last executing test programs: 23m3.233067543s ago: executing program 1 (id=6399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x80800) r5 = socket$inet(0x2, 0x80000, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @loopback, r2}, 0xc) bind$packet(r4, &(0x7f0000000300)={0x11, 0x19, r2, 0x1, 0x7f}, 0x14) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c0000002000010026bd7000ffdbdf25028010050e0000060180000008000200ff00000008000b00040000000c000c40000000008000004008000d005a524d510c000c4000000000000000d0080001"], 0x7c}}, 0x40000c0) r6 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000180)=0x0) setresuid(r7, 0xee00, r7) tkill(r6, 0x12) 23m2.636152811s ago: executing program 1 (id=6402): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x7, {0x0, 0x10001, 0x0, 0x40d, 0xffffffffffffffff, 0x102, 0x101, 0x804, 0x4, 0xc000, 0xfffffffc, 0x0, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 23m2.026424682s ago: executing program 1 (id=6404): bpf$PROG_LOAD(0x5, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x38) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) 23m1.741866283s ago: executing program 1 (id=6407): r0 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000540)={0x0, @reserved}) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0x6b, 0x80, 0x99, 0x8, 0x5, 0x1, 0x3, 0x4, 0x1, 0x3f, 0x7, 0x9f, 0x9, 0x96, 0x6, 0xfb}}) 23m0.489741361s ago: executing program 1 (id=6409): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000200), 0x84000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80020008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf515, 0x16}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xfc}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x34}]}, 0x70}, 0x1, 0x0, 0x0, 0x4044800}, 0x20010) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 22m58.617120692s ago: executing program 1 (id=6416): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r4, &(0x7f00000000c0), 0x300, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_open_procfs(0x0, 0x0) 22m42.317546857s ago: executing program 32 (id=6416): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r4, &(0x7f00000000c0), 0x300, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_open_procfs(0x0, 0x0) 16m27.034639092s ago: executing program 2 (id=7824): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0], 0x114}], 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$vhost_msg(r3, &(0x7f00000004c0)={0x1, {&(0x7f0000000240)=""/160, 0xa0, &(0x7f00000003c0)=""/252, 0x1, 0x1}}, 0x48) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4c080) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xdf, 0x10, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)={0x40, 0x23, 0xf, {0xf, 0x21, "d858050352b53739503ed5aa84"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESHEX=r1, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r8, 0x80045438, &(0x7f0000000980)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 16m23.844523496s ago: executing program 2 (id=7835): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064d1, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) read(r3, 0x0, 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x1, 0x0) dup2(r5, r5) 16m22.970095344s ago: executing program 2 (id=7837): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) migrate_pages(0xffffffffffffffff, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'batadv0\x00'}}, 0x1e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4", 0xcc}, {&(0x7f0000000c40)="6dd950135126d19aaf46a60e", 0xc}], 0x2}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x44044) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r8, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r8, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) close_range(r6, 0xffffffffffffffff, 0x0) 16m22.139053026s ago: executing program 2 (id=7840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x202002, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee000000"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@usrquota}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000200, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff00c}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000b00)="84f4", 0x2}], 0x1}}], 0x1, 0x20004888) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 16m19.592447324s ago: executing program 2 (id=7849): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) getpid() r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x6, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @multicast2, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}}) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vcan0\x00', 0x200}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3e562000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(r7, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r8, 0xc008ae91, &(0x7f0000000180)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 16m17.807974179s ago: executing program 2 (id=7857): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x4, 0x5, 0xf84}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000000000020000080004000a000000", 0x24) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000280), 0x0, &(0x7f00000004c0)="4c0cdf0445ba000395dcab4744b833d9d4ae5e5a7e9be6f618ccced6521ec2ad74b9f9b9550ba6c2f30e6ac6e9cde0467fd86c6c73044dfa24602cdd981a89a28e702e095edac4e021db7e7502bb3536d8612e5ce7cc0e45f24b2a7e69bb8440a59abd0407a33ca5b40034093db97925c1e84d30791082dd340e8611e5a5f98ee5f2f366603a9575bdad330d1c282c7badcf52", &(0x7f00000001c0)="70ecb7a7fbbc13402ab45993cbd6d8eef036", 0x2, r0, 0x4}, 0x38) recvfrom$l2tp(r0, &(0x7f00000001c0)=""/184, 0xb8, 0x40000000, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x74) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x1b5}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="21050000"], 0x14}}, 0x0) io_uring_enter(r6, 0x80002219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1, 0xfff, 0xfffffe0000000001, 0x8, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) 16m17.010551872s ago: executing program 33 (id=7857): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x4, 0x5, 0xf84}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000000000020000080004000a000000", 0x24) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000280), 0x0, &(0x7f00000004c0)="4c0cdf0445ba000395dcab4744b833d9d4ae5e5a7e9be6f618ccced6521ec2ad74b9f9b9550ba6c2f30e6ac6e9cde0467fd86c6c73044dfa24602cdd981a89a28e702e095edac4e021db7e7502bb3536d8612e5ce7cc0e45f24b2a7e69bb8440a59abd0407a33ca5b40034093db97925c1e84d30791082dd340e8611e5a5f98ee5f2f366603a9575bdad330d1c282c7badcf52", &(0x7f00000001c0)="70ecb7a7fbbc13402ab45993cbd6d8eef036", 0x2, r0, 0x4}, 0x38) recvfrom$l2tp(r0, &(0x7f00000001c0)=""/184, 0xb8, 0x40000000, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x74) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x1b5}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="21050000"], 0x14}}, 0x0) io_uring_enter(r6, 0x80002219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1, 0xfff, 0xfffffe0000000001, 0x8, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) 13m23.311490743s ago: executing program 0 (id=8421): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x7fffffff, "b546baa5cc590d3033de25070000007bb9deffafde2500", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r9, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000e00)=0x4) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x4, &(0x7f0000000240)={0x77359400}, 0x1, 0x0, 0x2}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0xc884}, 0xc000) prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 13m22.225398597s ago: executing program 0 (id=8424): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = epoll_create1(0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x2, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) r6 = socket(0x1, 0x80802, 0x0) r7 = epoll_create1(0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r7, &(0x7f0000000100)={0xa000000d}) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x15, 0xd8, 0x48, 0x10, 0x2c42, 0x16f8, 0x56cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa3, 0x2, 0x0, 0xc4, 0x9, 0x9f}}]}}]}}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x80000001, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000001}) shutdown(r6, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x13, 0x0, &(0x7f00000007c0)) 13m16.776957405s ago: executing program 0 (id=8432): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x290}}, 0x4048010) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c4}, 0x4000000) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 13m14.019458244s ago: executing program 0 (id=8442): bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./file0/file0\x00', 0x1ea) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f00000010c0)='./file0/file0\x00', 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) 13m12.85729022s ago: executing program 0 (id=8451): unshare(0x2040600) r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) syz_open_dev$video(&(0x7f0000000440), 0x0, 0x8800) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0xf599, 0x3, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000280)=@id, &(0x7f00000002c0)=0x10, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000340)={'erspan0\x00', 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000040), &(0x7f0000000240), 0x2, 0x2) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) semctl$SETVAL(r0, 0x1, 0x10, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x102, 0x0, 0x0, 0x140}, 'syz1\x00', 0x3f}) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x7) ioctl$UI_DEV_CREATE(r5, 0x5501) 13m12.371294995s ago: executing program 0 (id=8454): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100000000000000eb0006"], 0x114}, {&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000004100000426bd7000ffdbdf250800a400ffffffff1400564b782e1baeb10ffe002001000000000000"], 0x2c}], 0x2, 0x0, 0x0, 0x4009010}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40170100"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) 13m12.059578815s ago: executing program 34 (id=8454): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f000100000000000000eb0006"], 0x114}, {&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000004100000426bd7000ffdbdf250800a400ffffffff1400564b782e1baeb10ffe002001000000000000"], 0x2c}], 0x2, 0x0, 0x0, 0x4009010}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="40170100"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) 2m48.781388283s ago: executing program 4 (id=10638): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xf, 0x60100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000473000040"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x8, 0xffff, @value=0x400}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000140)={0x2, 0x6e1f, @local}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102378, 0x18fea) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x24, 0x0, 0x0) uname(&(0x7f0000000080)=""/209) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000008000000000000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00x\x00'/28]) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 2m47.430585885s ago: executing program 4 (id=10643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002403000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000018e808116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}}, 0x1c}}, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x80082, 0x0) openat2(r5, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x1c}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3700000005200000", @ANYRES32, @ANYRES32, @ANYBLOB="06c542b60448f2616d4e02aabb9c600a1c743c750b8cefb0c75626f2930028355a91eea2b496bfdf4645d312c6954166d7e7cc4b3b674483c0bc05ef3ad144d28a54db78bd07b787de23c8bd1a713d1be7e0d9b1ca610aacf39fb80abd92a32357ab05b9f3b07f0b33141140f8f57eeaaa964913f76b1588236e0246760db957570219206a21d5730066e3af7d65754a377b5e", @ANYRES64=0x0], 0x20) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r6, 0x1, 0x70bd25, 0x25dfdc00, {{}, {}, {0x8, 0x2, 0xfffffffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0xc42e41a7012e9d94) 2m46.784423058s ago: executing program 4 (id=10645): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x290}}, 0x4048010) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m44.510463369s ago: executing program 4 (id=10655): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x4, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x2, 0x0, {0x40, 0x7, 0xb, 0xffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x15}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000e065992f004000000000060000000000000001000040000000000700000000000000"]) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2881400, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8000000890, 0xa002) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x5, 0x1ff, 0x300a, 0x7, 0x8}}) write$binfmt_elf64(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c461d8a0807070000000400000003003e0081000000bc000000000000004000f1ff7bb4ffffbb00000000000000ff071127c20d00000b00000000000000000850000000000003000000000000000000220000000000110e000000000000800100"/108], 0x78) 2m44.325274494s ago: executing program 4 (id=10657): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000600)=0x14) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x4048010) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m37.949441899s ago: executing program 4 (id=10681): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getrlimit(0x8, &(0x7f0000000180)) r2 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000400000000000000", @ANYRES32], 0x50) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) r3 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xc8, 0x2, {r3}, {0xee01}, 0x3af, 0x4}) syz_open_procfs(r4, &(0x7f0000000240)='net/rt_cache\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x4, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r6, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local}) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0xff, 0xfffffffffffff0af, 0xffffffffffffffff, 0x0, 0x10000, 0x103, 0x3}, 0x0, &(0x7f00000002c0)={0x3fe, 0x8000000005, 0x3, 0x7, 0x9, 0x45ff, 0xd68d, 0x40000000000}, 0x0, 0x0) 2m37.429467311s ago: executing program 35 (id=10681): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getrlimit(0x8, &(0x7f0000000180)) r2 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000400000000000000", @ANYRES32], 0x50) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) r3 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xc8, 0x2, {r3}, {0xee01}, 0x3af, 0x4}) syz_open_procfs(r4, &(0x7f0000000240)='net/rt_cache\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4040010) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x4, 0x3, 0x2, 0x0, {0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r6, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local}) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0xff, 0xfffffffffffff0af, 0xffffffffffffffff, 0x0, 0x10000, 0x103, 0x3}, 0x0, &(0x7f00000002c0)={0x3fe, 0x8000000005, 0x3, 0x7, 0x9, 0x45ff, 0xd68d, 0x40000000000}, 0x0, 0x0) 8.067494031s ago: executing program 5 (id=11158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r8 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r8, 0x0) 7.00827685s ago: executing program 5 (id=11160): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x40000000) 6.679924152s ago: executing program 3 (id=11162): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0xb}}}, 0x24}}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000005000000000000000700000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000000500000083000000bf0900000000000055090100000000009500000000000000851000000300000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000950000000000000018260000", @ANYRES32, @ANYBLOB="00000000a000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018480000050000000000000000000000851000000600000060a0080004000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x8000, 0x97, &(0x7f0000000800)=""/151, 0x40f00, 0x20, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x14dd6, r3, 0x1, &(0x7f0000000a40)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x2, 0x2, 0x4, 0x2}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r8 = socket(0x75dff8496eb4eaeb, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xfff2, 0xc}, {0xa, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) ptrace$ARCH_MAP_VDSO_X32(0x1e, r11, 0x1, 0x2001) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'virt_wifi0\x00', {0x1}, 0x8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r14, @ANYBLOB="18005a8014000180050001"], 0x34}, 0x1, 0x0, 0x0, 0x40400}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="00c87f00a388be0401000000000000000000", @ANYRES16=r15, @ANYBLOB="080025bd7000fbdbdf250600000008000300", @ANYRES32=r14, @ANYBLOB="05005300000000000a00e80008021100000000001c00e7009a0ef695ddd7001f7d24235371f8ba201e55760259adeea60a00e80008021100000100000800050002000000"], 0x60}}, 0x20000000) syz_usb_ep_write(r7, 0x81, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0x0, 0x0) 6.67934374s ago: executing program 5 (id=11163): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001000000007e66d9"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.627314945s ago: executing program 7 (id=11164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r1, 0x400, 0x1d, 0x0, {{}, {0x0, 0x4109}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000400)={0x1, 0x4ef1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x1, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1) close(r4) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x3, [], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) accept$alg(r4, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0xc80c0, 0x130, 0xc}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) 6.167824407s ago: executing program 7 (id=11166): r0 = syz_usb_connect$hid(0x3, 0x8, &(0x7f0000001100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x26, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x7f, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0xfd, 0x3, 0x0, 0x0, 0x3, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x6b5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000080), 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000ff7000/0x7000)=nil, &(0x7f00002a9000/0x3000)=nil, 0x3, &(0x7f0000000280)=[{0xe0, 0x8000000000000000, 0x7}, {0xf4f, 0x5, 0x3}, {0x2, 0xfffffffffffffffe, 0xe4}, {0x9000000000000, 0x3, 0x4}], 0x4, 0x2, 0x0, 0x8, 0x1, 0x4c}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 5.001296429s ago: executing program 6 (id=11169): sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) r2 = fsmount(r1, 0x0, 0x0) readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.674320299s ago: executing program 5 (id=11170): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001000000007e66d9"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.260042929s ago: executing program 3 (id=11171): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001000000007e66d9"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)="553fc6"}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.168811543s ago: executing program 6 (id=11172): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES64=r3, @ANYRES32=r1, @ANYRESHEX, @ANYRES32, @ANYBLOB="adc333b17b73c19c4eb1c76a45c17d9297c3952c1a28080296a5bad957ed84bab95c0e837f2882705a020edf05685fec63a063d41c39bc916c1eda6e9a37650fb6f3c313e85dbbb301145142d0d66ab0fc1a1d1dedd8990ee3a63c75e2fcce6aa4fc19530f6bdcb26b2e4738f3470508887d7bdb24a5", @ANYRES32], 0x1008, 0x800) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4) fsmount(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$kcm(0x10, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f0000000300)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe9974d18d01342da59da0f384b2bc4717956fa0e99edc500097c9ad63a9a6314c83f5414b2fcedc446ce4d8db6518a", 0x58}], 0x2}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000001340)=""/162, 0xa2}, {&(0x7f0000001400)=""/155, 0x9b}, {&(0x7f00000014c0)=""/75, 0x4b}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f0000001540)=""/116, 0x74}, {&(0x7f00000015c0)=""/170, 0xaa}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x8}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) 3.548462127s ago: executing program 8 (id=11173): r0 = socket(0x1000000000000010, 0x80802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004882, 0x0) io_setup(0x1, 0x0) socket$netlink(0x10, 0x3, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x5a00, 0xbc03, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r8, @ANYBLOB="ad1e"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) socket$kcm(0x10, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) 3.480040631s ago: executing program 6 (id=11174): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) (async) r2 = accept(r1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001080)=ANY=[], 0x1a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) (async) accept4(r2, &(0x7f0000001040)=@in6, 0x0, 0x80000) (async) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x89}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) r5 = getpid() (rerun: 64) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x40001e0, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) (async) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x47ffffa, 0x60500) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) (async) r8 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\v\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\xd5)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) (async) gettid() execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18da8fa913048fd42f4002997c3e30000001000000000800"/37], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) (async) dup3(r3, r0, 0x0) 3.0921651s ago: executing program 6 (id=11175): openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) gettid() sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsmount(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.09160644s ago: executing program 7 (id=11176): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.9765691s ago: executing program 7 (id=11177): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x2c, 0x3e, 0x100, 0xfffffffe, 0x4, {0x1, 0x7c}, [@nested={0x0, 0x123, 0x0, 0x1, [@nested={0x0, 0x11a, 0x0, 0x1, [@nested={0x0, 0xf}, @nested={0x0, 0xb4}, @typed={0x0, 0xf7, 0x0, 0x0, @ipv4=@empty}, @typed={0x0, 0x54, 0x0, 0x0, @binary="5ff2ac1c50966c3d0db23834c5b81c7a2144ec2bf0b455ef19824fb303c22d9e2dbd94cce9624f517428d4cea26b832cbcab339fe5b8156f93db9e4f2718102508d04980da9e128bbf72b0ac9f4f1f5e74983237ef7a"}, @nested={0x0, 0x5e}, @nested={0x0, 0xc3}]}, @typed={0x0, 0xcf, 0x0, 0x0, @fd=r0}, @typed={0x0, 0xa3, 0x0, 0x0, @u32=0xf2e}, @generic="aea0a05c3fdea972adcb1545ae6903905cbe9ef58d6b016fafc213eb13c533a12f40cd6e7a346655d3c597f703fbbe5b8c54c928171c6bf010005614885df2af91e2d67e7ccf15e50e9565eb77059e760e21f195d6e0aabd77465c1f3f6a3a3ad0a2ab6247bb447d"]}, @nested={0xc, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x0, 0x6}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="050000000c0500"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000400100"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) 2.29710631s ago: executing program 5 (id=11178): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='7', 0x1, 0x4}]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r2}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f0000000080)="5d34fdda80bdd78532a4c32b19a948dfa3a25babad73af6da0db529d94b7f87e61760e92d85ef0d031e3868202074b47bf16bef07ea385beaaf012079e26ffb3157c48402c0d701ddd7ec810aed05b0305066c2ebbacab56cff18aaabf89e9d7dfd9bdd9b99146f46d5f3c1b3a65b20ca365aa7a39a796", &(0x7f0000000240)=""/4096}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe91, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2.223342819s ago: executing program 8 (id=11179): r0 = io_uring_setup(0x5725, &(0x7f0000000000)={0x0, 0xba74, 0x800, 0x2, 0x396}) fcntl$getflags(r0, 0x1) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x90, 0x9, 0xfffffffc, 0x3b3, 0x9}) sendfile(r0, r1, &(0x7f0000000100)=0x5, 0x3) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000140)={{0x7fff, 0xe58}, 0x100, './file0\x00'}) readv(r0, &(0x7f0000000280), 0x0) r2 = io_uring_setup(0x1e86, &(0x7f00000002c0)={0x0, 0xda50, 0x2000, 0x0, 0x382, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000580)={0x1ff, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000400)=""/54, 0x36}, {&(0x7f0000000440)=""/192, 0xc0}], &(0x7f0000000540)=[0x3, 0x5], 0x3}, 0x20) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(r2, 0x1c, &(0x7f00000005c0), 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000600)={'veth0_to_batadv\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000640), 0xc02, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0x0, 0x1029}}, './file0\x00'}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000800)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)=@getpolicy={0x110, 0x15, 0x490, 0x70bd2a, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4e20, 0x9, 0x4e22, 0x2e07, 0xa, 0x80, 0x20, 0x5e, 0x0, r7}, 0x6e6bb1, 0x2}, [@algo_comp={0x87, 0x3, {{'lzs\x00'}, 0x1f8, "abfda404bcd499ea7540e487c7b94c44c1e22e6faab24cb6b4b987d320d3981d3011379a14da5c4a855b16d1eb2ab37d5b44326b7c2619fc1d22e3fa1aa1b3"}}, @lifetime_val={0x24, 0x9, {0x401, 0x4, 0xffff, 0x3ce}}, @srcaddr={0x14, 0xd, @in=@loopback}]}, 0x110}, 0x1, 0x0, 0x0, 0x4040}, 0x40040) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000a00)=""/86, &(0x7f0000000a80)=0x56) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c80)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000ac0)=@raw=[@exit, @generic={0x38, 0x9, 0x9, 0x6, 0x8}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}], &(0x7f0000000b00)='GPL\x00', 0x12, 0x1000, &(0x7f0000000b40)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f0000001b40)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x4, 0x0, 0x4, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001bc0)=[r5, r5, r5, r5, r5], &(0x7f0000001c00)=[{0x5, 0x1, 0x10, 0xb}, {0x2, 0x3, 0x4, 0x6}, {0x3, 0x4, 0x6, 0xa}, {0x1, 0x2, 0xd, 0xc}, {0x2, 0x3, 0x3, 0x8}, {0x0, 0x4, 0x0, 0x7}], 0x10, 0x3}, 0x94) r10 = socket$alg(0x26, 0x5, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000001d40)=[r6, r8, r2, r1, r2, r9, r10], 0x7) syz_clone3(&(0x7f0000001fc0)={0x10c1680, &(0x7f0000001d80), &(0x7f0000001dc0)=0x0, &(0x7f0000001e00), {0x28}, &(0x7f0000001e40)=""/252, 0xfc, &(0x7f0000001f40)=""/6, &(0x7f0000001f80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x6, {r5}}, 0x58) tkill(r11, 0x20) r12 = add_key$user(&(0x7f0000002040), &(0x7f0000002080)={'syz', 0x2}, &(0x7f00000020c0)="c88c8f13fa32b8c74acd8a56fa3c38eb240f927daac70eff52161f2d7b820620444f81230fff321ff2db4991a1bfb1a0e3b4e1d2684c03d03161c312d67bb9bc1334751e7c4c1da5ab13e58e4896a193a86ff22585e0fb5d36e68650413c687e943d37ed7fff5aad210e58bfa3252eeeaa5f92bb08de8f41ff4008438a6bb3972d78863006af310e71c0a94e6d4a59cb6e681c139de78c5f", 0x98, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000002180)={r12, 0x66, 0xed}, &(0x7f00000021c0)={'enc=', 'raw', ' hash=', {'sha3-384-generic\x00'}}, &(0x7f0000002240)="f2271f0cf612a604d0058715145b76c8abd7ef2191bd4df9f0edbf0d6170ba865414c3639a879413269cb9a8a800c171bf8cdf8fb62181237c64241140117d780d080c22c23b32d92db37f04f593be5402a083048f0126d211a4a3d64ef1b6495cafb88360cf", &(0x7f00000022c0)=""/237) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000002440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002400)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r13, &(0x7f0000002480)={0xa, 0x4, 0xfa00, {r14}}, 0xc) 2.217595465s ago: executing program 3 (id=11180): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000d00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '\xfc\xec\xd1\xcb\x9a\x964\xf4\xa2\x89v\x12\x11\fG\\x00#\x00f\xe1>8\x94\x02O\x9b\xfc\xe8\xffTioP6\xfa\x9b#\xc4H\xbf\'\x18\x89\xd1^a\xf6\xccrS\x1d\xd7\xc3\xcb9\x02\x00\x00\x00+\xb5\x81\xbe\xc4\v\xe2?\xa8\xc4\x9f\xd84\xdd\x84\xf7\xe4H\xeb1a=1\xf7\x99\x9a042\x15\xeb\xe1\xa7\x05\x8f\xc4\xc3\xd3da\xef>#\xb92\x82\x06\xbb\x19\xf6\x92\x83\\AU\x17\xbaf\xc7\xb7h\xf8\xd2\"\xce\xc8UB\xe5\xf3\xaa\x05Y\xc0\xe1\xe3\\\xc4K\xc2\x97\xb2\x10\x03\x14m=\xd8z,\x8dSo\x99H\x87Y|)\x82`R\xe1\xe5I\xbf}\x06\xb3\aD\xff\x10\x91\xc8\xc0^f\xc7\xb8jN\x9a8\xab\xc6\x86\xab\xdbWyNd,\x97\xea\xb4(\x97x\x98#\xca\xf0N%X\x01.\xc4M\x9ajWT\xf2\xf7\xbb8\xb2\xcc<]\x06\b\xc4\xd5\xde\xf4\xb5\xdd\x7f\xf2\xf8S}q\xe7\xcdZ\xee\xe5\x9f\x19\x11S\x9fVzv\xf7\x04\xe8\xeb\x10z\xd7qy\x17r\x1bV\xb1\xd8\xdb\x061h\xc6\xfb\x84\b\x1a\xd6\x10\xdd\x95$$\xa1\x91=\xa67\xb6\xd8\x12\x88c\xa1\xbe[\xe4\xe0\xc7G\xca\xe3U\xde\xa9\xafU\x15\x93\xed},\xcaE\xba;\xc7yk\xaf8\xa4*Je\x13J\x88\x8bR2\xc0LV\xc1P\\\xe3\xec\x954\x8e>\xa4\xd80\x97\x963f\xdd\x8e\xc5\xdf\x9a.F\x06\x82\xcfg\xe8\xb6V\x92\x944K9F#\xdc\xf4\"', 0x3a, './file0'}, 0x2b0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) write$ppp(r1, &(0x7f0000000080)="660fa5ea4f439d5530ef1465cd63f0039e26b73808c8ec77022336fcfb9d095c2b1374a5d7f7cbe868236091db9ccaa45567cf13b4cd76f41fb1556bab92365b0df914eed03d2c86051588fd4f38831f7bc1a5bbdf007dc886c448e5674f8703c7e8bb5e5b9e43fa6dc9b76ad1ec424ea77d918256a7ffa2cd775b724ae8778a46c6053812283ee4be67cf6651cfdc6c2f822b084f28aab8c0bcb485e43fffe2bc5f0fb5b20bc8ae76177ae4375ac22d14807617930bb7a7116fcbab7bf9c6d030ea424fcb091b12614cee56aa33f204", 0xd0) 1.911981467s ago: executing program 3 (id=11181): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x7c}}, 0x51) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa8000000060a0b040000000000000000020000007c000480780001800b00010074617267657400006800028050000300cd4b6abe4203f10e000000000000ff5fe87a9d3ac869f3a860917523679a5eb46131471826390d810593448ba1ecbf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e35370a0001004e464c4f4700000008000240000000000900010073797a30000000000900020073797a32"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x2, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x140040c4}, 0x40000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@hyper, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x1000, "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"}, &(0x7f0000000240)=0x1008) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @local, 0xf}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) dup(r0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) 1.857022034s ago: executing program 8 (id=11182): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000180)={0x7, 'rose0\x00', {0x4}, 0x10}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) ioctl$KDSIGACCEPT(r1, 0x80047456, 0x100000001ffffffd) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[], 0x2c}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 1.657262923s ago: executing program 7 (id=11183): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x2c0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x3000000, 0x0, 'vlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x73, 0x0, 0x48}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x60010000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@state={{0x28}, {0x5d0e4fb0}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x7f, 0xa, 0xe, 0xb, 0x153b, 0xd4, 0x2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 1.36269409s ago: executing program 8 (id=11184): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xcb}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x3) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x91}}], 0x400000000000172, 0x4001c00) 1.292711041s ago: executing program 7 (id=11185): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x83, 0x14, &(0x7f0000000040)="02", 0x1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000140)="0098bb3c76c3", 0x6, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') write$binfmt_script(r0, 0x0, 0xffffff74) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x0, 0x709, &(0x7f0000032ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000019580)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xf9, 0x50, 0x6d, 0x10, 0x7}, 0x8, &(0x7f0000032dc0)=ANY=[@ANYBLOB="00000010018a771b337dedb61a5a568b270104b6f3717ffffff929b2653f93571f9b1fc3754e1c61fa9e8ccc4ac4180298cb4ed8463aa20800d670389dfe2ec03fb1b10c7d10cbb17b5a891112d73210a657292230a0f32ee865d868e1eb415e7817c0acc47cccff7db8181c36cbf620bb95af280adbb43f8abef0d20179c99aa45eb8387d4c950613166ad8161c2a1f8837cb13dbdbc7f81c33cf1fefe88914f159f487c5fd9925dc60778b70f334ea83db26d25ac542a343c344443310daaea4187fc5aab7a2bf501128b25676c4089a3031"], 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000019300)=@lang_id={0x4, 0x3, 0x801}}, {0x9b, &(0x7f0000019380)=@string={0x9b, 0x3, "8b2d2945f5b7cc36acaf48d0d74f1295b5a7d24088c5ca1769c27a2ad1fba001032fb50febdf9a0428477bc79115b0e5041626b054e05f17bc663377d690cef532cf25796bcaee4796cbd0aa184644cf2841102fe68f10ce55a68b350ad9ddb494e37168e41a2539303c27b5bd8e71d40300a28061da121409135cf2db126bee70a88ad0618551bbf2ba2fd62ae4280f8785a87222096d1643"}}, {0x4, &(0x7f0000019440)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000019480)=@lang_id={0x4, 0x3, 0x820}}, {0xb5, &(0x7f00000194c0)=@string={0xb5, 0x3, "ab6ac78b3e073bc3472c0f435e84bc50dbde3d3c478799d788703b6504df0eac260f906b5130297a66986f6fe47131cf628fa663855c9a6e8789aebfe8dd6d8c426fc41522d28d70820d733b73844e7856e2adf22ff7067b550314d3ac91be160af00fb085cb916f8a89719a008ae22207706a43ffd6ac110a28ae68decb0beadc5bfc3d8969ff30e908180a9b171dfad74a84f8397ad326ab6a184cfc0ca7131cdbef37d25f74b4fee9137160d5e6690d2eaa"}}]}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r2, 0x0, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000019340)='net/snmp6\x00') pread64(r3, &(0x7f0000000300)=""/102383, 0x18fef, 0xffffffffe) 315.256474ms ago: executing program 8 (id=11186): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @local, 0xf}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, 0x0) dup(r1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) 230.262119ms ago: executing program 3 (id=11187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x4d, 0x2}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) 229.704594ms ago: executing program 5 (id=11188): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="6400000010000d042ab5", @ANYRES32=0x0], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) unshare(0x68040200) (async, rerun: 64) socket$kcm(0x2, 0x200000000000001, 0x0) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@delneigh={0x24, 0x1d, 0x300, 0x70bd2b, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0x2, 0x48, 0x7}, [@NDA_VNI={0x8, 0x7, 0x401}]}, 0x24}}, 0x44044) 118.908932ms ago: executing program 6 (id=11189): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'netpci0\x00', 0x1000}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket(0x18, 0x0, 0x1) getsockopt$nfc_llcp(r6, 0x111, 0x0, 0x0, 0x90aa62107f0000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x8f13, 0x0) io_setup(0x987, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xffff) 87.814197ms ago: executing program 8 (id=11190): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1d48f913f8b22a30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec9dd375031ba5ae65e31f00e641832d29ed658b91f349b801b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126fceb6cca68972ac02bc7d3cbca85e30a02db8f48b9eb10526d0c7ade3391d6c844fb8b2fb70ec826465726fb78cc47db9636d337038f016d27c2eb3fa0da403214d11f3b3ea42b8b183e9226665de1fa1c808ad8ea5bf3080b0ad7d12050000001c1428f0e17612738a97fdc8ddffb031b71347213264d4f6972a888ba9fa77efed", 0x1ba, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000200)={@multicast2, @multicast2, 0x29, "381b49769369c094fe9f4a8dc5b14e77d75c9be45687b82157f400a4d67f35c4", 0x3, 0xc, 0xec, 0x5}, 0x3c) set_mempolicy(0x4000, &(0x7f0000000000)=0xfffffffffffff4d4, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303d20422c02124070e702030109022400010000100009040c0202c17f0c0009050202000202000009058202"], 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0b06c9000c0010"], 0xe) 0s ago: executing program 3 (id=11191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x1000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r7, 0x0) kernel console output (not intermixed with test programs): r 0xf97cff8c [ 3006.006485][T23269] SELinux: failed to load policy [ 3006.011479][T10149] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3006.013321][ T30] audit: type=1400 audit(3005.472:3343): avc: denied { mounton } for pid=22650 comm="syz-executor" path="/root/syzkaller.bsYJre/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 3006.048442][ T30] audit: type=1400 audit(3005.472:3344): avc: denied { mounton } for pid=22650 comm="syz-executor" path="/root/syzkaller.bsYJre/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=210284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 3006.077162][T10149] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3006.085678][ T30] audit: type=1400 audit(3005.472:3345): avc: denied { unmount } for pid=22650 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3006.105581][ T30] audit: type=1400 audit(3005.492:3346): avc: denied { mounton } for pid=22650 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 3006.462277][T27648] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 3006.638460][T27648] usb 6-1: device descriptor read/64, error -71 [ 3007.062562][T27648] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 3007.647710][T27648] usb 6-1: device descriptor read/64, error -71 [ 3008.118319][T27648] usb usb6-port1: attempt power cycle [ 3009.172119][T23307] Process accounting resumed [ 3009.275026][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 3009.275040][ T30] audit: type=1400 audit(3009.282:3365): avc: denied { unmount } for pid=7413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 3009.300471][ C0] vkms_vblank_simulate: vblank timer overrun [ 3009.391398][T27648] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 3009.538862][T23334] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3009.736201][T27648] usb 6-1: device not accepting address 9, error -71 [ 3009.742758][T23334] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3010.378926][T23334] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3010.414520][T23331] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3010.448679][ T30] audit: type=1400 audit(3010.452:3366): avc: denied { create } for pid=23349 comm="syz.8.10729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 3010.470676][T23360] netlink: 11348 bytes leftover after parsing attributes in process `syz.8.10729'. [ 3010.480639][T23360] netlink: 2024 bytes leftover after parsing attributes in process `syz.8.10729'. [ 3010.498704][T23331] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3010.555063][T23331] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3010.574975][T23334] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3010.615154][T23331] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3010.662750][ T9324] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 3010.708080][ T4539] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3010.725286][ T4539] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3010.734332][ T4539] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3010.743073][ T4539] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3010.853678][ T4539] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3010.864209][ T9324] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 3010.875674][ T9324] usb 4-1: config 0 has too many interfaces: 89, using maximum allowed: 32 [ 3010.884934][ T9324] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 89 [ 3010.896455][ T4531] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3010.975129][T23388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10731'. [ 3011.368820][ T9324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3011.368933][T23389] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10731'. [ 3011.383857][ T4531] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3011.396890][ T9324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 3011.408912][ T9324] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 3011.447163][T19679] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3011.459964][ T9324] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 3011.468356][T23388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10731'. [ 3011.500049][T23389] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10731'. [ 3011.511068][ T9324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3011.526418][ T9324] usb 4-1: config 0 descriptor?? [ 3011.555563][T23356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3011.692299][ T30] audit: type=1400 audit(3011.682:3367): avc: denied { write } for pid=23398 comm="syz.5.10732" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 3011.933046][ T9324] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 3012.222285][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10734'. [ 3012.569773][ T30] audit: type=1400 audit(3011.922:3368): avc: denied { remove_name } for pid=23351 comm="syz.3.10730" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 3012.593243][T23415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3012.640875][ T9324] usb 4-1: USB disconnect, device number 33 [ 3012.957260][ T30] audit: type=1400 audit(3011.922:3369): avc: denied { unlink } for pid=23351 comm="syz.3.10730" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 3012.958441][ T9324] usblp0: removed [ 3013.074082][ T30] audit: type=1400 audit(3011.932:3370): avc: denied { write } for pid=23407 comm="syz.6.10733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3013.101618][ T30] audit: type=1400 audit(3012.732:3371): avc: denied { create } for pid=23407 comm="syz.6.10733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 3013.123015][ T30] audit: type=1400 audit(3013.102:3372): avc: denied { create } for pid=23428 comm="syz.7.10735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3013.143514][ T30] audit: type=1400 audit(3013.102:3373): avc: denied { ioctl } for pid=23428 comm="syz.7.10735" path="socket:[210518]" dev="sockfs" ino=210518 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3013.252051][ T30] audit: type=1400 audit(3013.242:3374): avc: denied { ioctl } for pid=23433 comm="syz.8.10736" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=209765 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3014.606491][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 3014.606507][ T30] audit: type=1400 audit(3014.602:3376): avc: denied { write } for pid=23446 comm="syz.5.10739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3015.417728][ T30] audit: type=1400 audit(3015.422:3377): avc: denied { block_suspend } for pid=23477 comm="syz.8.10741" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3015.445732][ T30] audit: type=1400 audit(3015.422:3378): avc: denied { module_load } for pid=23477 comm="syz.8.10741" path="/sys/power/wakeup_count" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 3015.529024][ T30] audit: type=1400 audit(3015.532:3379): avc: denied { sqpoll } for pid=23483 comm="syz.3.10742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 3015.647041][T23489] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 3015.808839][ T30] audit: type=1400 audit(3015.812:3380): avc: denied { create } for pid=23488 comm="syz.5.10743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 3015.830209][ T30] audit: type=1400 audit(3015.832:3381): avc: denied { ioctl } for pid=23488 comm="syz.5.10743" path="socket:[210611]" dev="sockfs" ino=210611 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 3016.603445][T23497] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3016.655565][T23497] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3016.805835][T23497] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3017.312747][T23514] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10746'. [ 3017.355178][T23497] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3017.646750][T10149] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3017.774866][T10149] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3017.806095][T10149] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3018.925658][T19678] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3018.942654][ T30] audit: type=1400 audit(3018.402:3382): avc: denied { name_bind } for pid=23539 comm="syz.7.10750" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 3019.721258][ T30] audit: type=1400 audit(3019.312:3383): avc: denied { read } for pid=23544 comm="syz.5.10751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3019.936796][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.276626][T23563] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 3020.525165][ T30] audit: type=1400 audit(3020.532:3384): avc: denied { create } for pid=23565 comm="syz.3.10755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 3021.021182][ T30] audit: type=1400 audit(3021.022:3385): avc: denied { create } for pid=23570 comm="syz.5.10756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 3021.138948][T23569] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.162938][ T30] audit: type=1400 audit(3021.142:3386): avc: denied { write } for pid=23565 comm="syz.3.10755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 3021.717887][ T30] audit: type=1400 audit(3021.352:3387): avc: denied { read write } for pid=23570 comm="syz.5.10756" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 3021.747216][ T30] audit: type=1400 audit(3021.352:3388): avc: denied { open } for pid=23570 comm="syz.5.10756" path="/226/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 3022.012597][ T30] audit: type=1400 audit(3022.012:3389): avc: denied { watch } for pid=23578 comm="syz.7.10757" path="/451/control" dev="tmpfs" ino=2403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3022.176198][ T30] audit: type=1400 audit(3022.182:3390): avc: denied { read } for pid=23591 comm="syz.5.10759" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:lastlog_t:s0" [ 3022.245922][ T30] audit: type=1400 audit(3022.182:3391): avc: denied { open } for pid=23591 comm="syz.5.10759" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:lastlog_t:s0" [ 3022.279108][ T30] audit: type=1400 audit(3022.212:3392): avc: denied { ioctl } for pid=23591 comm="syz.5.10759" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:lastlog_t:s0" [ 3023.545862][T23600] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3023.595417][T23600] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3023.667446][T23600] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3023.758206][T23600] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3024.753889][ T9324] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 3025.004021][ T9324] usb 4-1: Using ep0 maxpacket: 16 [ 3025.320643][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 3025.320659][ T30] audit: type=1400 audit(3025.312:3396): avc: denied { create } for pid=23634 comm="syz.8.10767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 3025.356120][ T30] audit: type=1400 audit(3025.312:3397): avc: denied { listen } for pid=23634 comm="syz.8.10767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 3025.375740][ T30] audit: type=1400 audit(3025.312:3398): avc: denied { ioctl } for pid=23634 comm="syz.8.10767" path="socket:[210797]" dev="sockfs" ino=210797 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 3025.404337][T23639] wg1: left promiscuous mode [ 3025.408930][T23639] wg1: left allmulticast mode [ 3025.431463][T23639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3025.444530][T23639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3025.480426][ T9324] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 3025.490349][ T9324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3025.499513][ T9324] usb 4-1: Product: syz [ 3025.504715][ T9324] usb 4-1: Manufacturer: syz [ 3025.509358][ T9324] usb 4-1: SerialNumber: syz [ 3025.516637][ T9324] usb 4-1: config 0 descriptor?? [ 3025.551005][ T4539] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3025.622855][ T4539] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3025.738520][ T4531] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3025.765214][ T4531] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3025.777236][ T4531] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3025.798900][ T4531] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3025.818783][ T4531] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3025.829158][ T4531] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3025.838232][T23653] lo speed is unknown, defaulting to 1000 [ 3025.844982][ T4531] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3025.856838][ T4531] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3025.870881][T23653] vxcan1 speed is unknown, defaulting to 1000 [ 3025.878520][ T4539] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3025.893743][ T4539] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3026.047006][ T9324] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 3026.057688][ T9324] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3026.090009][ T9324] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 3026.100961][ T9324] usb 4-1: media controller created [ 3026.177048][T23673] sctp: [Deprecated]: syz.5.10770 (pid 23673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3026.177048][T23673] Use struct sctp_sack_info instead [ 3027.296875][ T9324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3027.652965][T23681] overlayfs: missing 'lowerdir' [ 3027.724378][ T9324] zl10353_read_register: readreg error (reg=127, ret==0) [ 3027.735921][ T9324] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 3027.805211][ T9324] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 3027.835702][T23716] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10772'. [ 3027.858257][ T9324] usb 4-1: USB disconnect, device number 34 [ 3027.872780][ T30] audit: type=1400 audit(3027.862:3399): avc: denied { create } for pid=23710 comm="syz.6.10773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 3027.903287][ T9324] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 3027.916865][ T30] audit: type=1326 audit(3027.922:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23710 comm="syz.6.10773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444ad8eec9 code=0x7ffc0000 [ 3027.969831][ T30] audit: type=1326 audit(3027.952:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23710 comm="syz.6.10773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444ad8eec9 code=0x7ffc0000 [ 3028.002712][T23724] ieee802154 phy1 wpan1: encryption failed: -22 [ 3028.041660][ T30] audit: type=1326 audit(3027.952:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23710 comm="syz.6.10773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f444ad8eec9 code=0x7ffc0000 [ 3028.102297][ T30] audit: type=1326 audit(3027.952:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23710 comm="syz.6.10773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444ad8eec9 code=0x7ffc0000 [ 3028.141141][ T30] audit: type=1326 audit(3027.952:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23710 comm="syz.6.10773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444ad8eec9 code=0x7ffc0000 [ 3028.166725][ T30] audit: type=1326 audit(3027.952:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23710 comm="syz.6.10773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444ad8eec9 code=0x7ffc0000 [ 3028.658073][T23753] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 3029.014872][T23762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10778'. [ 3029.024086][T23762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10778'. [ 3029.043536][T23762] ubi31: attaching mtd0 [ 3029.052392][T23762] ubi31: scanning is finished [ 3030.364310][T23763] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3030.506172][T23774] input: syz0 as /devices/virtual/input/input250 [ 3030.515225][T23762] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 3030.523089][T23762] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 3030.530391][T23762] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 3030.534785][ T30] kauditd_printk_skb: 168 callbacks suppressed [ 3030.534812][ T30] audit: type=1400 audit(3030.532:3574): avc: denied { map } for pid=23767 comm="syz.6.10781" path="socket:[210913]" dev="sockfs" ino=210913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 3030.537462][T23762] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 3030.544210][ T30] audit: type=1400 audit(3030.532:3575): avc: denied { ioctl } for pid=23767 comm="syz.6.10781" path="socket:[210925]" dev="sockfs" ino=210925 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 3030.566460][T23762] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 3030.566478][T23762] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 3030.566492][T23762] ubi31: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3277486580 [ 3030.566509][T23762] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 3030.567114][T23777] ubi31: background thread "ubi_bgt31d" started, PID 23777 [ 3030.579272][ T30] audit: type=1400 audit(3030.532:3576): avc: denied { mount } for pid=23767 comm="syz.6.10781" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 3030.654494][T23781] sctp: [Deprecated]: syz.7.10782 (pid 23781) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3030.654494][T23781] Use struct sctp_sack_info instead [ 3032.097825][ T30] audit: type=1400 audit(3032.092:3577): avc: denied { unmount } for pid=22650 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 3032.148094][T23763] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3032.288302][T23794] overlayfs: missing 'lowerdir' [ 3033.376129][ T30] audit: type=1400 audit(3033.382:3578): avc: denied { create } for pid=23799 comm="syz.7.10787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 3033.533894][T23763] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3033.602858][ T30] audit: type=1400 audit(3033.432:3579): avc: denied { write } for pid=23799 comm="syz.7.10787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 3033.742252][T23815] ieee802154 phy1 wpan1: encryption failed: -22 [ 3033.859120][T23818] input: syz1 as /devices/virtual/input/input252 [ 3034.249641][T23763] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3034.319046][ T4526] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3034.362859][T10264] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3034.387550][ T4526] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3034.403991][ T4519] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3034.551237][ T30] audit: type=1400 audit(3034.552:3580): avc: denied { create } for pid=23849 comm="syz.6.10794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3034.722267][T27648] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 3034.793970][T23852] syz_tun: entered promiscuous mode [ 3034.802644][T23852] macsec1: entered allmulticast mode [ 3034.808042][T23852] syz_tun: entered allmulticast mode [ 3034.818142][T23852] syz_tun: left allmulticast mode [ 3034.824589][T23852] syz_tun: left promiscuous mode [ 3034.874378][T27648] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3034.886108][T27648] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 3034.897174][T27648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3034.927786][T27648] usb 4-1: config 0 descriptor?? [ 3035.144312][T23860] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10793'. [ 3035.464490][T27648] smartjoyplus 0003:0925:8866.0074: item fetching failed at offset 5/7 [ 3035.474537][T27648] smartjoyplus 0003:0925:8866.0074: parse failed [ 3035.480905][T27648] smartjoyplus 0003:0925:8866.0074: probe with driver smartjoyplus failed with error -22 [ 3035.605714][T23867] sctp: [Deprecated]: syz.7.10795 (pid 23867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3035.605714][T23867] Use struct sctp_sack_info instead [ 3036.583841][ T977] usb 4-1: USB disconnect, device number 35 [ 3036.772899][T23877] fuse: Unknown parameter 'ÿá' [ 3036.785389][ T30] audit: type=1400 audit(3036.792:3581): avc: denied { write } for pid=23876 comm="syz.5.10796" path="socket:[212146]" dev="sockfs" ino=212146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 3036.958389][ T30] audit: type=1400 audit(3036.962:3582): avc: denied { bind } for pid=23881 comm="syz.5.10799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3037.143364][T23895] overlayfs: missing 'lowerdir' [ 3037.331035][ T30] audit: type=1400 audit(3037.332:3583): avc: denied { ioctl } for pid=23882 comm="syz.6.10797" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 3037.608055][T23908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10801'. [ 3037.687123][T23908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10801'. [ 3037.696874][T23908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10801'. [ 3037.706693][T23908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10801'. [ 3037.762600][ T30] audit: type=1400 audit(3037.772:3584): avc: denied { unmount } for pid=8846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 3038.059964][T23910] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3038.125917][T23910] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3038.437145][T23910] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3038.509909][T23910] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3038.619723][T10149] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3038.628556][T10149] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3038.671014][T10149] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3038.714955][T10149] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3038.766912][ T30] audit: type=1400 audit(3038.772:3585): avc: denied { execute } for pid=23935 comm="syz.7.10806" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 3038.880948][T23940] x_tables: ip_tables: osf match: only valid for protocol 6 [ 3039.170514][T23947] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10809'. [ 3039.852311][ T30] audit: type=1400 audit(3039.852:3586): avc: denied { bind } for pid=23959 comm="syz.7.10813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 3039.872927][ T1205] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 3039.909383][ T30] audit: type=1400 audit(3039.912:3587): avc: denied { write } for pid=23956 comm="syz.8.10811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3040.002469][ T30] audit: type=1400 audit(3039.912:3588): avc: denied { nlmsg_write } for pid=23956 comm="syz.8.10811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3040.091906][ T1205] usb 7-1: Using ep0 maxpacket: 8 [ 3040.100878][ T1205] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 3040.109444][ T1205] usb 7-1: config 179 has no interface number 0 [ 3040.119303][ T1205] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3040.197434][T15827] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 3040.208886][ T1205] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3040.220772][ T1205] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 3040.476658][ T1205] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 3040.489200][ T1205] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3040.505727][ T1205] usb 7-1: config 179 interface 65 has no altsetting 0 [ 3040.514780][ T1205] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3040.524868][ T1205] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3040.543216][ T1205] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input253 [ 3040.558011][T15827] usb 4-1: config index 0 descriptor too short (expected 45, got 27) [ 3040.568278][T15827] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3040.586210][ T30] audit: type=1400 audit(3040.592:3589): avc: denied { read } for pid=5170 comm="acpid" name="js0" dev="devtmpfs" ino=4587 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3040.587333][T15827] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 3040.607908][ C0] vkms_vblank_simulate: vblank timer overrun [ 3040.623222][ T5170] input input253: unable to receive magic message: -110 [ 3040.624417][T15827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3040.639978][T15827] usb 4-1: Product: syz [ 3040.648393][T15827] usb 4-1: Manufacturer: syz [ 3040.653817][T15827] usb 4-1: SerialNumber: syz [ 3040.659556][ T5170] input input253: unable to receive magic message: -32 [ 3040.660739][ T30] audit: type=1400 audit(3040.592:3590): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=4587 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3040.693569][T15827] rtl8150 4-1:1.0: couldn't find required endpoints [ 3040.700337][T15827] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 3040.951460][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3040.960218][T15827] usb 7-1: USB disconnect, device number 73 [ 3041.058859][T23992] fuse: Unknown parameter '0xffffffffffffffff' [ 3041.245976][ T977] usb 4-1: USB disconnect, device number 36 [ 3041.607521][T24014] efs: cannot read volume header [ 3042.327306][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 3042.327324][ T30] audit: type=1400 audit(3042.332:3596): avc: denied { create } for pid=24021 comm="syz.3.10820" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3042.372018][ T30] audit: type=1400 audit(3042.362:3597): avc: denied { read append } for pid=24021 comm="syz.3.10820" name="file0" dev="tmpfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3042.395287][ T30] audit: type=1400 audit(3042.362:3598): avc: denied { open } for pid=24021 comm="syz.3.10820" path="/389/file0" dev="tmpfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3042.418009][ T30] audit: type=1400 audit(3042.362:3599): avc: denied { mounton } for pid=24021 comm="syz.3.10820" path="/389/file0" dev="tmpfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3042.605436][ T5883] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 3042.772397][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 3042.779429][ T5883] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3042.789201][ T5883] usb 4-1: config 7 has an invalid interface number: 67 but max is 0 [ 3042.877675][ T5883] usb 4-1: config 7 has no interface number 0 [ 3042.907155][ T5883] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 3042.921117][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3042.947589][ T5883] usb 4-1: Product: syz [ 3042.958483][ T5883] usb 4-1: Manufacturer: syz [ 3042.968337][ T5883] usb 4-1: SerialNumber: syz [ 3043.330652][ T30] audit: type=1400 audit(3042.992:3600): avc: denied { connect } for pid=24038 comm="syz.8.10823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3043.358699][ T30] audit: type=1400 audit(3043.362:3601): avc: denied { append } for pid=24044 comm="syz.7.10824" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3043.360399][T24046] loop6: detected capacity change from 0 to 524287999 [ 3043.686125][ T30] audit: type=1400 audit(3043.412:3602): avc: denied { append } for pid=24044 comm="syz.7.10824" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 3043.844851][ T30] audit: type=1400 audit(3043.852:3603): avc: denied { setopt } for pid=24059 comm="syz.8.10826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3043.889191][T24079] netlink: 1120 bytes leftover after parsing attributes in process `syz.6.10827'. [ 3043.899571][T24079] netlink: 1120 bytes leftover after parsing attributes in process `syz.6.10827'. [ 3043.911529][ T30] audit: type=1400 audit(3043.852:3604): avc: denied { read } for pid=24059 comm="syz.8.10826" path="socket:[212335]" dev="sockfs" ino=212335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 3044.057945][T24095] netlink: 4260 bytes leftover after parsing attributes in process `syz.5.10828'. [ 3044.093945][T24095] openvswitch: netlink: Message has 7 unknown bytes. [ 3044.114327][T24096] fuse: blksize only supported for fuseblk [ 3044.120256][ T30] audit: type=1400 audit(3044.122:3605): avc: denied { mounton } for pid=24055 comm="syz.7.10825" path="/468/file0" dev="tmpfs" ino=2494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 3044.163040][ T977] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 3044.241228][T24102] lo speed is unknown, defaulting to 1000 [ 3044.257592][T24102] vxcan1 speed is unknown, defaulting to 1000 [ 3044.342361][ T977] usb 7-1: Using ep0 maxpacket: 32 [ 3044.348490][ T977] usb 7-1: no configurations [ 3044.354228][ T977] usb 7-1: can't read configurations, error -22 [ 3044.492613][ T977] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 3044.645596][ T977] usb 7-1: Using ep0 maxpacket: 32 [ 3044.654021][ T977] usb 7-1: no configurations [ 3044.668672][ T977] usb 7-1: can't read configurations, error -22 [ 3044.686577][T24135] FAULT_INJECTION: forcing a failure. [ 3044.686577][T24135] name failslab, interval 1, probability 0, space 0, times 0 [ 3044.699999][T24135] CPU: 0 UID: 0 PID: 24135 Comm: syz.5.10831 Not tainted syzkaller #0 PREEMPT(full) [ 3044.700021][T24135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3044.700031][T24135] Call Trace: [ 3044.700036][T24135] [ 3044.700041][T24135] dump_stack_lvl+0x16c/0x1f0 [ 3044.700061][T24135] should_fail_ex+0x512/0x640 [ 3044.700077][T24135] ? fs_reclaim_acquire+0xae/0x150 [ 3044.700093][T24135] should_failslab+0xc2/0x120 [ 3044.700105][T24135] kmem_cache_alloc_noprof+0x75/0x6e0 [ 3044.700120][T24135] ? __pfx_map_id_range_down+0x10/0x10 [ 3044.700133][T24135] ? security_inode_alloc+0x3b/0x2b0 [ 3044.700152][T24135] ? security_inode_alloc+0x3b/0x2b0 [ 3044.700167][T24135] security_inode_alloc+0x3b/0x2b0 [ 3044.700183][T24135] inode_init_always_gfp+0xce4/0x1030 [ 3044.700197][T24135] alloc_inode+0x86/0x240 [ 3044.700211][T24135] new_inode+0x22/0x1c0 [ 3044.700225][T24135] __debugfs_create_file+0x11c/0x6b0 [ 3044.700238][T24135] debugfs_create_file_full+0x41/0x60 [ 3044.700250][T24135] ? __pfx_ip6gre_tap_setup+0x10/0x10 [ 3044.700261][T24135] ref_tracker_dir_debugfs+0x19d/0x290 [ 3044.700271][T24135] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 3044.700298][T24135] ? alloc_netdev_mqs+0xd7/0x1550 [ 3044.700314][T24135] ? lockdep_init_map_type+0x5c/0x280 [ 3044.700327][T24135] alloc_netdev_mqs+0x314/0x1550 [ 3044.700346][T24135] rtnl_create_link+0xc08/0xf90 [ 3044.700364][T24135] rtnl_newlink+0xb69/0x2000 [ 3044.700384][T24135] ? __pfx_rtnl_newlink+0x10/0x10 [ 3044.700399][T24135] ? find_held_lock+0x2b/0x80 [ 3044.700412][T24135] ? avc_has_perm_noaudit+0x117/0x3b0 [ 3044.700428][T24135] ? avc_has_perm_noaudit+0x149/0x3b0 [ 3044.700448][T24135] ? irqentry_exit+0x3b/0x90 [ 3044.700463][T24135] ? lockdep_hardirqs_on+0x7c/0x110 [ 3044.700482][T24135] ? find_held_lock+0x2b/0x80 [ 3044.700494][T24135] ? __pfx_rtnl_newlink+0x10/0x10 [ 3044.700509][T24135] ? __pfx_rtnl_newlink+0x10/0x10 [ 3044.700523][T24135] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 3044.700539][T24135] ? __pfx_rtnl_newlink+0x10/0x10 [ 3044.700555][T24135] rtnetlink_rcv_msg+0x95e/0xe90 [ 3044.700572][T24135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3044.700591][T24135] ? __lock_acquire+0x62e/0x1ce0 [ 3044.700611][T24135] netlink_rcv_skb+0x158/0x420 [ 3044.700621][T24135] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3044.700638][T24135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3044.700653][T24135] ? netlink_deliver_tap+0x1ae/0xd30 [ 3044.700672][T24135] netlink_unicast+0x5a7/0x870 [ 3044.700684][T24135] ? __pfx_netlink_unicast+0x10/0x10 [ 3044.700699][T24135] netlink_sendmsg+0x8c8/0xdd0 [ 3044.700711][T24135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3044.700726][T24135] ____sys_sendmsg+0xa98/0xc70 [ 3044.700739][T24135] ? copy_msghdr_from_user+0x10a/0x160 [ 3044.700754][T24135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3044.700772][T24135] ___sys_sendmsg+0x134/0x1d0 [ 3044.700788][T24135] ? __pfx____sys_sendmsg+0x10/0x10 [ 3044.700821][T24135] __sys_sendmsg+0x16d/0x220 [ 3044.700837][T24135] ? __pfx___sys_sendmsg+0x10/0x10 [ 3044.700861][T24135] do_syscall_64+0xcd/0xfa0 [ 3044.700877][T24135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3044.700888][T24135] RIP: 0033:0x7fc7d018eec9 [ 3044.700897][T24135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3044.700907][T24135] RSP: 002b:00007fc7d0ff2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3044.700917][T24135] RAX: ffffffffffffffda RBX: 00007fc7d03e6090 RCX: 00007fc7d018eec9 [ 3044.700923][T24135] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000b [ 3044.700930][T24135] RBP: 00007fc7d0ff2090 R08: 0000000000000000 R09: 0000000000000000 [ 3044.700936][T24135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3044.700942][T24135] R13: 00007fc7d03e6128 R14: 00007fc7d03e6090 R15: 00007ffcf8fcd2d8 [ 3044.700956][T24135] [ 3045.071604][T24135] debugfs: out of free dentries, can not create file 'netdev@ffff8880334e0610' [ 3045.342730][ T977] usb usb7-port1: attempt power cycle [ 3045.502385][ T5883] usb 4-1: USB disconnect, device number 37 [ 3045.789757][ T977] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 3045.812787][ T977] usb 7-1: Using ep0 maxpacket: 32 [ 3045.818465][ T977] usb 7-1: no configurations [ 3045.823704][ T977] usb 7-1: can't read configurations, error -22 [ 3045.955074][ T977] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 3045.983714][ T977] usb 7-1: Using ep0 maxpacket: 32 [ 3046.027022][ T977] usb 7-1: no configurations [ 3046.033238][ T977] usb 7-1: can't read configurations, error -22 [ 3046.041362][ T977] usb usb7-port1: unable to enumerate USB device [ 3047.504480][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 3047.504519][ T30] audit: type=1400 audit(3047.512:3608): avc: denied { setattr } for pid=24172 comm="syz.3.10836" name="secretmem" dev="secretmem" ino=213002 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 3048.204500][ T977] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 3048.213098][ T30] audit: type=1400 audit(3048.162:3609): avc: denied { write } for pid=24201 comm="syz.6.10840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 3048.590725][ T30] audit: type=1400 audit(3048.592:3610): avc: denied { create } for pid=24213 comm="syz.8.10843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3048.654525][ T977] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 3048.663018][ T977] usb 6-1: config 1 has no interface number 0 [ 3048.669100][ T977] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 3048.682290][ T977] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 3048.693914][ T977] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 3048.704382][ T977] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3048.715898][ T9324] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 3048.727085][ T977] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 3048.738698][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3048.747173][ T977] usb 6-1: Product: syz [ 3048.751400][ T977] usb 6-1: Manufacturer: syz [ 3048.989551][ T977] usb 6-1: SerialNumber: syz [ 3048.997534][T24197] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3049.005161][T24197] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3049.239958][T24197] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3049.380057][T24197] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3049.890438][T24234] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10839'. [ 3050.023100][ T30] audit: type=1400 audit(3049.892:3611): avc: denied { create } for pid=24196 comm="syz.5.10839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3050.390968][ T30] audit: type=1400 audit(3049.892:3612): avc: denied { write } for pid=24196 comm="syz.5.10839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 3050.494946][ T977] sierra_net 6-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:07:07 [ 3050.509757][ C0] sierra_net 6-1:1.7 wwan0: : unexpected notification 42! [ 3050.633014][ T9324] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3050.663387][ T9324] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 3050.684846][ T9324] usb 4-1: can't read configurations, error -71 [ 3050.715586][T24242] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3050.751892][ T30] audit: type=1400 audit(3050.752:3613): avc: denied { read write } for pid=24218 comm="syz.8.10844" name="mouse0" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 3050.846918][ T30] audit: type=1400 audit(3050.752:3614): avc: denied { open } for pid=24218 comm="syz.8.10844" path="/dev/input/mouse0" dev="devtmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 3050.893270][ T30] audit: type=1400 audit(3050.902:3615): avc: denied { read } for pid=24218 comm="syz.8.10844" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 3050.895900][T24242] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3050.915954][ C0] vkms_vblank_simulate: vblank timer overrun [ 3050.975623][ T30] audit: type=1400 audit(3050.902:3616): avc: denied { open } for pid=24218 comm="syz.8.10844" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 3050.998766][ C0] vkms_vblank_simulate: vblank timer overrun [ 3051.026286][ T30] audit: type=1400 audit(3050.942:3617): avc: denied { ioctl } for pid=24218 comm="syz.8.10844" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 3051.050853][ C0] vkms_vblank_simulate: vblank timer overrun [ 3051.067372][T24242] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3051.112461][ T9324] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 3051.145478][T24242] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3051.266705][ T9324] usb 4-1: Using ep0 maxpacket: 8 [ 3051.308454][ T9324] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 3051.326021][ T9324] usb 4-1: config 179 has no interface number 0 [ 3051.358024][ T9324] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3051.414859][T19679] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3051.420960][T24264] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10849'. [ 3051.442477][ T9324] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3051.457246][ T9324] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 3051.476774][ T9324] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 3051.521648][ T9324] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3051.575527][ T9324] usb 4-1: config 179 interface 65 has no altsetting 0 [ 3051.596606][ T9324] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3051.623267][ T4526] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3051.631475][ T4526] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3051.641599][ T9324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3051.656729][ T4526] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3051.688196][ T9324] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input254 [ 3051.752662][ T5170] input input254: unable to receive magic message: -110 [ 3051.773848][ T977] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 3051.780458][ T977] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 3051.850289][ T5170] input input254: unable to receive magic message: -32 [ 3051.865404][ T977] sierra_net 6-1:1.7 wwan0: Submit SYNC failed -71 [ 3051.873053][ T977] sierra_net 6-1:1.7 wwan0: Send SYNC failed, status -71 [ 3051.885070][ T977] usb 6-1: USB disconnect, device number 11 [ 3051.892974][ T977] sierra_net 6-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.5-1, Sierra Wireless USB-to-WWAN Modem [ 3051.958449][T24289] efs: cannot read volume header [ 3052.187501][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3052.187505][T29089] usb 4-1: USB disconnect, device number 39 [ 3052.288350][T24264] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3052.463915][T24294] mac80211_hwsim hwsim59 syzkaller0: entered promiscuous mode [ 3052.471603][T24294] mac80211_hwsim hwsim59 syzkaller0: entered allmulticast mode [ 3052.536764][ T977] sierra_net 6-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 3052.554818][T24264] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3052.625393][T24264] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3052.693494][T24264] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3052.827556][T24329] tipc: Cannot configure node identity twice [ 3052.847078][T10384] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3052.863908][T10384] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3052.877913][T10384] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3052.910691][T19679] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3053.550193][T24350] FAULT_INJECTION: forcing a failure. [ 3053.550193][T24350] name failslab, interval 1, probability 0, space 0, times 0 [ 3053.563278][T24350] CPU: 0 UID: 0 PID: 24350 Comm: syz.7.10857 Not tainted syzkaller #0 PREEMPT(full) [ 3053.563300][T24350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3053.563309][T24350] Call Trace: [ 3053.563315][T24350] [ 3053.563322][T24350] dump_stack_lvl+0x16c/0x1f0 [ 3053.563351][T24350] should_fail_ex+0x512/0x640 [ 3053.563376][T24350] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 3053.563403][T24350] should_failslab+0xc2/0x120 [ 3053.563422][T24350] kmem_cache_alloc_node_noprof+0x78/0x770 [ 3053.563445][T24350] ? __alloc_skb+0x2b2/0x380 [ 3053.563474][T24350] ? __alloc_skb+0x2b2/0x380 [ 3053.563494][T24350] ? __pfx_netlink_insert+0x10/0x10 [ 3053.563518][T24350] __alloc_skb+0x2b2/0x380 [ 3053.563540][T24350] ? __pfx___alloc_skb+0x10/0x10 [ 3053.563564][T24350] ? netlink_autobind.isra.0+0x158/0x370 [ 3053.563597][T24350] netlink_alloc_large_skb+0x69/0x140 [ 3053.563625][T24350] netlink_sendmsg+0x698/0xdd0 [ 3053.563645][T24350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3053.563671][T24350] ____sys_sendmsg+0xa98/0xc70 [ 3053.563691][T24350] ? copy_msghdr_from_user+0x10a/0x160 [ 3053.563715][T24350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3053.563745][T24350] ___sys_sendmsg+0x134/0x1d0 [ 3053.563768][T24350] ? __pfx____sys_sendmsg+0x10/0x10 [ 3053.563807][T24350] __sys_sendmsg+0x16d/0x220 [ 3053.563823][T24350] ? __pfx___sys_sendmsg+0x10/0x10 [ 3053.563848][T24350] do_syscall_64+0xcd/0xfa0 [ 3053.563864][T24350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3053.563875][T24350] RIP: 0033:0x7f238fb8eec9 [ 3053.563883][T24350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3053.563894][T24350] RSP: 002b:00007f238ddd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3053.563904][T24350] RAX: ffffffffffffffda RBX: 00007f238fde6090 RCX: 00007f238fb8eec9 [ 3053.563911][T24350] RDX: 0000000020008080 RSI: 00002000000029c0 RDI: 0000000000000007 [ 3053.563918][T24350] RBP: 00007f238ddd5090 R08: 0000000000000000 R09: 0000000000000000 [ 3053.563924][T24350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3053.563930][T24350] R13: 00007f238fde6128 R14: 00007f238fde6090 R15: 00007ffed77adef8 [ 3053.563944][T24350] [ 3054.213569][T24356] lo speed is unknown, defaulting to 1000 [ 3054.219984][T24356] vxcan1 speed is unknown, defaulting to 1000 [ 3054.246375][T24369] ieee802154 phy1 wpan1: encryption failed: -22 [ 3054.337236][T24374] ieee802154 phy1 wpan1: encryption failed: -22 [ 3054.463958][T24366] svc: failed to register nfsdv3 RPC service (errno 111). [ 3054.754037][T24366] svc: failed to register nfsaclv3 RPC service (errno 111). [ 3056.251143][T24437] tmpfs: Unknown parameter 'smackfshat' [ 3058.464200][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 3058.464217][ T30] audit: type=1400 audit(3058.472:3619): avc: denied { append } for pid=24498 comm="syz.5.10877" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 3058.529466][ T30] audit: type=1400 audit(3058.532:3620): avc: denied { append } for pid=24500 comm="syz.7.10878" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3058.551945][ C0] vkms_vblank_simulate: vblank timer overrun [ 3058.712367][T22668] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 3058.872447][T22668] usb 4-1: Using ep0 maxpacket: 8 [ 3059.148708][T22668] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3059.158916][T22668] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3059.169372][T22668] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3059.180724][T22668] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3059.478518][T22668] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3059.492350][T22668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3059.726117][T22668] usb 4-1: usb_control_msg returned -32 [ 3059.732453][T22668] usbtmc 4-1:16.0: can't read capabilities [ 3059.804170][T24493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3059.813210][T24493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3059.944064][T21226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3059.955355][T21226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3059.963824][T21226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3059.971673][T21226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3059.979521][T21226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3060.019768][T24548] lo speed is unknown, defaulting to 1000 [ 3060.027172][T24548] vxcan1 speed is unknown, defaulting to 1000 [ 3060.535475][T24548] chnl_net:caif_netlink_parms(): no params data found [ 3060.662900][T24548] bridge0: port 1(bridge_slave_0) entered blocking state [ 3060.678327][T24548] bridge0: port 1(bridge_slave_0) entered disabled state [ 3060.694601][T24548] bridge_slave_0: entered allmulticast mode [ 3060.707034][T24548] bridge_slave_0: entered promiscuous mode [ 3060.720849][T24548] bridge0: port 2(bridge_slave_1) entered blocking state [ 3060.736052][T24548] bridge0: port 2(bridge_slave_1) entered disabled state [ 3060.750554][T24548] bridge_slave_1: entered allmulticast mode [ 3060.764278][T24548] bridge_slave_1: entered promiscuous mode [ 3060.805835][T24548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3060.819767][T24548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3060.891504][T24548] team0: Port device team_slave_0 added [ 3060.904214][T24548] team0: Port device team_slave_1 added [ 3060.940714][T24548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3060.948394][T24548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3060.974255][ C0] vkms_vblank_simulate: vblank timer overrun [ 3060.980901][T24548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3060.993947][T24548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3061.000870][T24548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3061.028325][T24548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3061.096622][T24548] hsr_slave_0: entered promiscuous mode [ 3061.105081][T24548] hsr_slave_1: entered promiscuous mode [ 3061.111760][T24548] debugfs: 'hsr0' already exists in 'hsr' [ 3061.123560][T24548] Cannot create hsr debugfs directory [ 3061.320072][T24548] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3061.357950][T22668] usb 4-1: USB disconnect, device number 40 [ 3061.997259][T24548] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3062.021909][T21226] Bluetooth: hci1: command tx timeout [ 3062.097479][T24548] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3062.155552][T24548] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3062.500298][T24548] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3062.530608][T24548] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3062.563567][T24548] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3062.683753][T24548] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3062.692936][T24926] blktrace: Concurrent blktraces are not allowed on loop14 [ 3062.865002][T24548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3062.898089][T24548] 8021q: adding VLAN 0 to HW filter on device team0 [ 3062.923675][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 3062.930744][T10149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3062.953525][ T4526] bridge0: port 2(bridge_slave_1) entered blocking state [ 3062.960596][ T4526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3063.197633][T24548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3063.458299][T24548] veth0_vlan: entered promiscuous mode [ 3063.478000][T24548] veth1_vlan: entered promiscuous mode [ 3063.495497][ T30] audit: type=1400 audit(3063.502:3621): avc: denied { setopt } for pid=24951 comm="syz.7.10892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3063.500667][T24548] veth0_macvtap: entered promiscuous mode [ 3063.526034][T24953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10891'. [ 3063.549191][T24548] veth1_macvtap: entered promiscuous mode [ 3063.613616][T24548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3063.910458][T24548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3063.937865][T19678] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3064.008597][T19678] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3064.037964][T19678] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3064.064783][T19678] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3064.096211][T21226] Bluetooth: hci1: command tx timeout [ 3064.138785][T19678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3064.162779][T19678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3064.227368][ T4526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3064.243305][ T4526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3064.522012][T29089] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 3064.691919][T29089] usb 4-1: Using ep0 maxpacket: 8 [ 3064.698135][T29089] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3064.708243][T29089] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 3064.717751][T29089] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3064.733704][T29089] usb 4-1: config 0 descriptor?? [ 3064.762832][T29089] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 3064.797179][T24995] mkiss: ax0: crc mode is auto. [ 3065.307529][ T30] audit: type=1400 audit(3065.262:3622): avc: denied { bind } for pid=24994 comm="syz.5.10895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3065.357793][ T30] audit: type=1400 audit(3065.262:3623): avc: denied { connect } for pid=24994 comm="syz.5.10895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3065.523266][T25007] program syz.6.10897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3065.553740][T25007] netlink: 'syz.6.10897': attribute type 10 has an invalid length. [ 3065.573484][T25007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3065.586418][T25007] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3066.111525][T29089] gspca_vc032x: reg_w err -71 [ 3066.116535][T29089] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 3066.154441][T29089] usb 4-1: USB disconnect, device number 41 [ 3066.184326][T21226] Bluetooth: hci1: command tx timeout [ 3067.477954][T25043] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 3067.848693][T25031] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3068.030374][T25031] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3068.046360][ T30] audit: type=1400 audit(3068.052:3624): avc: denied { write } for pid=25048 comm="syz.3.10904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 3068.221308][T25058] lo speed is unknown, defaulting to 1000 [ 3068.253444][T21226] Bluetooth: hci1: command tx timeout [ 3068.376257][T25062] svc: failed to register nfsdv3 RPC service (errno 111). [ 3068.387706][T25062] svc: failed to register nfsaclv3 RPC service (errno 111). [ 3068.410612][T25031] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3068.432591][T25058] vxcan1 speed is unknown, defaulting to 1000 [ 3068.504187][T25031] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3068.629508][ T4526] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3068.686074][ T4526] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3068.714189][ T4526] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3068.724988][ T4526] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3068.851686][ T30] audit: type=1400 audit(3068.852:3625): avc: denied { mounton } for pid=25123 comm="syz.6.10907" path="/4/file0/bus" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 3068.852508][T25124] overlay: filesystem on ./file1 not supported [ 3068.886071][ T30] audit: type=1400 audit(3068.892:3626): avc: denied { read } for pid=25123 comm="syz.6.10907" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 3068.910717][ T30] audit: type=1400 audit(3068.892:3627): avc: denied { open } for pid=25123 comm="syz.6.10907" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 3068.960450][ T30] audit: type=1400 audit(3068.962:3628): avc: denied { unmount } for pid=24548 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 3069.014699][T25134] efs: cannot read volume header [ 3069.187580][T22668] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 3069.452994][T22668] usb 4-1: Using ep0 maxpacket: 16 [ 3069.463579][T22668] usb 4-1: config 0 has no interfaces? [ 3069.478486][T22668] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3069.506773][T22668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3069.525503][T22668] usb 4-1: Product: syz [ 3069.529672][T22668] usb 4-1: Manufacturer: syz [ 3069.553947][T25150] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3069.574024][T22668] usb 4-1: SerialNumber: syz [ 3069.588055][T22668] usb 4-1: config 0 descriptor?? [ 3069.657492][T25150] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3069.794822][T25150] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3069.873582][T25150] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3072.342660][ T30] audit: type=1400 audit(3071.982:3629): avc: denied { watch_reads } for pid=25200 comm="syz.8.10921" path="/39" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3072.930023][T25218] UBIFS error (pid: 25218): cannot open "Yzm¡", error -22 [ 3072.954352][T19859] usb 4-1: USB disconnect, device number 42 [ 3074.098147][ T30] audit: type=1400 audit(3074.082:3630): avc: denied { ioctl } for pid=25227 comm="syz.7.10926" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 3074.211591][T25237] ptrace attach of ""[25238] was attempted by "./syz-executor exec"[25237] [ 3074.253404][T25239] ieee802154 phy1 wpan1: encryption failed: -22 [ 3074.799495][T19679] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3074.853507][T19679] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3074.877887][T19679] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3075.195813][T19678] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3075.537663][T25268] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 3075.791831][ T977] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 3075.933505][ T30] audit: type=1400 audit(3075.942:3631): avc: denied { create } for pid=25262 comm="syz.7.10931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 3076.033031][ T30] audit: type=1400 audit(3075.972:3632): avc: denied { setopt } for pid=25262 comm="syz.7.10931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 3076.055815][ T977] usb 7-1: Using ep0 maxpacket: 8 [ 3076.079037][ T977] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3076.106497][ T977] usb 7-1: config 57 has an invalid interface number: 229 but max is 0 [ 3076.117476][ T977] usb 7-1: config 57 has no interface number 0 [ 3076.136409][ T977] usb 7-1: config 57 interface 229 has no altsetting 0 [ 3076.151514][ T977] usb 7-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 3076.200918][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3076.292048][T25285] netlink: 'syz.3.10934': attribute type 21 has an invalid length. [ 3076.299971][T25285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10934'. [ 3076.328634][T25285] netlink: 'syz.3.10934': attribute type 21 has an invalid length. [ 3076.336899][T25285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10934'. [ 3076.363092][T19678] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3076.371611][T19664] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3077.090614][T19664] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3077.110412][ T1205] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 3077.115982][ T977] usb 7-1: Product: syz [ 3077.122579][T19664] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3077.132695][ T977] usb 7-1: Manufacturer: syz [ 3077.137280][ T977] usb 7-1: SerialNumber: syz [ 3077.302036][ T1205] usb 6-1: Using ep0 maxpacket: 8 [ 3077.309541][ T1205] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3077.320419][ T1205] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 3077.377498][ T1205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3077.427895][ T1205] usb 6-1: config 0 descriptor?? [ 3077.552233][ T1205] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 3078.455623][ T977] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 3078.542044][T25314] efs: device does not support 512 byte blocks [ 3078.548289][T25314] device does not support 512 byte blocks [ 3078.548289][T25314] [ 3078.656882][ T977] usb 7-1: USB disconnect, device number 78 [ 3078.897994][ T1205] gspca_vc032x: reg_w err -71 [ 3078.926468][ T1205] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 3079.097411][ T1205] usb 6-1: USB disconnect, device number 12 [ 3079.264831][ T30] audit: type=1400 audit(3079.272:3633): avc: denied { append } for pid=25333 comm="syz.3.10940" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 3079.300964][ T30] audit: type=1400 audit(3079.272:3634): avc: denied { ioctl } for pid=25333 comm="syz.3.10940" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 3079.980515][T25352] lo speed is unknown, defaulting to 1000 [ 3079.993375][T25352] vxcan1 speed is unknown, defaulting to 1000 [ 3080.117649][T25364] netlink: 'syz.5.10945': attribute type 10 has an invalid length. [ 3081.802172][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.214596][T25409] efs: cannot read volume header [ 3082.237931][ T9324] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 3082.493699][ T1205] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 3082.552239][ T9324] usb 7-1: Using ep0 maxpacket: 8 [ 3082.567170][ T9324] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3082.583383][ T9324] usb 7-1: config 57 has an invalid interface number: 229 but max is 0 [ 3082.688479][ T1205] usb 4-1: Using ep0 maxpacket: 8 [ 3082.716657][ T1205] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3082.854975][ T9324] usb 7-1: config 57 has no interface number 0 [ 3082.871951][ T1205] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3082.878756][ T9324] usb 7-1: config 57 interface 229 has no altsetting 0 [ 3082.889758][ T1205] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3082.909409][ T9324] usb 7-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 3082.924794][ T9324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3082.951585][ T9324] usb 7-1: Product: syz [ 3082.958630][ T1205] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3082.972412][ T9324] usb 7-1: Manufacturer: syz [ 3082.980646][ T1205] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3083.022656][T25393] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 3083.031520][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3083.055952][ T9324] usb 7-1: SerialNumber: syz [ 3083.142928][ T30] audit: type=1400 audit(3083.152:3635): avc: denied { setopt } for pid=25432 comm="syz.5.10954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3083.285082][ T1205] usb 4-1: usb_control_msg returned -32 [ 3083.290775][ T1205] usbtmc 4-1:16.0: can't read capabilities [ 3083.339322][T25410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3083.370613][T25410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3083.549695][ T5883] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 3083.782368][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 3083.790918][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3083.801471][ T5883] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 3083.810918][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3083.820766][ T5883] usb 6-1: config 0 descriptor?? [ 3083.830573][ T5883] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 3083.900513][ T30] audit: type=1400 audit(3083.902:3636): avc: denied { name_bind } for pid=25480 comm="syz.7.10956" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 3084.458630][ T9324] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 3084.476207][ T9324] usb 7-1: USB disconnect, device number 79 [ 3084.596158][T25502] FAULT_INJECTION: forcing a failure. [ 3084.596158][T25502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3084.610937][T25502] CPU: 1 UID: 0 PID: 25502 Comm: syz.7.10958 Not tainted syzkaller #0 PREEMPT(full) [ 3084.610962][T25502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3084.610973][T25502] Call Trace: [ 3084.610979][T25502] [ 3084.610986][T25502] dump_stack_lvl+0x16c/0x1f0 [ 3084.611016][T25502] should_fail_ex+0x512/0x640 [ 3084.611046][T25502] _copy_from_user+0x2e/0xd0 [ 3084.611073][T25502] copy_msghdr_from_user+0x98/0x160 [ 3084.611099][T25502] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3084.611137][T25502] ___sys_sendmsg+0xfe/0x1d0 [ 3084.611168][T25502] ? __pfx____sys_sendmsg+0x10/0x10 [ 3084.611222][T25502] __sys_sendmsg+0x16d/0x220 [ 3084.611248][T25502] ? __pfx___sys_sendmsg+0x10/0x10 [ 3084.611285][T25502] ? rcu_is_watching+0x12/0xc0 [ 3084.611311][T25502] do_syscall_64+0xcd/0xfa0 [ 3084.611338][T25502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3084.611354][T25502] RIP: 0033:0x7f238fb8eec9 [ 3084.611369][T25502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3084.611386][T25502] RSP: 002b:00007f238ddf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3084.611403][T25502] RAX: ffffffffffffffda RBX: 00007f238fde5fa0 RCX: 00007f238fb8eec9 [ 3084.611416][T25502] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 3084.611427][T25502] RBP: 00007f238ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 3084.611438][T25502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3084.611449][T25502] R13: 00007f238fde6038 R14: 00007f238fde5fa0 R15: 00007ffed77adef8 [ 3084.611475][T25502] [ 3084.771658][ C1] vkms_vblank_simulate: vblank timer overrun [ 3084.802947][T25503] fuse: Unknown parameter '0xffffffffffffffff' [ 3084.905233][T29089] usb 4-1: USB disconnect, device number 43 [ 3085.749921][ T5883] gspca_vc032x: reg_w err -110 [ 3085.755355][ T5883] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 3085.803397][ T5883] usb 6-1: USB disconnect, device number 13 [ 3085.821955][ T30] audit: type=1400 audit(3085.312:3637): avc: denied { connect } for pid=25516 comm="syz.3.10960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3085.890691][T25518] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3086.287964][T25518] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3086.756705][T25518] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3087.164753][T25553] blktrace: Concurrent blktraces are not allowed on loop12 [ 3087.361253][T25518] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3087.380602][T25563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10968'. [ 3087.392018][T25563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10968'. [ 3087.479132][T25566] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 3087.732508][T22668] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 3088.056259][T25563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10968'. [ 3088.068482][T22668] usb 7-1: Using ep0 maxpacket: 8 [ 3088.075744][T22668] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3088.171229][T22668] usb 7-1: config 57 has an invalid interface number: 229 but max is 0 [ 3088.180341][T22668] usb 7-1: config 57 has no interface number 0 [ 3088.198190][T22668] usb 7-1: config 57 interface 229 has no altsetting 0 [ 3088.212783][T22668] usb 7-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 3088.222622][T22668] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3088.230617][T22668] usb 7-1: Product: syz [ 3088.242628][T22668] usb 7-1: Manufacturer: syz [ 3088.247231][T22668] usb 7-1: SerialNumber: syz [ 3088.265141][T19664] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3088.305567][T19664] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3088.325569][T19664] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3088.692764][T19664] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3088.984666][ T30] audit: type=1400 audit(3088.992:3638): avc: denied { getopt } for pid=25602 comm="syz.3.10973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 3089.005546][T25613] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10973'. [ 3089.426036][T25615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10974'. [ 3089.440059][T25615] geneve2: entered promiscuous mode [ 3089.446107][T25615] geneve2: entered allmulticast mode [ 3089.454461][T10264] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 46968 - 0 [ 3089.464019][T10264] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 45968 - 0 [ 3089.472998][T10264] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 46968 - 0 [ 3089.483170][T10264] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 45968 - 0 [ 3089.491535][T10264] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 46968 - 0 [ 3089.500994][T10264] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 45968 - 0 [ 3089.509686][T10264] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 46968 - 0 [ 3089.519651][T10264] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 45968 - 0 [ 3089.782507][T29089] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 3089.951942][T29089] usb 6-1: Using ep0 maxpacket: 8 [ 3089.958625][T29089] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3089.969026][T29089] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 3089.978170][T29089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3089.998758][T29089] usb 6-1: config 0 descriptor?? [ 3090.007862][T29089] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 3090.320288][T22668] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 3090.339868][T22668] usb 7-1: USB disconnect, device number 80 [ 3090.834317][T25649] blktrace: Concurrent blktraces are not allowed on loop12 [ 3091.468296][T29089] gspca_vc032x: reg_w err -71 [ 3091.473401][T29089] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 3091.482734][T29089] usb 6-1: USB disconnect, device number 14 [ 3092.577422][ T30] audit: type=1326 audit(3092.502:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d018eec9 code=0x7ffc0000 [ 3092.600849][ T30] audit: type=1326 audit(3092.502:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d018eec9 code=0x7ffc0000 [ 3092.623874][ C0] vkms_vblank_simulate: vblank timer overrun [ 3092.643051][ T30] audit: type=1326 audit(3092.502:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc7d018eec9 code=0x7ffc0000 [ 3092.690778][ T30] audit: type=1326 audit(3092.502:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d018eec9 code=0x7ffc0000 [ 3092.714941][ T30] audit: type=1326 audit(3092.502:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fc7d018eec9 code=0x7ffc0000 [ 3092.737947][ C0] vkms_vblank_simulate: vblank timer overrun [ 3093.477759][ T30] audit: type=1326 audit(3092.502:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d018eec9 code=0x7ffc0000 [ 3093.503557][ T30] audit: type=1326 audit(3092.502:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7d018eec9 code=0x7ffc0000 [ 3093.526477][ C0] vkms_vblank_simulate: vblank timer overrun [ 3093.922951][ T30] audit: type=1326 audit(3092.502:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d018eec9 code=0x7ffc0000 [ 3093.974024][ T30] audit: type=1326 audit(3092.502:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d018eec9 code=0x7ffc0000 [ 3093.998395][ T30] audit: type=1326 audit(3092.502:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25690 comm="syz.5.10987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7d018eec9 code=0x7ffc0000 [ 3094.021343][ C0] vkms_vblank_simulate: vblank timer overrun [ 3094.361888][T15827] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 3094.515478][T15827] usb 7-1: Using ep0 maxpacket: 8 [ 3094.540517][T25741] bridge0: entered promiscuous mode [ 3094.546101][T25741] macvlan2: entered promiscuous mode [ 3094.568729][T15827] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3094.585171][T29089] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 3094.593031][T15827] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3094.609821][T15827] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3094.630907][T15827] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3094.644460][T15827] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3094.656715][T15827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3094.762134][T29089] usb 6-1: Using ep0 maxpacket: 8 [ 3094.777012][T29089] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3094.787519][T29089] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3094.797784][T29089] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3094.807983][T29089] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3094.833987][T29089] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3094.843260][T29089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3094.945463][T15827] usb 7-1: usb_control_msg returned -32 [ 3094.951878][T15827] usbtmc 7-1:16.0: can't read capabilities [ 3095.080059][T29089] usb 6-1: usb_control_msg returned -32 [ 3095.087778][T25720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3095.096565][T29089] usbtmc 6-1:16.0: can't read capabilities [ 3095.102850][T25720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3095.139149][T25730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3095.149479][T25730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3095.705984][T25783] blktrace: Concurrent blktraces are not allowed on loop6 [ 3097.000615][T27648] usb 7-1: USB disconnect, device number 81 [ 3097.083608][T22668] usb 6-1: USB disconnect, device number 15 [ 3097.648688][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 3097.648704][ T30] audit: type=1400 audit(3097.652:3673): avc: denied { read } for pid=25845 comm="syz.7.11013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 3097.703499][ T30] audit: type=1400 audit(3097.712:3674): avc: denied { setattr } for pid=25845 comm="syz.7.11013" name="tty2" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 3098.306020][T25857] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3098.383686][T25857] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3098.565414][T25857] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3098.620992][ T30] audit: type=1400 audit(3098.622:3675): avc: denied { setopt } for pid=25865 comm="syz.7.11017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 3098.675190][T25857] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3098.763889][ T4539] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3098.793943][ T4539] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3098.821057][ T4539] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3098.835393][ T4539] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3099.049741][ T30] audit: type=1400 audit(3099.052:3676): avc: denied { shutdown } for pid=25889 comm="syz.6.11020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3099.096203][ T30] audit: type=1400 audit(3099.102:3677): avc: denied { write } for pid=25889 comm="syz.6.11020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 3099.396853][T25903] 9pnet_virtio: no channels available for device syz [ 3099.409992][T25903] input: syz1 as /devices/virtual/input/input255 [ 3099.461789][T15827] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 3099.631830][T15827] usb 7-1: Using ep0 maxpacket: 16 [ 3099.641472][T15827] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3099.682286][T15827] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3099.692407][T15827] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3099.700072][T15827] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 3099.709183][T15827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3099.864135][T15827] usb 7-1: config 0 descriptor?? [ 3100.276025][T15827] hid (null): invalid report_size 1109422693 [ 3100.284134][T15827] hid (null): invalid report_size 28261 [ 3100.302338][T27648] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 3100.310987][T15827] cougar 0003:060B:500A.0075: usage count exceeds max: fixing up report descriptor [ 3100.325840][T15827] cougar 0003:060B:500A.0075: unexpected long global item [ 3100.333536][T15827] cougar 0003:060B:500A.0075: parse failed [ 3100.339356][T15827] cougar 0003:060B:500A.0075: probe with driver cougar failed with error -22 [ 3100.391320][ T30] audit: type=1400 audit(3100.392:3678): avc: denied { shutdown } for pid=25922 comm="syz.3.11025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3100.462140][T27648] usb 6-1: Using ep0 maxpacket: 8 [ 3100.468511][T27648] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3100.479242][T27648] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 3100.480846][T15827] usb 7-1: USB disconnect, device number 82 [ 3100.488377][T27648] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3100.506476][T27648] usb 6-1: config 0 descriptor?? [ 3100.514641][T27648] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 3100.851764][ T1205] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 3101.001804][ T1205] usb 4-1: Invalid ep0 maxpacket: 64 [ 3101.141853][ T1205] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 3101.327058][ T1205] usb 4-1: Invalid ep0 maxpacket: 64 [ 3101.350122][ T1205] usb usb4-port1: attempt power cycle [ 3101.652667][T25948] ubi: mtd0 is already attached to ubi31 [ 3102.470491][T27648] gspca_vc032x: reg_w err -110 [ 3102.489006][T27648] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 3102.500589][ T30] audit: type=1400 audit(3101.672:3679): avc: denied { ioctl } for pid=25943 comm="syz.6.11027" path="socket:[217172]" dev="sockfs" ino=217172 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 3102.541775][ T1205] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 3102.552788][T27648] usb 6-1: USB disconnect, device number 16 [ 3102.629434][ T1205] usb 4-1: Invalid ep0 maxpacket: 64 [ 3102.647480][T25949] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3102.802206][ T1205] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 3102.958996][T25969] netlink: 'syz.6.11029': attribute type 10 has an invalid length. [ 3103.107763][ T1205] usb 4-1: Invalid ep0 maxpacket: 64 [ 3103.121456][ T1205] usb usb4-port1: unable to enumerate USB device [ 3103.338432][T25966] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3103.406832][T25949] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3103.477372][T25966] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3103.543853][T25994] blktrace: Concurrent blktraces are not allowed on loop6 [ 3103.591493][T25949] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3103.655782][T25966] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3103.689196][T25949] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3103.735449][T25966] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3103.817507][T19658] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3103.835858][T19658] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3103.858502][T19658] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3103.884692][T10264] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3103.911393][ T4519] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3103.968915][ T4519] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3103.984532][ T4519] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3104.019364][ T4519] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3104.019499][T26025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3104.278809][T26031] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11034'. [ 3105.562895][ T30] audit: type=1400 audit(3105.572:3680): avc: denied { getopt } for pid=26042 comm="syz.5.11039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 3106.122341][ T30] audit: type=1400 audit(3106.132:3681): avc: denied { listen } for pid=26057 comm="syz.7.11044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3106.178699][ T30] audit: type=1400 audit(3106.152:3682): avc: denied { ioctl } for pid=26057 comm="syz.7.11044" path="socket:[217379]" dev="sockfs" ino=217379 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3106.273031][ T9324] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 3106.484091][T26068] netlink: 'syz.7.11045': attribute type 13 has an invalid length. [ 3106.501815][ T9324] usb 7-1: Using ep0 maxpacket: 8 [ 3106.542659][ T30] audit: type=1400 audit(3106.522:3683): avc: denied { name_connect } for pid=26069 comm="syz.5.11046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 3106.544866][ T9324] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 3106.628518][T26068] bridge0: port 2(bridge_slave_1) entered blocking state [ 3106.635598][T26068] bridge0: port 2(bridge_slave_1) entered listening state [ 3106.642809][T26068] bridge0: port 1(bridge_slave_0) entered blocking state [ 3106.649893][T26068] bridge0: port 1(bridge_slave_0) entered listening state [ 3106.674948][ T9324] usb 7-1: config 179 has no interface number 0 [ 3106.694446][T26068] 8021q: adding VLAN 0 to HW filter on device  [ 3106.738390][ T9324] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 3106.756160][T26068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3106.855849][ T9324] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 3106.861866][ T30] audit: type=1400 audit(3106.542:3684): avc: denied { ioctl } for pid=26069 comm="syz.5.11046" path="socket:[216860]" dev="sockfs" ino=216860 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3106.933566][ T9324] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 3107.513193][ T9324] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 3107.564352][ T9324] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3107.581093][T26081] netlink: 830 bytes leftover after parsing attributes in process `syz.8.11050'. [ 3107.591243][ T9324] usb 7-1: config 179 interface 65 has no altsetting 0 [ 3107.598641][ T9324] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 3107.727859][ T9324] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3108.458001][ T9324] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input256 [ 3108.733443][ T5170] input input256: unable to receive magic message: -110 [ 3108.927993][ T5883] usb 7-1: USB disconnect, device number 83 [ 3108.928025][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3108.928049][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 3109.115623][T26122] netlink: 52 bytes leftover after parsing attributes in process `syz.7.11054'. [ 3109.125432][T26122] netlink: 'syz.7.11054': attribute type 1 has an invalid length. [ 3109.178536][T26125] lo speed is unknown, defaulting to 1000 [ 3109.186920][T26125] vxcan1 speed is unknown, defaulting to 1000 [ 3109.268285][T26134] svc: failed to register nfsdv3 RPC service (errno 111). [ 3109.278008][T26134] svc: failed to register nfsaclv3 RPC service (errno 111). [ 3109.302213][ T9324] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 3109.452402][ T9324] usb 6-1: Using ep0 maxpacket: 16 [ 3109.459309][ T9324] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 3109.469777][ T9324] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 3109.478053][ T9324] usb 6-1: can't read configurations, error -61 [ 3109.547399][ T30] audit: type=1400 audit(3109.532:3685): avc: denied { getopt } for pid=26169 comm="syz.6.11059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3109.590398][T26184] netlink: 'syz.6.11059': attribute type 1 has an invalid length. [ 3109.598599][T26184] netlink: 244 bytes leftover after parsing attributes in process `syz.6.11059'. [ 3109.621013][ T9324] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 3109.782447][ T9324] usb 6-1: Using ep0 maxpacket: 16 [ 3109.788217][ T9324] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 3110.049836][ T9324] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 3110.062156][ T9324] usb 6-1: can't read configurations, error -61 [ 3110.074426][ T9324] usb usb6-port1: attempt power cycle [ 3110.973804][ T9324] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 3111.021611][ T9324] usb 6-1: Using ep0 maxpacket: 16 [ 3111.027334][ T9324] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 3111.043439][ T9324] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 3111.055308][ T9324] usb 6-1: can't read configurations, error -61 [ 3111.131978][T19859] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3111.302245][T19859] usb 4-1: Using ep0 maxpacket: 8 [ 3111.328349][T19859] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3111.355457][T19859] usb 4-1: config 57 has an invalid interface number: 229 but max is 0 [ 3111.362307][ T9324] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 3111.392636][T19859] usb 4-1: config 57 has no interface number 0 [ 3111.403443][T19859] usb 4-1: config 57 interface 229 has no altsetting 0 [ 3111.632467][ T9324] usb 6-1: Using ep0 maxpacket: 16 [ 3111.637953][ T9324] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 3111.647241][ T9324] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 3111.655280][ T9324] usb 6-1: can't read configurations, error -61 [ 3111.664152][ T9324] usb usb6-port1: unable to enumerate USB device [ 3111.823115][T19859] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 3111.844822][T19859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3111.853631][T19859] usb 4-1: Product: syz [ 3111.857850][T19859] usb 4-1: Manufacturer: syz [ 3111.862524][T19859] usb 4-1: SerialNumber: syz [ 3111.941935][T26226] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 3112.347422][T29089] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 3113.101869][T29089] usb 7-1: Using ep0 maxpacket: 8 [ 3113.319636][T19859] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 3113.328958][T29089] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3113.338493][T26243] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3113.343687][T19859] usb 4-1: USB disconnect, device number 48 [ 3113.355921][T29089] usb 7-1: config 57 has an invalid interface number: 229 but max is 0 [ 3113.367033][T29089] usb 7-1: config 57 has no interface number 0 [ 3113.404087][T29089] usb 7-1: config 57 interface 229 has no altsetting 0 [ 3115.581489][T29089] usb 7-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 3115.594456][T29089] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3115.609326][T29089] usb 7-1: Product: syz [ 3115.613697][T29089] usb 7-1: Manufacturer: syz [ 3115.624640][T26243] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3115.649206][T29089] usb 7-1: SerialNumber: syz [ 3115.679164][T26243] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3115.798298][T26243] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3116.028318][ T4519] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3116.130056][ T4519] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3116.341604][T19678] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3116.370988][T19678] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3117.194357][T29089] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 3117.230957][T29089] usb 7-1: USB disconnect, device number 84 [ 3117.642486][ T30] audit: type=1400 audit(3117.602:3686): avc: denied { read } for pid=26306 comm="syz.8.11076" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3118.478654][ T30] audit: type=1400 audit(3117.602:3687): avc: denied { open } for pid=26306 comm="syz.8.11076" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 3119.840052][ T30] audit: type=1400 audit(3119.812:3688): avc: denied { mounton } for pid=26336 comm="syz.5.11082" path="/298/file0" dev="tmpfs" ino=1596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 3119.941934][ T30] audit: type=1400 audit(3119.912:3689): avc: denied { getopt } for pid=26336 comm="syz.5.11082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 3119.987774][T26342] bond3: entered promiscuous mode [ 3119.993839][T26342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 3120.003322][T26344] fuse: Bad value for 'rootmode' [ 3120.005804][T26342] qrtr: Invalid version 5 [ 3120.009849][ T30] audit: type=1400 audit(3120.012:3690): avc: denied { mounton } for pid=26336 comm="syz.5.11082" path="/298/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 3120.174419][T26344] SELinux: failed to load policy [ 3120.223715][ T30] audit: type=1400 audit(3120.232:3691): avc: denied { bind } for pid=26386 comm="syz.7.11086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 3120.276030][ T30] audit: type=1400 audit(3120.232:3692): avc: denied { node_bind } for pid=26386 comm="syz.7.11086" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 3120.437941][ T30] audit: type=1400 audit(3120.442:3693): avc: denied { read } for pid=26390 comm="syz.3.11087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 3120.663329][T26401] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 3120.675863][ T30] audit: type=1400 audit(3120.652:3694): avc: denied { read append } for pid=26388 comm="syz.7.11088" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 3120.701319][T26395] netlink: 'syz.3.11087': attribute type 4 has an invalid length. [ 3120.801747][T26395] netlink: 17 bytes leftover after parsing attributes in process `syz.3.11087'. [ 3120.848815][ T30] audit: type=1400 audit(3120.652:3695): avc: denied { open } for pid=26388 comm="syz.7.11088" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 3121.287885][T26414] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 3122.392105][T26428] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=26428 comm=syz.5.11093 [ 3122.549065][T26434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11093'. [ 3122.842643][T26446] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 3123.422646][ T977] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 3123.593719][ T977] usb 7-1: Using ep0 maxpacket: 8 [ 3123.620751][ T977] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3123.650537][ T977] usb 7-1: config 57 has an invalid interface number: 229 but max is 0 [ 3123.679799][ T977] usb 7-1: config 57 has no interface number 0 [ 3123.727536][ T977] usb 7-1: config 57 interface 229 has no altsetting 0 [ 3123.754597][ T977] usb 7-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=dd.eb [ 3123.799837][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3123.828264][T26457] netlink: 'syz.3.11096': attribute type 10 has an invalid length. [ 3123.939755][ T977] usb 7-1: Product: syz [ 3124.036667][ T977] usb 7-1: Manufacturer: syz [ 3124.111581][ T977] usb 7-1: SerialNumber: syz [ 3124.992438][ T9324] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3125.191860][ T1205] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 3125.252611][ T9324] usb 4-1: Using ep0 maxpacket: 8 [ 3125.308546][ T9324] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 3125.338298][ T9324] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3125.351264][ T9324] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 3125.369655][ T9324] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3125.391973][ T1205] usb 6-1: Using ep0 maxpacket: 16 [ 3125.398648][ T1205] usb 6-1: config 0 has no interfaces? [ 3125.406177][ T1205] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3125.418237][ T1205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3125.452487][ T1205] usb 6-1: Product: syz [ 3125.470042][ T1205] usb 6-1: Manufacturer: syz [ 3125.517977][ T1205] usb 6-1: SerialNumber: syz [ 3125.604943][ T977] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 3125.614549][ T977] usb 7-1: USB disconnect, device number 85 [ 3125.626691][ T1205] usb 6-1: config 0 descriptor?? [ 3125.707505][ T9324] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 3125.964769][ T9324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3125.973412][ T9324] usb 4-1: Product: syz [ 3125.977632][ T9324] usb 4-1: Manufacturer: syz [ 3125.982990][ T9324] usb 4-1: SerialNumber: syz [ 3125.991128][T26471] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3126.001548][ T9324] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 3126.030089][ T9324] usbtest 4-1:1.0: Linux user mode ISO test driver [ 3126.037522][ T9324] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 3126.289870][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 3126.289889][ T30] audit: type=1400 audit(3126.212:3701): avc: denied { connect } for pid=26467 comm="syz.3.11098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3126.294284][ T9324] usb 4-1: USB disconnect, device number 49 [ 3126.355558][ T30] audit: type=1400 audit(3126.362:3702): avc: denied { map } for pid=26529 comm="syz.6.11104" path="pipe:[218480]" dev="pipefs" ino=218480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 3126.470574][T26532] overlayfs: missing 'lowerdir' [ 3126.480768][ T30] audit: type=1400 audit(3126.492:3703): avc: denied { read } for pid=26529 comm="syz.6.11104" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 3126.482413][T26530] tmpfs: Unknown parameter 'euid<00000000000000000000' [ 3126.554032][ T30] audit: type=1400 audit(3126.492:3704): avc: denied { open } for pid=26529 comm="syz.6.11104" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 3126.678448][ T30] audit: type=1400 audit(3126.492:3705): avc: denied { ioctl } for pid=26529 comm="syz.6.11104" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 3126.794248][T26538] netlink: 'syz.6.11105': attribute type 10 has an invalid length. [ 3126.810623][T26538] team0: Port device dummy0 added [ 3126.818838][T26538] tmpfs: Unknown parameter 'usrquotaˆ' [ 3127.095926][T26543] netlink: 'syz.8.11106': attribute type 10 has an invalid length. [ 3128.114082][T19859] usb 6-1: USB disconnect, device number 21 [ 3128.200890][T26562] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 3128.504306][T26564] sctp: [Deprecated]: syz.3.11108 (pid 26564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3128.504306][T26564] Use struct sctp_sack_info instead [ 3129.773753][T26569] netlink: 276 bytes leftover after parsing attributes in process `syz.5.11110'. [ 3130.790410][T26580] block nbd0: Unsupported socket: should be TCP or UNIX. [ 3132.730831][T26632] ieee802154 phy1 wpan1: encryption failed: -22 [ 3133.091944][ T1205] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 3133.243279][T26641] fuse: Unknown parameter '0xffffffffffffffff' [ 3133.397630][T26638] lo speed is unknown, defaulting to 1000 [ 3133.405720][T26638] vxcan1 speed is unknown, defaulting to 1000 [ 3133.513707][ T1205] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3133.522942][ T1205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3133.638837][ T1205] usb 6-1: config 0 descriptor?? [ 3133.669514][ T30] audit: type=1400 audit(3133.672:3706): avc: denied { create } for pid=26648 comm="syz.8.11126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 3133.835530][ T30] audit: type=1400 audit(3133.672:3707): avc: denied { map } for pid=26648 comm="syz.8.11126" path="socket:[219139]" dev="sockfs" ino=219139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3133.864342][ T1205] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 3133.892837][ T30] audit: type=1400 audit(3133.742:3708): avc: denied { mount } for pid=26651 comm="syz.8.11127" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 3133.981505][ T30] audit: type=1400 audit(3133.782:3709): avc: denied { connect } for pid=26651 comm="syz.8.11127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 3134.023931][ T30] audit: type=1400 audit(3133.952:3710): avc: denied { read } for pid=26653 comm="syz.8.11128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3134.117060][ T1205] [drm:udl_init] *ERROR* Selecting channel failed [ 3134.155728][T26662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3134.221361][T26662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3134.227944][ T1205] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 3134.238481][T26662] Bluetooth: MGMT ver 1.23 [ 3134.251857][ T1205] [drm] Initialized udl on minor 2 [ 3134.261782][ T1205] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3134.275144][ T1205] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 3134.290263][ T5619] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3134.300858][ T5619] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 3134.330669][T26676] netlink: 'syz.6.11130': attribute type 10 has an invalid length. [ 3134.339269][T26676] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11130'. [ 3134.357644][ T1205] usb 6-1: USB disconnect, device number 22 [ 3134.375186][T26676] dummy0: entered promiscuous mode [ 3134.418009][T26676] team0: Port device dummy0 removed [ 3134.424187][T26676] bridge0: port 3(dummy0) entered blocking state [ 3134.430929][T26676] bridge0: port 3(dummy0) entered disabled state [ 3134.438270][T26676] dummy0: entered allmulticast mode [ 3134.632789][ T9324] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 3134.727825][T26708] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11131'. [ 3134.782581][ T9324] usb 7-1: Using ep0 maxpacket: 16 [ 3134.801599][ T9324] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3134.914710][ T9324] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3134.997539][ T9324] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 31 [ 3135.134957][ T9324] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3135.257536][ T9324] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3135.281029][ T9324] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3135.347788][T26721] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 3135.895849][ T9324] usb 7-1: Manufacturer: syz [ 3135.903790][ T9324] usb 7-1: config 0 descriptor?? [ 3136.063767][T26714] fuse: Bad value for 'fd' [ 3136.352856][ T9324] rc_core: IR keymap rc-hauppauge not found [ 3136.383294][ T9324] Registered IR keymap rc-empty [ 3136.403867][ T9324] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 3136.456854][ T9324] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 3136.483033][ T9324] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 3136.512722][ T9324] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input258 [ 3136.532521][ T9324] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 3136.552491][ T9324] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 3136.572748][ T9324] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 3136.592719][ T9324] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 3136.623505][ T9324] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 3136.653758][ T9324] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 3136.719663][ T9324] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 3136.821045][T26743] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3136.938700][ T9324] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 3136.966641][ T9324] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 3137.002880][ T9324] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 3137.024285][ T9324] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3137.049021][ T9324] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3137.064729][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 3137.073043][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 3137.089826][T26743] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3137.159958][T26754] SELinux: failed to load policy [ 3137.197308][ T30] audit: type=1400 audit(3137.202:3711): avc: denied { set_context_mgr } for pid=26753 comm="syz.5.11137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 3137.200975][T26761] binder: 26753:26761 ioctl c0306201 200000000640 returned -22 [ 3137.257391][T26743] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3137.315464][T19678] netdevsim netdevsim5 eth0: set [1, 2] type 2 family 0 port 20001 - 0 [ 3137.426195][T26771] fuse: Unknown parameter '0xffffffffffffffff' [ 3137.449851][T19678] netdevsim netdevsim5 eth1: set [1, 2] type 2 family 0 port 20001 - 0 [ 3137.462240][T26743] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3137.521268][T19678] netdevsim netdevsim5 eth2: set [1, 2] type 2 family 0 port 20001 - 0 [ 3137.573480][T19678] netdevsim netdevsim5 eth3: set [1, 2] type 2 family 0 port 20001 - 0 [ 3137.583754][T26773] ieee802154 phy1 wpan1: encryption failed: -22 [ 3138.038258][ T1205] usb 7-1: USB disconnect, device number 86 [ 3138.058138][T25206] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3138.108414][T26793] FAULT_INJECTION: forcing a failure. [ 3138.108414][T26793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3138.127453][ T4539] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3138.143119][ T4539] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3138.152371][T26793] CPU: 1 UID: 0 PID: 26793 Comm: syz.6.11142 Not tainted syzkaller #0 PREEMPT(full) [ 3138.152393][T26793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3138.152402][T26793] Call Trace: [ 3138.152408][T26793] [ 3138.152415][T26793] dump_stack_lvl+0x16c/0x1f0 [ 3138.152443][T26793] should_fail_ex+0x512/0x640 [ 3138.152475][T26793] _copy_from_user+0x2e/0xd0 [ 3138.152506][T26793] move_addr_to_kernel+0x65/0x170 [ 3138.152528][T26793] __copy_msghdr+0x386/0x470 [ 3138.152553][T26793] copy_msghdr_from_user+0xc1/0x160 [ 3138.152577][T26793] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 3138.152614][T26793] ___sys_sendmsg+0xfe/0x1d0 [ 3138.152640][T26793] ? __pfx____sys_sendmsg+0x10/0x10 [ 3138.152682][T26793] __sys_sendmsg+0x16d/0x220 [ 3138.152698][T26793] ? __pfx___sys_sendmsg+0x10/0x10 [ 3138.152722][T26793] do_syscall_64+0xcd/0xfa0 [ 3138.152738][T26793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3138.152748][T26793] RIP: 0033:0x7f11ae78eec9 [ 3138.152757][T26793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3138.152768][T26793] RSP: 002b:00007f11af62d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3138.152778][T26793] RAX: ffffffffffffffda RBX: 00007f11ae9e5fa0 RCX: 00007f11ae78eec9 [ 3138.152784][T26793] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 3138.152791][T26793] RBP: 00007f11af62d090 R08: 0000000000000000 R09: 0000000000000000 [ 3138.152797][T26793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3138.152802][T26793] R13: 00007f11ae9e6038 R14: 00007f11ae9e5fa0 R15: 00007ffe6dfe1e08 [ 3138.152817][T26793] [ 3138.329639][T25206] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3138.641780][ T30] audit: type=1400 audit(3138.542:3712): avc: denied { lock } for pid=26800 comm="syz.5.11143" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 3138.762283][T27648] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 3138.762702][ T30] audit: type=1400 audit(3138.742:3713): avc: denied { listen } for pid=26802 comm="syz.8.11145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 3138.957030][T26811] overlayfs: missing 'lowerdir' [ 3139.262769][T27648] usb 7-1: Using ep0 maxpacket: 32 [ 3139.281528][T27648] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 3139.291415][T27648] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3139.302310][T27648] usb 7-1: Product: syz [ 3139.306530][T27648] usb 7-1: Manufacturer: syz [ 3139.311282][T27648] usb 7-1: SerialNumber: syz [ 3139.320971][T27648] usb 7-1: config 0 descriptor?? [ 3139.330369][T27648] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 3140.367426][T27648] gspca_topro: reg_w err -71 [ 3140.402469][T27648] gspca_topro: Sensor soi763a [ 3140.409838][T27648] usb 7-1: USB disconnect, device number 87 [ 3140.495617][T26869] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 3140.507591][ T5619] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3140.695581][ T5619] usb 4-1: Using ep0 maxpacket: 8 [ 3140.707661][ T5619] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3140.754754][ T5619] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 3140.824503][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3140.983724][ T5619] usb 4-1: config 0 descriptor?? [ 3140.994733][ T5619] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 3141.153070][T26881] netlink: 'syz.6.11153': attribute type 10 has an invalid length. [ 3141.202665][T26881] batman_adv: batadv0: Adding interface: team0 [ 3141.209757][T26881] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3141.238634][T26881] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 3141.245829][T26879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11153'. [ 3142.415915][T26898] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11156'. [ 3142.731546][ T5619] gspca_vc032x: reg_w err -71 [ 3142.737498][ T5619] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 3142.747640][ T5619] usb 4-1: USB disconnect, device number 50 [ 3142.825157][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.149575][T26916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11159'. [ 3143.691931][T26917] blktrace: Concurrent blktraces are not allowed on loop10 [ 3144.150642][ T30] audit: type=1400 audit(3144.152:3714): avc: denied { getopt } for pid=26909 comm="syz.7.11157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 3144.363294][ T30] audit: type=1400 audit(3144.182:3715): avc: denied { write } for pid=26909 comm="syz.7.11157" name="cgroup.subtree_control" dev="cgroup2" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 3144.387571][ T30] audit: type=1400 audit(3144.182:3716): avc: denied { open } for pid=26909 comm="syz.7.11157" path="" dev="cgroup2" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 3144.421789][ T30] audit: type=1400 audit(3144.352:3717): avc: denied { bind } for pid=26922 comm="syz.5.11160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3144.493249][T26930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11162'. [ 3144.502433][T26930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3144.595630][T26933] netlink: 'syz.8.11161': attribute type 16 has an invalid length. [ 3144.605126][T26933] netlink: 2 bytes leftover after parsing attributes in process `syz.8.11161'. [ 3144.697082][T26938] netlink: 'syz.8.11161': attribute type 10 has an invalid length. [ 3144.894129][T26930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3144.953855][T26938] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 3145.002007][ T5619] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 3145.097483][T26954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11163'. [ 3145.231775][ T5619] usb 4-1: Using ep0 maxpacket: 16 [ 3145.238361][ T5619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3145.281770][ T5619] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3145.306932][ T5619] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3145.435358][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3145.455618][ T5619] usb 4-1: config 0 descriptor?? [ 3145.923839][ T30] audit: type=1400 audit(3145.932:3718): avc: denied { write } for pid=26926 comm="syz.3.11162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3146.018235][ T5619] usbhid 4-1:0.0: can't add hid device: -71 [ 3146.025037][ T5619] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 3146.035043][ T5619] usb 4-1: USB disconnect, device number 51 [ 3146.572008][T26988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11170'. [ 3147.222266][T26997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11171'. [ 3147.599922][ T30] audit: type=1400 audit(3147.602:3719): avc: denied { create } for pid=26998 comm="syz.8.11173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 3147.852289][T27002] mac80211_hwsim hwsim64 wlan1: entered allmulticast mode [ 3148.960961][ T30] audit: type=1400 audit(3148.962:3720): avc: denied { append } for pid=27027 comm="syz.8.11179" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 3149.042874][ T30] audit: type=1400 audit(3148.962:3721): avc: denied { nlmsg_read } for pid=27027 comm="syz.8.11179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3149.544155][T27041] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 3149.559235][ T30] audit: type=1400 audit(3149.552:3722): avc: denied { setopt } for pid=27040 comm="syz.7.11183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 3149.794712][T27045] dns_resolver: Unsupported content type (152) [ 3150.827177][ T30] audit: type=1404 audit(3150.832:3723): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 3150.877225][ T30] audit: type=1400 audit(3150.852:3724): avc: denied { read } for pid=27053 comm="syz.8.11186" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 3150.919848][ T30] audit: type=1400 audit(3150.852:3725): avc: denied { create } for pid=27053 comm="syz.8.11186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=0 [ 3150.960229][ T30] audit: type=1400 audit(3150.852:3726): avc: denied { getopt } for pid=27053 comm="syz.8.11186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 3150.996570][T27060] lo speed is unknown, defaulting to 1000 [ 3151.014267][T27060] vxcan1 speed is unknown, defaulting to 1000 [ 3151.028802][ T30] audit: type=1404 audit(3150.852:3727): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 3151.091463][ T30] audit: type=1400 audit(3150.862:3728): avc: denied { prog_load } for pid=27055 comm="syz.3.11187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3151.155222][ T30] audit: type=1400 audit(3150.862:3729): avc: denied { bpf } for pid=27055 comm="syz.3.11187" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3151.176114][ T30] audit: type=1400 audit(3150.862:3730): avc: denied { perfmon } for pid=27055 comm="syz.3.11187" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3151.310942][ T30] audit: type=1400 audit(3150.862:3731): avc: denied { prog_run } for pid=27055 comm="syz.3.11187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3151.468496][T27080] blktrace: Concurrent blktraces are not allowed on loop6 [ 3152.414298][ T31] INFO: task kworker/u8:15:4540 blocked for more than 143 seconds. [ 3152.461773][ T31] Not tainted syzkaller #0 [ 3152.466805][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3152.494529][ T31] task:kworker/u8:15 state:D stack:22648 pid:4540 tgid:4540 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 3152.543740][ T31] Workqueue: netns cleanup_net [ 3152.558320][ T31] Call Trace: [ 3152.566004][ T31] [ 3152.572619][ T31] __schedule+0x1190/0x5de0 [ 3152.582638][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 3152.597476][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 3152.609011][ T31] ? __pfx___schedule+0x10/0x10 [ 3152.622111][ T31] ? find_held_lock+0x2b/0x80 [ 3152.634483][ T31] ? schedule+0x2d7/0x3a0 [ 3152.647610][ T31] schedule+0xe7/0x3a0 [ 3152.660839][ T31] afs_cell_purge+0x41f/0x4f0 [ 3152.672370][ T31] ? __try_to_del_timer_sync+0x115/0x170 [ 3152.689110][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 3152.701749][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 3152.713702][ T31] ? __timer_delete_sync+0x108/0x1b0 [ 3152.729433][ T31] ? __pfx_afs_net_exit+0x10/0x10 [ 3152.741573][ T31] afs_net_exit+0x83/0x140 [ 3152.752888][ T31] ops_undo_list+0x2eb/0xab0 [ 3152.766271][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 3152.782225][ T31] ? cleanup_net+0x347/0x8b0 [ 3152.799127][ T31] ? idr_destroy+0x62/0x2e0 [ 3152.814569][ T31] cleanup_net+0x41b/0x8b0 [ 3152.826357][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 3152.833052][ T31] ? rcu_is_watching+0x12/0xc0 [ 3152.837866][ T31] process_one_work+0x9cf/0x1b70 [ 3152.843462][ T31] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 3152.849485][ T31] ? __pfx_process_one_work+0x10/0x10 [ 3152.855296][ T31] ? assign_work+0x1a0/0x250 [ 3152.860338][ T31] worker_thread+0x6c8/0xf10 [ 3152.865453][ T31] ? __pfx_worker_thread+0x10/0x10 [ 3152.870619][ T31] kthread+0x3c2/0x780 [ 3152.874795][ T31] ? __pfx_kthread+0x10/0x10 [ 3152.880722][ T31] ? rcu_is_watching+0x12/0xc0 [ 3152.887282][ T31] ? __pfx_kthread+0x10/0x10 [ 3152.892612][ T31] ret_from_fork+0x672/0x7d0 [ 3152.897266][ T31] ? __pfx_kthread+0x10/0x10 [ 3152.902524][ T31] ret_from_fork_asm+0x1a/0x30 [ 3152.910669][ T31] [ 3152.934755][ T31] [ 3152.934755][ T31] Showing all locks held in the system: [ 3152.952344][ T31] 2 locks held by ksoftirqd/1/23: [ 3152.962427][ T31] 1 lock held by khungtaskd/31: [ 3152.976692][ T31] #0: ffffffff8e3c44a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 3152.993672][ T31] 2 locks held by getty/5575: [ 3153.000040][ T31] #0: ffff88814ceb60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 3153.010757][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 3153.022384][ T31] 4 locks held by kworker/u8:10/4531: [ 3153.027794][ T31] 3 locks held by kworker/u8:15/4540: [ 3153.061513][ T31] #0: ffff88801ba94948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 3153.090059][ T31] #1: ffffc9000495fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 3153.114707][ T31] #2: ffffffff900e4430 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 3153.138273][ T31] 5 locks held by kworker/u8:0/10149: [ 3153.151008][ T31] 1 lock held by syz.5.11178/27035: [ 3153.163490][ T31] 3 locks held by syz.5.11188/27060: [ 3153.175620][ T31] #0: ffffffff900e4430 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 3153.191815][ T31] #1: ffffffff900fa848 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 3153.202017][ T31] #2: ffffffff8e3cfa38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 3153.212950][ T31] [ 3153.216155][ T31] ============================================= [ 3153.216155][ T31] [ 3153.225068][ T31] NMI backtrace for cpu 1 [ 3153.225097][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 3153.225117][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3153.225126][ T31] Call Trace: [ 3153.225132][ T31] [ 3153.225138][ T31] dump_stack_lvl+0x116/0x1f0 [ 3153.225165][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 3153.225183][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 3153.225205][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3153.225226][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 3153.225242][ T31] watchdog+0xf3f/0x1170 [ 3153.225262][ T31] ? rcu_is_watching+0x12/0xc0 [ 3153.225279][ T31] ? __pfx_watchdog+0x10/0x10 [ 3153.225294][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 3153.225315][ T31] ? __kthread_parkme+0x19e/0x250 [ 3153.225335][ T31] ? __pfx_watchdog+0x10/0x10 [ 3153.225352][ T31] kthread+0x3c2/0x780 [ 3153.225365][ T31] ? __pfx_kthread+0x10/0x10 [ 3153.225379][ T31] ? rcu_is_watching+0x12/0xc0 [ 3153.225395][ T31] ? __pfx_kthread+0x10/0x10 [ 3153.225409][ T31] ret_from_fork+0x672/0x7d0 [ 3153.225420][ T31] ? __pfx_kthread+0x10/0x10 [ 3153.225433][ T31] ret_from_fork_asm+0x1a/0x30 [ 3153.225457][ T31] [ 3153.225679][ T31] Sending NMI from CPU 1 to CPUs 0: [ 3153.355828][ C0] NMI backtrace for cpu 0 [ 3153.355842][ C0] CPU: 0 UID: 0 PID: 27035 Comm: syz.5.11178 Not tainted syzkaller #0 PREEMPT(full) [ 3153.355858][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3153.355866][ C0] RIP: 0010:hlock_class+0x13/0x70 [ 3153.355887][ C0] Code: 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f b7 47 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 0d f3 12 14 <73> 15 48 8d 04 80 48 8d 04 80 48 8d 04 c5 a0 d9 aa 95 c3 cc cc cc [ 3153.355899][ C0] RSP: 0018:ffffc9000fd5f078 EFLAGS: 00000003 [ 3153.355912][ C0] RAX: 0000000000000007 RBX: ffff88806538d430 RCX: 0000000000020000 [ 3153.355921][ C0] RDX: 0000000000000007 RSI: 0000000000000000 RDI: ffff88806538d430 [ 3153.355929][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3153.355937][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88806538d430 [ 3153.355945][ C0] R13: ffff88806538c900 R14: 0000000000000000 R15: ffffffff8e3c44a0 [ 3153.355954][ C0] FS: 0000000000000000(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 3153.355968][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3153.355976][ C0] CR2: 00007f238fdb2698 CR3: 0000000073fb8000 CR4: 00000000003526f0 [ 3153.355985][ C0] DR0: fffffffffffffffc DR1: 0000000000000004 DR2: 0000000000000001 [ 3153.355993][ C0] DR3: 0000000000000002 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3153.356001][ C0] Call Trace: [ 3153.356006][ C0] [ 3153.356010][ C0] __lock_acquire+0x218/0x1ce0 [ 3153.356030][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 3153.356049][ C0] ? stack_depot_save_flags+0x29/0x9c0 [ 3153.356069][ C0] lock_acquire+0x179/0x350 [ 3153.356080][ C0] ? __page_table_check_zero+0x12c/0x5d0 [ 3153.356101][ C0] ? find_held_lock+0x2b/0x80 [ 3153.356117][ C0] __page_table_check_zero+0x13d/0x5d0 [ 3153.356136][ C0] ? __page_table_check_zero+0x12c/0x5d0 [ 3153.356155][ C0] ? __pfx___page_table_check_zero+0x10/0x10 [ 3153.356175][ C0] ? __reset_page_owner+0x137/0x1a0 [ 3153.356195][ C0] free_unref_folios+0xa4f/0x1610 [ 3153.356214][ C0] ? rcu_is_watching+0x12/0xc0 [ 3153.356230][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 3153.356249][ C0] folios_put_refs+0x4be/0x750 [ 3153.356270][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 3153.356290][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 3153.356305][ C0] shmem_undo_range+0x58f/0x1150 [ 3153.356327][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 3153.356356][ C0] ? find_held_lock+0x2b/0x80 [ 3153.356371][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 3153.356386][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 3153.356410][ C0] ? stack_trace_save+0x8e/0xc0 [ 3153.356429][ C0] shmem_evict_inode+0x3a1/0xbe0 [ 3153.356448][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 3153.356466][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 3153.356485][ C0] ? find_held_lock+0x2b/0x80 [ 3153.356503][ C0] ? evict+0x3a2/0x920 [ 3153.356519][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 3153.356537][ C0] evict+0x3e3/0x920 [ 3153.356551][ C0] ? __pfx_evict+0x10/0x10 [ 3153.356566][ C0] ? iput.part.0+0x6a1/0xb00 [ 3153.356582][ C0] iput.part.0+0x6a9/0xb00 [ 3153.356596][ C0] ? __pfx_inode_just_drop+0x10/0x10 [ 3153.356616][ C0] iput+0x35/0x40 [ 3153.356629][ C0] dentry_unlink_inode+0x29c/0x480 [ 3153.356645][ C0] __dentry_kill+0x1d0/0x600 [ 3153.356660][ C0] dput.part.0+0x4b1/0x9b0 [ 3153.356675][ C0] dput+0x1f/0x30 [ 3153.356689][ C0] __fput+0x51c/0xb70 [ 3153.356706][ C0] task_work_run+0x14d/0x240 [ 3153.356720][ C0] ? __pfx_task_work_run+0x10/0x10 [ 3153.356736][ C0] do_exit+0x86f/0x2bf0 [ 3153.356755][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 3153.356769][ C0] ? __pfx_do_exit+0x10/0x10 [ 3153.356789][ C0] do_group_exit+0xd3/0x2a0 [ 3153.356806][ C0] get_signal+0x2671/0x26d0 [ 3153.356825][ C0] ? __pfx_get_signal+0x10/0x10 [ 3153.356841][ C0] ? force_sig_fault+0xc4/0x100 [ 3153.356857][ C0] arch_do_signal_or_restart+0x8f/0x7c0 [ 3153.356873][ C0] ? find_held_lock+0x2b/0x80 [ 3153.356888][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 3153.356908][ C0] irqentry_exit_to_user_mode+0x176/0x310 [ 3153.356926][ C0] asm_exc_page_fault+0x26/0x30 [ 3153.356938][ C0] RIP: 0033:0x7fc7d018eed1 [ 3153.356948][ C0] Code: Unable to access opcode bytes at 0x7fc7d018eea7. [ 3153.356954][ C0] RSP: 002b:fffffffffffffe90 EFLAGS: 00010217 [ 3153.356964][ C0] RAX: 0000000000000000 RBX: 00007fc7d03e5fa0 RCX: 00007fc7d018eec9 [ 3153.356972][ C0] RDX: 0000000000000000 RSI: fffffffffffffe90 RDI: 0000000000008000 [ 3153.356980][ C0] RBP: 00007fc7d0211f91 R08: 0000000000000000 R09: 0000000000000000 [ 3153.356988][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3153.356996][ C0] R13: 00007fc7d03e6038 R14: 00007fc7d03e5fa0 R15: 00007ffcf8fcd2d8 [ 3153.357009][ C0] [ 3153.698774][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3153.698789][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 3153.698807][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 3153.698816][ T31] Call Trace: [ 3153.698823][ T31] [ 3153.698831][ T31] dump_stack_lvl+0x3d/0x1f0 [ 3153.698858][ T31] vpanic+0x640/0x6f0 [ 3153.698882][ T31] panic+0xca/0xd0 [ 3153.698903][ T31] ? __pfx_panic+0x10/0x10 [ 3153.698925][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 3153.698945][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 3153.698963][ T31] ? watchdog+0xe48/0x1170 [ 3153.698982][ T31] ? watchdog+0xe3b/0x1170 [ 3153.699001][ T31] watchdog+0xe59/0x1170 [ 3153.699023][ T31] ? rcu_is_watching+0x12/0xc0 [ 3153.699042][ T31] ? __pfx_watchdog+0x10/0x10 [ 3153.699059][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 3153.699087][ T31] ? __kthread_parkme+0x19e/0x250 [ 3153.699110][ T31] ? __pfx_watchdog+0x10/0x10 [ 3153.699129][ T31] kthread+0x3c2/0x780 [ 3153.699144][ T31] ? __pfx_kthread+0x10/0x10 [ 3153.699160][ T31] ? rcu_is_watching+0x12/0xc0 [ 3153.699179][ T31] ? __pfx_kthread+0x10/0x10 [ 3153.699195][ T31] ret_from_fork+0x672/0x7d0 [ 3153.699208][ T31] ? __pfx_kthread+0x10/0x10 [ 3153.699224][ T31] ret_from_fork_asm+0x1a/0x30 [ 3153.699250][ T31] [ 3153.953376][ T31] Kernel Offset: disabled [ 3153.957676][ T31] Rebooting in 86400 seconds..