffffffffffffff) socket(0x2, 0x5, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x41}, @empty=0xffff0000}}}], 0x20}}], 0x27, 0x0) 187.051702ms ago: executing program 1 (id=451): sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000000)=0x4b9) r0 = getpid() ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0xffc0000000000000, 0x2002) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x6, 0x9, r0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x16b4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000045}, 0x40) r4 = fcntl$getown(r1, 0x9) r5 = epoll_create(0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r2, &(0x7f0000000280)={r5, r1, 0x6}) write$nbd(r2, &(0x7f00000002c0)={0x67446698, 0x0, 0x2, 0x0, 0x1, "89e4f51316835da7a0db95be253f68e167fbca8b936e6b577656a39912c060abb3c02ff79ead766a734b7a92058fabe143663186e172c562575f22814f757afddea49afbdfcac84a600f66c0897eab442b05ff34c2cb4ce2031dccd15b29b4e8f20eae318cda7833295593c9ce603245eb094444968af3"}, 0x87) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x2, &(0x7f0000000380)=""/76) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x530, 0x320, 0x230, 0xffffffff, 0x118, 0x320, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, &(0x7f0000000400), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0xffffffff, 0xff, 0xffffff00, 0xff], [0x72f2b4d6d4383941, 0xffffff00, 0xff, 0xffffffff], 'xfrm0\x00', 'ipvlan1\x00', {0xcfb1ae8d4ab7591b}, {}, 0x2e, 0x6, 0x6, 0xb}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x5}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0xc, @ipv4=@broadcast, @ipv4=@multicast1, @port=0x4e22, @port=0x4e20}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0x0, 0xffffff00, 0xff], [0x0, 0xffffffff, 0x0, 0xffffff00], 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x1, 0xcd, 0x4, 0x4}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@broadcast, @gre_key=0x3, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'nr0\x00', {0x1ff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast1, [0xff000000, 0xffffff00], [0x0, 0xff], 'veth1_to_team\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x1, 0x2, 0x1, 0x5}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xb, "c380"}}, @common=@inet=@socket2={{0x28}, 0x3}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x18, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @gre_key=0x7, @gre_key=0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000a40)={'vxcan0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000001f00)={&(0x7f0000000a80)=@can={0x1d, r7}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="25e56013a8f24a05c66a241d88e71e8d39f4d4dd7dc9db9766863d13745643a7a02650ff60", 0x25}, {&(0x7f0000001b40)="8a77bea1a23aaa680ba322042295bc40d1bc255c1e5c6e8b03b61b6f10bbc55961c4afce4f1cf788d635403f9607b5998891086c6b3bfe0ae5a6019efa3d91e57ac842c734b51689b671cd1b9f0832a8ff66e6d8bf3c1cd02b60115aa2aa8d24c7a5fb2c6df1b041a7fcee7867b0ccd56e290316ae7756b4", 0x78}, {&(0x7f0000001bc0)="9518b1191c5970a0dfcb5427e17718fc5ad1ff477859bc847f6256abd123b3aebaa4b5c711501aeffc78fccec120da48d94455b9dec1d0039d6268f9f0d4e401bc5c18f0b6bae143591ffc73c7d41920e65be0e8de2d4af0099d2aebe578d34747e97b79caff4105d9894d0c3db62049ad9f9bbe536b47b637d535bc3a8e738f9ae4b14d8f00b96dba3b39ed52d8f87a150e9f8f1e0734207d110777059f7947cdd1a02acf932b2b320b24d1213d74cb8173c3fffa3ffc519f3e6ad7b80112d5f3b8d85a820f6bfd1f89e6eadb571ad08f7bebd4a2c7f4a7fe66039089", 0xdd}, {&(0x7f0000001cc0)="594b37bb364cbcf57cdd72a37e1783528ba03809679087a61ded6dece9bf408d22fd972d18c716b2d6c5c1eaaf51a0b386dcf25ee169904b2d3998f24b0a5e64ad5b8b6d191fbf6bfefbe8b2edb4eff71cd99a28a1731e319b8152a6a8381b3921782e2ea4e7cadee2deffba1f7936383bb4ab388ef56cc211dc99969d4655bbf9114b72e328c02a52fa481116aa0d8ad385886f717e4e2a1de095246f8e27ae1b3bd000d2aa4038d3e6f910ad8311d51792437be3b5de7b7ddfe650ed9e9c500fbfc9d18e54d272fcb672ea2a37c5a3419504009763a237ed24c24af706", 0xde}, {&(0x7f0000001dc0)="73bec8c565641ad9875df811add6ef52bd946fc0094c7e7275cc8d8a02a81a30e692645f1985964938116b9b2d677901ee07778cf3711914d94bfea73432f2634766926b2c4055f639e5f6c31fff7f2329b231b5aad0831e12c4cccf55523eaec36ed7d8aaab5880e25022a9bcd77903b58d33", 0x73}, {&(0x7f0000001e40)="982b3a17b8dd", 0x6}], 0x7}, 0x10) bind$alg(r2, &(0x7f0000001f40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000001fc0)=0x8001, 0x4) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000002040)={@local, @empty, 0x0}, &(0x7f0000002080)=0xc) sendmsg$nl_route(r1, &(0x7f0000002180)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)=@ipv6_getroute={0x74, 0x1a, 0x20, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x80, 0x81, 0xff, 0x3, 0x0, 0x0, 0x1400}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @local}}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @RTA_PREF={0x5, 0x14, 0xa6}, @RTA_OIF={0x8, 0x4, r8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0x14, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0xf, 0x2, 'MASQUERADE\x00'}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) getsockname$packet(r2, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002200)=0x14) r9 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000002240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x6666, 0x8801, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0xd0, 0x3, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0xcf, {0x9, 0x21, 0x7f, 0x4, 0x1, {0x22, 0x541}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x5, 0x4, 0x80}}]}}}]}}]}}, &(0x7f0000002500)={0xa, &(0x7f0000002280)={0xa, 0x6, 0x310, 0x9, 0x3, 0x4, 0x10, 0x8}, 0x35, &(0x7f00000022c0)={0x5, 0xf, 0x35, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "d48c7cf2a004053d0737ba1b3cda4ed0"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0xc, 0x686}, @wireless={0xb, 0x10, 0x1, 0x8, 0x6, 0x68, 0x5, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0x0, 0x1}]}, 0x5, [{0xaa, &(0x7f0000002300)=@string={0xaa, 0x3, "1a2359dc7acba6d649000a5ce61da5994cd2f2ea2337e5522d3ae1936e5a3d0987a0367c285d97fd890ffab5f424cabd233a66806d0febf04ea62eb9e81bad4fa4f91086ef166f18ae1fa537294fb0eebc2e2b7d008f417b736e825c39b6dce0afeb0cbb99a59f0aada5e96629b8db7ca6d1a96a52e02b61d30584a0668c848612b5b3d288906f384f20597c85807c249a9fdd4a19175e5d739fd8cddd4672d81ea28aa329b146f9"}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x459}}, {0x44, &(0x7f0000002440)=@string={0x44, 0x3, "65ac88e0a6883f994abbf1dbbfb59459c5c9f8f80a20892e253ffd698c65280bed93e6fb247c03e13e3aa4beb5d69567c2062ed8a0cab5ba2bdfb336a5786f6146d6"}}, {0x4, &(0x7f00000024c0)=@lang_id={0x4, 0x3, 0x380a}}]}) syz_usb_control_io$hid(r9, 0xffffffffffffffff, &(0x7f0000002800)={0x2c, &(0x7f0000002580)={0x60, 0x17, 0xb5, "4f1ab1b11ea58eac59155dccfb676d99d5c3e7fd9b82e4592c0fd8d6172509616a1118dd9e2cff855dc91beeeee642145e30d353f71295915df8ffd61c5b49753dc667338dc02634671661a1b937273b049d0e429243d2db808ed0bcc9c9c6659a60603c056c5fa2d879163c5e2bfc0e7a226036214f61e86aec9702583bdd9dc38028439a1b341978dfaf6b5fe0e2ef71971676106021705b9e586bf18d288508a69878ae7f2eadc2925ff1995fd2545d859ea479"}, &(0x7f0000002640)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000002680)={0x0, 0x8, 0x1, 0xe2}, &(0x7f00000026c0)={0x20, 0x1, 0xce, "0520c64302a7939ce2262a6d34cbdd32cd30e0ebde6ba5e25e4f46a8a2b2433dddde1beb7a6d28ced7529ff807cad875f715bb3cb83a74c8f01c3558af0a04b40395292f53de544869094029b980b642af790c1315bd3df0c95b7148b1fff0877dab904cd366e40ace7f6e4e5231ad8172c8c87d23882584168079440cac86a335a9781c59b39727f04c87c7728f73ddcccdb3e8538bdc6e0d8d32d7f0d5019e0fe4072f0738f2275d63246f5bf2fa912a60fcb47cbdcb3be7ffc8c98ff00a6a0f380ee6a88847524cb671a0ce7a"}, &(0x7f00000027c0)={0x20, 0x3, 0x1, 0x4}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f00000029c0)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002980)={&(0x7f00000028c0)={0x9c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x47}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3f9b3483db809f900a72c0b30797fb6ececd8eb9142e62d0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4400a080}, 0x40010) 20.076958ms ago: executing program 5 (id=452): r0 = syz_open_dev$media(&(0x7f0000000000), 0x33ac98ac, 0x40000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c81, 0x0) 1.529063ms ago: executing program 7 (id=453): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000200)={0x17, 0x20, 0x12, 0x1b, 0xb, 0x63, 0x4, 0xf5, 0x1}) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000001d000/0x4000)=nil, 0x4000, 0xb635773f04ebbee8, 0x8031, 0xffffffffffffffff, 0x13b1c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 5 (id=454): setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0) r1 = mq_open(&(0x7f0000000200)='!se\xf7ih,\x17i\xeb-\xed\xacP\xe6lNn\x00xseqinux\x10', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xff7f000000000000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@mpls_delroute={0x30, 0x19, 0x200, 0x70bd29, 0x25dfdbfe, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x4, 0xc8, 0xb, 0x3000}, [@RTA_VIA={0x14, 0x12, {0x26, "f8a11d53e5e51d64dc00a5dbdf38"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) syz_clone(0x56e188b471761ea6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="74282e3a2d570596db203b94d2a505fec8da68138447af4232389c50c90faaff3d6c21938fcfe24cae76f4bf7cad610d0e61d2609b08c850395d8c31ff19f3d7092041d6f4464dc56fbf6e6c311b7f3eeceed0985cd9761eb6e5cb925c5245891bbffa2a22849327d7bc006900dffa3447b73fc2bc544ae477a976f0d3aadf6011df3dcc3f87c05b08885570680ae54887a29d49d9a91a9295934236fbc425390eeb129cafad4def7d59b34cf66addee00"/190) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYRES8=r0], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000580)={0x1, 0x2, 0x5, &(0x7f0000000300)={0x2, "ba56b4f76c1147713bbb79931987e92352124c3f58f98e3897d9f1948f4e2c833a"}}) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') read$FUSE(r7, &(0x7f00000008c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r7, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r10 = getgid() write$FUSE_STATX(r7, &(0x7f0000000640)={0x130, 0x0, r8, {0x4e00000000000000, 0x7, 0x0, '\x00', {0x1, 0x820b, 0x7fffffffffffffff, 0x3, r9, r10, 0x1000, '\x00', 0x1, 0x0, 0x80000000, 0xb30, {0xc383, 0x72}, {0x0, 0x4}, {0x2, 0xd99}, {0x4, 0x7}, 0x3, 0x318e, 0x7f, 0xdc}}}, 0x130) pread64(r7, &(0x7f0000019140)=""/102344, 0x18fc8, 0x4000c2a) ioctl$IMSETDEVNAME(r7, 0x80184947, &(0x7f0000000080)={0x2, 'syz0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x9, @empty, 0x950000}, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0x6}}}, 0x118) kernel console output (not intermixed with test programs): debugfs directory [ 119.805149][ T53] Bluetooth: hci1: command tx timeout [ 119.979083][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.103985][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.148999][ T6120] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 120.162669][ T6120] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 120.229346][ T6120] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 120.286571][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.299729][ T6120] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 120.346802][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.391129][ T6118] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 120.401620][ T6118] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 120.413839][ T6118] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 120.450268][ T6118] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 120.516971][ T6116] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 120.533896][ T6116] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 120.566242][ T6116] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 120.581090][ T6116] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 120.700109][ T6120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.750401][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.811884][ T6120] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.822425][ T6124] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 120.864628][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.881260][ T6124] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 120.893816][ T6124] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 120.941781][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.962504][ T6124] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 120.979184][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.986326][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.028660][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.068924][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.076032][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.088369][ T6114] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.100896][ T6118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.121620][ T6114] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.146782][ T6114] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.162270][ T6114] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.196139][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.225996][ T6118] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.284109][ T6120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.316471][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.323589][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.381601][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.388772][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.411181][ T6116] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.488841][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.501865][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 121.501879][ T30] audit: type=1400 audit(1764300704.905:206): avc: denied { sys_module } for pid=6120 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 121.568486][ T53] Bluetooth: hci6: command tx timeout [ 121.573230][ T6097] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.581008][ T6097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.611850][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.638894][ T6124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.656946][ T53] Bluetooth: hci5: command tx timeout [ 121.667725][ T6097] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.674927][ T6097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.725435][ T53] Bluetooth: hci2: command tx timeout [ 121.758744][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.797776][ T6124] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.810987][ T53] Bluetooth: hci7: command tx timeout [ 121.851663][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.858830][ T6095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.875531][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.882609][ T6095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.890389][ T53] Bluetooth: hci1: command tx timeout [ 121.930708][ T6120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.959590][ T6124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.008134][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.171245][ T6114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.279086][ T6114] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.406295][ T6097] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.413429][ T6097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.459604][ T6124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.486420][ T6118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.537933][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.545119][ T6095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.688076][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.813971][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.848170][ T6120] veth0_vlan: entered promiscuous mode [ 122.873098][ T6116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.936564][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.973784][ T6114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.010756][ T6120] veth1_vlan: entered promiscuous mode [ 123.031839][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.199597][ T6120] veth0_macvtap: entered promiscuous mode [ 123.263314][ T6124] veth0_vlan: entered promiscuous mode [ 123.271722][ T6120] veth1_macvtap: entered promiscuous mode [ 123.284210][ T6118] veth0_vlan: entered promiscuous mode [ 123.324323][ T6124] veth1_vlan: entered promiscuous mode [ 123.429418][ T6120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.462231][ T12] bridge_slave_1: left allmulticast mode [ 123.469331][ T12] bridge_slave_1: left promiscuous mode [ 123.477257][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.488183][ T12] bridge_slave_0: left allmulticast mode [ 123.493841][ T12] bridge_slave_0: left promiscuous mode [ 123.502383][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.517158][ T12] bridge_slave_1: left allmulticast mode [ 123.522805][ T12] bridge_slave_1: left promiscuous mode [ 123.529346][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.539134][ T12] bridge_slave_0: left allmulticast mode [ 123.544780][ T12] bridge_slave_0: left promiscuous mode [ 123.552217][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.563124][ T12] bridge_slave_1: left allmulticast mode [ 123.569615][ T12] bridge_slave_1: left promiscuous mode [ 123.575820][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.587119][ T12] bridge_slave_0: left allmulticast mode [ 123.592772][ T12] bridge_slave_0: left promiscuous mode [ 123.598907][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.609711][ T12] bridge_slave_1: left allmulticast mode [ 123.616590][ T12] bridge_slave_1: left promiscuous mode [ 123.622337][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.632947][ T12] bridge_slave_0: left allmulticast mode [ 123.640325][ T12] bridge_slave_0: left promiscuous mode [ 123.647331][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.655570][ T53] Bluetooth: hci6: command tx timeout [ 123.725222][ T53] Bluetooth: hci5: command tx timeout [ 123.805706][ T53] Bluetooth: hci2: command tx timeout [ 123.895252][ T53] Bluetooth: hci7: command tx timeout [ 123.926038][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.936323][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.945862][ T12] bond0 (unregistering): Released all slaves [ 123.967239][ T53] Bluetooth: hci1: command tx timeout [ 124.103227][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.113125][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.122649][ T12] bond0 (unregistering): Released all slaves [ 124.269337][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.279178][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.289553][ T12] bond0 (unregistering): Released all slaves [ 124.462467][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.472812][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.483501][ T12] bond0 (unregistering): Released all slaves [ 124.493828][ T12] bond1 (unregistering): Released all slaves [ 124.504154][ T6118] veth1_vlan: entered promiscuous mode [ 124.519458][ T6120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.559896][ T6124] veth0_macvtap: entered promiscuous mode [ 124.610412][ T6114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.621084][ T6124] veth1_macvtap: entered promiscuous mode [ 124.652481][ T6116] veth0_vlan: entered promiscuous mode [ 124.674693][ T6095] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.699690][ T6095] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.744069][ T6095] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.753581][ T6095] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.779885][ T6116] veth1_vlan: entered promiscuous mode [ 124.788626][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.829493][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.874577][ T6116] veth0_macvtap: entered promiscuous mode [ 124.901583][ T6118] veth0_macvtap: entered promiscuous mode [ 124.924116][ T6095] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.949846][ T6118] veth1_macvtap: entered promiscuous mode [ 124.971601][ T6095] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.999228][ T6116] veth1_macvtap: entered promiscuous mode [ 125.007980][ T6095] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.017034][ T6095] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.037480][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.051123][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.114445][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.173544][ T6118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.187796][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.197059][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.208185][ T6116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.237421][ T6118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.283580][ T30] audit: type=1400 audit(1764300708.675:207): avc: denied { mount } for pid=6120 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.310865][ T51] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.319970][ T51] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.334906][ T30] audit: type=1400 audit(1764300708.675:208): avc: denied { mounton } for pid=6120 comm="syz-executor" path="/root/syzkaller.98fOX5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 125.362532][ T30] audit: type=1400 audit(1764300708.705:209): avc: denied { mount } for pid=6120 comm="syz-executor" name="/" dev="gadgetfs" ino=13023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 125.419333][ T51] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.430588][ T51] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.476794][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.534868][ T6101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.547224][ T6101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.564085][ T51] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.934756][ T6095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.944344][ T51] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.970029][ T6095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.978027][ T51] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.033772][ T6114] veth0_vlan: entered promiscuous mode [ 126.051393][ T6114] veth1_vlan: entered promiscuous mode [ 126.167143][ T6099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.204190][ T6099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.987346][ T6114] veth0_macvtap: entered promiscuous mode [ 127.040010][ T6114] veth1_macvtap: entered promiscuous mode [ 127.049962][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.059174][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.126843][ T12] hsr_slave_0: left promiscuous mode [ 127.138416][ T12] hsr_slave_1: left promiscuous mode [ 127.151665][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.163783][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.180027][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.189769][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.279203][ T12] hsr_slave_0: left promiscuous mode [ 127.290572][ T12] hsr_slave_1: left promiscuous mode [ 127.306239][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.313852][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.348481][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.356135][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.399776][ T12] hsr_slave_0: left promiscuous mode [ 127.451114][ T12] hsr_slave_1: left promiscuous mode [ 127.465979][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.473760][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.487544][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.500380][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.549236][ T12] hsr_slave_0: left promiscuous mode [ 127.562044][ T12] hsr_slave_1: left promiscuous mode [ 127.576976][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.584796][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.597742][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.605498][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.688690][ T12] veth1_macvtap: left promiscuous mode [ 127.694252][ T12] veth0_macvtap: left promiscuous mode [ 127.699983][ T12] veth1_vlan: left promiscuous mode [ 127.705356][ T12] veth0_vlan: left promiscuous mode [ 127.727085][ T12] veth1_macvtap: left promiscuous mode [ 127.743419][ T12] veth0_macvtap: left promiscuous mode [ 127.753288][ T12] veth1_vlan: left promiscuous mode [ 127.759666][ T12] veth0_vlan: left promiscuous mode [ 127.770535][ T12] veth1_macvtap: left promiscuous mode [ 127.778273][ T12] veth0_macvtap: left promiscuous mode [ 127.784003][ T12] veth1_vlan: left promiscuous mode [ 127.793107][ T12] veth0_vlan: left promiscuous mode [ 127.800385][ T12] veth1_macvtap: left promiscuous mode [ 127.807680][ T12] veth0_macvtap: left promiscuous mode [ 127.814600][ T12] veth1_vlan: left promiscuous mode [ 127.819954][ T12] veth0_vlan: left promiscuous mode [ 128.365123][ T12] team0 (unregistering): Port device team_slave_1 removed [ 128.391644][ T12] team0 (unregistering): Port device team_slave_0 removed [ 128.927349][ T12] team0 (unregistering): Port device team_slave_1 removed [ 128.953552][ T12] team0 (unregistering): Port device team_slave_0 removed [ 129.157940][ T6375] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 129.171058][ T30] audit: type=1400 audit(1764300712.565:210): avc: denied { read write } for pid=6369 comm="syz.9.53" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 129.245745][ T30] audit: type=1400 audit(1764300712.565:211): avc: denied { open } for pid=6369 comm="syz.9.53" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 129.276522][ T30] audit: type=1400 audit(1764300712.565:212): avc: denied { ioctl } for pid=6369 comm="syz.9.53" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 129.302071][ T30] audit: type=1400 audit(1764300712.675:213): avc: denied { read write } for pid=6378 comm="syz.7.54" name="sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.325891][ T30] audit: type=1400 audit(1764300712.675:214): avc: denied { open } for pid=6378 comm="syz.7.54" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.705122][ T30] audit: type=1400 audit(1764300713.045:215): avc: denied { ioctl } for pid=6378 comm="syz.7.54" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.027126][ T12] team0 (unregistering): Port device team_slave_1 removed [ 130.051983][ T12] team0 (unregistering): Port device team_slave_0 removed [ 130.303841][ T30] audit: type=1400 audit(1764300713.695:216): avc: denied { associate } for pid=6383 comm="syz.7.55" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 130.551151][ T12] team0 (unregistering): Port device team_slave_1 removed [ 130.671202][ T12] team0 (unregistering): Port device team_slave_0 removed [ 130.775086][ T1187] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 130.873052][ T6097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.875461][ T6114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.881544][ T6097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.919935][ T6114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.939151][ T1187] usb 8-1: Using ep0 maxpacket: 16 [ 130.962203][ T1187] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.981931][ T1330] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.985690][ T1187] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.002906][ T1187] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.015811][ T1330] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.015849][ T1330] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.015878][ T1330] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.044947][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.053198][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.054656][ T1187] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 131.076465][ T1187] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.088917][ T1187] usb 8-1: config 0 descriptor?? [ 131.292128][ T30] audit: type=1400 audit(1764300714.685:217): avc: denied { ioctl } for pid=6390 comm="syz.9.57" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 131.371402][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.385530][ T30] audit: type=1400 audit(1764300714.745:218): avc: denied { write } for pid=6390 comm="syz.9.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.386814][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.479058][ T30] audit: type=1400 audit(1764300714.815:219): avc: denied { create } for pid=6385 comm="syz.7.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.533588][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.886391][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.933849][ T1187] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 132.006370][ T6386] random: crng reseeded on system resumption [ 132.110922][ T1187] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 132.253436][ T6412] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 132.301891][ T6412] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 132.435389][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.444026][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.071878][ T6386] netlink: 56 bytes leftover after parsing attributes in process `syz.7.56'. [ 133.125499][ T1187] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 133.863136][ T6428] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 133.870366][ T6428] overlayfs: failed to set xattr on upper [ 133.876287][ T6428] overlayfs: ...falling back to redirect_dir=nofollow. [ 133.883172][ T6428] overlayfs: ...falling back to index=off. [ 133.889105][ T6428] overlayfs: ...falling back to uuid=null. [ 133.941215][ T6429] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 134.475684][ T1187] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 134.736874][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 134.736892][ T30] audit: type=1400 audit(1764300718.105:229): avc: denied { lock } for pid=6416 comm="syz.5.45" path="socket:[13418]" dev="sockfs" ino=13418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 135.158603][ T6430] FAULT_INJECTION: forcing a failure. [ 135.158603][ T6430] name failslab, interval 1, probability 0, space 0, times 1 [ 135.182922][ T1187] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 135.254235][ T6430] CPU: 0 UID: 0 PID: 6430 Comm: syz.6.61 Not tainted syzkaller #0 PREEMPT(full) [ 135.254260][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.254269][ T6430] Call Trace: [ 135.254274][ T6430] [ 135.254279][ T6430] dump_stack_lvl+0x16c/0x1f0 [ 135.254295][ T6430] should_fail_ex+0x512/0x640 [ 135.254308][ T6430] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 135.254325][ T6430] should_failslab+0xc2/0x120 [ 135.254338][ T6430] kmem_cache_alloc_noprof+0x75/0x6e0 [ 135.254353][ T6430] ? getname_flags.part.0+0x4c/0x550 [ 135.254370][ T6430] ? getname_flags.part.0+0x4c/0x550 [ 135.254383][ T6430] getname_flags.part.0+0x4c/0x550 [ 135.254399][ T6430] __x64_sys_mkdir+0xd8/0x140 [ 135.254410][ T6430] do_syscall_64+0xcd/0xfa0 [ 135.254422][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.254432][ T6430] RIP: 0033:0x7fd71f78f749 [ 135.254447][ T6430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.254457][ T6430] RSP: 002b:00007fd7206d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 135.254467][ T6430] RAX: ffffffffffffffda RBX: 00007fd71f9e6090 RCX: 00007fd71f78f749 [ 135.254473][ T6430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 135.254479][ T6430] RBP: 00007fd7206d0090 R08: 0000000000000000 R09: 0000000000000000 [ 135.254485][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.254490][ T6430] R13: 00007fd71f9e6128 R14: 00007fd71f9e6090 R15: 00007ffff3d19018 [ 135.254503][ T6430] [ 135.412229][ T1204] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 135.515162][ T1187] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 135.547971][ T1204] usb 8-1: device descriptor read/64, error -32 [ 135.559213][ T1187] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 135.649511][ T30] audit: type=1400 audit(1764300719.045:230): avc: denied { read write } for pid=6439 comm="syz.9.65" name="mouse0" dev="devtmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 135.683990][ T6441] ipt_rpfilter: unknown options [ 135.693160][ T6440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=76 sclass=netlink_route_socket pid=6440 comm=syz.9.65 [ 135.693210][ T6442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=76 sclass=netlink_route_socket pid=6442 comm=syz.9.65 [ 135.809043][ T6440] netlink: 28 bytes leftover after parsing attributes in process `syz.9.65'. [ 135.810651][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.9.65'. [ 135.839033][ T30] audit: type=1400 audit(1764300719.045:231): avc: denied { open } for pid=6439 comm="syz.9.65" path="/dev/input/mouse0" dev="devtmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 135.855413][ T6440] netlink: 28 bytes leftover after parsing attributes in process `syz.9.65'. [ 136.088908][ T6442] overlayfs: failed to resolve './bus': -2 [ 136.758082][ T5893] usb 8-1: USB disconnect, device number 2 [ 136.920949][ T30] audit: type=1400 audit(1764300720.315:232): avc: denied { read } for pid=6458 comm="syz.8.68" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.160668][ T30] audit: type=1400 audit(1764300720.315:233): avc: denied { open } for pid=6458 comm="syz.8.68" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.220108][ T6464] xt_CONNSECMARK: invalid mode: 66 [ 137.348923][ T30] audit: type=1400 audit(1764300720.335:234): avc: denied { ioctl } for pid=6458 comm="syz.8.68" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.627188][ T30] audit: type=1400 audit(1764300720.425:235): avc: denied { append } for pid=6458 comm="syz.8.68" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 137.760997][ T30] audit: type=1400 audit(1764300720.435:236): avc: denied { create } for pid=6458 comm="syz.8.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.823488][ T30] audit: type=1400 audit(1764300720.445:237): avc: denied { mounton } for pid=6460 comm="syz.5.69" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.985271][ T30] audit: type=1400 audit(1764300720.565:238): avc: denied { name_bind } for pid=6458 comm="syz.8.68" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 138.574938][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.8.73'. [ 139.345368][ T5893] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 139.460116][ T2150] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 139.523125][ T5893] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 139.532706][ T6510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.559284][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.561540][ T6510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.584851][ T5893] usb 9-1: config 0 descriptor?? [ 139.604205][ T5893] hdpvr 9-1:0.0: Could not find bulk-in endpoint [ 139.619293][ T5893] hdpvr 9-1:0.0: probe with driver hdpvr failed with error -12 [ 139.657488][ T2150] usb 7-1: Using ep0 maxpacket: 8 [ 139.664450][ T2150] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.698191][ T2150] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 139.758486][ T2150] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.777297][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 139.797789][ T2150] usb 7-1: config 0 descriptor?? [ 139.838653][ T2150] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 139.950420][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 139.950435][ T30] audit: type=1400 audit(1764300723.345:241): avc: denied { create } for pid=6497 comm="syz.8.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.056437][ T30] audit: type=1400 audit(1764300723.395:242): avc: denied { accept } for pid=6497 comm="syz.8.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.125093][ T5827] Bluetooth: hci1: command 0x0405 tx timeout [ 140.136166][ T6527] vlan0: entered promiscuous mode [ 140.279938][ T30] audit: type=1400 audit(1764300723.665:243): avc: denied { getopt } for pid=6495 comm="syz.6.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 140.375337][ T2150] gspca_vc032x: reg_r err -110 [ 140.380279][ T2150] vc032x 7-1:0.0: probe with driver vc032x failed with error -110 [ 140.498640][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 140.705247][ T5893] usb 9-1: USB disconnect, device number 2 [ 142.425392][ T24] usb 6-1: config 6 has an invalid interface number: 158 but max is 0 [ 142.433585][ T24] usb 6-1: config 6 has no interface number 0 [ 142.457191][ T24] usb 6-1: config 6 interface 158 has no altsetting 0 [ 142.484737][ T24] usb 6-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 142.493967][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.549456][ T24] usb 6-1: Product: syz [ 142.553638][ T24] usb 6-1: Manufacturer: syz [ 142.616975][ T24] usb 6-1: SerialNumber: syz [ 142.686306][ T30] audit: type=1400 audit(1764300726.085:244): avc: denied { create } for pid=6536 comm="syz.8.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.778026][ T30] audit: type=1400 audit(1764300726.105:245): avc: denied { name_bind } for pid=6536 comm="syz.8.84" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 142.955054][ T30] audit: type=1400 audit(1764300726.345:246): avc: denied { read write } for pid=6540 comm="syz.9.85" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.980616][ T30] audit: type=1400 audit(1764300726.345:247): avc: denied { open } for pid=6540 comm="syz.9.85" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 143.562138][ T30] audit: type=1400 audit(1764300726.505:248): avc: denied { read write } for pid=6539 comm="syz.7.86" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 143.598699][ T30] audit: type=1400 audit(1764300726.505:249): avc: denied { open } for pid=6539 comm="syz.7.86" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 143.677264][ T24] rtsx_usb 6-1:6.158: probe with driver rtsx_usb failed with error -71 [ 143.696557][ T30] audit: type=1400 audit(1764300727.035:250): avc: denied { read } for pid=6548 comm="syz.8.87" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 143.892668][ T24] usb 6-1: USB disconnect, device number 2 [ 144.007882][ T6555] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 144.016975][ T6555] FAULT_INJECTION: forcing a failure. [ 144.016975][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 144.029751][ T6555] CPU: 1 UID: 0 PID: 6555 Comm: syz.7.89 Not tainted syzkaller #0 PREEMPT(full) [ 144.029774][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.029783][ T6555] Call Trace: [ 144.029790][ T6555] [ 144.029796][ T6555] dump_stack_lvl+0x16c/0x1f0 [ 144.029818][ T6555] should_fail_ex+0x512/0x640 [ 144.029838][ T6555] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 144.029867][ T6555] should_failslab+0xc2/0x120 [ 144.029887][ T6555] kmem_cache_alloc_noprof+0x75/0x6e0 [ 144.029913][ T6555] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 144.029942][ T6555] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 144.029964][ T6555] ? irqentry_exit+0x3b/0x90 [ 144.029979][ T6555] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 144.030007][ T6555] radix_tree_extend+0x1a2/0x4d0 [ 144.030035][ T6555] idr_get_free+0x5e9/0xa30 [ 144.030069][ T6555] idr_alloc_u32+0x190/0x2f0 [ 144.030096][ T6555] ? __pfx_idr_alloc_u32+0x10/0x10 [ 144.030124][ T6555] ? __pfx___mutex_lock+0x10/0x10 [ 144.030146][ T6555] idr_alloc+0xc0/0x130 [ 144.030169][ T6555] ? __pfx_idr_alloc+0x10/0x10 [ 144.030201][ T6555] shrinker_alloc+0x2dd/0xbf0 [ 144.030219][ T6555] ? mark_held_locks+0x49/0x80 [ 144.030235][ T6555] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 144.030265][ T6555] ? __pfx_shrinker_alloc+0x10/0x10 [ 144.030286][ T6555] ? lockdep_init_map_type+0x5c/0x280 [ 144.030303][ T6555] ? __raw_spin_lock_init+0x3a/0x110 [ 144.030320][ T6555] ? __init_rwsem+0x12d/0x1b0 [ 144.030341][ T6555] alloc_super+0x776/0xb60 [ 144.030361][ T6555] ? __pfx_super_s_dev_test+0x10/0x10 [ 144.030389][ T6555] sget_fc+0x116/0xc20 [ 144.030405][ T6555] ? __pfx_super_s_dev_set+0x10/0x10 [ 144.030431][ T6555] get_tree_bdev_flags+0x1ba/0x620 [ 144.030447][ T6555] ? __pfx_cramfs_blkdev_fill_super+0x10/0x10 [ 144.030466][ T6555] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 144.030486][ T6555] ? cap_capable+0xb3/0x250 [ 144.030507][ T6555] cramfs_get_tree+0x40/0x50 [ 144.030523][ T6555] vfs_get_tree+0x8e/0x340 [ 144.030547][ T6555] path_mount+0x7b9/0x23a0 [ 144.030572][ T6555] ? __pfx_path_mount+0x10/0x10 [ 144.030594][ T6555] ? putname+0x154/0x1a0 [ 144.030619][ T6555] ? putname+0x154/0x1a0 [ 144.030637][ T6555] ? putname+0x154/0x1a0 [ 144.030660][ T6555] ? __x64_sys_mount+0x293/0x310 [ 144.030679][ T6555] __x64_sys_mount+0x293/0x310 [ 144.030699][ T6555] ? __pfx___x64_sys_mount+0x10/0x10 [ 144.030727][ T6555] do_syscall_64+0xcd/0xfa0 [ 144.030746][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.030763][ T6555] RIP: 0033:0x7f098158f749 [ 144.030777][ T6555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.030793][ T6555] RSP: 002b:00007f0982344038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 144.030809][ T6555] RAX: ffffffffffffffda RBX: 00007f09817e6180 RCX: 00007f098158f749 [ 144.030820][ T6555] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000000 [ 144.030830][ T6555] RBP: 00007f0982344090 R08: 0000000000000000 R09: 0000000000000000 [ 144.030840][ T6555] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 144.030849][ T6555] R13: 00007f09817e6218 R14: 00007f09817e6180 R15: 00007ffd5c19ef78 [ 144.030873][ T6555] [ 144.644018][ T5893] usb 7-1: USB disconnect, device number 2 [ 145.132625][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 145.132641][ T30] audit: type=1400 audit(1764300728.505:259): avc: denied { bind } for pid=6576 comm="syz.6.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.294623][ T6586] comedi comedi3: mpc624: I/O port conflict (0x6d33cb08,16) [ 145.386811][ T30] audit: type=1400 audit(1764300728.575:260): avc: denied { setopt } for pid=6576 comm="syz.6.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.529087][ T30] audit: type=1400 audit(1764300728.575:261): avc: denied { write } for pid=6576 comm="syz.6.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.547663][ T6594] netlink: 'syz.9.96': attribute type 21 has an invalid length. [ 146.324367][ T6585] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.332494][ T6585] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.625102][ T5893] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 146.739851][ T6610] netlink: 20 bytes leftover after parsing attributes in process `syz.6.98'. [ 146.818402][ T5893] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 146.827609][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.848982][ T5893] usb 6-1: Product: syz [ 146.853181][ T5893] usb 6-1: Manufacturer: syz [ 146.858693][ T5893] usb 6-1: SerialNumber: syz [ 146.873953][ T5893] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 146.889504][ T30] audit: type=1400 audit(1764300730.285:262): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 146.967215][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 146.983226][ T6612] netlink: 20 bytes leftover after parsing attributes in process `syz.6.98'. [ 147.066414][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.141788][ T6585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.188819][ T1204] usb 6-1: USB disconnect, device number 3 [ 147.244415][ T30] audit: type=1400 audit(1764300730.635:263): avc: denied { create } for pid=6615 comm="syz.6.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 147.325429][ T30] audit: type=1400 audit(1764300730.675:264): avc: denied { ioctl } for pid=6615 comm="syz.6.99" path="socket:[13762]" dev="sockfs" ino=13762 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 147.467813][ T6619] netlink: 'syz.6.99': attribute type 10 has an invalid length. [ 147.476031][ T6594] netlink: 156 bytes leftover after parsing attributes in process `syz.9.96'. [ 147.537125][ T30] audit: type=1400 audit(1764300730.915:265): avc: denied { create } for pid=6615 comm="syz.6.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.569308][ T6619] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 147.590886][ T30] audit: type=1400 audit(1764300730.925:266): avc: denied { read write } for pid=6615 comm="syz.6.99" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.654840][ T30] audit: type=1400 audit(1764300730.925:267): avc: denied { open } for pid=6615 comm="syz.6.99" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.765221][ T5920] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 147.776386][ T2906] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.796780][ T2906] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.017593][ T5920] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.026154][ T30] audit: type=1400 audit(1764300730.925:268): avc: denied { ioctl } for pid=6615 comm="syz.6.99" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 148.028270][ T2906] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.055744][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 148.085081][ T5920] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.105435][ T9] ath9k_htc: Failed to initialize the device [ 148.126640][ T1204] usb 6-1: ath9k_htc: USB layer deinitialized [ 148.148420][ T5920] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.220634][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.421657][ T2906] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.433654][ T5920] usb 7-1: Product: syz [ 148.448313][ T5920] usb 7-1: Manufacturer: syz [ 148.452942][ T5920] usb 7-1: SerialNumber: syz [ 149.070903][ T5920] usb 7-1: 0:2 : does not exist [ 149.103339][ T5920] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 149.162384][ T5920] usb 7-1: USB disconnect, device number 3 [ 149.266103][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.303668][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.7.106'. [ 151.410739][ T6695] binder: 6689:6695 ioctl c0306201 200000000640 returned -22 [ 152.918361][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 152.918375][ T30] audit: type=1400 audit(1764300736.315:272): avc: denied { unmount } for pid=6114 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 153.653184][ T30] audit: type=1400 audit(1764300736.775:273): avc: denied { shutdown } for pid=6710 comm="syz.5.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.995652][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 154.236093][ T30] audit: type=1400 audit(1764300737.635:274): avc: denied { write } for pid=6719 comm="syz.7.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.272891][ T30] audit: type=1400 audit(1764300737.655:275): avc: denied { getopt } for pid=6719 comm="syz.7.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 154.389225][ T9] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 154.417140][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.440198][ T9] usb 7-1: Product: syz [ 154.450015][ T6731] mmap: syz.9.122 (6731) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.454630][ T9] usb 7-1: Manufacturer: syz [ 154.480300][ T9] usb 7-1: SerialNumber: syz [ 154.498771][ T9] usb 7-1: config 0 descriptor?? [ 154.816720][ T6100] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 154.923715][ T9] usb 7-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 155.045216][ T30] audit: type=1400 audit(1764300738.435:276): avc: denied { bind } for pid=6744 comm="syz.7.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 155.126071][ T5893] IPVS: starting estimator thread 0... [ 155.141693][ T9] usb 7-1: failed to fetch extended address, random address set [ 155.252923][ T6100] usb 10-1: Using ep0 maxpacket: 32 [ 155.305776][ T6748] IPVS: using max 41 ests per chain, 98400 per kthread [ 155.794873][ T9] usb 7-1: USB disconnect, device number 4 [ 157.482560][ T6100] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 157.795017][ T6100] usb 10-1: config 0 has no interface number 0 [ 157.801238][ T6100] usb 10-1: config 0 interface 184 altsetting 0 endpoint 0x9 has invalid maxpacket 7331, setting to 64 [ 157.825018][ T6100] usb 10-1: config 0 interface 184 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 157.860310][ T6100] usb 10-1: config 0 interface 184 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 157.993191][ T6100] usb 10-1: config 0 interface 184 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 158.106146][ T6100] usb 10-1: config 0 interface 184 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 158.205176][ T6100] usb 10-1: config 0 interface 184 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 158.225079][ T5873] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 158.253406][ T30] audit: type=1400 audit(1764300741.645:277): avc: denied { read } for pid=6769 comm="syz.9.127" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 158.264458][ T6100] usb 10-1: string descriptor 0 read error: -71 [ 158.303170][ T6100] usb 10-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=64.bd [ 158.365675][ T30] audit: type=1400 audit(1764300741.645:278): avc: denied { open } for pid=6769 comm="syz.9.127" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 158.385165][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 158.395083][ T6100] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.419847][ T5873] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.428208][ T6100] usb 10-1: config 0 descriptor?? [ 158.437692][ T6100] usb 10-1: can't set config #0, error -71 [ 158.462076][ T5873] usb 6-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 158.484164][ T30] audit: type=1400 audit(1764300741.645:279): avc: denied { ioctl } for pid=6769 comm="syz.9.127" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 158.515477][ T6100] usb 10-1: USB disconnect, device number 2 [ 158.525164][ T5873] usb 6-1: config 0 has no interface number 0 [ 158.531290][ T5873] usb 6-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 158.588713][ T5873] usb 6-1: config 0 interface 1 has no altsetting 0 [ 158.631992][ T5873] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 158.642162][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.775819][ T5873] usb 6-1: config 0 descriptor?? [ 159.331591][ T30] audit: type=1400 audit(1764300742.715:280): avc: denied { read write } for pid=6760 comm="syz.5.126" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 159.839636][ T30] audit: type=1400 audit(1764300742.715:281): avc: denied { open } for pid=6760 comm="syz.5.126" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 159.933894][ T30] audit: type=1400 audit(1764300742.715:282): avc: denied { ioctl } for pid=6760 comm="syz.5.126" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 159.958792][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.186723][ T5873] usb 6-1: string descriptor 0 read error: -71 [ 161.194686][ T5873] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 161.205233][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.133'. [ 161.215383][ T5873] gspca_vc032x: reg_r err -71 [ 161.216686][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.133'. [ 161.220537][ T5873] vc032x 6-1:0.1: probe with driver vc032x failed with error -71 [ 161.237343][ T30] audit: type=1400 audit(1764300744.605:283): avc: denied { bind } for pid=6798 comm="syz.9.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.819572][ T30] audit: type=1400 audit(1764300744.605:284): avc: denied { setopt } for pid=6798 comm="syz.9.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 161.843695][ T5873] usb 6-1: USB disconnect, device number 4 [ 162.122176][ T30] audit: type=1400 audit(1764300744.735:285): avc: denied { create } for pid=6798 comm="syz.9.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 162.638236][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.648400][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.657679][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.668959][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.677661][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.755056][ T1204] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 162.955358][ T1204] usb 10-1: Using ep0 maxpacket: 32 [ 162.963345][ T1204] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 162.978261][ T1204] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 162.991700][ T1204] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 163.064941][ T1204] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 163.086710][ T1204] usb 10-1: Product: syz [ 163.095859][ T1204] usb 10-1: Manufacturer: syz [ 163.105745][ T1204] usb 10-1: SerialNumber: syz [ 163.128933][ T1204] usb 10-1: config 0 descriptor?? [ 163.190569][ T6823] chnl_net:caif_netlink_parms(): no params data found [ 163.475569][ T30] audit: type=1400 audit(1764300746.855:286): avc: denied { connect } for pid=6821 comm="syz.9.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 163.542752][ T6849] netlink: 28 bytes leftover after parsing attributes in process `syz.9.137'. [ 163.640204][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.9.137'. [ 163.762479][ T30] audit: type=1400 audit(1764300747.155:287): avc: denied { create } for pid=6821 comm="syz.9.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 163.823938][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.854576][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.881464][ T6823] bridge_slave_0: entered allmulticast mode [ 163.904423][ T6823] bridge_slave_0: entered promiscuous mode [ 163.941456][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.974321][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.998582][ T6823] bridge_slave_1: entered allmulticast mode [ 164.022094][ T6823] bridge_slave_1: entered promiscuous mode [ 164.190779][ T6823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.224506][ T6823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.473600][ T6823] team0: Port device team_slave_0 added [ 164.767685][ T53] Bluetooth: hci0: command tx timeout [ 165.129131][ T6823] team0: Port device team_slave_1 added [ 165.356517][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.370947][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.411936][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.145'. [ 165.431592][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.7.145'. [ 165.755275][ T6823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.779946][ T2150] usb 10-1: USB disconnect, device number 3 [ 165.861711][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.897488][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.923406][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.988283][ T6823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.438700][ T30] audit: type=1400 audit(1764300749.835:288): avc: denied { mounton } for pid=6897 comm="syz.6.147" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 166.745126][ T5873] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 166.927320][ T53] Bluetooth: hci0: command tx timeout [ 166.946107][ T5873] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.100793][ T5873] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.141478][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.226481][ T6823] hsr_slave_0: entered promiscuous mode [ 167.373675][ T5873] usb 8-1: Product: syz [ 167.486081][ T5873] usb 8-1: Manufacturer: syz [ 167.491645][ T6823] hsr_slave_1: entered promiscuous mode [ 167.497610][ T5873] usb 8-1: SerialNumber: syz [ 167.615258][ T2150] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 167.848189][ T2150] usb 10-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 167.878083][ T2150] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.937935][ T2150] usb 10-1: config 0 descriptor?? [ 167.985050][ T6882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.025373][ T6882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.210156][ T2150] kaweth 10-1:0.0: Firmware present in device. [ 168.337941][ T51] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.372366][ T2150] kaweth 10-1:0.0: Statistics collection: 0 [ 168.389715][ T2150] kaweth 10-1:0.0: Multicast filter limit: 0 [ 168.407086][ T2150] kaweth 10-1:0.0: MTU: 0 [ 168.422290][ T2150] kaweth 10-1:0.0: Read MAC address 00:00:00:00:00:00 [ 168.545594][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.553102][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.573836][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.585881][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.718786][ T5873] cdc_ncm 8-1:1.0: bind() failure [ 168.722452][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.154'. [ 168.748407][ T5873] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 168.763172][ T6924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.765341][ T5873] cdc_ncm 8-1:1.1: bind() failure [ 168.783140][ T6924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.005105][ T53] Bluetooth: hci0: command tx timeout [ 169.008055][ T24] usb 8-1: USB disconnect, device number 3 [ 169.057384][ T6929] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 169.111058][ T6099] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.130408][ T6099] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.154668][ T30] audit: type=1400 audit(1764300752.545:289): avc: denied { create } for pid=6931 comm="syz.5.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 169.215734][ T2150] kaweth 10-1:0.0: kaweth interface created at eth21 [ 169.229281][ T2150] usb 10-1: USB disconnect, device number 4 [ 169.288854][ T51] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.348118][ T6099] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.364556][ T30] audit: type=1400 audit(1764300752.755:290): avc: denied { bind } for pid=6935 comm="syz.6.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.395347][ T30] audit: type=1400 audit(1764300752.785:291): avc: denied { listen } for pid=6935 comm="syz.6.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.440623][ T6099] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.454369][ T30] audit: type=1400 audit(1764300752.855:292): avc: denied { connect } for pid=6935 comm="syz.6.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.500097][ T30] audit: type=1400 audit(1764300752.875:293): avc: denied { accept } for pid=6935 comm="syz.6.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 169.567441][ T51] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.199480][ T30] audit: type=1400 audit(1764300753.455:294): avc: denied { getopt } for pid=6953 comm="syz.5.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.095245][ T53] Bluetooth: hci0: command tx timeout [ 171.233728][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.9.161'. [ 171.396461][ T51] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.980728][ T30] audit: type=1400 audit(1764300756.375:295): avc: denied { accept } for pid=6977 comm="syz.7.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.001877][ T6983] xt_TPROXY: Can be used only with -p tcp or -p udp [ 173.109728][ T6978] netlink: 'syz.7.162': attribute type 4 has an invalid length. [ 173.556008][ T30] audit: type=1400 audit(1764300756.945:296): avc: denied { write } for pid=6996 comm="syz.7.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 173.708680][ T30] audit: type=1400 audit(1764300757.105:297): avc: denied { read } for pid=6984 comm="syz.9.164" laddr=fe80::13 lport=36015 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.849188][ T7005] use of bytesused == 0 is deprecated and will be removed in the future, [ 173.858039][ T7005] use the actual size instead. [ 173.866622][ T30] audit: type=1400 audit(1764300757.245:298): avc: denied { ioctl } for pid=6984 comm="syz.9.164" path="socket:[16567]" dev="sockfs" ino=16567 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.927461][ T5880] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 174.129473][ T5880] usb 8-1: Using ep0 maxpacket: 8 [ 174.147894][ T51] bridge_slave_1: left allmulticast mode [ 174.178712][ T51] bridge_slave_1: left promiscuous mode [ 174.189357][ T5880] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.208105][ T30] audit: type=1400 audit(1764300757.605:299): avc: denied { connect } for pid=6989 comm="syz.6.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.278477][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.293672][ T5880] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 174.336196][ T5880] usb 8-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 174.345975][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.353972][ T5880] usb 8-1: Product: syz [ 174.372869][ T5880] usb 8-1: Manufacturer: syz [ 174.455026][ T5880] usb 8-1: SerialNumber: syz [ 174.459566][ T30] audit: type=1400 audit(1764300757.855:300): avc: denied { write } for pid=7020 comm="syz.5.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 174.470655][ T5880] usb 8-1: config 0 descriptor?? [ 174.564009][ T5880] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 174.679034][ T51] bridge_slave_0: left allmulticast mode [ 174.684720][ T51] bridge_slave_0: left promiscuous mode [ 174.701015][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.911930][ T30] audit: type=1400 audit(1764300758.305:301): avc: denied { ioctl } for pid=6996 comm="syz.7.166" path="socket:[16016]" dev="sockfs" ino=16016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.678693][ T30] audit: type=1400 audit(1764300758.305:302): avc: denied { connect } for pid=6996 comm="syz.7.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.917427][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.929924][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.950012][ T51] bond0 (unregistering): Released all slaves [ 176.437818][ T5880] usb 8-1: USB disconnect, device number 4 [ 176.444192][ T5880] pvrusb2: Device being rendered inoperable [ 176.475925][ T6823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.570978][ T51] hsr_slave_0: left promiscuous mode [ 176.686533][ T51] hsr_slave_1: left promiscuous mode [ 176.692492][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.700300][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.845794][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.740014][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.731804][ T51] veth1_macvtap: left promiscuous mode [ 178.765228][ T51] veth0_macvtap: left promiscuous mode [ 178.767231][ T30] audit: type=1400 audit(1764300762.165:303): avc: denied { name_bind } for pid=7045 comm="syz.5.174" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 178.774266][ T51] veth1_vlan: left promiscuous mode [ 178.818293][ T51] veth0_vlan: left promiscuous mode [ 178.883065][ T30] audit: type=1400 audit(1764300762.195:304): avc: denied { ioctl } for pid=7045 comm="syz.5.174" path="socket:[16830]" dev="sockfs" ino=16830 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.925617][ T6425] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 178.936619][ T30] audit: type=1400 audit(1764300762.305:305): avc: denied { setopt } for pid=7048 comm="syz.6.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 179.128146][ T6425] usb 8-1: Using ep0 maxpacket: 32 [ 179.147353][ T6425] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 179.170977][ T6425] usb 8-1: config 0 has no interface number 0 [ 179.177982][ T6425] usb 8-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.207959][ T6425] usb 8-1: config 0 interface 2 has no altsetting 0 [ 179.238406][ T6425] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 179.247969][ T6425] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.261391][ T6425] usb 8-1: Product: syz [ 179.271247][ T6425] usb 8-1: Manufacturer: syz [ 179.277178][ T6425] usb 8-1: SerialNumber: syz [ 179.295873][ T6425] usb 8-1: config 0 descriptor?? [ 179.541161][ T30] audit: type=1400 audit(1764300762.935:306): avc: denied { setopt } for pid=7043 comm="syz.7.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.722267][ T30] audit: type=1400 audit(1764300763.115:307): avc: denied { bind } for pid=7043 comm="syz.7.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.864828][ T6425] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.033005][ T51] team0 (unregistering): Port device team_slave_1 removed [ 180.047076][ T6425] usb 8-1: USB disconnect, device number 5 [ 180.114130][ T6123] udevd[6123]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.134283][ T51] team0 (unregistering): Port device team_slave_0 removed [ 180.154853][ T7077] xt_TPROXY: Can be used only with -p tcp or -p udp [ 180.389685][ T30] audit: type=1400 audit(1764300763.785:308): avc: denied { append } for pid=7079 comm="syz.9.181" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.564895][ T6823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.574914][ T6823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.606407][ T6823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.710122][ T7080] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 180.724169][ T7080] bond1 (unregistering): Released all slaves [ 180.777031][ T7087] ipt_ECN: cannot use operation on non-tcp rule [ 181.051712][ T6823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.069627][ T6823] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.108212][ T6823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.119250][ T6823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.134457][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.141669][ T6101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.151840][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.159003][ T6101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.895215][ T5860] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 182.187524][ T5860] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.198988][ T5860] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.222900][ T5860] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.257864][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.271510][ T6823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.289248][ T5860] usb 6-1: Product: syz [ 182.295697][ T5860] usb 6-1: Manufacturer: syz [ 182.334544][ T5860] usb 6-1: SerialNumber: syz [ 182.751225][ T30] audit: type=1400 audit(1764300766.095:309): avc: denied { create } for pid=7129 comm="syz.9.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.014307][ T30] audit: type=1400 audit(1764300766.105:310): avc: denied { ioctl } for pid=7129 comm="syz.9.189" path="socket:[17164]" dev="sockfs" ino=17164 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.045061][ T5860] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 183.197746][ T6823] veth0_vlan: entered promiscuous mode [ 183.287523][ T9] infiniband syz0: ib_query_port failed (-19) [ 183.564994][ T7100] comedi comedi0: reset error (fatal) [ 184.283613][ T6823] veth1_vlan: entered promiscuous mode [ 184.323905][ T5860] usb 8-1: config 8 has an invalid interface number: 223 but max is 0 [ 184.334927][ T5860] usb 8-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 184.343800][ T5860] usb 8-1: config 8 has an invalid descriptor of length 40, skipping remainder of the config [ 184.620778][ T7143] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 184.628242][ T6823] veth0_macvtap: entered promiscuous mode [ 184.637773][ T6823] veth1_macvtap: entered promiscuous mode [ 184.658413][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.689591][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.732052][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.755242][ T5860] usb 8-1: config 8 has no interface number 0 [ 184.761573][ T5860] usb 8-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 184.780823][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.793317][ T5860] usb 8-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.812186][ T5860] usb 8-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 184.861552][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.881924][ T7148] netlink: 32 bytes leftover after parsing attributes in process `syz.6.194'. [ 184.892527][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.894426][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.910045][ T5860] usb 8-1: Product: syz [ 184.914300][ T5860] usb 8-1: Manufacturer: syz [ 184.920835][ T5860] usb 8-1: SerialNumber: syz [ 185.334710][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.379600][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.399369][ T5920] usb 6-1: USB disconnect, device number 5 [ 185.630185][ T6097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.666657][ T6097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.879961][ T7179] SELinux: Context system_u:object_r:inetd_log_t:s0 is not valid (left unmapped). [ 186.895219][ T30] audit: type=1400 audit(1764300770.295:311): avc: denied { relabelto } for pid=7178 comm="syz.5.198" name="37" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_log_t:s0" [ 187.192302][ T30] audit: type=1400 audit(1764300770.295:312): avc: denied { associate } for pid=7178 comm="syz.5.198" name="37" dev="tmpfs" ino=207 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_log_t:s0" [ 187.514691][ T30] audit: type=1800 audit(1764300770.885:313): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.193" name="bus" dev="overlay" ino=237 res=0 errno=0 [ 187.647854][ T5860] usb 8-1: can't set config #8, error -71 [ 187.684127][ T5860] usb 8-1: USB disconnect, device number 6 [ 187.765368][ T30] audit: type=1400 audit(1764300770.995:314): avc: denied { remove_name } for pid=6114 comm="syz-executor" name="binderfs" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_log_t:s0" [ 187.822510][ T30] audit: type=1400 audit(1764300770.995:315): avc: denied { rmdir } for pid=6114 comm="syz-executor" name="37" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_log_t:s0" [ 189.025010][ T30] audit: type=1800 audit(1764300771.955:316): pid=7214 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.204" name="bus" dev="overlay" ino=41 res=0 errno=0 [ 189.539151][ T30] audit: type=1400 audit(1764300772.935:317): avc: denied { bind } for pid=7221 comm="syz.6.207" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.595160][ T30] audit: type=1400 audit(1764300772.935:318): avc: denied { node_bind } for pid=7221 comm="syz.6.207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 189.685261][ T5860] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 189.921919][ T5860] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 189.947270][ T5860] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 190.125528][ T5860] usb 6-1: config 8 has an invalid descriptor of length 40, skipping remainder of the config [ 190.225260][ T5860] usb 6-1: config 8 has no interface number 0 [ 190.275413][ T5860] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 190.289844][ T5860] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.311396][ T5860] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 190.337774][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.347382][ T5860] usb 6-1: Product: syz [ 190.351582][ T5860] usb 6-1: Manufacturer: syz [ 190.356813][ T5860] usb 6-1: SerialNumber: syz [ 190.683243][ T30] audit: type=1400 audit(1764300773.805:319): avc: denied { create } for pid=7246 comm="syz.7.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 190.712180][ T30] audit: type=1400 audit(1764300773.815:320): avc: denied { read } for pid=7246 comm="syz.7.212" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 191.218135][ T5860] usb 6-1: USB disconnect, device number 6 [ 191.372299][ T7261] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 191.380372][ T7261] overlayfs: failed to set xattr on upper [ 191.386161][ T7261] overlayfs: ...falling back to redirect_dir=nofollow. [ 191.393029][ T7261] overlayfs: ...falling back to index=off. [ 191.398864][ T7261] overlayfs: ...falling back to uuid=null. [ 191.947598][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 191.947607][ T30] audit: type=1400 audit(1764300775.345:364): avc: denied { prog_run } for pid=7273 comm="syz.9.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 192.212963][ T30] audit: type=1400 audit(1764300775.605:365): avc: denied { read } for pid=7284 comm="syz.6.218" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.273970][ T30] audit: type=1400 audit(1764300775.605:366): avc: denied { watch watch_reads } for pid=7285 comm="syz.5.219" path="/40" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 192.427404][ T30] audit: type=1400 audit(1764300775.615:367): avc: denied { write } for pid=7285 comm="syz.5.219" name="swradio1" dev="devtmpfs" ino=967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.445120][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 192.458256][ T7245] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 192.887784][ T30] audit: type=1400 audit(1764300775.915:368): avc: denied { write } for pid=7284 comm="syz.6.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.915014][ T30] audit: type=1400 audit(1764300776.305:369): avc: denied { write } for pid=7294 comm="syz.5.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.936412][ T30] audit: type=1400 audit(1764300776.315:370): avc: denied { name_bind } for pid=7294 comm="syz.5.220" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 192.959786][ T30] audit: type=1400 audit(1764300776.315:371): avc: denied { node_bind } for pid=7294 comm="syz.5.220" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 192.995652][ T30] audit: type=1400 audit(1764300776.315:372): avc: denied { bind } for pid=7294 comm="syz.5.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 193.022507][ T30] audit: type=1400 audit(1764300776.315:373): avc: denied { create } for pid=7294 comm="syz.5.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.118090][ T7245] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 193.217505][ T7245] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 193.428622][ T7245] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 193.437472][ T7245] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 193.453191][ T7245] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 193.464494][ T7245] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 193.481322][ T7245] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 193.495518][ T7245] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 193.527623][ T7245] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 193.595192][ T7245] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 193.804079][ T7245] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 193.812786][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.820197][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.831094][ T7245] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 193.837459][ T7245] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 193.846321][ T7245] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 195.260949][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 195.485201][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.488483][ T5827] Bluetooth: hci6: command 0x0c1a tx timeout [ 195.573690][ T5827] Bluetooth: hci1: command 0x0405 tx timeout [ 195.886144][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.168073][ T5880] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 197.043208][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 197.043221][ T30] audit: type=1400 audit(1764300779.675:404): avc: denied { bind } for pid=7351 comm="syz.9.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 197.104932][ T5880] usb 7-1: unable to get BOS descriptor or descriptor too short [ 197.168774][ T30] audit: type=1400 audit(1764300779.675:405): avc: denied { create } for pid=7351 comm="syz.9.233" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 197.175967][ T5880] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 197.192801][ T30] audit: type=1400 audit(1764300780.565:406): avc: denied { unmount } for pid=6124 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 197.252061][ T5880] usb 7-1: can't read configurations, error -71 [ 197.356310][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 197.566200][ T5827] Bluetooth: hci6: command 0x0c1a tx timeout [ 197.572326][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 197.644604][ T30] audit: type=1400 audit(1764300781.035:407): avc: denied { create } for pid=7374 comm="syz.5.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.689867][ T30] audit: type=1400 audit(1764300781.065:408): avc: denied { write } for pid=7374 comm="syz.5.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.722940][ T30] audit: type=1400 audit(1764300781.065:409): avc: denied { nlmsg_write } for pid=7374 comm="syz.5.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.744148][ T53] Bluetooth: hci1: command 0x0405 tx timeout [ 197.965292][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.998231][ T30] audit: type=1400 audit(1764300781.375:410): avc: denied { read write } for pid=7390 comm="syz.7.243" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 198.041786][ T7388] warning: `syz.6.241' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 198.054915][ T7394] xt_TPROXY: Can be used only with -p tcp or -p udp [ 198.099255][ T30] audit: type=1400 audit(1764300781.375:411): avc: denied { open } for pid=7390 comm="syz.7.243" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 198.229133][ T7398] tipc: Started in network mode [ 198.248595][ T7398] tipc: Node identity , cluster identity 4711 [ 198.265752][ T7398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7398 comm=syz.7.245 [ 198.410611][ T7398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=7398 comm=syz.7.245 [ 198.886752][ T30] audit: type=1400 audit(1764300781.475:412): avc: denied { connect } for pid=7387 comm="syz.6.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 198.957716][ T30] audit: type=1400 audit(1764300781.535:413): avc: denied { allowed } for pid=7387 comm="syz.6.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 199.200095][ T53] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 199.280028][ T7416] input: syz1 as /devices/virtual/input/input8 [ 199.409002][ T7416] gretap1: entered allmulticast mode [ 199.446983][ T7405] infiniband syz!: set active [ 199.562205][ T7405] infiniband syz!: added team_slave_0 [ 199.668766][ T7421] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 199.676992][ T7421] FAULT_INJECTION: forcing a failure. [ 199.676992][ T7421] name failslab, interval 1, probability 0, space 0, times 0 [ 199.689895][ T7421] CPU: 0 UID: 0 PID: 7421 Comm: syz.7.250 Not tainted syzkaller #0 PREEMPT(full) [ 199.689921][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.689931][ T7421] Call Trace: [ 199.689938][ T7421] [ 199.689946][ T7421] dump_stack_lvl+0x16c/0x1f0 [ 199.689969][ T7421] should_fail_ex+0x512/0x640 [ 199.689990][ T7421] ? __kmalloc_noprof+0xca/0x880 [ 199.690017][ T7421] should_failslab+0xc2/0x120 [ 199.690037][ T7421] __kmalloc_noprof+0xdd/0x880 [ 199.690062][ T7421] ? memcg_list_lru_alloc+0x4e9/0x740 [ 199.690100][ T7421] ? memcg_list_lru_alloc+0x4e9/0x740 [ 199.690126][ T7421] memcg_list_lru_alloc+0x4e9/0x740 [ 199.690159][ T7421] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 199.690198][ T7421] __memcg_slab_post_alloc_hook+0x133/0x940 [ 199.690225][ T7421] ? kasan_save_track+0x14/0x30 [ 199.690245][ T7421] kmem_cache_alloc_lru_noprof+0x556/0x6e0 [ 199.690270][ T7421] ? __pfx___might_resched+0x10/0x10 [ 199.690292][ T7421] ? find_inode_fast+0x1e9/0x600 [ 199.690315][ T7421] ? __d_alloc+0x32/0xae0 [ 199.690339][ T7421] ? __d_alloc+0x32/0xae0 [ 199.690357][ T7421] __d_alloc+0x32/0xae0 [ 199.690380][ T7421] d_alloc_pseudo+0x1c/0xc0 [ 199.690405][ T7421] alloc_file_pseudo_noaccount+0xcf/0x230 [ 199.690431][ T7421] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 199.690459][ T7421] ? iput+0x35/0x40 [ 199.690482][ T7421] bdev_file_open_by_dev+0x143/0x210 [ 199.690510][ T7421] setup_bdev_super+0x39b/0x730 [ 199.690538][ T7421] get_tree_bdev_flags+0x363/0x620 [ 199.690554][ T7421] ? __pfx_cramfs_blkdev_fill_super+0x10/0x10 [ 199.690575][ T7421] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 199.690609][ T7421] cramfs_get_tree+0x40/0x50 [ 199.690626][ T7421] vfs_get_tree+0x8e/0x340 [ 199.690650][ T7421] path_mount+0x7b9/0x23a0 [ 199.690675][ T7421] ? __pfx_path_mount+0x10/0x10 [ 199.690698][ T7421] ? putname+0x154/0x1a0 [ 199.690722][ T7421] ? putname+0x154/0x1a0 [ 199.690741][ T7421] ? putname+0x154/0x1a0 [ 199.690764][ T7421] ? __x64_sys_mount+0x293/0x310 [ 199.690783][ T7421] __x64_sys_mount+0x293/0x310 [ 199.690804][ T7421] ? __pfx___x64_sys_mount+0x10/0x10 [ 199.690833][ T7421] do_syscall_64+0xcd/0xfa0 [ 199.690851][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.690869][ T7421] RIP: 0033:0x7f098158f749 [ 199.690883][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.690900][ T7421] RSP: 002b:00007f0982344038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.690918][ T7421] RAX: ffffffffffffffda RBX: 00007f09817e6180 RCX: 00007f098158f749 [ 199.690929][ T7421] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000000 [ 199.690940][ T7421] RBP: 00007f0982344090 R08: 0000000000000000 R09: 0000000000000000 [ 199.690950][ T7421] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000002 [ 199.690960][ T7421] R13: 00007f09817e6218 R14: 00007f09817e6180 R15: 00007ffd5c19ef78 [ 199.690985][ T7421] [ 199.691119][ T7421] /dev/nullb0: Can't open blockdev [ 199.840310][ T53] Bluetooth: hci6: command 0x0c1a tx timeout [ 199.855081][ T5827] Bluetooth: hci1: command 0x0405 tx timeout [ 200.006234][ T7405] syz!: rxe_create_cq: returned err = -12 [ 200.045341][ T5827] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.185642][ T7405] infiniband syz!: Couldn't create ib_mad CQ [ 200.340461][ T7405] infiniband syz!: Couldn't open port 1 [ 200.623876][ T7405] RDS/IB: syz!: added [ 200.653092][ T7405] smc: adding ib device syz! with port count 1 [ 200.725201][ T7405] smc: ib device syz! port 1 has no pnetid [ 201.650475][ T7447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12321 sclass=netlink_route_socket pid=7447 comm=syz.7.254 [ 201.896594][ T5880] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 202.765080][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 202.775863][ T5880] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 202.839540][ T5880] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 202.962326][ T5880] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 203.005093][ T5880] usb 6-1: Product: syz [ 203.009281][ T5880] usb 6-1: Manufacturer: syz [ 203.047886][ T5880] usb 6-1: SerialNumber: syz [ 203.811097][ T5880] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 203.825624][ T5880] visor 6-1:1.0: probe with driver visor failed with error -110 [ 203.962993][ T5880] usb 6-1: USB disconnect, device number 7 [ 204.033482][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 204.033497][ T30] audit: type=1400 audit(1764300787.425:437): avc: denied { ioctl } for pid=7477 comm="syz.1.260" path="socket:[17799]" dev="sockfs" ino=17799 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.589612][ T7488] xt_TPROXY: Can be used only with -p tcp or -p udp [ 205.129148][ T30] audit: type=1400 audit(1764300787.655:438): avc: denied { open } for pid=7483 comm="syz.1.262" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 205.153085][ T30] audit: type=1800 audit(1764300787.835:439): pid=7487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.262" name="bus" dev="overlay" ino=94 res=0 errno=0 [ 205.460874][ T30] audit: type=1326 audit(1764300788.855:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098158f749 code=0x7ffc0000 [ 205.538843][ T30] audit: type=1326 audit(1764300788.855:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098158f749 code=0x7ffc0000 [ 205.656437][ T30] audit: type=1326 audit(1764300788.855:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f098158f749 code=0x7ffc0000 [ 205.719038][ T30] audit: type=1326 audit(1764300788.855:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098158f749 code=0x7ffc0000 [ 205.815074][ T30] audit: type=1326 audit(1764300788.855:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f098158f749 code=0x7ffc0000 [ 205.855002][ T30] audit: type=1326 audit(1764300788.855:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098158f749 code=0x7ffc0000 [ 205.878333][ T30] audit: type=1326 audit(1764300788.855:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7500 comm="syz.7.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0981591667 code=0x7ffc0000 [ 207.206533][ T5860] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 208.382980][ T5860] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 208.392630][ T5860] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.411148][ T5860] usb 10-1: Product: syz [ 208.415650][ T5860] usb 10-1: Manufacturer: syz [ 208.420332][ T5860] usb 10-1: SerialNumber: syz [ 208.499709][ T5860] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 209.112045][ T24] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 209.712430][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 209.712539][ T30] audit: type=1400 audit(1764300793.105:480): avc: denied { read } for pid=7535 comm="syz.9.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 210.032083][ T5827] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 210.100939][ T30] audit: type=1400 audit(1764300793.495:481): avc: denied { write } for pid=7579 comm="syz.1.285" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 210.211844][ T24] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 210.225993][ T24] ath9k_htc: Failed to initialize the device [ 210.235130][ T30] audit: type=1400 audit(1764300793.505:482): avc: denied { ioctl } for pid=7577 comm="syz.6.283" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18849 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 210.325419][ T24] usb 10-1: ath9k_htc: USB layer deinitialized [ 210.367331][ T30] audit: type=1400 audit(1764300793.765:483): avc: denied { relabelfrom } for pid=7577 comm="syz.6.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 210.415363][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 210.570144][ T30] audit: type=1400 audit(1764300793.825:484): avc: denied { relabelto } for pid=7577 comm="syz.6.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 210.590021][ T7585] policy can only be matched on NF_INET_PRE_ROUTING [ 210.590038][ T7585] unable to load match [ 210.632655][ T7582] netlink: 56 bytes leftover after parsing attributes in process `syz.5.284'. [ 210.652053][ T30] audit: type=1400 audit(1764300794.025:485): avc: denied { create } for pid=7581 comm="syz.5.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 210.679920][ T30] audit: type=1400 audit(1764300794.025:486): avc: denied { write } for pid=7581 comm="syz.5.284" path="socket:[17948]" dev="sockfs" ino=17948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 211.102076][ T6425] usb 10-1: USB disconnect, device number 5 [ 212.478284][ T30] audit: type=1400 audit(1764300795.875:487): avc: denied { bind } for pid=7628 comm="syz.5.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 212.987651][ T30] audit: type=1400 audit(1764300795.885:488): avc: denied { create } for pid=7631 comm="syz.9.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 213.444929][ T30] audit: type=1400 audit(1764300795.895:489): avc: denied { ioctl } for pid=7631 comm="syz.9.296" path="socket:[17982]" dev="sockfs" ino=17982 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 214.373061][ T7656] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 214.635026][ T5880] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 214.915013][ T5880] usb 10-1: Using ep0 maxpacket: 32 [ 214.931728][ T5880] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 215.446985][ T5880] usb 10-1: config 0 has no interface number 0 [ 215.457000][ T5880] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 215.477393][ T5880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.495242][ T5880] usb 10-1: Product: syz [ 215.499518][ T5880] usb 10-1: Manufacturer: syz [ 215.504682][ T5880] usb 10-1: SerialNumber: syz [ 215.511950][ T5880] usb 10-1: config 0 descriptor?? [ 215.519419][ T5880] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 215.686893][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 215.686908][ T30] audit: type=1400 audit(1764300799.085:493): avc: denied { create } for pid=7677 comm="syz.5.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.045931][ T5880] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 216.083410][ T30] audit: type=1400 audit(1764300799.115:494): avc: denied { connect } for pid=7677 comm="syz.5.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 216.111444][ T5880] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 216.130627][ T7681] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 216.145122][ T30] audit: type=1400 audit(1764300799.245:495): avc: denied { lock } for pid=7677 comm="syz.5.305" path="socket:[18160]" dev="sockfs" ino=18160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 216.161682][ T7661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.189122][ T7661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.282445][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 216.293064][ T5880] usb 10-1: USB disconnect, device number 6 [ 216.302861][ T5880] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 216.329385][ T7681] bond1 (unregistering): Released all slaves [ 216.353802][ T5880] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 216.429841][ T5880] quatech2 10-1:0.51: device disconnected [ 216.663976][ T30] audit: type=1400 audit(1764300800.055:496): avc: denied { ioctl } for pid=7700 comm="syz.9.311" path="socket:[19109]" dev="sockfs" ino=19109 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 217.152304][ T30] audit: type=1400 audit(1764300800.105:497): avc: denied { setopt } for pid=7700 comm="syz.9.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.274117][ T30] audit: type=1400 audit(1764300800.115:498): avc: denied { create } for pid=7700 comm="syz.9.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 217.332616][ T30] audit: type=1400 audit(1764300800.115:499): avc: denied { write } for pid=7700 comm="syz.9.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.062647][ T30] audit: type=1400 audit(1764300801.445:500): avc: denied { create } for pid=7715 comm="syz.6.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.275048][ T30] audit: type=1400 audit(1764300801.445:501): avc: denied { getopt } for pid=7715 comm="syz.6.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.275097][ T30] audit: type=1400 audit(1764300801.625:502): avc: denied { read } for pid=7695 comm="syz.5.308" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 218.745525][ T7696] orangefs_mount: mount request failed with -4 [ 219.373364][ T7755] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 220.155050][ T5893] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 220.320968][ T5893] usb 10-1: Using ep0 maxpacket: 32 [ 220.341247][ T5893] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 220.357836][ T5893] usb 10-1: config 0 has no interface number 0 [ 220.367310][ T5893] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 220.385036][ T5893] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.404992][ T5893] usb 10-1: Product: syz [ 220.409262][ T5893] usb 10-1: Manufacturer: syz [ 220.432191][ T5893] usb 10-1: SerialNumber: syz [ 220.442206][ T5893] usb 10-1: config 0 descriptor?? [ 220.454324][ T5893] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 220.865035][ C0] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 220.941652][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 220.941693][ T30] audit: type=1800 audit(1764300804.335:514): pid=7786 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.326" name="bus" dev="overlay" ino=325 res=0 errno=0 [ 221.017408][ T5893] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 221.063205][ T5893] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 221.086604][ T5893] usb 10-1: USB disconnect, device number 7 [ 221.110819][ T5893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 221.127933][ T5893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 221.246424][ T5893] quatech2 10-1:0.51: device disconnected [ 221.720927][ T7804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.332'. [ 221.727112][ T7799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7953 sclass=netlink_route_socket pid=7799 comm=syz.7.330 [ 221.924555][ T7804] netlink: 'syz.1.332': attribute type 7 has an invalid length. [ 221.932870][ T7804] netlink: 'syz.1.332': attribute type 8 has an invalid length. [ 221.940953][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 222.716505][ T5893] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 222.827712][ T30] audit: type=1400 audit(1764300806.215:515): avc: denied { bind } for pid=7824 comm="syz.7.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.991352][ T5893] usb 2-1: device descriptor read/64, error -71 [ 223.176367][ T7817] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 223.385202][ T5893] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 224.975019][ T5893] usb 2-1: device descriptor read/64, error -71 [ 225.104453][ T5893] usb usb2-port1: attempt power cycle [ 226.240214][ T30] audit: type=1800 audit(1764300809.625:516): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.337" name="bus" dev="overlay" ino=385 res=0 errno=0 [ 227.499963][ T7878] IPVS: sh: FWM 3 0x00000003 - no destination available [ 227.507399][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 227.516258][ T7878] IPVS: sh: FWM 3 0x00000003 - no destination available [ 227.523417][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 227.556416][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 227.716160][ T1204] IPVS: starting estimator thread 0... [ 227.815233][ T7880] IPVS: using max 50 ests per chain, 120000 per kthread [ 227.868436][ T9] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 227.888881][ T9] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 228.728055][ T9] usb 7-1: config 8 has an invalid descriptor of length 40, skipping remainder of the config [ 228.735143][ T30] audit: type=1800 audit(1764300811.515:517): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.348" name="bus" dev="overlay" ino=404 res=0 errno=0 [ 228.833612][ T9] usb 7-1: config 8 has no interface number 0 [ 228.854691][ T9] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 228.997492][ T9] usb 7-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.090198][ T9] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 229.297364][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.317180][ T9] usb 7-1: Product: syz [ 229.437783][ T9] usb 7-1: Manufacturer: syz [ 229.446998][ T9] usb 7-1: SerialNumber: syz [ 229.750997][ T30] audit: type=1400 audit(1764300813.145:518): avc: denied { create } for pid=7915 comm="syz.7.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 230.079170][ T30] audit: type=1400 audit(1764300813.235:519): avc: denied { map } for pid=7915 comm="syz.7.353" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 230.237587][ T30] audit: type=1400 audit(1764300813.265:520): avc: denied { create } for pid=7915 comm="syz.7.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 230.237732][ T9] usb 7-1: USB disconnect, device number 7 [ 230.342960][ T30] audit: type=1400 audit(1764300813.725:521): avc: denied { sqpoll } for pid=7925 comm="syz.7.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 230.436862][ T7930] syz.6.357 uses obsolete (PF_INET,SOCK_PACKET) [ 230.562000][ T30] audit: type=1400 audit(1764300813.855:522): avc: denied { write } for pid=7926 comm="syz.6.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 230.707133][ T30] audit: type=1400 audit(1764300813.855:523): avc: denied { setopt } for pid=7926 comm="syz.6.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 230.985158][ T5860] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 231.166429][ T5860] usb 6-1: config 7 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 231.180137][ T5860] usb 6-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.245515][ T5860] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 231.264223][ T5860] usb 6-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 231.273575][ T5860] usb 6-1: Manufacturer: syz [ 231.496510][ T5860] usb 6-1: USB disconnect, device number 8 [ 231.818133][ T7956] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 231.825258][ T7956] overlayfs: failed to set xattr on upper [ 231.831006][ T7956] overlayfs: ...falling back to redirect_dir=nofollow. [ 231.837922][ T7956] overlayfs: ...falling back to index=off. [ 231.843746][ T7956] overlayfs: ...falling back to uuid=null. [ 232.285113][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 232.506479][ T9] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 232.523103][ T9] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 232.534406][ T9] usb 2-1: config 8 has an invalid descriptor of length 40, skipping remainder of the config [ 232.578071][ T9] usb 2-1: config 8 has no interface number 0 [ 232.584198][ T9] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 232.611379][ T30] audit: type=1400 audit(1764300816.005:524): avc: denied { ioctl } for pid=7968 comm="syz.5.368" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 232.636397][ T9] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.663755][ T9] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 232.674257][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.682855][ T9] usb 2-1: Product: syz [ 232.687594][ T9] usb 2-1: Manufacturer: syz [ 232.692190][ T9] usb 2-1: SerialNumber: syz [ 233.885068][ T30] audit: type=1400 audit(1764300817.265:525): avc: denied { listen } for pid=7987 comm="syz.7.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 233.909967][ T9] usb 2-1: USB disconnect, device number 5 [ 233.924755][ T7988] pimreg: entered allmulticast mode [ 233.944409][ T30] audit: type=1400 audit(1764300817.265:526): avc: denied { write } for pid=7987 comm="syz.7.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 233.971009][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.373'. [ 234.000130][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.373'. [ 234.051447][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.373'. [ 234.114398][ T30] audit: type=1400 audit(1764300817.265:527): avc: denied { accept } for pid=7987 comm="syz.7.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.134298][ T30] audit: type=1400 audit(1764300817.265:528): avc: denied { create } for pid=7987 comm="syz.7.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 234.154483][ T30] audit: type=1400 audit(1764300817.275:529): avc: denied { read } for pid=7987 comm="syz.7.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 235.085075][ T5880] IPVS: starting estimator thread 0... [ 235.124994][ T30] audit: type=1400 audit(1764300818.505:530): avc: denied { bind } for pid=8001 comm="syz.6.375" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 235.231095][ T8009] IPVS: using max 42 ests per chain, 100800 per kthread [ 235.334578][ T30] audit: type=1400 audit(1764300818.505:531): avc: denied { name_bind } for pid=8001 comm="syz.6.375" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 235.611113][ T30] audit: type=1400 audit(1764300818.505:532): avc: denied { node_bind } for pid=8001 comm="syz.6.375" saddr=ff01::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 235.702767][ T30] audit: type=1400 audit(1764300819.095:533): avc: denied { connect } for pid=8027 comm="syz.5.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 236.438950][ T8036] process 'syz.1.381' launched './file0' with NULL argv: empty string added [ 236.708391][ T42] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 236.799100][ T8043] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 236.938479][ T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 236.974048][ T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64 [ 237.009539][ T42] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 237.062112][ T42] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.086598][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 237.131383][ T42] usb 7-1: SerialNumber: syz [ 237.178164][ T8051] FAULT_INJECTION: forcing a failure. [ 237.178164][ T8051] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 237.258174][ T8039] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 237.265444][ T8039] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 237.369801][ T8051] CPU: 0 UID: 0 PID: 8051 Comm: syz.5.385 Not tainted syzkaller #0 PREEMPT(full) [ 237.369826][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.369837][ T8051] Call Trace: [ 237.369845][ T8051] [ 237.369853][ T8051] dump_stack_lvl+0x16c/0x1f0 [ 237.369875][ T8051] should_fail_ex+0x512/0x640 [ 237.369901][ T8051] _copy_from_user+0x2e/0xd0 [ 237.369925][ T8051] memdup_user+0x6b/0xe0 [ 237.369943][ T8051] strndup_user+0x78/0xe0 [ 237.369959][ T8051] __x64_sys_mount+0x136/0x310 [ 237.369983][ T8051] ? __pfx___x64_sys_mount+0x10/0x10 [ 237.370011][ T8051] do_syscall_64+0xcd/0xfa0 [ 237.370030][ T8051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.370052][ T8051] RIP: 0033:0x7f273d18f749 [ 237.370066][ T8051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.370082][ T8051] RSP: 002b:00007f273e0d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.370098][ T8051] RAX: ffffffffffffffda RBX: 00007f273d3e5fa0 RCX: 00007f273d18f749 [ 237.370110][ T8051] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 237.370120][ T8051] RBP: 00007f273e0d0090 R08: 0000200000000280 R09: 0000000000000000 [ 237.370131][ T8051] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 237.370141][ T8051] R13: 00007f273d3e6038 R14: 00007f273d3e5fa0 R15: 00007ffffdebfb08 [ 237.370167][ T8051] [ 237.534492][ T8039] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 237.541719][ T8039] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 237.643852][ T8056] geneve2: entered promiscuous mode [ 237.954782][ T42] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 238.418157][ T5880] IPVS: starting estimator thread 0... [ 238.434707][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 238.434721][ T30] audit: type=1400 audit(1764300821.825:541): avc: denied { unmount } for pid=6124 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 238.439182][ T42] usb 7-1: USB disconnect, device number 8 [ 238.505022][ T30] audit: type=1400 audit(1764300821.895:542): avc: denied { ioctl } for pid=8065 comm="syz.5.391" path="socket:[20314]" dev="sockfs" ino=20314 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 238.535058][ T8069] IPVS: using max 54 ests per chain, 129600 per kthread [ 238.612746][ T8077] netlink: 'syz.9.392': attribute type 10 has an invalid length. [ 238.620749][ T8077] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 238.631546][ T8077] netlink: 'syz.9.392': attribute type 10 has an invalid length. [ 238.648591][ T30] audit: type=1326 audit(1764300822.045:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.9.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c78f749 code=0x7ffc0000 [ 238.672551][ T30] audit: type=1326 audit(1764300822.045:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.9.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c78f749 code=0x7ffc0000 [ 238.696335][ T30] audit: type=1326 audit(1764300822.045:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.9.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb23c78f749 code=0x7ffc0000 [ 238.720568][ T30] audit: type=1326 audit(1764300822.045:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.9.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c78f749 code=0x7ffc0000 [ 238.744017][ T30] audit: type=1326 audit(1764300822.045:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8073 comm="syz.9.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c78f749 code=0x7ffc0000 [ 238.795052][ T5880] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 238.956158][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 238.980804][ T5880] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 238.994768][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.010944][ T5880] usb 6-1: Product: syz [ 239.017156][ T5880] usb 6-1: Manufacturer: syz [ 239.023132][ T5880] usb 6-1: SerialNumber: syz [ 239.032701][ T5880] usb 6-1: config 0 descriptor?? [ 240.229453][ T30] audit: type=1400 audit(1764300823.625:548): avc: denied { create } for pid=8098 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 240.263594][ T30] audit: type=1400 audit(1764300823.645:549): avc: denied { ioctl } for pid=8098 comm="syz.1.399" path="socket:[20789]" dev="sockfs" ino=20789 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 240.616155][ T30] audit: type=1400 audit(1764300824.005:550): avc: denied { kexec_image_load } for pid=8101 comm="syz.9.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 240.716455][ T8105] kexec: Could not allocate control_code_buffer [ 241.434017][ T5873] usb 6-1: USB disconnect, device number 9 [ 243.928254][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 243.928269][ T30] audit: type=1400 audit(1764300827.325:556): avc: denied { ioctl } for pid=8149 comm="syz.5.413" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 243.977262][ T8153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.980094][ T30] audit: type=1400 audit(1764300827.325:557): avc: denied { set_context_mgr } for pid=8149 comm="syz.5.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 244.084512][ T8156] netlink: 12 bytes leftover after parsing attributes in process `syz.6.415'. [ 246.526464][ T30] audit: type=1400 audit(1764300829.925:558): avc: denied { write } for pid=8183 comm="syz.7.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 246.576794][ T30] audit: type=1400 audit(1764300829.925:559): avc: denied { ioctl } for pid=8183 comm="syz.7.423" path="socket:[21563]" dev="sockfs" ino=21563 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 247.990506][ T30] audit: type=1800 audit(1764300830.725:560): pid=8200 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.427" name="bus" dev="overlay" ino=317 res=0 errno=0 [ 248.775180][ T8210] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 248.776839][ T30] audit: type=1400 audit(1764300831.735:561): avc: denied { ioctl } for pid=8203 comm="syz.9.430" path="socket:[21628]" dev="sockfs" ino=21628 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 248.798507][ T8210] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 249.147741][ T30] audit: type=1400 audit(1764300832.545:562): avc: denied { read } for pid=8212 comm="syz.6.431" path="socket:[21637]" dev="sockfs" ino=21637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.173674][ T8215] ip6_tunnel: non-ECT from 0000:003c:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 249.205389][ T30] audit: type=1400 audit(1764300832.565:563): avc: denied { execute } for pid=8216 comm="syz.9.432" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 249.863367][ T5873] IPVS: starting estimator thread 0... [ 249.935088][ T30] audit: type=1400 audit(1764300833.315:564): avc: denied { mounton } for pid=8222 comm="syz.9.433" path="/syzcgroup/unified/syz9" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 249.969018][ T8229] IPVS: using max 75 ests per chain, 180000 per kthread [ 249.973081][ T8226] /dev/nullb0: Can't open blockdev [ 249.994721][ T30] audit: type=1400 audit(1764300833.385:565): avc: denied { create } for pid=8222 comm="syz.9.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 250.075200][ T5880] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 250.246985][ T5880] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 250.255328][ T5880] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 250.275259][ T5880] usb 2-1: config 8 has an invalid descriptor of length 40, skipping remainder of the config [ 250.769234][ T5880] usb 2-1: config 8 has no interface number 0 [ 250.800514][ T5880] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 250.857610][ T5880] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 250.873508][ T5880] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 251.261273][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.286872][ T5880] usb 2-1: Product: syz [ 251.291030][ T5880] usb 2-1: Manufacturer: syz [ 251.338840][ T5880] usb 2-1: SerialNumber: syz [ 251.631675][ T30] audit: type=1326 audit(1764300835.025:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.6.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71f78f749 code=0x7ffc0000 [ 251.635550][ T8246] syzkaller0: entered promiscuous mode [ 251.655513][ T30] audit: type=1326 audit(1764300835.025:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.6.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71f78f749 code=0x7ffc0000 [ 251.693109][ T30] audit: type=1326 audit(1764300835.085:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.6.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd71f78f749 code=0x7ffc0000 [ 251.720681][ T30] audit: type=1326 audit(1764300835.085:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.6.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71f78f749 code=0x7ffc0000 [ 251.755867][ T8246] syzkaller0: entered allmulticast mode [ 251.851353][ T30] audit: type=1326 audit(1764300835.085:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.6.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71f78f749 code=0x7ffc0000 [ 251.930144][ T5880] usb 2-1: USB disconnect, device number 6 [ 251.972846][ T30] audit: type=1326 audit(1764300835.085:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.6.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd71f78f749 code=0x7ffc0000 [ 253.246354][ T5827] Bluetooth: hci2: unexpected event for opcode 0x042c [ 253.675251][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 253.777023][ T42] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 253.865033][ T6425] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 253.937832][ T42] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.948073][ T42] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 253.955001][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 253.965349][ T42] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.980954][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.991258][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 254.004578][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 254.013838][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.047477][ T10] usb 7-1: config 0 descriptor?? [ 254.068259][ T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 254.115415][ T42] usb 10-1: config 0 descriptor?? [ 254.132091][ T6425] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 254.147106][ T6425] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 254.157501][ T5860] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 254.215477][ T6425] usb 2-1: config 1 interface 0 has no altsetting 0 [ 254.226554][ T6425] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.40 [ 254.239362][ T6425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.250705][ T6425] usb 2-1: Product: љ [ 254.254899][ T6425] usb 2-1: Manufacturer: ࠉ [ 254.260052][ T6425] usb 2-1: SerialNumber: 걥袦餿뭊떿妔짅 ⺉㼥槽斌ନ鏭ﯦ簤㨾뺤횵枕ۂ쪠몵㚳碥慯홆 [ 254.282126][ T8278] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 254.768705][ T5860] usb 6-1: device descriptor read/64, error -71 [ 254.814660][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 254.814787][ T30] audit: type=1400 audit(1764300838.205:589): avc: denied { ioctl } for pid=8268 comm="syz.6.447" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 254.881777][ T8294] input: syz1 as /devices/virtual/input/input10 [ 254.900620][ T6425] usbhid 2-1:1.0: can't add hid device: -71 [ 254.908555][ T6425] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 255.115483][ T5860] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 255.147845][ T6425] usb 2-1: USB disconnect, device number 7 [ 255.249717][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.256602][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 360.274899][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 360.281905][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P51/1:b..l P6111/1:b..l [ 360.291156][ C1] rcu: (detected by 1, t=10502 jiffies, g=21957, q=448 ncpus=2) [ 360.298856][ C1] task:udevd state:R running task stack:25592 pid:6111 tgid:6111 ppid:5184 task_flags:0x400140 flags:0x00080001 [ 360.313011][ C1] Call Trace: [ 360.316273][ C1] [ 360.319189][ C1] __schedule+0x1190/0x5de0 [ 360.323691][ C1] ? kernel_text_address+0x8d/0x100 [ 360.328929][ C1] ? __pfx___schedule+0x10/0x10 [ 360.333788][ C1] ? mark_held_locks+0x49/0x80 [ 360.338547][ C1] preempt_schedule_irq+0x51/0x90 [ 360.343554][ C1] irqentry_exit+0x36/0x90 [ 360.347939][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.353901][ C1] RIP: 0010:__orc_find+0x92/0xf0 [ 360.358810][ C1] Code: 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 48 01 da 49 39 d5 73 af 4c 8d 63 fc <49> 39 ec 73 b2 4d 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d 04 50 48 83 [ 360.378408][ C1] RSP: 0018:ffffc900048df600 EFLAGS: 00000283 [ 360.384469][ C1] RAX: ffffffff914bbcf0 RBX: ffffffff90b6d4c0 RCX: dffffc0000000000 [ 360.392428][ C1] RDX: ffffffff84632448 RSI: 0000000000000000 RDI: ffffffff90b6d4b0 [ 360.400379][ C1] RBP: ffffffff90b6d4b0 R08: ffffffff914bbd26 R09: 0000000000000000 [ 360.408322][ C1] R10: 0000000000000000 R11: 0000000000036324 R12: ffffffff90b6d4bc [ 360.416262][ C1] R13: ffffffff8463242e R14: ffffffff90b6d4b0 R15: ffffffff90b6d4b0 [ 360.424212][ C1] ? tomoyo_realpath_from_path+0x19e/0x6e0 [ 360.429999][ C1] ? tomoyo_realpath_from_path+0x1b8/0x6e0 [ 360.435784][ C1] ? tomoyo_realpath_from_path+0x19e/0x6e0 [ 360.441563][ C1] unwind_next_frame+0x2ec/0x20a0 [ 360.446567][ C1] ? tomoyo_realpath_from_path+0x19f/0x6e0 [ 360.452358][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.458486][ C1] arch_stack_walk+0x94/0x100 [ 360.463151][ C1] ? tomoyo_realpath_from_path+0x19f/0x6e0 [ 360.468936][ C1] stack_trace_save+0x8e/0xc0 [ 360.473920][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 360.479267][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 360.484192][ C1] kasan_save_stack+0x33/0x60 [ 360.488843][ C1] ? kasan_save_stack+0x33/0x60 [ 360.493662][ C1] ? kasan_save_track+0x14/0x30 [ 360.498482][ C1] ? __kasan_save_free_info+0x3b/0x60 [ 360.503828][ C1] ? __kasan_slab_free+0x5f/0x80 [ 360.508733][ C1] ? kfree+0x2b8/0x6d0 [ 360.512776][ C1] ? tomoyo_realpath_from_path+0x19f/0x6e0 [ 360.518571][ C1] kasan_save_track+0x14/0x30 [ 360.523220][ C1] __kasan_save_free_info+0x3b/0x60 [ 360.528401][ C1] __kasan_slab_free+0x5f/0x80 [ 360.533136][ C1] kfree+0x2b8/0x6d0 [ 360.537020][ C1] ? tomoyo_realpath_from_path+0x19f/0x6e0 [ 360.542799][ C1] ? tomoyo_realpath_from_path+0x19f/0x6e0 [ 360.548583][ C1] ? tomoyo_encode+0x31/0x50 [ 360.553148][ C1] tomoyo_realpath_from_path+0x19f/0x6e0 [ 360.558755][ C1] tomoyo_path_perm+0x274/0x460 [ 360.563574][ C1] ? tomoyo_path_perm+0x260/0x460 [ 360.568581][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 360.573955][ C1] ? kmem_cache_free+0x2d4/0x6c0 [ 360.578861][ C1] ? putname+0x154/0x1a0 [ 360.583088][ C1] security_inode_getattr+0x116/0x290 [ 360.588441][ C1] vfs_fstat+0x4b/0xe0 [ 360.592486][ C1] __do_sys_newfstat+0x87/0x100 [ 360.597314][ C1] ? __pfx___do_sys_newfstat+0x10/0x10 [ 360.602755][ C1] ? rcu_is_watching+0x12/0xc0 [ 360.607494][ C1] do_syscall_64+0xcd/0xfa0 [ 360.611968][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.617832][ C1] RIP: 0033:0x7f2fa3511ad7 [ 360.622217][ C1] RSP: 002b:00007fffe4bad348 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 [ 360.630598][ C1] RAX: ffffffffffffffda RBX: 000055ee72e131e0 RCX: 00007f2fa3511ad7 [ 360.638539][ C1] RDX: 00007f2fa35efea0 RSI: 00007fffe4bad350 RDI: 0000000000000008 [ 360.646484][ C1] RBP: 00007f2fa35efff0 R08: 0000000000000001 R09: 0000000000000000 [ 360.654424][ C1] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a [ 360.662364][ C1] R13: 0000000000003fff R14: 0000000000000000 R15: 000055ee72e131e0 [ 360.670343][ C1] [ 360.673347][ C1] task:kworker/u8:3 state:R running task stack:24952 pid:51 tgid:51 ppid:2 task_flags:0x4288160 flags:0x00080000 [ 360.686873][ C1] Workqueue: netns cleanup_net [ 360.691616][ C1] Call Trace: [ 360.694871][ C1] [ 360.697778][ C1] __schedule+0x1190/0x5de0 [ 360.702269][ C1] ? __pfx___schedule+0x10/0x10 [ 360.707106][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.712290][ C1] preempt_schedule_irq+0x51/0x90 [ 360.717289][ C1] irqentry_exit+0x36/0x90 [ 360.721672][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.727638][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 360.732806][ C1] Code: e6 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 4b e9 0e 0f 82 74 02 00 00 8b 35 9a 7b e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 e6 08 12 0f 85 c7 02 00 00 48 83 c4 [ 360.752381][ C1] RSP: 0018:ffffc90000bc7578 EFLAGS: 00000206 [ 360.758417][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c4760 RCX: 00000000c692bd81 [ 360.766397][ C1] RDX: 0000000000000000 RSI: ffffffff8da06739 RDI: ffffffff8bf073c0 [ 360.774341][ C1] RBP: 0000000000000002 R08: a369672436c820b7 R09: 0000000000000000 [ 360.782285][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 360.790250][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.798202][ C1] ? find_held_lock+0x2b/0x80 [ 360.802868][ C1] kernfs_root+0x34/0x2a0 [ 360.807173][ C1] ? kernfs_root+0x23/0x2a0 [ 360.811652][ C1] kernfs_active+0xae/0x100 [ 360.816128][ C1] kernfs_drain+0xcf/0x570 [ 360.820520][ C1] ? __pfx_kernfs_drain+0x10/0x10 [ 360.825520][ C1] ? find_held_lock+0x2b/0x80 [ 360.830169][ C1] ? kernfs_root+0xee/0x2a0 [ 360.834649][ C1] __kernfs_remove+0x271/0x8a0 [ 360.839496][ C1] ? kernfs_find_ns+0x277/0x540 [ 360.844351][ C1] kernfs_remove_by_name_ns+0x68/0x110 [ 360.849817][ C1] remove_files+0x96/0x1c0 [ 360.854217][ C1] sysfs_remove_group+0x8b/0x180 [ 360.859132][ C1] sysfs_remove_groups+0x60/0xa0 [ 360.864055][ C1] device_remove_attrs+0x192/0x290 [ 360.869157][ C1] ? __pfx_device_remove_attrs+0x10/0x10 [ 360.874769][ C1] ? up_write+0x1b2/0x520 [ 360.879077][ C1] device_del+0x38e/0x9f0 [ 360.883383][ C1] ? __pfx_device_del+0x10/0x10 [ 360.888211][ C1] ? netdev_unregister_kobject+0x2da/0x540 [ 360.894010][ C1] unregister_netdevice_many_notify+0x14d6/0x25c0 [ 360.900421][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 360.907179][ C1] ? nexthop_net_exit_rtnl+0x20/0xd0 [ 360.912450][ C1] ops_undo_list+0x8fc/0xab0 [ 360.917027][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 360.922129][ C1] ? cleanup_net+0x347/0x8b0 [ 360.926711][ C1] ? idr_destroy+0x62/0x2e0 [ 360.931207][ C1] cleanup_net+0x41b/0x8b0 [ 360.935704][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 360.940645][ C1] ? rcu_is_watching+0x12/0xc0 [ 360.945544][ C1] process_one_work+0x9cf/0x1b70 [ 360.950495][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 360.956649][ C1] ? __pfx_process_one_work+0x10/0x10 [ 360.962027][ C1] ? assign_work+0x1a0/0x250 [ 360.966607][ C1] worker_thread+0x6c8/0xf10 [ 360.971184][ C1] ? __kthread_parkme+0x19e/0x250 [ 360.976197][ C1] ? __pfx_worker_thread+0x10/0x10 [ 360.981281][ C1] kthread+0x3c5/0x780 [ 360.985324][ C1] ? __pfx_kthread+0x10/0x10 [ 360.989884][ C1] ? rcu_is_watching+0x12/0xc0 [ 360.994621][ C1] ? __pfx_kthread+0x10/0x10 [ 360.999182][ C1] ret_from_fork+0x675/0x7d0 [ 361.003745][ C1] ? __pfx_kthread+0x10/0x10 [ 361.008303][ C1] ret_from_fork_asm+0x1a/0x30 [ 361.013053][ C1] [ 361.016044][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10571 jiffies! g21957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 361.028345][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=13972 [ 361.036214][ C1] rcu: rcu_preempt kthread starved for 10577 jiffies! g21957 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 361.047552][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 361.057491][ C1] rcu: RCU grace-period kthread stack dump: [ 361.063359][ C1] task:rcu_preempt state:I stack:28000 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 361.075235][ C1] Call Trace: [ 361.078488][ C1] [ 361.081396][ C1] __schedule+0x1190/0x5de0 [ 361.085900][ C1] ? __lock_acquire+0x622/0x1c90 [ 361.090823][ C1] ? __pfx___schedule+0x10/0x10 [ 361.095750][ C1] ? find_held_lock+0x2b/0x80 [ 361.100408][ C1] ? schedule+0x2d7/0x3a0 [ 361.104713][ C1] schedule+0xe7/0x3a0 [ 361.108756][ C1] schedule_timeout+0x123/0x290 [ 361.113591][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 361.118936][ C1] ? __pfx_process_timeout+0x10/0x10 [ 361.124198][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 361.129984][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 361.135421][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 361.140158][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 361.145427][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.150593][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 361.155517][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 361.160355][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 361.166136][ C1] rcu_gp_kthread+0x26d/0x380 [ 361.170781][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 361.175956][ C1] ? rcu_is_watching+0x12/0xc0 [ 361.180703][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.185872][ C1] ? __kthread_parkme+0x19e/0x250 [ 361.190873][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 361.196040][ C1] kthread+0x3c5/0x780 [ 361.200078][ C1] ? __pfx_kthread+0x10/0x10 [ 361.204646][ C1] ? rcu_is_watching+0x12/0xc0 [ 361.209381][ C1] ? __pfx_kthread+0x10/0x10 [ 361.213949][ C1] ret_from_fork+0x675/0x7d0 [ 361.218515][ C1] ? __pfx_kthread+0x10/0x10 [ 361.223076][ C1] ret_from_fork_asm+0x1a/0x30 [ 361.227829][ C1] [ 361.230830][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 361.237122][ C1] CPU: 1 UID: 0 PID: 1295 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 361.246112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.256138][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 361.262530][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 38 35 f6 48 89 df e8 0e 8c 35 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 35 94 25 f6 65 8b 05 7e 25 3e 08 85 c0 74 16 5b [ 361.282105][ C1] RSP: 0018:ffffc90004c9f958 EFLAGS: 00000246 [ 361.288152][ C1] RAX: 0000000000000002 RBX: ffffffff9addc2c0 RCX: 0000000000000002 [ 361.296103][ C1] RDX: 0000000000000000 RSI: ffffffff8da2c165 RDI: ffffffff8bf073c0 [ 361.304056][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 361.311997][ C1] R10: ffffffff908214d7 R11: 0000000000000001 R12: ffffffff8f05d5c0 [ 361.319938][ C1] R13: ffffffff9addc3c8 R14: 0000000000000000 R15: ffffffff9addc400 [ 361.327879][ C1] FS: 0000000000000000(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 361.336780][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.343336][ C1] CR2: 000020000001b000 CR3: 0000000065f5e000 CR4: 00000000003526f0 [ 361.351286][ C1] Call Trace: [ 361.354558][ C1] [ 361.357462][ C1] uart_write_room+0x2d9/0x940 [ 361.362203][ C1] ? __pfx_uart_write_room+0x10/0x10 [ 361.367474][ C1] tty_write_room+0x66/0x90 [ 361.372041][ C1] handle_tx+0x14f/0x630 [ 361.376263][ C1] dev_hard_start_xmit+0x97/0x740 [ 361.381262][ C1] __dev_queue_xmit+0xa46/0x4490 [ 361.386183][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.391353][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 361.397149][ C1] ? rcu_is_watching+0x12/0xc0 [ 361.401886][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 361.407228][ C1] ? __schedule+0x11a3/0x5de0 [ 361.411883][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 361.416801][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 361.421726][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 361.426780][ C1] ? find_held_lock+0x2b/0x80 [ 361.431430][ C1] ? skb_dequeue+0x126/0x180 [ 361.436002][ C1] ? find_held_lock+0x2b/0x80 [ 361.440651][ C1] ? rcu_is_watching+0x12/0xc0 [ 361.445400][ C1] tx+0xcc/0x190 [ 361.448919][ C1] ? __pfx_tx+0x10/0x10 [ 361.453044][ C1] kthread+0x1e4/0x3e0 [ 361.457080][ C1] ? find_held_lock+0x2b/0x80 [ 361.461733][ C1] ? __pfx_kthread+0x10/0x10 [ 361.466301][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 361.472202][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.477374][ C1] ? __kthread_parkme+0x19e/0x250 [ 361.482382][ C1] ? __pfx_kthread+0x10/0x10 [ 361.486951][ C1] kthread+0x3c5/0x780 [ 361.490991][ C1] ? __pfx_kthread+0x10/0x10 [ 361.495560][ C1] ? rcu_is_watching+0x12/0xc0 [ 361.500297][ C1] ? __pfx_kthread+0x10/0x10 [ 361.504854][ C1] ret_from_fork+0x675/0x7d0 [ 361.509449][ C1] ? __pfx_kthread+0x10/0x10 [ 361.514016][ C1] ret_from_fork_asm+0x1a/0x30 [ 361.518760][ C1]