last executing test programs: 16m2.396467606s ago: executing program 32 (id=59): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) (fail_nth: 5) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000000)=[{r2, 0x8402}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) r5 = getpgid(r0) fcntl$setown(r1, 0x8, r5) tkill(r0, 0x13) 12m54.843849245s ago: executing program 3 (id=715): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x3}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x80181) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x39b, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x1, 0x0, 0x3001, 0x5, 0x3, 0x6}}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="318300bd700000000000190000000c0001800800030001"], 0x20}, 0x1, 0x0, 0x0, 0x2804c040}, 0x4886) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, {0x3, 0xd, 0x311, 0x2fc}}) 12m53.922348309s ago: executing program 3 (id=718): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000100)={0xa, {0x8, 0x7, 0x1}}, 0xa) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x200007, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_sctp(0x2, 0x5, 0x84) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000302, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000280), 0x208e24b) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r2, 0xc0189436, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 12m51.252804419s ago: executing program 3 (id=724): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000200)) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fe6000/0x9000)=nil, 0x9000, 0x8, 0x80010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x11c, &(0x7f0000000000)=0x6, 0x0, 0x4) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x44, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80000) write(r9, &(0x7f0000000040)="cb", 0xfffffdef) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12m49.729382786s ago: executing program 3 (id=728): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)={0x2}, 0x8, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000300)='./file1/file4\x00', &(0x7f0000000340)='exfat\x00', 0x11080, &(0x7f00000003c0)='\x00') mount$tmpfs(0x0, &(0x7f0000000240)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="40155d520f801e4f9ea43afc5c8903c4f93896d84049bec9b77cdaf6d97f754f9b85e60a19369b196d3df386463a00d07bc34ba0669664e1ad797c8fbe0a03b594bc5f27dc5e76b1baa2641a5867eb8bbc4041cf5bb90b9a06007bee0159c1e32c045c5b2b041c8f59de9f3e35cfd8a33251809c2370cc72cdc64d70fa3a8909df152fd8a4601706a9a2cb2c05d40cea2c7cedd9a89daa30b38507ac07701aa27184c29b16d1f9a7c8ba1896741f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, 0x0) 12m46.607999106s ago: executing program 3 (id=735): syz_usb_connect(0x3, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548010203010902120001049570810904006641f392ff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x77}) syz_usb_connect(0x5, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x87, 0x28}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200300000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0xc00, 0x8a10, 0x0, 0x0}, {0x8000, 0x3a01, 0x0, 0x0}, {0x8, 0x8000, 0x0, 0x0}], 0x3}) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000040)) 12m46.245529006s ago: executing program 3 (id=737): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x6, 0x3, 0x401, 0x406b, 0xffff, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$igmp(0x2, 0x3, 0x2) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8f4342e76bd1f3ab6718d61d89d6b0686a1529f3bdc62920a73e6ea669bbd59a7cf81e62ee7a2bf4e06d4b09492a26b4e0b695956e1c8ef784af57d86b6795e15954248828e620a48148e0ba87e0b5a4c9fe9e17aef166c24dcf15a28479d788e737ff78944cbeab26e64db096e529010f2d0d9da63959f70246f4c98e14d6e89a9737f591111e64860f435077e48f4935e95776909a5b02d451e57d94d68279c66da04b5720ce697ce851f1144a0b8eed94cd7126ac428314414c97862a516f10f7b2fc1ea37565fc3f456fdb48becb949e04c2967b46b77eb19742831657018675", @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf25730000000800ef000c0000000800ef000f000000"], 0x24}, 0x1, 0x0, 0x0, 0x10800}, 0x4008140) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) fstatfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/65, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x4}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121801, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40081271, &(0x7f0000000980)=0x4000) 12m45.350634908s ago: executing program 33 (id=737): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x6, 0x3, 0x401, 0x406b, 0xffff, 0x6}) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$igmp(0x2, 0x3, 0x2) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8f4342e76bd1f3ab6718d61d89d6b0686a1529f3bdc62920a73e6ea669bbd59a7cf81e62ee7a2bf4e06d4b09492a26b4e0b695956e1c8ef784af57d86b6795e15954248828e620a48148e0ba87e0b5a4c9fe9e17aef166c24dcf15a28479d788e737ff78944cbeab26e64db096e529010f2d0d9da63959f70246f4c98e14d6e89a9737f591111e64860f435077e48f4935e95776909a5b02d451e57d94d68279c66da04b5720ce697ce851f1144a0b8eed94cd7126ac428314414c97862a516f10f7b2fc1ea37565fc3f456fdb48becb949e04c2967b46b77eb19742831657018675", @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf25730000000800ef000c0000000800ef000f000000"], 0x24}, 0x1, 0x0, 0x0, 0x10800}, 0x4008140) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) fstatfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/65, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0x4}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121801, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40081271, &(0x7f0000000980)=0x4000) 10m38.089497499s ago: executing program 2 (id=1186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) listen(0xffffffffffffffff, 0x0) mlock(&(0x7f000040b000/0x1000)=nil, 0x1000) setuid(0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000002c0)=@file={0xa}, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'fo\x00', 0x6, 0x4, 0x1e}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)=0x3) write$ppp(r8, &(0x7f0000000440)='\x00\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x74, r9, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) 10m36.436409525s ago: executing program 2 (id=1189): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) io_uring_setup(0x664c, &(0x7f0000000500)) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000440)='syzkaller\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x0, &(0x7f00000015c0)="b1", 0x0, 0x2, 0x0, 0x7}, 0x50) r5 = syz_io_uring_setup(0x507d, &(0x7f0000000500)={0x0, 0x0, 0x10100, 0xffffffff, 0xffffffff}, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 10m36.382048484s ago: executing program 2 (id=1190): io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x88}) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f00000004c0)}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a"], 0x40}, 0x20000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) rename(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) r7 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40046201, &(0x7f00000000c0)='\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 10m36.284076696s ago: executing program 2 (id=1191): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000940)=ANY=[@ANYBLOB="00001d4c8dace3afeee608e4466800"]) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x10) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) (async) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0xe, 0x2, 0x87, 0xffffffff, 0x40}) (async) syz_emit_ethernet(0xf5, &(0x7f0000000a40)={@local, @empty, @void, {@x25={0x805, {0x2, 0x5, 0x1, "cdcdd91a1a376628b945bf7673c85883f16625a1f5e28f51944eee4e87c65cfbac7a65f3e1f4c2225f9e61ab45ea572826764d144c6b19f731f8ffaba4e8cbee647f37aa47e1f39b32ac5fb3cf50df3106d4e0c27822b4ebcfb76c9df21cdc69f91e500a2b503fa66d8bf19dce6055281cf6da7505911ebf736a9b7e16f796999f5ff0839c5299e9f1b806201ac1a96161e416d5f4ee98a1533faa79c84116a607c6d1d74a0f5532331defdc667467e012580fcf24ec718850920e5aafc53d3c1079309374c6ed9123afaa721605c374bd52b3dc29bec48dc2b1e98ab45a259a64199282"}}}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4, 0x5}]}]}, 0x30}}, 0x0) (async) pivot_root(0x0, 0x0) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004540)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) syz_usb_control_io$hid(r7, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x5, "63b6bcef"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x9}]}}, 0x0}, 0x0) (async) r8 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) read$hiddev(r8, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r11, 0x40605346, &(0x7f0000001240)={0x0, 0x0, {0x0, 0x1, 0x20000000, 0x0, 0x1}, 0x5e}) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r12, &(0x7f00000001c0)=""/4068, 0xfe4) sendmmsg$unix(r10, &(0x7f0000001300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004084}}, {{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24048010}}], 0x2, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x6, r2, 0x0, 0x0, 0x0, 0x80000}) (async) sendmmsg$unix(r9, &(0x7f00000008c0)=[{{&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000680)="71c07f954e4f2b735c47536f4ab2161ee80f0e27ee7ef8000957e437f537371525e831400e467d9f8a42e04dd266fa4bd1317cdc3187ce3bef7f77d435a8c8262fa070e16ca3275a4c589316b8a18c91e46c7a74cc64659cdfb4350bab01eda11a651bee289537703a4761843d37123e97c9a41263ab1234b89675866e755ce93d8b41039b0a262034a99d991a90347ebeba6db987fdef993727022462a15391e23e5c", 0xa3}, {&(0x7f0000000740)="daf2ece39b50a2df781ac5cf8307ec51c4baf0050b08ce4f8885299bcb18db26783d20094f83d4b6b16fe18f4fda8b", 0x2f}], 0x2, 0x0, 0x0, 0x22000800}}, {{&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000840)="b21c74c0959a52fd409c630f164a1de12dc4b3c8b0", 0x15}], 0x1}}], 0x2, 0x41) 10m36.245148293s ago: executing program 2 (id=1192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, 0x3, 0x7, 0x301, 0x0, 0x0, {0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x804) 10m35.869738875s ago: executing program 2 (id=1196): r0 = userfaultfd(0x80001) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x70bd29, 0x10000000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3000}) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect$cdc_ncm(0x6, 0xa5, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x2, 0x1, 0x5, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "13aede"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x23a, 0x10, 0xeb}, {0x6, 0x24, 0x1a, 0x7, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x4, 0xc55}, @dmm={0x7, 0x24, 0x14, 0x82, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x9, 0xeb, 0x81}, @acm={0x4, 0x24, 0x2, 0xe}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x0, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x1, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0xff}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xff, 0x9, 0xf5, 0x20, 0x7}, 0x137, &(0x7f00000002c0)={0x5, 0xf, 0x137, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x9, 0xfff8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x88, 0xe, 0x2, 0x8, 0x5}, @generic={0xe9, 0x10, 0x3, "0df3b0e0162979556533811125ccb9d9d580dc8e917a0f23aca87a40f00d567ff4542c79ef455161ecca17dade5d010473696c5f20f53c67c7e522380aaf1bb4cfb94b4e08c71afed81fc1e777d9057974efece06d2d79c353ea1099ba213f9a33f4105cdfaf737593df30d1b6b845ec0441390a23b6c411d33f3b2a12442bd6556730672996a4e5c2195b9fab11c5751ca006ec4a05740b5438f3736f0508ce4660786170c13a866934ff916404840a7d4b613f77bfbae6f48445d5b1008f3359b6514aa201a34b065caece3cac6c9e508f1e97f12ba3c453f93a32ecd53b1013578c68ad42"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "6536baa366175971ce3e8f36be7958f3"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x0, 0xf000, 0x8, [0xc000, 0xc0c0, 0xff3f00, 0xf]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x2, 0x1}]}, 0x6, [{0x45, &(0x7f0000000180)=@string={0x45, 0x3, "f31008336af250d0fcd742a30da203283a0309740cc7c9164b76bf3e79ae4f08e5a55410d86172e123ee6ee17de9f5601b4a16fd027a673811f978d08d224af9cb97d5"}}, {0x14, &(0x7f0000000200)=@string={0x14, 0x3, "c36f1c176f6df33dae61d15f061a302e9f8e"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x380a}}]}) syz_usb_connect$cdc_ncm(0x1, 0x8f, &(0x7f000001b000)=ANY=[@ANYBLOB="12010003020000002505a1a440000102030109027d0002010780000904000001020d00000724060001bcf105240000040d240f0117000000080003000106241a600a100c241b0b009000fff274f4fe052415040004240208052415050005240103070905810320000706820904010000020d00000904010102020d0000090582020002080180090503024000e809091f3372672ad41d86aa0a96a5319a3bab81197b8a166ead8651a2c0023cb4f357590b0bd4807d2a92f4ec805cd889020d470e600eb814911bcca45a22a26a85ae25fddb5ddc1d7c19017439217f6753"], &(0x7f0000000d40)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x310, 0x9, 0x1, 0x5, 0x8, 0x7}, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="050f0c000107100204088e9a73af3f035d9244c1428bcaa87b010065ccfe3589c164c61866cc9e35502658ae5b554838c171e1451cfe7f4dc7fa8ed48ea66bf08227bb15f5621b04d785eec1adce0dce0eac3f59f1946d497510a51569cff2d33277dc61a0a47ed46040729c35ba606ae0da5fa5be5c1a20233b73339d303e8d0b"], 0x5, [{0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0xc01}}, {0x81, &(0x7f0000000c00)=@string={0x81, 0x3, "facf65e3434e8b4b05a896872424f49fa7de7349450b84169fd42497fa5a31997e6919e862167c57eb891a8905a9a55883539f58dd2f7da5e45a8c5143aa739ec443c29338c71c71d13f54b5e97a19b93b80fac9e735cd89fdd757890bfb156ac628397bc7bb8659f73bfbfaeab8639da13219e533d606afb079356d7b6655"}}, {0xfffffe1e, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x1404}}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000740)={0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="400b900000009021f1a3ae1959c1916ebd4bf30555adbdc427e5606cb496a563d270d1f847f167af9d25d9a5a6ed5cda130cf151ac1abba0cd542f9e3e5752c7cd7ec6a90936db2254f61e8426e7cf1da3bab85c5b094236a5cba7ccd9259c02864c76405dd5a31be3b607ab5d0af05875024bf607a7caaed3dcc2d13f02c919073fafdf81ff5bbb7ea5a1bfbddeb665"], &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000780)={0x20, 0x3, 0x6f, "c8958383307371918b67cc94f9a2a3345e959962394d3df8fecdcce2825c5ecd7a6a0c3a69414d5a490428ec41f10345199f9d62ab7f27855794f075e7672d9b413e8c80de8318af28879ac4265a6645a6d385262c8ef43e716c3512275ff3530ec5b2b75076fd07eb3387fb32140c"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0xfffb, 0x3, 0x1, 0x6, 0x5, 0x3, 0xe, 0xfffff939, 0x8, 0x5, 0x101, 0x2}}, &(0x7f00000008c0)={0x20, 0x85, 0x4}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x100}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) open(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x284800, 0x30) mkdir(0x0, 0x22) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r6}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3ff, 0xf, 0x8, 0x80000001, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x0, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x3, 0x3e, 0x20018e, 0xa, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x1510edcf, 0x2c3, 0x6c7, 0x9, 0x0, 0x3, 0x7, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x100, 0x9, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x80, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303e, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x40200, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xf3, 0xa9, 0x20000005, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x7, 0x1c, 0x120000, 0x7ff, 0x2009, 0x2, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10001, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000006, 0x150, 0x1, 0x6, 0x6, 0xffffffff, 0x80000004, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x8, 0xae, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0x6a, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup2(r7, r7) read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000) 10m34.9238777s ago: executing program 34 (id=1196): r0 = userfaultfd(0x80001) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x70bd29, 0x10000000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3000}) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect$cdc_ncm(0x6, 0xa5, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x2, 0x1, 0x5, 0xc0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "13aede"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x23a, 0x10, 0xeb}, {0x6, 0x24, 0x1a, 0x7, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x4, 0xc55}, @dmm={0x7, 0x24, 0x14, 0x82, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x9, 0xeb, 0x81}, @acm={0x4, 0x24, 0x2, 0xe}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x0, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x1, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0xff}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xff, 0x9, 0xf5, 0x20, 0x7}, 0x137, &(0x7f00000002c0)={0x5, 0xf, 0x137, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0x9, 0xfff8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x88, 0xe, 0x2, 0x8, 0x5}, @generic={0xe9, 0x10, 0x3, "0df3b0e0162979556533811125ccb9d9d580dc8e917a0f23aca87a40f00d567ff4542c79ef455161ecca17dade5d010473696c5f20f53c67c7e522380aaf1bb4cfb94b4e08c71afed81fc1e777d9057974efece06d2d79c353ea1099ba213f9a33f4105cdfaf737593df30d1b6b845ec0441390a23b6c411d33f3b2a12442bd6556730672996a4e5c2195b9fab11c5751ca006ec4a05740b5438f3736f0508ce4660786170c13a866934ff916404840a7d4b613f77bfbae6f48445d5b1008f3359b6514aa201a34b065caece3cac6c9e508f1e97f12ba3c453f93a32ecd53b1013578c68ad42"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "6536baa366175971ce3e8f36be7958f3"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x0, 0xf000, 0x8, [0xc000, 0xc0c0, 0xff3f00, 0xf]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x2, 0x1}]}, 0x6, [{0x45, &(0x7f0000000180)=@string={0x45, 0x3, "f31008336af250d0fcd742a30da203283a0309740cc7c9164b76bf3e79ae4f08e5a55410d86172e123ee6ee17de9f5601b4a16fd027a673811f978d08d224af9cb97d5"}}, {0x14, &(0x7f0000000200)=@string={0x14, 0x3, "c36f1c176f6df33dae61d15f061a302e9f8e"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x380a}}]}) syz_usb_connect$cdc_ncm(0x1, 0x8f, &(0x7f000001b000)=ANY=[@ANYBLOB="12010003020000002505a1a440000102030109027d0002010780000904000001020d00000724060001bcf105240000040d240f0117000000080003000106241a600a100c241b0b009000fff274f4fe052415040004240208052415050005240103070905810320000706820904010000020d00000904010102020d0000090582020002080180090503024000e809091f3372672ad41d86aa0a96a5319a3bab81197b8a166ead8651a2c0023cb4f357590b0bd4807d2a92f4ec805cd889020d470e600eb814911bcca45a22a26a85ae25fddb5ddc1d7c19017439217f6753"], &(0x7f0000000d40)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x310, 0x9, 0x1, 0x5, 0x8, 0x7}, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="050f0c000107100204088e9a73af3f035d9244c1428bcaa87b010065ccfe3589c164c61866cc9e35502658ae5b554838c171e1451cfe7f4dc7fa8ed48ea66bf08227bb15f5621b04d785eec1adce0dce0eac3f59f1946d497510a51569cff2d33277dc61a0a47ed46040729c35ba606ae0da5fa5be5c1a20233b73339d303e8d0b"], 0x5, [{0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0xc01}}, {0x81, &(0x7f0000000c00)=@string={0x81, 0x3, "facf65e3434e8b4b05a896872424f49fa7de7349450b84169fd42497fa5a31997e6919e862167c57eb891a8905a9a55883539f58dd2f7da5e45a8c5143aa739ec443c29338c71c71d13f54b5e97a19b93b80fac9e735cd89fdd757890bfb156ac628397bc7bb8659f73bfbfaeab8639da13219e533d606afb079356d7b6655"}}, {0xfffffe1e, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x1404}}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000740)={0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="400b900000009021f1a3ae1959c1916ebd4bf30555adbdc427e5606cb496a563d270d1f847f167af9d25d9a5a6ed5cda130cf151ac1abba0cd542f9e3e5752c7cd7ec6a90936db2254f61e8426e7cf1da3bab85c5b094236a5cba7ccd9259c02864c76405dd5a31be3b607ab5d0af05875024bf607a7caaed3dcc2d13f02c919073fafdf81ff5bbb7ea5a1bfbddeb665"], &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000780)={0x20, 0x3, 0x6f, "c8958383307371918b67cc94f9a2a3345e959962394d3df8fecdcce2825c5ecd7a6a0c3a69414d5a490428ec41f10345199f9d62ab7f27855794f075e7672d9b413e8c80de8318af28879ac4265a6645a6d385262c8ef43e716c3512275ff3530ec5b2b75076fd07eb3387fb32140c"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0xfffb, 0x3, 0x1, 0x6, 0x5, 0x3, 0xe, 0xfffff939, 0x8, 0x5, 0x101, 0x2}}, &(0x7f00000008c0)={0x20, 0x85, 0x4}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x100}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) open(&(0x7f00000000c0)='./cgroup/../file0\x00', 0x284800, 0x30) mkdir(0x0, 0x22) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r6}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3ff, 0xf, 0x8, 0x80000001, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x0, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x3, 0x3e, 0x20018e, 0xa, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x1510edcf, 0x2c3, 0x6c7, 0x9, 0x0, 0x3, 0x7, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x100, 0x9, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x80, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303e, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x40200, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xf3, 0xa9, 0x20000005, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x7, 0x1c, 0x120000, 0x7ff, 0x2009, 0x2, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10001, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000006, 0x150, 0x1, 0x6, 0x6, 0xffffffff, 0x80000004, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x8, 0xae, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0x6a, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup2(r7, r7) read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000) 10m19.878889466s ago: executing program 6 (id=1254): io_uring_setup(0x6e1e, &(0x7f0000000100)={0x0, 0x23d4, 0x800, 0xfffffffc, 0x88}) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f00000004c0)}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a"], 0x40}, 0x20000000) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f00000000c0)='\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) 10m19.675963791s ago: executing program 6 (id=1256): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x700000000000000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) rename(&(0x7f0000000340)='./bus\x00', &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00') sched_setscheduler(r1, 0x2, 0x0) ptrace$getsig(0x4202, r1, 0x6a5, &(0x7f0000000240)) syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = socket(0x28, 0x5, 0x0) shutdown(r2, 0x2000000) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(r1, &(0x7f0000000040)='net/sctp\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10m18.295298579s ago: executing program 6 (id=1259): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x2, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r9 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 10m15.278269458s ago: executing program 6 (id=1267): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9362, 0x0) open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x120}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004280)="c9614df797d5bbaf2d529ccfe807cb2396820ca614edc8f52d067330a81f6c26f4cc0f48e5ae1d42335297538a44b9b28f2d36c39510bcdb6cf2fc17d9b35688d0447cc7167668496bdd28d8df1292b12b61894268f707c212263b3f1ae188c8a69527ac8e196f23028853fd4009294124f18fc47bd2322220e5f0d5d30223095e4e748803b6bf25ba87f40183766b5d2c3a6b3d2f7566b160f0e0742a6cabf6b0071295bc4d5ca4ee60a1fbdc8bbc1f2a59428bc836a1ef0c2dfcbe514f9857f7230f848af37be100dc4f4115ffcb0198774affeb7690dd6782a9f51987dba5d9fd0b6a3426c1ce1e04e48f4255c157450791ba022f0bad4844a22679bb17601987f461d7a35d7de8874cc3c47f360b3c31dfdbf7bb9f93ec80046118660e8bbb18930914f087c05df436073b9ccc5a740f8f634cc827245366b1179aaaddd2bd161f2fa413e1beded9f3063cabd52ece7139af17db00b63117a6b6a1ad8c33ed779d7dddf5b40c17635397b878c7117923f26767864e788da1f79dbbc769fbab45b34198b69dd0599904a0c1297812f9ad9cbf48c59d553b1004ab8213802f3a0852b5b827ab3ea7220873b379b459d7a09af061ccda8bd857d3b2bf2dbaea1b00e2cd0bcc8d6eb11c04bd21532bec66ae36d674a4dd01ab54c27d3267961ecfad0042837fea87d75cecc7a1a58f79f77d72fede0757b7c1f54a5040e741a0fc785ea0ad13bcfc0b69df4dc29dc75e331d2ba03c3cdf04e0a4490159b43c6ae2c010f276c85f3bc46ca94e73e11762739e40e6bfbc113f46ee6ab801b97d42fadc067e23a3151ae90ff64c80e64bba5313475948fbd24a6a95f7ec0b221c9f901c68d184d38b2e09cde68fbd6dd022b6fa1db26aa6ebe2128a93fcb7259ebcde896bd81685c881cb25f581e27479f929e1094852559209c255b0dd5317b148567674b235b10e093363e8e4bd15c4ab90c44abaadbfeabd65e26223543c415befff4d280ad0f0dc132b5413bbe96fdedcabc55e9f3eeead53a1f2d7c0455c8a3bda363a8c33c99888a05546f49dc4c3593aeb30b8ea314b77b8d117334d9c3f800a132e4c3bab461863f027dcfc066bf93f0426d74e02c92a0727309d5bf5bf8242a2b594b81de0e030e55f0125b5d4e12dbffc6806a6c7bd6d62c3d54e87f0607e08750d808a2f442a7eac0ec311c3498b9709ae2f505d5e8b3670079847644147741ffca679bbd1b658bc6c422e58d070f8608c246677af0e2efff5cbf88b3b4a0431a2f26648d64991cf99848012cb6eecb8a13ea91ce77d3c8f2bc047370f4811ae5c341371e3b65bed88294580ba90258c8d36683f21d91a8a914948b2222e4127b061cc0121b97a1b9b1c4ebb7ee166b5af58497d7e0ac90fda25e41a2490ec5d143d0e47475741b30138585637d7997fff2a8805a88c4bd75975ccffcbabefa3576328d86e802b8490e8a773e01afa74fa26c6849deb15b05596e7226cdc0c0ff364bcb4e62ec54984c9485b6eb819165972b9c935a3ae18c698438582e170437c538d7d24a935036964c77e6ed37de77c64384b258f7bbe944f630d3ca82c441c6b2c5bc73dd9f90ecff67a816de7b15bdcaa5a5f1bb8b270a8ac1119e1626e29eb5f2ae4595ca2e10c2e6b297c30c3eeb432ad374101938916c77aefd2ed0f5bb658922bdec9bd76767b9a4b56a15aaa2f7e7d06dba36710a4c8d69d2361aa5f1864710d0868d8f7616cffac40e0accd9b44df8cb5b5324039d82c44e9b97d3a77d914a3738cab84541f0dfc2ed93fb3a746d19cf73495cab380afcdac8acf300e34bb68917009ec1d205dc315669c6341218ebbd0a380c0d14396732e430544ea02d9aff1ffd199c475c4cd313aac4de1121055d806858ee1538436a5f3a549230a42698aeaa3b58b5b9dbf6e11292dad9e0535f5c0685105a448888101ca2228ab50af16b657bb9abb5d4c40cf03931f345663ef6e7655048f78bd23227c6a78bd8b8a457abad7267c8d3ed8decb74cfb21c98471c31f068fd8fea32f13d4478e476d7b5ee10579bda100686db9b3fac14b71e614fd156bddbbde1bf759d0023eb50345e970fa93efd99469583eecec690147f3c075da4efeda849b172829f34e31b281d844fb7c04ca49b30a15abbe493c191e003b76ccb8b2e560ddc3573c6182a87f8e5bdbe10333b3ff3381705984e5595831c025335d0438b053d17fe2f43424735ec3e9d0e8dc278d9e3f35d8d6881e47801d9f77ddf9954ba8f4fe95c295a67968b07bde6378b5ccf24f3d0d228b3cfb4624318828a2649af11698c56860c85617a5151f879846383f5fcf0e9ac483bc4c60beda3bd273a594fc26850d31a852839f23f9e5ffd31d63a7cee2341f22f385d41521aacfe6faf1c5b1e024cd6c6cd4b8696b8e66c6268196da27dc4090552748260bba916b932cbf8066b07dbf5f75b5ea04c385d2ac971d079ab7d4a6bec1008b7564f167aa903acda2ef1756ddbdee86ad25b172479756036d1e11b5c2ab10e657e3b3c768840fd111477bfa05b9e7a2ee765d685f7688765f2441e052a60f56286e6d15ea19d98306a0a5b5efd5b1363bf357d836cb20bb2420ecff7fd682c78763bd1ab31561e6a36a20bf57024852e168bdbc82efa42f7302dc5519c2b56ba3e960437e69f5502048e914540bd4e6138e04e3cb04c75abaee441dd29e23a23948eecb2a7883ae6f3c35b3a3a965fd062688a5975059da47b6029f38baec8d3932295a2257c83a0f966aa7c19db13ccadb86c6c81d84a09bd0782cc87369c8b3a006fee64323c964dcd731fbcaa2f1c1b19f55688365f183bc26bcb636eb0622fc5f5804d46db493737078fe6a6e82f34e48eef5974787c8c4b8abd8a0dcf516862454915b7b9d81a48b9d14a3a08a9408e41c3522480a925cb9521f02cf4380aa44796fa9569aa5043787d9c3a0a345f202d66e28f6c5fc17f8998655bff0351687e2ef6ee523f965d37ed7c4c1fedc51ad7024d8c1102fef833ecf9289050b944e2e9a5646e090f5ab5be3759ea66ee79d5f870fea4ed505a231461421084317c6c5379c74ba5eef02b77c9687f49b05606c5969ae5c84f74a7d43b148dddaffcbd45e8c4eefacdd5c8c07f926baf0b1e7f65c7184c56c9ac355fde5df39557d4011b7eeb65a18fca8de446d9879404bf64f3e460232642960938e6c797d3d942534fa64b9fb0ec5648940456ae4ec22df6ccbaca34ff8a296640ed28f903db33533e0bb4927ac96312580810a38738d5c5ae638359379d244d0c45cc9bc4525648748f4a2becb101c08d7c4ecc407067cf1008cb0f14279bae658ea5f16084769ad66a8e6a9a5137ec65764ec6d25e688cf8a357252420b1ba619e8ab19d28019060434a9d2579be998e8a735778b690cad9512cc9604d2e60e01f2cbb714dbfd87795092e0ff7acb8217074a6d0b9ae00d80685798eb4bee828dff6e1f6858202381cb4051c6a5b6918f8c042a3698ac5eb402abc1f27932764ebd54daa45105666041c1a51e55bf1761c2dbe2c75a511b168f4961385d1a7b7c780fc1c23f1710b7c1e4716e99ed044ce4697fa3b649bc85443ef1b111549d342cd2a417158d01c483e6a2d6535a5801c00f5a7bb47a0d51656bd50824b2f998ea59cde88a7c329e09f19a704104309b674e9b6dd48acd0abee6366ae1ccc24fc2cb1fc0666e71c57e314464c2f2b950b76d426441265f34ae20af7e5dbf47773459f2e34a3b1a2af5d2f406cda82049ca734f22c6ac5e284c4f4c3f10edf89ba7eac611dfd27c46fbad61aa3c5acfd1a29611b917a26ba070169f08e81441e7d6f77f73837dcf6c758c40fecebab6475fee4a6105c844fc52eb603159d4762408911fce84b736a4fae34cb79dd525ebdd53b3b241a08c664a90a6bab087052b82db1f0a9e2f98b78b4998504b148711f47caac7229b708a562e6968b91720b585b2446f7f8aa848d433ebdf0d9d5c866ae7c3660f0be9734959533da9b9484dd10954c7bbc631fc07cf74d1a103076721639a19dec9ba88904c55c3d0e4829d14e48c3f93097521c4a9f4fbcf7b0d17baa7b742afd32a2e78be29f6fb37018bd0579af59985171a8dd5dd35af833fd8816cdd704fa5214260994cd64bae6c7d1376b864874de542dafb0a5c4b29c5bd887bf1dc8ec0e2f907fcffeb6522a3aa20c8ae5912b519049719cba277be7bb6c4341d65fc530804dec7ce5c1a64c4aef279c0da8a1bcc89a63542fc2af2cd1d69701c78db225c596190e81fadabd718b794689fafc929ed092b90218642ae0c75ffe6b9fa9baff10f2424d43ecda2867013d4f2e7562d3bcaa7f51f1f5a96bcc9bff8dd1bce4eaaf49626550183dc19eb358c146b657c2b34fe67a8ecb12b1b29b3d0bf28d6ecc13578f7d1ec1c7f7f76f325d920ff717c7d01baffa0d52166f6849832895f9ec960c65b06506caf39ea6ececccfa197ae151b948d415338c18b3ac35f6f96e67c7662de01f8a92c2a224f4567fc72333b43fb099dda8c49c3cbaee48cff545894390165fc290d798888a84c583b0096513a5c61b2ee1e836b17632cff8f71f9c73546882961cf25a010c7276791167e0dd7d2de8bf44abe9f12419c8776d84418d8e26463ea139e64f82f81fc5b577957f6d34b247a6d7d79aec95d80320b7999f398347835d82a74f3f5637a37ca08158d4022e39ef514f264ba84dacb3c5270272ae94ee3858eaf4de98e8d944273398e315dc42a277fb97d9ee7ddc4f7dbb6cbdbb9283ff1ecbde638ce6edeb18e680addd942f6632e73fc11ba5874a179c79ae67a6406d19ab7293af407cd319862fd4c9568a3bcf31a11adc4ddd8a924e10768594e4689a109daeff28f15a182ee3bfb347f0500005d8dcc691421b6fad377a9ceda726d195eb847ee879664861d4e2e0d3567362524303feafc2b552f0f1f64436ce9efaa63b2b268c674969c879d027c37aca197b71cfe47670cc268de9714a91a3a50c7c205daa613c56c1b1f13d34eaf8dbfc126e0e9fc10cd3e508154e6cea0572e179e424d2270454b1000a3bf4aac26b18efeb9115b6fcd3fcee6ed5b9c3d585394077c35850ef697c5f8a57a270431a0a2e81f6a6269bff09be4da7640fb600130375de62e9796eed4e4e25bfd3f6addfe62addcf2b8fa8eb28d8c3fb20800a8e9ae87c114a1ae91ed347f8ff589cead9e646722180fd60bdc9d0923a1a6ec8fc6de5fadc2203344d459ef6f0145ff71a4cacdabaf1b55f262c86733dd109b747f8740a3959a13a32377e522997fbf93c41fe3408a67d7253df6e399345d9216600f82fefcba9db303442ab3f184c012b1359e8601d85d6b0312ea7b0474d0c8dbca06625643e94ffdacd9a0a2839674249370fa67a5681df0442079cf67bd073859cf3d423711639f8addb6a9acceda893f017f3ca1f23f1245473be8bc6b5c51afc5d088fc764b3d96c9bbe7908806e2b64908bd0be73aa09eeb09de1117d0159b17a166bdb1394892b815aabb68dd7aef00bb6660a31088c88d16d433079552f25801472a7302a44fcdaf13410d15ab5e690cabdfddf112046f58ded90f4d4cdc4de5bfbc5259456ace66f7dbde5c49446d377b87181f0ba03598973137ec2f9b038c0a8ddcd46a6d963086c383c9e86b98fafc0a3b8d7ace5e5f96a0414a4afd5ae75847997f982b338901d81a852081bd47ccd553c2a41aac73f2381e611c8c2581052779e0494f0e1efa0974e11659866f8687fae4236556988b24e0bfc2dceb6f71fe09ee3b4e723dbf369dd22b7889ba296d8c4062aeef1113839c793e4bf16a35b1388ec6af47c363855e03137e9e1d4795beef29d4bb62d611e14fd8f880ff1c8267f259b46229b96bd0e8f7068503b223fc01ba9d8986c601e9807bcd3c232babbbb3112c87d7c30ae496841c03b361045a31e9819b69ec7b94a12d1793ee0b9267a3f9b77e965d1089a2356c46a05f6facfe3e1fe10f5257dd1e83972a9bdf1275ed03ee0c32d8021f264ecd67f635051c9f51f69d4848876c7d68703cbdacaaac18c1ea5e43d9554ddfaeb22f72e73e53760ca15ee52fee57e153702f7f78001a282c8389adc9f1a9b33bda27d4ac6b29dca8b082db3f858df468570d2c099a2b2e5c0897e0183ab8b4dfb62d65d7492347d51ed7b69b414d0de1be678664c7209f849d62d0a5e3a64daeccd1f332831c4b91a11a5c48444e39cd19d0e45120d5ac9c03856df66c8615d359e2f89484a068468a3e319166631932b643d73ad3879b8c8854232384ec62bf7d3c68c51deacdf8685870842e57464659fc9cbfe75f97d8a34d730a74828757661040f9f2cd1832d4c15cb774e0af4d4d0dad5e0098e580f6259bcacb3557fd8442910c8222feb58104d075ef976218a6ceaf10a807b0df2fa5b08945ad17dbc17cd88d7a9bbe2d21332d2ce8a29abbfca7df2f498798e0cb0846c10e4a900000000b06902f15d8521c10def1ddc94e4f563252894f844a3ee109aec35f766001520926351795ecaa582e90598503a22a9d75bd60c8cb631897d98ea5d66d8f9f06345bb889c4aa21115518b444c2d9d45de72abc73659aafc00465cd3564834389576c5c04f911e2ac0082d72c58e2cec954e6ae72dba6c8b7ed682f488e81bc706d34c723fa3a7ba967b6b00e1abea0e7622a0d9ca17d403bcbf5e2316ab4d46734226ed6797c84161384fbb46b8fe8653cd351e526cca50e7ab8885dd7b5d240cfd15a0253830a7ceb9db44bb12529b77e3cc835442b4d58c7db6a762b7e2c5a3fb37ae9f1426a99823c2df6ca2f6fbf886af52e8565abb7904da69ad7f7029cf73ecc37b5a8c1da6a9e9e1cde38506c96bd7c8d2303d494e422fe181c96a6359b377f18917ae78729911b40b7e69cbefea3c25dd9803aee3183ee3933b5c19d84a400e6c57cb20dc7c7e68739edbf1e8e3475e0a64823dedb46c27781adbb906f82e1977a6101a9d2b44b4b9bfc1f102490ae19e657fa8e7f432eb52d2a4ce932d5346566b887ad4c4f4b5d0dbce790a429f546593e52979c8400441bfe8485c8b864f81b627cf1e20c800b0197b562d0f9b173ca3ba0fae69fe11b91909df9a98ba358e59edbd73da0707a170b3e51928c9c27863dbc83bdecf632b0cc757ab90a270312b2949fdd93f6bea54e303fb0a97b380d516a36f86f053e55e81504affaf7d7b1b8bbde5da525d3f60a628ae17918e07b32b408b51ad3ba6030c3555556334f2fe7c11098007f3e232c8953754c794f807b0ac3680b2a3688f5205d90ccce3ba9c7907508cec61287ad0aa55a151e639bb9086444bdcd149bc5c003340b8381d8c35b073729d2e95a21af1d9995c8093d570b59d8730dd04f3e26ac85e20166e5596082680de90522bcb9532d9e9dce3a10e998f25503902fd7814577ded668bbf3de129c024135a8af420ded350479f13d55290274e3ac63f4568ec7c7a8244f610458d85ecf29aa135d0e56ee52d743200a754ee4508e94d5bc15b3cc8a28c8f37de84fb3cf27ad7590dcaedb78fd8c8f46aaa3529fbb1a2536956c940b605eda0668b1a0f763060bba65d471450a2b34c328c9fb5971851b341a092e315e34a6801cc0808559e5de6d2d9508d11d3072426aa2d43e65f8429c48dbd03197c4f616c253a5b1b50e7ff7cd44df88f5f142997adf976cd2f0cffd673c1791ab969f9dad5867abe531227c059e7b7a9c2343aad230c83513a130ce6e0c4d6815e2bd91f99b6c514703f50fb43139f2e83c521b7e5a3ff4603f006bc7d162047e647234b87439278b10ccd92a4fca136f74d211592235e602d3643fa190cecc8edaf2d727dd5db07f9873048b1f75e19e7c39ef839c0703ec53f70c9fe39b43b98fdacd56b49a416e3b8c66604fb912e3672b8b1a6c5ff7db16320b599513d39460098138b7336d9152df98179f2e07c5abffd4ecf8a2cc8903a40563f187da3a99071bf0c93a65708cb36cd6a69545b78be13a3df9b6c2200ea982d3b428824cf257184ee93f2d0f3168d4179d238497b84cb73abead20f710057b52ed535adee055081cee4aa842c82c220c160477c16bd1baaa73f46442d2a00658303a9433aa858ce890ed80fa04b592da3c3452a0810f759cbfccd7143d10427c1d39b5c5ecffc590377ce68976315db340e0c00d35d34bec22cfe95882f52f40248281c94758c809d5e65cbf9aeb2dffbdbf2f9a7d10dcd6e7eccc5781851c26990d4a2a2e71598dca6973bfabc82a6135bcc1ee3f1611ced7454e271cbd85a07a583fe89ea98dc4c1b52293adaadfd195b95e6fef37525736a048bd3bb7cc769c50b26c42445f2d5aa37c5ae529b90a5638d920a330ce1ebaf9d979e1b8ee70aba747f7f1a0b9a873167fb5829e64ad08facdfed0fdb76718ef97eeb028cbea23578969190d46e27f81d5eae27987007e217d540d11a33cb36e5768d34d7607ea83221cda3cfefb1cc65f171711160eaadc737013ec1d51de97afd4afc67aa15a23f197800a0566ef4937a6bba9f3334c0aa0e1ed7e9b5c3fc52a3ee112169ed5bce66e88a06f7f3fdda21a10b818c080f2e08e16af6eaac777dff81bfc2231f4cd7360d460091929035b268785e54b3704d52b8c32ffcdf00f21e7f8d3434b3e1ee711a8427596a0e8ae606d02b06914ba09c0a75b2858c7a8dcfff15e2a78549a447dd5d0d5ce912623e4b43fa4106d98e0a5f7960deef827fa30e52697f486cc9928e9b614253a461435d9e993f4a2a700dd0bc54519a2044f36e8f02fb78ca1025d1ce8c35366eddc90818ca1cf9e28bb8ae0f337efe98b82af2547fa03c3eb0813e942d92f1dedac412fa6738c73339959d8f620ceb02ef65dc0a9e4ca272d1965c73c2b06810ba6e13d83de07c4eecbb9e43744b414003057bc26fce09696e98146e59b79a6d817e26b132e3c935d8e5230335ae363a42084ba271058fb25268b139397ef984861d4adbec66e66477df46049fcb8e5f0179846ca020284eccac22b51c3273ae69898295686843bfe2c2ce4f43ea8668a3121558c52d4eb967341197f650e3f145877eb1f5de8377434b18eb2a7bdbb5d7db569d0564d2db7b31f174113d8487be7a5f91f97cda158aac83f0b84eb6a787d30f35f8a1e5ce28f9f86999a06cec497fcd1c8c1c570eb00f1946f300a03bf9b08584df33e2050950dcf4010928365d667d8ee42403c9d1bab54a7518428f7679e0a0e172f33bb3b8b0a829ea3d53fe478fc2556fdb4e51bfa638e9343f628ea570a096e016f5e47e4b72b29b445f9eb12d133277b1213eae6a2ea224ee80e30eb2fd12b08bfb56a588f2f2e67b9c2cb4795c025bb257e954a7720f57687482d119b1850208267eefe0e65b0dc022da6c3324a0d4e1d35dea840b6bdf2fc652579ba3fe55c41126ca4cd54636e86089451e97e5ce3d7cc2499f0882a2c761f0c74640d5152a5bad5091187cbc0c11683f53b5f2b8d4202e33f42070f13e77a63e0794c6ac5dc986a531ab49225d408d8da33a3c89ec856b336faaee251afabc4895afc41165fb558e6c26a3dc12037945f47fc6e60d710f68ca3dd2f18ca8d96cb9e60d2d91cd5b5f56168dc8bda3d3d31779e02c9c6349847504fac30a82466cd692becd3aec74238d336e20a31c2b97be3bbd90c3a2ad938d7ff1b033fc899006acb36eb561c590f335ebffdee96a0208bf18a9a5ce84ee45c76a22786822e296a957920150f5e11c3354329d4dc328552fa3f2a93d506c7159ddc3054cb1447808cd87c78b9cf74ace81847d712a68d5e88f9c75808fe57383d9867b264e7e3ba233a6bc79a13bf35531e40a1c0d8becacf3d51b07a0cd50e81153e4a0a70128d36ffc096c408b55f47496d08b0153a3e669688a4354ba7dcb65fad21760813afa8a8e4789a9466d7997a27f92e9dfd0e3f9e499c188a200dddc7b57794a2239feb263e8421b79df4f0e6444704476e209101ac5fbc55d41ed0ea466b05401148963ae15dbebfb8d6981330e5b9dcdb01c9d6f9f95ccf28a878e891ae69163071eebd1b738861c58c7b8b0022379412596ea8c2914977e419c5ed53c32e7b191cb148784f42044947eb19e61daf6c853364037a9f734732c8fe5ef76fcec755569621aa4cb7cffd79ffb01b186309ff7751a7e13c3e1427f3cc068ff199ddfe132eaeb4ecd69e48ce59230eff0a81f98ed2835afe2f8911bd9b03ea42cf67abe104cc8b6ee648b515c53f082aaf2ff9cccd1c5c11b920ad82b3bab7e301547713acc37a507059d5a854d08c1330827c87bcf9fb8a337f9d786f653ae90fa293285d5b2b8baf0bc97214dceb9ce1f882acdc45fc1b1c9c1ab8b9931c284fdd21a1c459a064b66f9ccecdc34bf616d9c96c44d741410307968b30d5d4512d5e3c130e2837c10a534bdc7598015c2c0fd1ced2b19628494e5726e55816da6f64c599f7617298c5e1cf4459622dfbf795488238ae1c2716843d2c8ecd1427e068d868ff4d1fa4ba4c701ac81962372867d7c021dd1d0056ef9426e5f8f0579cb26c812abf463d954d5776a3b9f52691ba69ef9dc8fbad3bbafabf6080a9811d23fc9ef802a85a5c315c4700b4d8c68544ca96203f606065bd5e42e1f593d34ef6a086a5399505d12dcd85aafb81da899eb2f01d742b735ec7820330cc92e10b243cafb228c195ade2a4f096b0170bb1be7d5265af0b9598740a5a874326e60cf475c99cacecb013d1eb5202169bcc3d8a1b98484d0dd5b06e4c432e6af4b1fe2a897215295febd579ef3ff568cf02ff1a5c6ba147c4505b3a6119a43b0f960e5fafbcf50135b7efe743580d399f1b21dd8566ab93c12efe9a00902e9fdd333c08ddeebd1a0bcad6cf5ad53fbfa2ce04bb6aa24fe9367c63e2f4f90359b7db4d68d9b68d3d40a5722c6c1fb1e62b27ebbf1bdb39ed409fb579572d64078d1391bad71b2816183da174f2d5c956ae58fd926750a272921b919f0a4aa5f824a79ddaa970c7da7c282053274df30d1df6df3e7e023e9675c329f921999c3afd1ba877b1e19ed260f2119795db264fbb9d72f4a31f230d26e12ebfa04ff480f2e6636daf722ef11df1ee5d99cf999f7dd61606c132d5f8ce95e0b154af0cb9f9ad20a49dc86bb2ad7e2f86069123aa8e25347ab2367c10b3835b72f25e953041dea58242a9b6dcd3635c24bc75f69fc7f18e90fc7c02e11c5243fa9ffceb2951eef8538f49b05c08779e8b68ce637a95e41d057522b60e5b1ed27d5a9bbb1400d01c40ce78ca77ba40cfbfbf7a9104b5d3db2f27bc78136599f3c9434167c8c09a8cb159034cac86167174cda08f81f384a8ea3d0fb9344d2eb1ee9171a2ed8e8eb1d60b669db2274c6811a9d254083f5d0f65aacd3dd4dad307c48a1d46f354bab93bcf98b174c40b00717fd55381519ed602675faa9a7f9cad1c46f66bdfd0c8c16f93ab11cb5773227af6a104dd57783b3e03cfa19f5183af3c908bc53d62bcdcb68d767c6afe9fc3be46ff9a9e94833bd3900", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x90, 0x0, 0x4000000a74c, {0xfffffffffffffffc, 0x0, 0x1, 0xffff, 0xfffffff8, 0x84, {0x6, 0x40000000005, 0xb5b, 0xf, 0x1000, 0x5, 0x7d59, 0x7fff, 0x480, 0x2000, 0x10001, r4, r5, 0x1ff, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x1000005, 0x0, 0x2, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0xffffffffffffffda, 0xfffffffffffffffe, {0x2, 0x0, 0x100000000, 0x0, 0xc7, 0x1, {0x5, 0x8000, 0x2, 0x7, 0xfffffffffffffff7, 0xb95, 0x80, 0x3fffc, 0x7, 0x4000, 0x8001, 0xffffffffffffffff, r8, 0x2, 0x3ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file1\x00', r4, r8) 10m14.424215763s ago: executing program 6 (id=1271): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01, 0x0, 0x25dfdbfd, {0xb, 0x0, 0x300}, [@typed={0x4, 0x6f, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = memfd_secret(0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_format(r4, &(0x7f0000000800)='-1\x00', 0x3) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x68ff, 0x5, 0x7fff, 0x3, 0x400000000], 0x80ad003}) write$vga_arbiter(r2, &(0x7f0000000000)=@target={'target ', {'PCI:', '10', ':', '0', ':', '8', '.', '1c'}}, 0x15) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/181, 0xb5}], 0x1, 0x1ff, 0x8) 10m13.668092308s ago: executing program 6 (id=1277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x1) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f00000003c0)={0x3, 0x0, @auto=[0x10, 0x35]}, 0xa, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='<4'], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0xf000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) r3 = creat(0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendfile(r5, r5, 0x0, 0x10000008) 10m13.307271809s ago: executing program 35 (id=1277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = userfaultfd(0x1) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f00000003c0)={0x3, 0x0, @auto=[0x10, 0x35]}, 0xa, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='<4'], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0xf000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) r3 = creat(0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendfile(r5, r5, 0x0, 0x10000008) 9m15.233831659s ago: executing program 7 (id=1453): timer_create(0x7, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xfeffffffffffffff, 0x0, 0x1}, 0x24044040) 9m15.006757539s ago: executing program 7 (id=1454): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYBLOB="2fa2472ea45ad752", @ANYRESDEC=r3, @ANYBLOB="23dfad6ab8fc2b8f1b5a1e07547fd2c7f37bdaa8873ab89e75041eb37072b9c0a175a57368bf1f49a9d650af78c28491bc19e403bf19b5a0ae0ec5580c09668fbbb23988a2b538853e8d63ac5076fce4e21e8ffaeaabd1adccfc30dd10ef91e60a0fab5e97d92775fac62289db50500f2a3658285997bf4b20a8", @ANYRESOCT=r2, @ANYRES8=0x0, @ANYRESOCT=r3, @ANYRES64=r4, @ANYBLOB="4d931d15ad7e3c431438746ff698112a803295938f3f5d46b48e8464efb10d7766c8ea12a4b1aaef68f2cfcd685835e2e1471d458990251b773024b7d7581a1cab299bc9261c2c153f268e0f9272f2ef6abce76f7b5a6b3b0ee384de3bbfa19b6dd7f89b7e30c5a5a331940e6f354d5062e4a9ae698604d9e850ad790077eedc48858a85ab4e3daa4cb4870377a2b5cb8462fa0bdea855c52e18f0333503f7a845b15c0b5cd36b1079a78b90f9557107a84b048f7385e7a16b5b9cfd29b35243b16e6c09a9233f959819706e0d8520615dbe3dbadb"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x2, 0x408140) ioctl$SCSI_IOCTL_DOORLOCK(r5, 0x5380) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b"], 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r6, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendto$inet(r6, &(0x7f0000000200)="74dd", 0x2, 0x8a0, 0x0, 0x0) shutdown(r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014001002800800014000000001080002400000000d0900010073797a30000000000900020073797a32000000001400000011000100"/120], 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa190800450000b000650000003a90780a010100e000000180004e21009c907801000000040000004d69da731167d7d966ee21faaa03eed2fcd184b06096ac72a35bd79f33085cff8ab5c848a4e6354fcc0c08cefbf99d664efd3c8a05826e25c21d7545a95d84b968216436f9dfd65c9419725422b56d4f62c6fb8b65969e02ca79afa485fa585694f18c7cdd24aa7d1706404e623b5806dc725f00007559c38d000000951b0c4d673e28b18bcf08ed0b7e3a12"], 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r6, 0x0, r8, 0x0, 0x7ffff000, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r11, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r10, 0x643dbbe86a93503}, 0x20) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) socket$kcm(0x10, 0x2, 0x0) 9m11.455009354s ago: executing program 7 (id=1463): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x100000008, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fstat(0xffffffffffffffff, &(0x7f0000001080)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x1, @raw_data="0b2b2267a5c7e162e0c3fcf532345524923d7885a909105b9c2f060ad499397d385bd332771202bdb89c3cb16e79d29233aa5b49380ff96f497885abac263750957cb077750c5bc3b10390c7f90cf519356a7bf3aea77048ac08087c37a2bf8d8088bcb2b978aaa4aded0a5382af7c059b3813e7d05b718cf960a95fd93104db2e719560e44097cc8bf06c4f49c7bbd3b584128859e47debad93b72703bdcd4e0d7f747e7b12c2a0d7a5fe47a6387b035e5ff986ee00370f57a8539502018788fdf33351b2fac4bc"}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r8, 0x10000000005, 0x0) ioctl$SG_SCSI_RESET(r8, 0x2284, 0x0) 9m10.113972914s ago: executing program 7 (id=1469): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 9m9.899279801s ago: executing program 7 (id=1472): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x26, 0x7, 0xc, 0x22}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005e833, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5bbc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 9m8.197142453s ago: executing program 7 (id=1476): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601030000000000000000000a0004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 9m7.882501446s ago: executing program 36 (id=1476): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601030000000000000000000a0004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 5m8.535797161s ago: executing program 1 (id=2328): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x2000000, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r1, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r3, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) 5m8.454263302s ago: executing program 1 (id=2329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100000}, 0x48) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 5m8.080508782s ago: executing program 1 (id=2330): sync_file_range(0xffffffffffffffff, 0x1, 0x13, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000500)={'wlan1\x00', 0x1}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp6=r4}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0xfffffffffffffea3, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310428bd7000fcdbdf251600000018000180140002006e657464657673696d30000000000000050058cb000000000500020001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000000) ppoll(&(0x7f0000000140)=[{r1, 0x6000}], 0x1, 0x0, 0x0, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="06000a00a1aa00000c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000006000a00000000000c0006000200000000000000"], 0x60}}, 0x8810) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r9, &(0x7f00000065c0)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000840)=""/30, 0x1e}, {&(0x7f0000000880)=""/43, 0x2b}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/101, 0x65}], 0x4}, 0x800}], 0x1b00, 0x40000000, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r10, 0xc0405668, &(0x7f0000000100)={0x0, 0x20, 0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) 5m7.319623959s ago: executing program 1 (id=2333): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) 5m7.230209451s ago: executing program 1 (id=2335): r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6, 0x81, 0x9, 0x4}, {0xeb5, 0x5e, 0x63, 0x7ff}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x10) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x400) 5m6.600036726s ago: executing program 1 (id=2339): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x2000000, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r1, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r3, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) 4m51.559064302s ago: executing program 37 (id=2339): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x2000000, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r1, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r1, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r3, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) 58.356258548s ago: executing program 0 (id=3127): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85000000ae000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r2, 0x0, 0x4}, 0x18) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffb}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFLAG(r7, 0x8004480e, &(0x7f0000001600)) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4007, @fd, 0x9, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000180)=0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="b0000000000000004800000000000000020000000000000000000000000000000100000001000000ea70ffffffffffff000100000700000003000000000000000700000000000000f7fffffffffffffff9ffbfffffffffff010000000000000000000000000000000700000000000000030000000020000003000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="08003af2ffffffffffff0000040000000000000000000000010000000100"], 0x0, 0x0, 0x0}) fstat(r7, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000840)="90dd86b2a8858575b5014280e8f18c41f432e67dbbcbba7ba6b30256d2c6fc70a7a56031f8e03526ef6a7f8ee88fa3b017b5e53cd57da376880f4d5df297fe7aa64b2832d095fa4e94f1bd774d6c0e9acc90f9d699af87dbf80a5bffa42d6707fe678f9f447d1f8a9700ff0d409d518f29db76c5bcb7af27cb1c8e347bd0c0a735fa578b34705a1ddb50bb73c9a7b214e41975833cd16f82bc743120dd7cb236825ae3f71255f6a243cbbc19b41f717130c2806200f545aa5999b7e8b41409f50609b849029008449b48f1ffa015c574477a3d647151c1", 0xd7}, {&(0x7f00000002c0)="4b30100db251fed2d6", 0x9}], 0x2, 0x0, 0x0, 0x40090}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000940)="155db9802ab2af210fd2b29e8769b4c3e29f05dad9936e3e839529bf593634acccfa077a6971ebd516799b72532e9ca11c79076cc84aa56841dae58b9036c962d3566abb5bdce1c00a7b4d35e59eabee6623788ff2f58efd4efb3e00f6225a4f657e52cd7a1b8f3ebdf793b5202c4367b9bf8725d55d3aa725ad519004f25a2c7a8b36fcaeb489ad91e77b1bd220f60cf120701f42fb3d477ec53ff332d379516c61783c1360e9b918be273fadfc47482235be87f0a49c4660f542c596fdeb201867b2ebed859c0fc3e783f5e0bc6e36e83455c6cafdbfaee5c1b2914262e401d22521f638cd989917baa89fdf01c9ef0c22afbfdb700a", 0xf7}, {&(0x7f0000000580)="df78825983ec091bf6d546021a72d5a402c61eb1a07012e8538f4ce38b27739dc274e587c7178303423ea849bcf6e05009418368b841c84847be79eb2938e7bd62cd1c3f53be5384cf9e37db34397783683717b0beaa07f247713e290bcc0e63106b30dc7d837e44a92b38", 0x6b}, {&(0x7f0000000500)="b24f3d", 0x3}, {&(0x7f0000000b40)="af9c449764d08945d50be470f9e987e729b30f5e1fb91db5926096902ce07894960b43307072d22c580036a035d80e691e71b33d49a3efd7f68cdb7083b6419fe2131dfd5a4ed6c3e7c4b1221a26e3db644e478ac45ecc6dc327dd61f54f06344e7b49f3de78a7a535c4dbe075b771b07d156ce38ce0fb3b58dc89357c265aea15f8e6eb9ba5320a3d1a568bebc97c5cb300726605a7d23167ad853527f82da1caf41dcc9c59d63c47c5cb6e5cea7a33bb96771ba19d91dcebd0c2bb8fc215fb4d3b5ffd40a6b0f90ab4e5e99c3a51901a0a409a1fffa24a92881749bd83dfe960a7ccd9c3a575", 0xe7}, {&(0x7f0000000700)="de3383687f27a7d307c0737124ed4a1b9ec10297d4e4a05f22831f83bea7b6fe99db0f97f61d947c974b12ce42741aec8480e24c182488452d16cbe803c21dd33b7b1bbc1641f66961adebcc4fb3ec627c83d61a77b95885942bcc3b997dd445871a717ad99bef479270cad46a6502a5bc45d73a5326421d0eceaf99", 0x7c}, {&(0x7f0000000680)="e9d42ff2f9416160c9067fef8d2c3052c6ab56fb", 0x14}, {&(0x7f0000000a40)="bd6f36dc02cedb3982d7a2c929affad33b82595e28af051bc355d97dca98c6c3a4d63530eef64b6f77c7a2c7fbbef519c2e35cd0b789df724b0bac4e643ca7e96aa3cacce26b9b508bd191754cd124f9fd1f6180f379734893216e8e897b3b1a80272df05afb6fad", 0x68}, {&(0x7f0000000780)}], 0x8, &(0x7f0000000e00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r2, r1, r7, r0, r3]}}, @rights={{0x2c, 0x1, 0x1, [r1, r2, r2, r1, r2, 0xffffffffffffffff, r7]}}, @cred={{0x1c}}], 0x98, 0x2000c100}}, {{&(0x7f0000000ec0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000f40)="45a1a3161f467a244ca9525a477ce37adc951b09cdd3176e858de73ef3e62df856c3f7c72eb62fe96ffec8747405deeded12386c0f85db7515c58fba145878f4af159d25fc97e94044b0f57e5fb2d75c9386b43bfcc87dee", 0x58}, {&(0x7f0000003c80)="e4124127a9e5bb7939ee8ffccde739220e8f46b7bc3e432fe212fdaaf18bdbb86e46605dbccd408c0cb3eede02b1fe58c58bb5a8d1ba7fbdda405ecab482ffb56ea78b45b8f2d1a50dd8c28175f73ec81157ed4a0273e58a95c694951d1d97cb6b577113886aa4342fc5bb8a51a99be0f79baa7499166c6371cada44c03eed6770e7670e491ab5201e245029cc9f0fbcec1ebe01ccbe7ca6f5a09c25870bb4ffc80a16eead53328e7880c9042465147cb041a1110e27b712837e813f2a0108dc802457f4f7f5e1375d04f74f296de74ff48fdc32b3a31f246fdd4e461c29018cc29571e9ed126c262e6148c9966ee6df9941c4b2583e75084f15e67e6c6efb6d7f966159cb43975b70c9ddb6d8bfe7c470f85bc16453220d0834f042315387c08f0e06f480fddc48555a69fb907abd9fc1fae9019ced55ec6b11622a3e971922ba5a5d3d294a0150251bce63dc0cc6b290615b10356e9c4652812db0523827cdfdcd9b31b2e0add7bcf85e0e542f561ea0592175afe1e54fe69b7efd263a55066d4fac536f7bb15746f7bb0d231cd0b1df6fbc51358573aad70aaa4f2a5af8c902c00f00b4766c07a9184989a7d8ce5ada3deda24af53d9304e07e07a1620c0e6e9c0033cd41864821fbe5040dfd717cbda885a6a34225e45210cf3f82859a2f59585011b819e181ae1378fba820e8bd95b64e63c0b6cbbe29249f6ac9a8ccd7b502811df7fae18c28958f0acb15c056b5fc7adb36615fa02943e14b3c66a726b856265317274ae93bbf64dab22f1bfc3495edf4e292354857db36de11550977b41a73ddb0b28a7ae802faa26fee8c98826c32bad1affe3c4cee99bdbbb7edaac5d28804f5f0e8d635e17efb978c5b355d43845870f60f90eab9a2509a30e7c56501b6dd42f06df203d57a81ae25931a9123f77d0eee388c98a4c2708f22d23f596bb47543072b81839a8b204669230a20ef0a1273990102ce3dad67a73fa439b24c51750dee296d58c06acfb03c4204a919109a493aa5f812fc3fa642fa64e26324b7cec058634409a2399bdf9141874d18591ccf34bfd7224a38ff065c20b0c8aca4fcb6f345443ef229c4d0dd247c1856149044af0c650aaad4ba0bd4f1407b0cf171d11798bda521920ab923b59bb59489d9f7364cbac68a058003b3bcde91a67fda064eb963aa9fa4cd4df735a3b978cccc1b25bad990ce8066106b5c0c2ee3c6fefd680b6f0529a4727ca37b5da32193ec5718fdf00a2624af4e1e4dea44643805554d3e65eb53b532ca57cfa9bf4e0253ca98dcd80365ffb918c8474d75ef6120c70f3e5ea766089e7c56d563a0b47beae3e04e7d02b14ade596e3720d7bc21bdf22071bdfa2d4c0297fd5d4492d3c10056f33e0f08d6bd910a0642b053556c7f15fb92ecf0ce0963c313ac44522075ed5434033b4eb4f164f5d75b44475d180e933c3c69ef6cd3e0d8d4b6faeeb54feff1f4864a24bdfaca27ddeb92181989e1d1cbf72e61f0aee2b77d51aee800b394b4f7fceacd7460158f54530ff405a542f3d9b8facd3f85ada0ec705194df0a3f91d20ce2884a0a6e7519ceeaa63b95c4c6fdb1e26f1fd94c7cd1c11208a9bffc5f5c0935b3e675e1d824c933b4c974ab14a20139af6e00d6de6a1a828032581a978b9696402132c688d4cf84c3322cb3065513c5dbfe086ea8a560cabaa8a932d0c64b8b4c4123c45569009a3529b971dbccb6835f80ace26ab4a495645c1592b302b05b779d7de7337fc2c34649b004f1c4e541e483576cb79d21d4d44ad37a6e4e872a91b23e9985955205af0696b9f47fb587d5dad438cd18e17c3451708ba8943e0ba79dd37a1f7c0e68463f2a5cde1b61de0a8f8dab0769e195ac29b3d31c77c40a2aa097f0dc1c5fb5d3a0ce74ed173b058d07103fa7d1dba1284d227577b2b0db44053e8b09c09d39fe39dcc032d6174bd5b20eda4b9996e740bacbda73d263bc8d44d9e5206d113c1ffa1a9014f819ae5746f12f058ebf7fc83da36ce1605cc8c3b5ee048a9a49ac28ff0d5f6951ee4035e5ee80bdbd7789fd90fe48d9c02fa3945b6418d904b28fad80a6a79adc3651b4f1b3a067d1c7a3bcc9161089d9bcc0a9832ffa00b89fe9f99c616bdff2679baf2cd0473e03288211499d7b9ccd9de9a7e43c7034feeb96c4356b9a89adac2f909951bbef5bf8f2ba2bf1799942fdb83820b82ea60439b938560e63ac19523938f3a06a787dc1a13c0840814f1d2a6ab4c82197b14a1a35eb18a9c9ceae63b4d833035a038960b1d5498d22a8f0528aba7f6b0517021622fe405bb5b2b31c9f4718e51760c0bb8bee4d29cdb4b9203c08cf7c35b8372caf00ca9c9da66b01c4ad3b269162711cfa3dd28ece8810e2e722b75c8083589db3856e7f96459a5b290749628ff0fbecdd8c323f9e317633778a3f5364998ca71dc49254c5468ba39fc26ea7e0e99b17bb386c7d0604a312ea382ad28bc431057b6d30742ab38b126c2faa5a0e651b3a1f1b52b7f8f67589a8bde1f2581c0e87ecb53dfda3d0af9378e7af52e41694c8a53f6e673c61d538f970b45ea625eff52e1b739dcc4550c55c39e40223e24a999d154ee8c2655c75c9d7b6dbd3ea3b4007eaec0c3146355f0fed0c34d834d21fee7fbe93181755d8f46717cd89f0568e0fb86b0281a25e7828648fb7391ef97e4a736fcc0349f1bfc33c1b9305946f2902cb19aa08e815972acc967a849f99cdd8d8b49db8146a752b65442c03adc226f09a0b467be6c31670ee32f703525ef9c601a7e3f649f6759f2f46d56c4f8e34ea1768f3727448c10929981a9ffd3073e8d8906dc897a94830e39c53c84efbd836b553fd91fe1e5269302959d81984b0ceb8109d568b1053d6211eaee4a9aec8621f28b1204ae5b6be8dac61af169397847db385d664005328d44cc82ce9c8237626e61501189826edea2354c578ec93b1f7318426a502116fe069df03db8233933a76bac8b5ccf824f5a7fe19d613bd52518868a9ffe31e06f32a7d68d71f69e323eb591dc5c485698eb8d2bce4e949483ba9e59cc49f16b0481cbd5e3d58b2b7a082d2781d9c2af7b7dc860b835510650a0c9bfa25137f4cf3ed2d2bceb9ceb8f1827d6b67781f4d5f689e308c0d73fc39282eee6c384ed0ef5a380f066881f8065d5c96aa6595bdb8155d352c0b1a22384136a72b9584cad9a6ced2d729df74b2752d1433986ef56b092eb6396af51508432185a1e10675208daadd30b738353c38a6e2f0e63a5a1f83ad9fdf958c54955ec6e3977e5d40fee110fb3cbeb15c17d278cc61079f15967c2cb2c701835ce2a3ec1aa52a825f18bdaf18f67e6700e26c5c37b2b86e40193b77451f15a14fe6f16fb03d3e75b606e7001a285dff72904e2b3959935c06b6450f93fda0c5a8518a27baf2fdbdf51ded5ef7acda1764bcd8762bec89fc4f954b3fa0a8d7f5c806894437d5926501ae92b07046c45dfb51173ee12f84226d5927c662feeea84e76849a95c13f6c86642cf28f861a1d2b683caad04ce460b25fa793570985b3f467d260a6876928d2d84c1bf1a5550de53ce2491ebdc2c05060532a6d6ca402b8284f2e427ea8c4d339970cdb785f5b90214fbe0849b852f5a81890fc3c2a7d39dc202fefd866866aa1f4f0fd2e1480a4bd88d03b2c588786d919810e2cafa68aec849a1075a93882b2ea447bad9f3738afe034eb39f893b3887295c99da74c20107fc2e847058e8f5fc82020f4e778c0779712b996f4fd0262689716aebfe17d2616248f39acbb31527e72f95c2116eb8e678c405319eba81971b2d7e43f8c0f9640ff1b2dfef9ddb8754e1a22dc6b303fc051fa04cdb75ba9acac86830416af83bac03ec54e8b1597d6909e8267d1cc3acfa15f5a46a8fb3e37e9d678cf6358d54ed86e706394a9cf1d05d1afbc3c5377394b7d42b161dfaf5e579e47b5ba17f2d7dc6e313d0fb33e8e7ff9273b5cf33aa6bb95ba9ef6233cd8c799e9eb5c94b84f3e2b409888414fe1289665bd22849639b6d9556e233f7ffe2a1c084837b9e5f330fcd0b123602da7ec58370b2359ff1999cea9e39fa48ce1a07ee6a2b53f7cd166d6cd3f6db440324fc680d5dc8859b762b2ce8260ad130d6800b6803b0d1f3d7ba937f334fbe47364d3d55f1cf94f9fe28697d8c251ad7f3039fae07df98f7b81326bd6780366c98aa9554c406f7bf377b1d49c3f131930ba6e30c32b5121ae718f387983bd43a9c6d4e48376a7fdaff31ad12254415ba76a8d3e470f2357628a945d183bc5e89d2f95b18f341f304b79c5f76db32af50ebdada8a58443dcbc712010a8b30f715fce9e63a5b10c2f30b90cf354ab68da05f07de7d089d277d53c7cd426245b502e684eb40717c4d162208a0fa14ae8e9e338311b18b28a57f7df3d437d41fb8b9bf0cf72162e739b2e11eebe900284b4581558fc3ac34ca92d5b18776db7d93b99bc18de4132d68e3bd9af8e1f3415cdd12f8bf0fe0fb9a888a73b1955ec01a2030b96143724f896f078a702bf7a0d15658190837bea087eeab05830cf5b743cf2faddd931182cd9c366ba2afe890175fc922751a16c50ee3ddbbfb7622c9edb3951ae55a884a3e933680783357ce625dbc07494c5009dbd223f2cc68d53a7c0cda0c7af55339e8ae4a2ddad49c155379b7413d53d9fcb602f67a7c3f14b6c9f4429df8a14d5c3032eb676edc7035cbc1ee651a27a5434c6ef6f7e5b7f69433f6ba373e5b99cc4a1183496c27d2263923905e01d1760ed13a9d091eea44b1a06eeb4e8ed586b29c4a27522eea45df15ae33a38842d2d204b789d432cce43401333513d93592dfdf264c315b66d91f3b10332a6043ad6eb26cc661a47176184f6f56894481382a6f35f62fcaa3c946c00cc2014de4bf00aecc7ec49582520a7b501bdb99ba6d5e92217b8593bcf73e855dc70e1808f7195fe3f9933fa98b3ca34c5c213fd2d2ac60851f0aa41170f40ab443a082f91b6a4e064dca0fbb731615989af95d4b0bf503c9fa9d70588de0127f0079aa72c4ec2190c160db3254c271ec145ca5f15ac1abfd8e13b440204659c5ab259a3b665f77275bdeef07185460582f2cad5192151e4ba0940a0afc1c5eaa9f9e1baf5dcf3262bac92aefe420b00c1cfb770523790398c6fc8fea1ce4028c39c5d8e719c48e535c285caa1b4cf5128819ddd363a5c5104849097d7361e4603b1390d1d2ba5d22ee0973cdbc8e2221951e6ae1cffa74d465775bb92004a672f2683acfb9dda9dd29ca57aec381f07f19b922a0dbf8c38fdb6abd95aaad4ffca59baf35ef27e177e2f2fc7f3a9af8112f54e22b36500d0d7ef28522eae809b6350b3110ce7d34eaf8c09002e19b143b7da4e40548a4c94590bdf5f75c546c6da1a3211beb83d3aecf7d9a661fd1af421cee1ccc059288680c7410c3d26c223b1e9966ccc659b579b98989e70a1df9eee09070128594e2bda7c40246c57ab21c5f78690d5b6de7423e6d0cdf45781928a71a837ee9367d7c8095adb6f547aa675d4a4f40f1d98c0a13433b94a0e6e8452a226716335a0769cabb04dcdfe70ed377a2417316a014cc083df10011b7589e97696f3aae1cdbe07c5a3155f3e5a1c28fa6ffe0e0a12511ed7461907ac06381b1813dc1824627c12f58b49d7dd9202412920c0572d0b04d641e2791d9bbd085107ed13205ce5e3da94e59d59e75ab3b4b9fa89f89e8bcc36f1373fb3b2a57603f899c794b2da32b0ac3746949a1a7e64cbb99a305e761480a264047f1c7a488493b5d9e6a8da", 0x1000}, {&(0x7f0000004c80)="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", 0x1000}, {&(0x7f0000000fc0)="a9aefb57903d827f1d3d61400b1b81cc8519d09625d21951bfa5c936d938a5a7d1d4231b3d3d4e519c1033e470d7824ebb3cb110f3e2474f8b5d5f7f5a0360ff8aad8f90c07a903df0a21bb059fc578f073544eb37cdf825bcca786139f4846770a26358e256f9f7ab9747929c36f698d31c3c56bf9b98", 0x77}], 0x4, &(0x7f0000001200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @rights={{0x38, 0x1, 0x1, [r2, r1, r1, r7, r1, 0xffffffffffffffff, r0, r0, r3, r4]}}, @rights={{0x24, 0x1, 0x1, [r4, r0, r3, r2, r1]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0, 0x14}}], 0x3, 0xd0) 58.008680358s ago: executing program 9 (id=3128): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='hfs\x00', 0x2104400, &(0x7f0000000240)='0,^\x00') recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r6 = inotify_init() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) socket$nl_route(0x10, 0x3, 0x0) inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r5, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000004, 0x40010, r5, 0x0) r7 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r7, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/116, &(0x7f0000000040)=0x74) 57.858965477s ago: executing program 0 (id=3129): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000000000030000000002000000ffffffff000000000000acb2cb5a56bfda396450706e6fdbae6bf7525bbce52b776aa5c020ee09f1ceb4219d95f47e11335523b57839ab046b392b147902ff0c146cfac733b8cd631b27bedd8111b4474e774c3c4082d8df0a9d67bb4786f889eedd4841a45949808e05f8e3151df807bd0680a06d30e37f013500ebb22595e6ed8686350e09cc814eb96e3d5942677123a27d8deedd669b7344175d4d171c48b8f0f8df303d253e40098d0e956d78b744a2276f0b81"], 0x0, 0x32, 0x0, 0x0, 0x3ff}, 0x28) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier') socket$nl_netfilter(0x10, 0x3, 0xc) getuid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x28}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000000007e000000000000000000000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="03fbc27af0202ecb"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, r0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9bdf, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') read$FUSE(r5, &(0x7f00000025c0)={0x2020}, 0x2020) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x1, 0xdcc}]}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x9, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 55.635887634s ago: executing program 0 (id=3134): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0}) (fail_nth: 1) 55.200050169s ago: executing program 0 (id=3139): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd2b, 0x10000000, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0xc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x5d, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0xc8}}, 0x0) 54.099835921s ago: executing program 9 (id=3142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setpgid(0x0, 0x0) ptrace$cont(0x20, 0x0, 0x1000000ffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0xfa, 0x7fff0000}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=@gettaction={0x14, 0x5a, 0x1}, 0x14}}, 0x0) fanotify_init(0x200, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40080, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x1) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000500)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x48, 0x7b, 0x33}) writev(r5, 0x0, 0x0) splice(r5, 0x0, r3, 0x0, 0x7ffff000, 0x1) 53.938173285s ago: executing program 0 (id=3143): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0434c500000000000109022400010000000009041c00010300000009210000000122050009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x10, {[@global=@item_012={0x1, 0x1, 0x0, "d3"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_012={0x2, 0x0, 0x9, '`M'}, @main=@item_4={0x3, 0x0, 0xa, "eba95265"}, @main=@item_4={0x3, 0x0, 0xc, "a6b2f17a"}]}}, 0x0}, 0x0) 53.192735298s ago: executing program 9 (id=3146): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x2befff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000"], 0xb0) 52.835223588s ago: executing program 9 (id=3149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x3000000, 0x0, 0x48c05}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x400141042, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@nfs_export_on}]}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4004) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x4000010) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) getsockopt(r6, 0x111, 0x4, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000100)={r7}, &(0x7f00000000c0)=0x8) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, 0x0, 0x880) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, 0x0, 0x880) 51.906887211s ago: executing program 9 (id=3152): socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a0b04000000000000000002000043578257d9d0337797fd145a00200004801c000180090001"], 0x5c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c4000740ab487b1b512f33a8dbd67a8b35f2405127f309901ea13e31d5810f85eae8f528c938c24abb1b1abbda2e7fa6e0758629bb09ed64a8ba5b2ef3c3591fd06d7e10d93c0857ecac854ac51ad69639d98adb2c1464e444cc1a6a2e7ee244622433b51f58606b063f4938101a7e764c957eba2e913b2ac10435471fa769740a1275cb467e5264b71bc8727fc12e9aba46e4a8abf3dda91e0da608d6a0a35573d5524fb25451cc23051887de4df85c8e771260c4943e78905aa1e7493027366ed1bea0d80304804800018008000100667764003c00028008"], 0x558}}, 0x40840) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x800) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x35c}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f0000000000), 0x4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r6) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x3, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = syz_open_dev$video(&(0x7f00000001c0), 0x9, 0xaa9b92f685669e8a) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000004c0)={0x0, 0x1003, 0x4, {0x0, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x2, 0xb, [{0x80000004, 0x7}, {0x7fc, 0x5}, {0x8, 0x80009}, {0x63d, 0x7fa}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x7}, {0xff, 0x7}], 0x1, 0x58, 0x6, 0x0, 0x3}}, 0xfffffffd}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) 50.851991497s ago: executing program 9 (id=3156): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x401, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0xc0000) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x40, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000380)="943d8dd2392dfded96d990e7453e73e3ff0bf72e7103ee1568147f17aac863004c9ddc1803aa010275bd3e1e7c3ca044ed549ea48d2f8f94379b83cc711299aa5fc5cb696fc95b03b6e1757eea469617ffdb7664d5ff745a7e7f7c1e0ac802947c", 0x61}], 0x2) creat(&(0x7f00000001c0)='./file0\x00', 0x40) syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7730, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) 50.364414862s ago: executing program 0 (id=3157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000007c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x4a, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0x9, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xb000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x21, 0x1, 0xfc}, {0x6000, 0x6000, 0x8, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x4, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x0, 0x5, 0x2000, 0x5000, [0xffffffffffffff47, 0x401, 0x7, 0xc5]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x8}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x00') openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x2, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) capset(&(0x7f0000000080)={0x20071026}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x58, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @decrefs, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @enter_looper], 0x5b, 0x0, &(0x7f0000000600)="1510dc60d64e2e2de6321d5435cb0520e72cd9567260950b92c2d1690546f6b89e013f42071ddecff2f4618a590114c0523852926fb67adc781e17a89af323c32eef49d3b34cea1145317e3a0ca5e71a479b0b8c74e99ebcb7d225"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) write$rfkill(r3, &(0x7f0000000080)={0xfd, 0x0, 0x3, 0x1, 0x2}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 38.103182326s ago: executing program 8 (id=3194): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0xb0000, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x4, 0x5}, {0x6, 0x7f36}, {0x8, 0x70}, {0x3, 0xf}, {0xa, 0xff}, {0x6, 0x589}, {0x8, 0x7}, {0x10041, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x5}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x4a2302) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f00000001c0)={0x980900, 0x8081, @name="6736516728a5678c18a4ec047f3f1fa52fe9a9987d0406b3a0c705c611b66f06"}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) r7 = syz_open_dev$evdev(0x0, 0x1, 0x8c2b01) write$char_usb(r7, 0x0, 0x0) 37.72232189s ago: executing program 8 (id=3197): prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x300) pipe2$9p(0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000001f40)={0x2020}, 0x2020) r4 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) syz_emit_ethernet(0xaf, &(0x7f00000007c0)={@link_local, @empty, @void, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}, {0x5}], @ipv6=@tipc_packet={0x2, 0x6, "e633ac", 0x71, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, {[@fragment={0x21, 0x0, 0x9, 0x1, 0x0, 0x9, 0x65}, @srh={0x0, 0x4, 0x4, 0x2, 0x3, 0x38, 0xad9, [@loopback, @private0]}, @fragment={0x3a, 0x0, 0x4, 0x1, 0x0, 0x1c, 0x64}, @fragment={0x87, 0x0, 0x6, 0x0, 0x0, 0x9, 0x68}, @dstopts={0x33, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x9}]}, @fragment={0x16, 0x0, 0x8, 0x1, 0x0, 0x1c, 0x64}], @payload_conn={{{0x19, 0x0, 0x0, 0x1, 0x1, 0x6, 0x3, 0x2, 0x6, 0x0, 0x3, 0x3, 0x4, 0x0, 0xd7, 0x1, 0x2, 0x4e20, 0x4e22}}, [0x0]}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f40700090400810000000003000000000000080004", 0x1f) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8d}, 0x0) 37.045093244s ago: executing program 8 (id=3198): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000000340)=""/222, 0xde}, {&(0x7f0000000480)=""/32, 0x20}, {&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/33, 0x21}, {&(0x7f0000000540)=""/142, 0x8e}], 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0xfffffffa, 'syz1\x00', 0x20}, 0x2, 0x2, 0x10001, 0x0, 0x0, 0x109, 'syz0\x00', 0x0, 0x3e}) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xfffffffffffffff9, 0x8b}, 0x0) r1 = getpid() r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x420040, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000280)={0x2e, 0x2a, 0x9, 0x1f, 0x1, 0x8, 0x0, 0x118, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, 0x0, 0x0, 0x0) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x190) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0847aebdcb39a7f6ed3ba96d02195ab356281b15fc3cdc5690c1c68b42beb7390fa5ff3ac04ea19c0c294c3913d0287ea4ce0433c35ad6850c9475c2b41dd9c8da7a06503aebc152efdb03dcabbdb76c9476061660ce60ee5036f75ea291f2114f819f4620f51a547f504280d6e8a5255a12442febb0e5b89d604d6cce8efc07b6067070a755a076ed3a47c5882d1dd6822263cd2737aaed194ae11c780eb19a7c197790eba9a1727821775361748c51dd5fdb81b56178", @ANYRES64]) chdir(&(0x7f00000000c0)='./file0\x00') socket(0x11, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x800000, 0x111e81) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000000c0)=0x81) 35.703039046s ago: executing program 38 (id=3156): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x401, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0xc0000) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r2, 0x47f6, 0x40, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000380)="943d8dd2392dfded96d990e7453e73e3ff0bf72e7103ee1568147f17aac863004c9ddc1803aa010275bd3e1e7c3ca044ed549ea48d2f8f94379b83cc711299aa5fc5cb696fc95b03b6e1757eea469617ffdb7664d5ff745a7e7f7c1e0ac802947c", 0x61}], 0x2) creat(&(0x7f00000001c0)='./file0\x00', 0x40) syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7730, 0x80, 0x0, 0x34d}, &(0x7f0000000480)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) 35.695253477s ago: executing program 5 (id=3204): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000200)={@hyper}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4004010) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES32=0x41424344, @ANYRES32, @ANYRESOCT], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x5, &(0x7f0000000000)=0x23) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x2, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000280)={0x1e, 0x7, 0x2, {{0x11, '/dev/vhost-vsock\x00'}, 0x5}}, 0x1e) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102359, 0xffffffffffffffd4) setgroups(0x4000000000000190, &(0x7f0000000080)) r5 = open(&(0x7f0000000040)='./bus\x00', 0x3a0642, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ipv6_route\x00') syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaad3ae28ac9afea5e1000000c2790f3ba2c6effe57405b12af6d968502907800000000e000005e091b40a42b1cd5f1"], 0x0) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @empty}, 0x3, 0x4, 0x2, 0x3}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r7}, 0x18) 35.370745308s ago: executing program 8 (id=3207): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0434c500000000000109022400010000000009041c000103000000092100000001220500090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x10, {[@global=@item_012={0x1, 0x1, 0x0, "d3"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_012={0x2, 0x0, 0x9, '`M'}, @main=@item_4={0x3, 0x0, 0xa, "eba95265"}, @main=@item_4={0x3, 0x0, 0xc, "a6b2f17a"}]}}, 0x0}, 0x0) 35.335533177s ago: executing program 39 (id=3157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000007c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x4a, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0x9, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xb000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x21, 0x1, 0xfc}, {0x6000, 0x6000, 0x8, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x4, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x0, 0x5, 0x2000, 0x5000, [0xffffffffffffff47, 0x401, 0x7, 0xc5]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x5, &(0x7f0000000400)=@framed={{0x18, 0x8}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x00') openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x2, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) capset(&(0x7f0000000080)={0x20071026}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x58, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @decrefs, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @enter_looper], 0x5b, 0x0, &(0x7f0000000600)="1510dc60d64e2e2de6321d5435cb0520e72cd9567260950b92c2d1690546f6b89e013f42071ddecff2f4618a590114c0523852926fb67adc781e17a89af323c32eef49d3b34cea1145317e3a0ca5e71a479b0b8c74e99ebcb7d225"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) write$rfkill(r3, &(0x7f0000000080)={0xfd, 0x0, 0x3, 0x1, 0x2}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 34.955599187s ago: executing program 5 (id=3210): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x3, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) 32.334584527s ago: executing program 8 (id=3212): unshare(0x6a040000) (async) r0 = socket(0x10, 0x2, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x80) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000b4e) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) (async, rerun: 32) ioctl$TCSETS(r2, 0x89f1, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7ff, 0x0, "5dee00ffffff004000"}) (async, rerun: 32) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) (async, rerun: 64) inotify_init1(0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x18b000, 0x0) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7, 0x25, 0x0, @void}, 0x10) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private2, @in=@initdev}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) (async) syz_emit_ethernet(0x37, &(0x7f0000000840)=ANY=[], 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 32.008098843s ago: executing program 8 (id=3213): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140), 0x4) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prlimit64(r3, 0x5, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) fsopen(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0x1, 0xffff9259) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002d00010026bd7000fcdbdf250400000008000c0000000000"], 0x1c}}, 0x20000000) io_setup(0x30, 0x0) 31.122818503s ago: executing program 5 (id=3214): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@null, @null, @remote, @null, @null, @rose, @bcast, @default]}, &(0x7f00000001c0)=0x48, 0x80000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000280)=@add_del={0x2, &(0x7f0000000240)='pim6reg1\x00'}) r1 = socket$kcm(0x10, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munlockall() sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a01100000088080ffb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 31.094671532s ago: executing program 5 (id=3215): syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1000000000001, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x7}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x4000000000000190, &(0x7f0000000080)) r3 = fsopen(&(0x7f0000002e40)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x800000000000000) 30.715658011s ago: executing program 5 (id=3216): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000140)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$video4linux(&(0x7f0000000140), 0x106, 0x40440) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x4, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48ed, 0x0, 0x2, 0x0, 0x0) r5 = fcntl$dupfd(r0, 0x0, r1) r6 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f0000000180)) io_uring_enter(r6, 0x47f5, 0x0, 0x0, 0x0, 0x0) write$khugepaged_scan(r1, &(0x7f0000000140), 0x8) 29.335401775s ago: executing program 5 (id=3219): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x39f) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xe}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r6, 0x439, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x8110}, 0x8000) r8 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x208}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "2634784b05261d387c9201200000000000000080000000000600", 0x0, 0xffffffff, 0x2005, 0xf6}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea560300000000000000a3ae714d", 0x4, 0x0, 0x5a7a}, 0xfffffe91) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x100) 21.328075591s ago: executing program 4 (id=3226): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='RECLEV\nPHONEOUT\nSPEAKER \'CD\' 000000'], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x0) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010004b0400000000fcdbdf257a000000", @ANYRES32=0x0, @ANYBLOB="00000003000000000000140002800800087f8887ffff0500cadb04500000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$inet(r0, 0x0, 0x0) 20.456085704s ago: executing program 4 (id=3227): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="400100001000010000000000000000000a010102000000000000100000000000ac1414bb00000000000000000000000000000a00002016000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d26c000000ac1414aa000000000000000000000000000000000000000003000000000000000000000000000000010000000000000000000000000000000000000000000000000001000400000000000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000a0001002000000000000000480003006c7a6a6800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016"], 0x140}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001304000000020000"], 0x0, 0x35, 0x0, 0x1}, 0x28) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x26, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000883ec00000000000100000000000004000480"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000020803"], 0x14}}, 0x40000) 19.565292158s ago: executing program 4 (id=3228): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x4) r3 = socket(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000640)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1802000072009fb300000000db0000000007000000", @ANYRES32=0x0], 0x18}}, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r7, 0x8030ae7c, &(0x7f0000000000)) 18.647779188s ago: executing program 4 (id=3229): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0xff9de1bcb3367476, 0x5003) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r1, @ANYBLOB="0000000000e3ffffffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010}) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) bind$llc(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000480)='\x00\x00\toup\x00C\xaf\x00\x00\x00\x04\x81fj:\xee\x03\xa6\xd3o\x02z\xc1\xbbI\xc2#\x19\xd8\xd6\x99\x91{\x8fI\xce\xe2-\xefv*\xd1\xf2\x0f\xa0\xa0T\xdbmpY\xe2\x83e\xff\xd2\xe2\xec+\xcc\x16\x1c`\xddv\x86_\x85\x18Fh\x83\n\xbc\xfc'}, 0x30) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r3, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x0) eventfd(0xffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x5) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'wg1\x00', 0x1000}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r5) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x20040040) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000080)=0xa, 0x4) 18.199783808s ago: executing program 4 (id=3230): socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) r0 = socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000e635000100bd7000fbdbdf250300000000"], 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c01000010000100000000000000000000000000000011fe8000000000000000000000000000000000ffff000000000a0020005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000033000000fc0200000000000000000000000000010000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000019000000000000000000000000000000000000000000000000000000000a00028016000000000000004c001400736d33000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000280)={0x8006, 0x1, 0x0, "eee98fb006178749cb4dfd93e33c9b6b7bd152f35ed730fc700000cb4f1891e2", 0x43353039}) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000200)=ANY=[], &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0xa, [{0xd2, &(0x7f00000004c0)=@string={0xd2, 0x3, "bcfe2940abcd2b82449221c60c08fb7f7e4ac010dc5bc98c77a08718e3f3b695b53b6444c1198dab1036267a0044b0216ccb62529dc09e3768ddfe01058be498addd9b7044733ad4a2284f1a8b6c590a0a156520037bef8d1774e45017d60ec1c129d59dde65b851e0dc72957551e3e1b1265422137a4da233cca4ddbbd749f4b8ab2ad8770797829240a98c5726765b691ce0068b202bdefc28b84ceeb66164fb07ba54f0613ad10dec89d4bae6ca66553b8c72694d6648b5d368d125a04fbba6696a9cf0e7991cbd0fee7ae991dc6e"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x411}}, {0xd5, &(0x7f0000000640)=@string={0xd5, 0x3, "c5f52f9aac9fb23fccc5361056ac0922ae7f25c2d78e39f5ac3de980e58799c295986b76559499cca99b79f3c8f6626c4999f6017dc8d174801ba31615203c675a45f74b8e2ce69db1ef893bd9e7df52866a5c56beee1e60113125519ca7c07ca030c25afb3e0c1462094ae99ac17355b1cf57a7e7f5950496fae8b9e28d1dec0ea54ad592dffcfa4b96f12b5804618c23448d04e71623a0c0e80a0a68b52e681f400d710a7a436197dc049a75c01e5dfdbd174f892bf7e6ab4f65fff7b705d7ce48415232dbc6a6dbe7e137d4d754a3d5ac07"}}, {0x25, &(0x7f0000000180)=@string={0x25, 0x3, "9984db9c58550a17db7943f3d702b9faa48f06c7aad10ce2147fa9f178447ad0f15701"}}, {0xf1, &(0x7f0000000740)=@string={0xf1, 0x3, "82e3a836a0d3d49dd3636cfd00ac56103a44ae8f30f3448dc4c0de2986b8c95bf4622c0c7ed5b77aa17a686bc577a85fce9d93ebf49f54a9a80464066a687e7a503c508bb6b82c16359aa94e274c46b7689ff518b7598f393a718ec0a3b6e6e058124ef5049c898fa4846cfaf4c4f7da070c89cd6510a42d17ddf8d8010ea6c36c87dd196811ca32e3fcb33a9abe00b3615f882c86b8341f0dc5e3935f24a93e47fb8d82bd9341fc18c87f8d9ca85ebabf45b768da265a4aedb707e3969e796a4bb41f7c4a91e54bd60c89360ce340da91b413a7a76d673810294d29eca83f25c975fbc3e7eb72de8c811ef75a6743"}}, {0x1d, &(0x7f0000000200)=@string={0x1d, 0x3, "f8a8431e008ed08fdcd91297533ddefcb8c6261913e7c941831ca0"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x29f2c436533104bb}}, {0x6a, &(0x7f0000000840)=@string={0x6a, 0x3, "e76e25fae8172c68deea0837387c69d7c8ad2671423d1a4e09fe24f789b4ae7004bfddc88dbbf4c31dbb00e3aad3e11c4874ab1d0186de618ce4d77dd74f7d9af47c4c1bef750cac9739a2b76a995bff7181e46cadd995607ed425833e9136cd8e0552818d868c72"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000940)=@lang_id={0x4}}]}) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 17.02244482s ago: executing program 40 (id=3213): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140), 0x4) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prlimit64(r3, 0x5, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) fsopen(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0x1, 0xffff9259) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002d00010026bd7000fcdbdf250400000008000c0000000000"], 0x1c}}, 0x20000000) io_setup(0x30, 0x0) 15.128060921s ago: executing program 4 (id=3232): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000cac000/0x1000)=nil) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) 14.016007496s ago: executing program 41 (id=3219): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x39f) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_EXPR={0x44, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xe}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r6, 0x439, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x8110}, 0x8000) r8 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x208}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "2634784b05261d387c9201200000000000000080000000000600", 0x0, 0xffffffff, 0x2005, 0xf6}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea560300000000000000a3ae714d", 0x4, 0x0, 0x5a7a}, 0xfffffe91) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x100) 0s ago: executing program 42 (id=3232): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000cac000/0x1000)=nil) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r6, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) kernel console output (not intermixed with test programs): 0 R09: 0000000000000000 [ 919.725282][T30159] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000002 [ 919.725293][T30159] R13: 00007f9f797b6218 R14: 00007f9f797b6180 R15: 00007ffc88abbe68 [ 919.725318][T30159] [ 920.469122][ T30] audit: type=1400 audit(1754605270.444:1332): avc: denied { bind } for pid=30165 comm="syz.0.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 920.633172][T30172] overlayfs: missing 'lowerdir' [ 921.681225][T30197] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 921.900366][T27030] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 921.933859][T30208] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 923.820699][T27030] usb 5-1: Using ep0 maxpacket: 32 [ 923.831932][T27030] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 923.840549][T27030] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 923.863765][T27030] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 923.890310][T27030] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 923.929742][T30221] overlayfs: missing 'lowerdir' [ 923.936985][T27030] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 923.968517][T27030] usb 5-1: config 0 interface 0 has no altsetting 0 [ 923.987632][T27030] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 924.004943][T27030] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 924.033911][T27030] usb 5-1: Product: syz [ 924.038109][T27030] usb 5-1: Manufacturer: syz [ 924.061648][T27030] usb 5-1: SerialNumber: syz [ 924.156782][T27030] usb 5-1: config 0 descriptor?? [ 924.165315][T27030] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 924.290528][T27030] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 925.080387][ T24] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 925.260800][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 925.271587][ T24] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 925.280228][ T24] usb 6-1: config 0 has no interface number 0 [ 925.304316][ T24] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 925.318555][ T24] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 925.329029][ T24] usb 6-1: config 0 interface 41 has no altsetting 0 [ 925.338076][ T24] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 925.349198][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.350594][T27030] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 925.357642][ T24] usb 6-1: Product: syz [ 925.370088][ T24] usb 6-1: Manufacturer: syz [ 925.381442][ T24] usb 6-1: SerialNumber: syz [ 925.389061][ T24] usb 6-1: config 0 descriptor?? [ 925.395464][T30230] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 925.402917][T30230] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 925.500442][T20104] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 925.510392][T27030] usb 9-1: device descriptor read/64, error -71 [ 925.621959][T30230] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 925.632931][T30230] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 925.750454][T27030] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 925.801515][T20104] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 926.277459][T20104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.291594][ T5971] usb 5-1: USB disconnect, device number 12 [ 926.312039][T27030] usb 9-1: device descriptor read/64, error -71 [ 926.321641][ T5971] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 926.342316][T20104] usb 1-1: Product: syz [ 926.398044][T20104] usb 1-1: Manufacturer: syz [ 926.450562][T27030] usb usb9-port1: attempt power cycle [ 926.477678][T20104] usb 1-1: SerialNumber: syz [ 926.536208][T20104] usb 1-1: config 0 descriptor?? [ 926.563174][T20104] usb 1-1: interface 1 not found [ 926.632159][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 926.896639][ T6009] usb 1-1: USB disconnect, device number 106 [ 926.952132][T27030] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 926.974272][T27030] usb 9-1: device descriptor read/8, error -71 [ 927.118096][ T24] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 927.212517][T27030] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 927.238717][T30306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2872'. [ 927.317483][T27030] usb 9-1: device descriptor read/8, error -71 [ 927.460558][T27030] usb usb9-port1: unable to enumerate USB device [ 927.759322][T30310] overlayfs: missing 'lowerdir' [ 927.997264][T27030] hid_parser_main: 73 callbacks suppressed [ 927.997285][T27030] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 928.051946][T27030] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz1] on syz0 [ 928.116271][ T5167] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 928.141332][ T5167] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 928.150336][ T5167] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 928.158409][ T5167] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 928.166452][ T5167] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 928.214840][T30333] vivid-004: disconnect [ 928.610146][ T24] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 929.027931][ T24] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 929.081025][T30327] vivid-004: reconnect [ 929.166780][ T24] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 929.228451][ T24] usb 6-1: USB disconnect, device number 82 [ 929.356608][T30450] netlink: 'syz.5.2880': attribute type 1 has an invalid length. [ 929.490184][T30450] 8021q: adding VLAN 0 to HW filter on device bond12 [ 929.624285][T30457] bond12: (slave batadv3): Opening slave failed [ 929.670589][T30318] chnl_net:caif_netlink_parms(): no params data found [ 929.711483][T30494] input: syz0 as /devices/virtual/input/input47 [ 929.917182][T30318] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.926754][T30318] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.934673][T30318] bridge_slave_0: entered allmulticast mode [ 929.942788][T30318] bridge_slave_0: entered promiscuous mode [ 929.956346][T30318] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.961143][T27030] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 929.971778][T30318] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.978939][T30318] bridge_slave_1: entered allmulticast mode [ 929.989864][T30318] bridge_slave_1: entered promiscuous mode [ 930.044378][T30318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.065533][T30318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.131737][ T919] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 930.143823][T30318] team0: Port device team_slave_0 added [ 930.174239][T27030] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 930.177340][T30318] team0: Port device team_slave_1 added [ 930.199186][T27030] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.220319][T27030] usb 10-1: Product: syz [ 930.224706][T27030] usb 10-1: Manufacturer: syz [ 930.231291][T26213] Bluetooth: hci5: command tx timeout [ 930.239118][T27030] usb 10-1: SerialNumber: syz [ 930.251626][T27030] usb 10-1: config 0 descriptor?? [ 930.259747][T27030] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 035 [ 930.306367][T30318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 930.314406][ T919] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.340631][ T919] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 930.347327][T30318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.418002][T30318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.524533][ T919] usb 9-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 930.545566][ T919] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.562861][ T919] usb 9-1: config 0 descriptor?? [ 930.564267][T30318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.577816][T30318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.604830][T30318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.651203][T30318] hsr_slave_0: entered promiscuous mode [ 930.658128][T30318] hsr_slave_1: entered promiscuous mode [ 930.670582][T30318] debugfs: 'hsr0' already exists in 'hsr' [ 930.676827][T30318] Cannot create hsr debugfs directory [ 930.718452][T27030] (null): failure reading functionality [ 930.725821][T30494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.746528][T30494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.762757][T27030] i2c i2c-1: failure reading functionality [ 930.771234][T27030] i2c i2c-1: connected i2c-tiny-usb device [ 930.785422][T27030] usb 10-1: USB disconnect, device number 35 [ 930.974555][T30318] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.995591][ T919] hid-led 0003:1294:1320.0066: hidraw0: USB HID vff.fe Device [HID 1294:1320] on usb-dummy_hcd.8-1/input0 [ 931.036670][ T919] hid-led 0003:1294:1320.0066: Riso Kagaku Webmail Notifier initialized [ 931.084467][T30318] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.112867][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.119829][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.168931][T30318] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.252333][ T24] usb 9-1: USB disconnect, device number 43 [ 931.285158][ T7593] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 931.306843][ T7593] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 931.322553][ T49] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 931.352530][T30318] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.062852][T30795] overlayfs: missing 'lowerdir' [ 932.333795][T26213] Bluetooth: hci5: command tx timeout [ 932.841008][T30318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 932.857056][T30318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 932.864670][ T30] audit: type=1400 audit(1754605282.844:1333): avc: denied { accept } for pid=30808 comm="syz.5.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 932.922962][T30318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 933.180492][ T30] audit: type=1400 audit(1754605282.844:1334): avc: denied { read } for pid=30808 comm="syz.5.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 933.209382][T30318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 934.058479][T30318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.093983][T30318] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.142745][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.149867][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.180922][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.188018][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.296259][ T30] audit: type=1400 audit(1754605284.274:1335): avc: denied { compute_member } for pid=30849 comm="syz.4.2898" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 934.390891][T26213] Bluetooth: hci5: command tx timeout [ 934.553003][T30318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.787412][T30888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 935.228422][T30898] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2901'. [ 935.701477][T30912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2904'. [ 935.876946][T30318] veth0_vlan: entered promiscuous mode [ 935.920603][ T24] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 936.171279][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 936.177789][ T24] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 936.224899][ T24] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 936.255014][ T24] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 936.266126][ T24] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 936.286247][ T24] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 936.301125][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.356806][ T24] usbtmc 9-1:16.0: bulk endpoints not found [ 936.391863][T30318] veth1_vlan: entered promiscuous mode [ 936.470852][T26213] Bluetooth: hci5: command tx timeout [ 936.588102][T30318] veth0_macvtap: entered promiscuous mode [ 936.686163][T30318] veth1_macvtap: entered promiscuous mode [ 936.757338][T30975] netlink: 'syz.5.2905': attribute type 1 has an invalid length. [ 936.794411][T30975] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.2905'. [ 936.801900][T30318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.929138][T30318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.952163][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.951473][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.175237][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.669248][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.680740][ T5971] usb 9-1: USB disconnect, device number 44 [ 939.815197][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.828312][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.859335][T31000] netlink: 'syz.9.2909': attribute type 1 has an invalid length. [ 939.925351][T31000] 8021q: adding VLAN 0 to HW filter on device bond4 [ 940.008635][T31000] bond4: (slave batadv1): Opening slave failed [ 940.011365][T31045] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2911'. [ 940.146397][T31041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2908'. [ 940.226587][ T7593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.234967][ T7593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.330320][ T6009] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 940.543818][ T6009] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 940.582249][ T6009] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.713482][ T6009] usb 9-1: Product: syz [ 940.717658][ T6009] usb 9-1: Manufacturer: syz [ 940.735406][ T6009] usb 9-1: SerialNumber: syz [ 940.753287][ T6009] usb 9-1: config 0 descriptor?? [ 940.777040][ T6009] usb 9-1: Waiting for MOTU Microbook II to boot up... [ 940.824763][ T6009] usb 9-1: failed setting the sample rate for Motu MicroBook II: -22 [ 941.055368][ T6009] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 941.090782][ T6009] usb 9-1: USB disconnect, device number 45 [ 941.418684][T31083] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2913'. [ 943.487619][T31121] could not allocate digest TFM handle cryptd(blake2b-160) [ 943.560828][ T6009] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 943.730420][ T6009] usb 6-1: Using ep0 maxpacket: 8 [ 943.788270][ T6009] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 944.299564][ T6009] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 944.396463][ T6009] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 944.424748][ T6009] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 944.468554][ T6009] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 944.478367][ T6009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.621507][ T6009] usbtmc 6-1:16.0: bulk endpoints not found [ 944.631883][ T5956] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 944.813891][ T5956] usb 10-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 944.846894][ T5956] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.860421][ T5956] usb 10-1: Product: syz [ 944.864715][ T5956] usb 10-1: Manufacturer: syz [ 944.869407][ T5956] usb 10-1: SerialNumber: syz [ 944.892876][ T5956] usb 10-1: config 0 descriptor?? [ 944.913521][ T5956] usb 10-1: interface 1 not found [ 945.078524][T31181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2927'. [ 945.516598][ T5956] usb 10-1: USB disconnect, device number 36 [ 947.710436][ T5956] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 947.909318][ T5956] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 947.979116][T20104] usb 6-1: USB disconnect, device number 83 [ 947.985306][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 948.038193][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 948.087038][ T5956] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 948.120893][ T5956] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 948.177886][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.237257][ T30] audit: type=1400 audit(1754605298.214:1336): avc: denied { read write } for pid=31251 comm="syz.5.2938" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 948.535113][ T30] audit: type=1400 audit(1754605298.214:1337): avc: denied { open } for pid=31251 comm="syz.5.2938" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 948.583134][ T5956] usb 1-1: config 0 descriptor?? [ 949.020950][ T5956] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 949.069300][ T5956] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 949.088122][ T5956] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 949.116463][ T5956] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 949.130354][ T5961] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 949.153670][ T5956] plantronics 0003:047F:FFFF.0067: unknown main item tag 0x0 [ 949.169024][ T5956] plantronics 0003:047F:FFFF.0067: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 949.303085][ T5961] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.398058][ T5961] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 949.571872][T31295] netlink: 'syz.0.2932': attribute type 1 has an invalid length. [ 949.803714][ T5961] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 949.834560][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.859524][ T5961] usb 6-1: config 0 descriptor?? [ 949.971571][T31292] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2943'. [ 950.480813][ T5971] usb 1-1: reset high-speed USB device number 107 using dummy_hcd [ 950.776301][T31266] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2939'. [ 951.050595][ T6009] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 951.079285][ T919] usb 6-1: USB disconnect, device number 84 [ 951.248139][ T6009] usb 9-1: Using ep0 maxpacket: 32 [ 951.259004][ T6009] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 951.290308][ T6009] usb 9-1: config 0 interface 0 has no altsetting 0 [ 951.308995][ T6009] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 951.326656][ T6009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.341325][ T6009] usb 9-1: config 0 descriptor?? [ 951.360687][ T5956] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 951.510362][ T5956] usb 10-1: Using ep0 maxpacket: 8 [ 951.523985][ T5956] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 951.534386][ T5956] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 951.546518][ T5956] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 951.556513][T31366] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2946'. [ 951.556711][ T5956] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 951.579116][ T5956] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 951.591152][ T5956] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.621825][ T6009] usbhid 9-1:0.0: can't add hid device: -71 [ 951.634322][ T5956] usbtmc 10-1:16.0: bulk endpoints not found [ 951.640537][ T6009] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 951.648120][ T6009] usb 9-1: USB disconnect, device number 46 [ 951.690545][ T5971] usb 1-1: device descriptor read/64, error -71 [ 951.760770][ T919] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 951.925646][ T919] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 951.940701][ T5971] usb 1-1: reset high-speed USB device number 107 using dummy_hcd [ 951.957022][ T919] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 951.979431][ T5971] usb 1-1: device reset changed ep0 maxpacket size! [ 951.985847][ T6009] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 951.986942][T20104] usb 1-1: USB disconnect, device number 107 [ 952.008110][ T919] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 952.053158][ T919] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 952.098516][ T919] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 952.098988][ T5167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 952.108508][ T919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.124732][ T5167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 952.133624][ T5167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 952.145187][ T5167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 952.153457][ T5167] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 952.172507][ T6009] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 952.210923][T20104] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 952.250331][ T6009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 952.268142][ T6009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 952.278684][ T6009] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 952.294125][ T6009] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 952.303982][ T6009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.321238][ T6009] usb 9-1: config 0 descriptor?? [ 952.380708][T20104] usb 1-1: Using ep0 maxpacket: 16 [ 952.402754][T20104] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 952.426966][T20104] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 952.466036][T20104] usb 1-1: config 4 has no interface number 0 [ 952.488256][T20104] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 952.512460][T20104] usb 1-1: config 4 interface 51 has no altsetting 0 [ 952.521641][T14012] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.544668][T20104] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 952.572921][T20104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.596758][ T919] ath6kl: Failed to submit usb control message: -71 [ 952.599440][T20104] usb 1-1: Product: syz [ 952.605158][ T919] ath6kl: unable to send the bmi data to the device: -71 [ 952.612112][T20104] usb 1-1: Manufacturer: syz [ 952.629764][T20104] usb 1-1: SerialNumber: syz [ 952.635021][ T919] ath6kl: Unable to send get target info: -71 [ 952.652634][T20104] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 952.695095][ T919] ath6kl: Failed to init ath6kl core: -71 [ 952.723202][ T919] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 952.745716][ T6009] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 952.765450][ T919] usb 5-1: USB disconnect, device number 13 [ 952.780313][ T6009] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 952.787746][ T6009] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 952.799491][ T6009] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 952.816058][ T6009] plantronics 0003:047F:FFFF.0068: unknown main item tag 0x0 [ 952.834827][T14012] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.848657][ T6009] plantronics 0003:047F:FFFF.0068: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 952.878000][T31351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.905087][T31351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.922648][T31351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.962729][T14012] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.964733][T31351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.994559][T31393] chnl_net:caif_netlink_parms(): no params data found [ 952.994773][ T5971] usb 1-1: USB disconnect, device number 108 [ 953.032558][T31376] netlink: 'syz.8.2951': attribute type 1 has an invalid length. [ 953.083997][T14012] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.136780][T31376] 8021q: adding VLAN 0 to HW filter on device bond3 [ 953.197304][T31560] bond3: (slave veth5): Enslaving as an active interface with a down link [ 953.216339][T31376] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 953.225551][T31376] bond3: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 953.318061][T31393] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.333884][T31393] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.334716][ T6009] usb 9-1: USB disconnect, device number 47 [ 953.342918][T31393] bridge_slave_0: entered allmulticast mode [ 953.361618][T31393] bridge_slave_0: entered promiscuous mode [ 953.393824][T31393] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.401897][T31393] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.409617][T31393] bridge_slave_1: entered allmulticast mode [ 953.417100][T31393] bridge_slave_1: entered promiscuous mode [ 953.466802][T31393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.487029][T31393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.544290][T31393] team0: Port device team_slave_0 added [ 953.555477][T31393] team0: Port device team_slave_1 added [ 953.584916][T14012] batman_adv: batadv0: Interface deactivated: gretap1 [ 954.093040][T14012] batman_adv: batadv0: Removing interface: gretap1 [ 954.270407][ T5167] Bluetooth: hci0: command tx timeout [ 954.638215][ T30] audit: type=1400 audit(1754605304.205:1338): avc: denied { read } for pid=31736 comm="syz.8.2956" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 954.694196][ T919] usb 10-1: USB disconnect, device number 37 [ 954.989744][T31757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2957'. [ 955.137973][T14012] bond0 (unregistering): left promiscuous mode [ 955.211079][T14012] bond0 (unregistering): Released all slaves [ 955.576829][T14012] bond1 (unregistering): Released all slaves [ 955.911411][T14012] bond2 (unregistering): Released all slaves [ 956.113826][T14012] bond3 (unregistering): Released all slaves [ 956.265949][T14012] bond4 (unregistering): Released all slaves [ 956.320417][ T5167] Bluetooth: hci0: command tx timeout [ 956.437365][T14012] bond5 (unregistering): Released all slaves [ 956.595213][T14012] bond6 (unregistering): (slave veth15): Releasing active interface [ 956.604655][T14012] bond6 (unregistering): Released all slaves [ 956.771892][T14012] bond7 (unregistering): Released all slaves [ 956.933630][T14012] bond8 (unregistering): Released all slaves [ 957.100063][T14012] bond9 (unregistering): Released all slaves [ 957.255424][T14012] bond10 (unregistering): (slave veth17): Releasing active interface [ 957.264919][T14012] bond10 (unregistering): Released all slaves [ 957.418341][T14012] bond11 (unregistering): (slave veth19): Releasing active interface [ 957.428281][T14012] bond11 (unregistering): Released all slaves [ 957.563155][T14012] bond12 (unregistering): Released all slaves [ 957.621716][T31393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.628684][T31393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.730308][T31393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.745020][T31393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.752013][T31393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.778159][T31393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.800631][T31741] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 957.806625][T31741] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 957.833930][T31741] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 957.864418][T31788] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 957.867093][T31741] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 957.879870][T31741] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 957.893462][T31788] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 957.943133][T31741] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 957.990669][ T751] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 958.081491][T14012] tipc: Disabling bearer [ 958.124771][T31393] hsr_slave_0: entered promiscuous mode [ 958.148088][T14012] tipc: Left network mode [ 958.170915][T31393] hsr_slave_1: entered promiscuous mode [ 958.490576][T31393] debugfs: 'hsr0' already exists in 'hsr' [ 958.496337][T31393] Cannot create hsr debugfs directory [ 959.115639][T14012] batadv0: left promiscuous mode [ 959.179670][T14012] hsr_slave_0: left promiscuous mode [ 959.182580][T31880] netlink: 'syz.9.2967': attribute type 1 has an invalid length. [ 959.193961][T14012] hsr_slave_1: left promiscuous mode [ 959.212751][T14012] veth1_macvtap: left promiscuous mode [ 959.218338][T14012] veth0_macvtap: left promiscuous mode [ 959.225080][T14012] veth1_vlan: left promiscuous mode [ 959.230976][T14012] veth0_vlan: left promiscuous mode [ 959.350503][T27030] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 959.506177][T27030] usb 9-1: Using ep0 maxpacket: 16 [ 959.517859][T27030] usb 9-1: config 244 has an invalid interface number: 121 but max is 3 [ 959.531356][T27030] usb 9-1: config 244 contains an unexpected descriptor of type 0x1, skipping [ 959.545490][T27030] usb 9-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config [ 959.556716][T27030] usb 9-1: config 244 has 1 interface, different from the descriptor's value: 4 [ 959.566536][T27030] usb 9-1: config 244 has no interface number 0 [ 959.576545][T27030] usb 9-1: config 244 interface 121 altsetting 235 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 959.590014][T27030] usb 9-1: config 244 interface 121 has no altsetting 0 [ 959.599377][T27030] usb 9-1: New USB device found, idVendor=0b8c, idProduct=2303, bcdDevice= c.1e [ 959.608801][T27030] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.616952][T27030] usb 9-1: Product: á„ [ 959.621158][T27030] usb 9-1: Manufacturer: 芸à·á–™à¿ªà¨“à°‚ê²»ä°î“µã¸Ÿì®‰èš ì¡¯à ‘虃뻴㤋嫢➆覺ã蹱寧딯햱๘鸷쀞딋Ԧᵉⱛ봗௓繉貚邦âµÇ¥ËŸéµ‚߫޷⧇젴ꎿ럆屘૫获ᓼ贉憊䒼ꇱ릮煻潉泞ჿڧ㗷뒆䚠✓é¢å¨•å«¾ä¯…ᕎ௨㴕糟覓â•â¤‚僱둭玙弤 [ 959.647769][T27030] usb 9-1: SerialNumber: Ñ [ 959.835986][ T5167] Bluetooth: hci5: command 0x0c1a tx timeout [ 959.912315][ T5167] Bluetooth: hci0: command 0x0419 tx timeout [ 959.972848][T27030] pl2303 9-1:244.121: required endpoints missing [ 960.007277][T27030] usb 9-1: USB disconnect, device number 48 [ 961.910550][ T5167] Bluetooth: hci5: command 0x0c1a tx timeout [ 961.994309][ T5167] Bluetooth: hci0: command 0x0419 tx timeout [ 962.257416][T31880] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 962.770153][T31955] overlayfs: missing 'lowerdir' [ 963.170924][ T5971] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 963.301509][ T919] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 963.338293][ T5971] usb 10-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 963.360949][ T5971] usb 10-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 963.367199][T14012] IPVS: stop unused estimator thread 0... [ 963.385245][ T5971] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 963.396846][ T5971] usb 10-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 963.430604][ T5971] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 963.450006][ T5971] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.465782][ T919] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 963.516535][ T919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 963.554122][ T919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 963.580875][T31393] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 963.588158][ T919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 963.596883][T31393] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 963.606097][ T919] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 963.628212][T31393] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 963.628913][ T919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.654834][T31393] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 963.674952][ T919] usb 5-1: config 0 descriptor?? [ 963.957117][ T5971] ath6kl: Failed to submit usb control message: -71 [ 964.000642][ T5167] Bluetooth: hci5: command 0x0c1a tx timeout [ 964.011499][ T5971] ath6kl: unable to send the bmi data to the device: -71 [ 964.018958][ T5971] ath6kl: Unable to send get target info: -71 [ 964.047412][ T5971] ath6kl: Failed to init ath6kl core: -71 [ 964.070495][ T5167] Bluetooth: hci0: command 0x0419 tx timeout [ 964.085497][ T5971] ath6kl_usb 10-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 964.094860][T31393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.099449][ T919] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0 [ 964.119362][ T919] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0 [ 964.137449][ T919] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0 [ 964.164280][ T919] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0 [ 964.187963][ T919] plantronics 0003:047F:FFFF.0069: unknown main item tag 0x0 [ 964.253528][T31393] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.266395][ T919] plantronics 0003:047F:FFFF.0069: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 964.329028][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.336231][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.453949][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.461139][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.724893][T32035] netlink: 'syz.4.2976': attribute type 1 has an invalid length. [ 964.942806][T32035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 965.395349][ T5971] usb 10-1: USB disconnect, device number 38 [ 965.483258][T31966] bond1: (slave veth3): Enslaving as an active interface with a down link [ 965.574907][ T5921] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 965.645703][T32061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.679850][T32061] bond1: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 965.697775][ C0] vkms_vblank_simulate: vblank timer overrun [ 965.950274][ T30] audit: type=1400 audit(1754605315.925:1339): avc: denied { create } for pid=32108 comm="syz.8.2985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 966.030607][ T919] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 966.160789][ T5167] Bluetooth: hci0: command 0x0419 tx timeout [ 966.220384][ T919] usb 1-1: Using ep0 maxpacket: 8 [ 966.237249][ T919] usb 1-1: unable to get BOS descriptor or descriptor too short [ 966.261319][ T919] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 966.262655][T31393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.298871][ T919] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 966.329342][ T919] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 966.346895][ T919] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 966.355339][ T919] usb 1-1: Manufacturer: syz [ 966.359949][ T919] usb 1-1: SerialNumber: syz [ 966.589145][T32104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 966.603542][T32104] dummy0: entered promiscuous mode [ 966.609262][T32104] macvtap1: entered promiscuous mode [ 966.617296][T32104] macvtap1: entered allmulticast mode [ 966.622807][T32104] dummy0: entered allmulticast mode [ 966.974177][T31393] veth0_vlan: entered promiscuous mode [ 967.003891][T31393] veth1_vlan: entered promiscuous mode [ 967.088527][T31393] veth0_macvtap: entered promiscuous mode [ 967.123725][T31393] veth1_macvtap: entered promiscuous mode [ 967.175516][T31393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.207844][T31393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.243905][ T7251] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.272941][ T7251] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.295090][ T7251] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.304676][T27030] usb 5-1: USB disconnect, device number 14 [ 967.376649][ T7251] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.393895][T32142] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.2989'. [ 967.443557][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.459082][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.515233][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.533431][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.609847][T32161] netlink: 'syz.4.2990': attribute type 3 has an invalid length. [ 967.618173][T32161] netlink: 'syz.4.2990': attribute type 3 has an invalid length. [ 967.853450][T27030] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 968.319387][ T30] audit: type=1400 audit(1754605317.885:1340): avc: denied { accept } for pid=32153 comm="syz.4.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 968.863889][ T919] usb 1-1: USB disconnect, device number 109 [ 968.873584][T27030] usb 10-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 968.918622][T27030] usb 10-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 969.001503][T32176] netlink: 376 bytes leftover after parsing attributes in process `syz.5.2992'. [ 969.225033][T27030] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 969.269305][T27030] usb 10-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 969.303316][T27030] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 969.313225][T27030] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.460399][ T919] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 969.460642][ T5956] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 969.592234][T32201] batadv_slave_1: entered promiscuous mode [ 969.608942][T32199] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2996'. [ 969.621206][ T919] usb 1-1: Using ep0 maxpacket: 16 [ 969.634373][ T919] usb 1-1: unable to get BOS descriptor or descriptor too short [ 969.644100][ T919] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 969.650697][ T5956] usb 6-1: Using ep0 maxpacket: 32 [ 969.659431][ T919] usb 1-1: config 0 has no interface number 0 [ 969.668982][ T919] usb 1-1: config 0 interface 51 has no altsetting 0 [ 969.679289][ T5956] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 969.681550][ T919] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2710, bcdDevice=83.9c [ 969.700702][ T5956] usb 6-1: config 0 has no interface number 0 [ 969.702927][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.717727][ T919] usb 1-1: Product: syz [ 969.717745][ T5956] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 969.717776][ T5956] usb 6-1: config 0 interface 85 has no altsetting 0 [ 969.724218][ T919] usb 1-1: Manufacturer: syz [ 969.767160][ T919] usb 1-1: SerialNumber: syz [ 969.775042][ T919] usb 1-1: config 0 descriptor?? [ 969.814527][ T5956] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 969.825806][T32156] batadv_slave_1: left promiscuous mode [ 969.836823][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.845961][T27030] ath6kl: Failed to submit usb control message: -71 [ 969.854858][ T5956] usb 6-1: Product: syz [ 969.862034][ T5956] usb 6-1: Manufacturer: syz [ 969.866749][ T5956] usb 6-1: SerialNumber: syz [ 969.877544][ T5956] usb 6-1: config 0 descriptor?? [ 969.883211][T27030] ath6kl: unable to send the bmi data to the device: -71 [ 969.940132][T27030] ath6kl: Unable to send get target info: -71 [ 969.955412][T27030] ath6kl: Failed to init ath6kl core: -71 [ 969.961663][ T30] audit: type=1400 audit(1754605319.935:1341): avc: denied { map } for pid=32212 comm="syz.4.2998" path="socket:[63419]" dev="sockfs" ino=63419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 969.985402][ C0] vkms_vblank_simulate: vblank timer overrun [ 970.149931][T27030] ath6kl_usb 10-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 970.167619][ T5956] appletouch 6-1:0.85: Failed to read mode from device. [ 970.176031][ T5956] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 970.189353][ T919] em28xx 1-1:0.51: audio device (eb1a:2710): interface 51, class 1 [ 970.374600][T32220] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 970.641893][ T5956] usb 6-1: USB disconnect, device number 85 [ 970.667463][T27030] usb 10-1: USB disconnect, device number 39 [ 970.708011][ T919] usb 1-1: USB disconnect, device number 110 [ 970.972411][ T30] audit: type=1400 audit(1754605320.955:1342): avc: denied { write } for pid=32242 comm="syz.9.3000" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 971.000682][T32243] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3000'. [ 971.133296][T32251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=194 sclass=netlink_route_socket pid=32251 comm=syz.8.3002 [ 971.450460][ T919] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 971.645304][ T919] usb 10-1: Using ep0 maxpacket: 16 [ 971.655853][ T919] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.669734][ T919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 971.686274][ T919] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 971.696586][ T919] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 971.709997][ T919] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 971.728458][ T919] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 971.756406][ T919] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 971.770864][ T919] usb 10-1: Manufacturer: syz [ 971.784800][ T919] usb 10-1: config 0 descriptor?? [ 972.219066][T32278] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3007'. [ 972.297542][ T30] audit: type=1400 audit(1754605322.275:1343): avc: denied { read } for pid=32282 comm="syz.8.3009" dev="sockfs" ino=64189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 972.554708][ T919] rc_core: IR keymap rc-hauppauge not found [ 972.564308][ T919] Registered IR keymap rc-empty [ 972.584539][ T919] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 972.625826][T32288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3010'. [ 972.660434][ T919] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 972.716855][ T919] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 972.798882][ T919] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input49 [ 972.968772][ T919] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 973.136990][ T919] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 973.179339][ T919] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 973.210396][ T919] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 973.240491][ T919] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 973.285851][ T919] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 973.331172][ T919] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 973.402370][ T919] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 973.538971][T32300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3013'. [ 973.571810][ T919] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 973.637578][ T919] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 973.698240][ T919] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 973.769190][ T919] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 974.009275][T32309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3015'. [ 974.149389][T32311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 974.437865][ T919] usb 10-1: USB disconnect, device number 40 [ 974.908213][T32329] Invalid ELF header len 8 [ 974.927134][ T30] audit: type=1400 audit(1754605324.885:1344): avc: denied { module_load } for pid=32325 comm="syz.9.3016" path="/292/bus" dev="tmpfs" ino=1621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 975.013039][T32334] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 975.491624][T32338] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3018'. [ 975.500787][T32338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3018'. [ 975.625522][ T30] audit: type=1400 audit(1754605325.605:1345): avc: denied { map } for pid=32349 comm="syz.5.3021" path="/proc/20/map_files" dev="proc" ino=64259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 976.714847][T32351] netlink: 'syz.5.3021': attribute type 1 has an invalid length. [ 976.761135][T32351] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3021'. [ 976.762758][T32371] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 976.792120][T32351] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3021'. [ 978.071001][T32390] netlink: 'syz.9.3030': attribute type 1 has an invalid length. [ 978.101666][T32390] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3030'. [ 978.111658][T32390] 8021q: adding VLAN 0 to HW filter on device bond5 [ 978.370674][T32430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=32430 comm=syz.5.3031 [ 978.564265][T32433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'. [ 978.577785][T32433] netlink: 'syz.0.3032': attribute type 5 has an invalid length. [ 979.680551][T26213] Bluetooth: hci0: command 0x0419 tx timeout [ 982.115465][T32512] 9pnet_fd: Insufficient options for proto=fd [ 982.490814][T32522] pimreg3: entered allmulticast mode [ 982.548391][T32522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=32522 comm=syz.0.3045 [ 982.589238][ T30] audit: type=1400 audit(1754605332.565:1346): avc: denied { create } for pid=32526 comm="syz.4.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 982.626520][ T30] audit: type=1400 audit(1754605332.595:1347): avc: denied { execmem } for pid=32513 comm="syz.0.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 982.649162][ T30] audit: type=1400 audit(1754605332.595:1348): avc: denied { write } for pid=32526 comm="syz.4.3047" name="rt_acct" dev="proc" ino=4026533696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 982.739225][ T30] audit: type=1400 audit(1754605332.695:1349): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.4 dest=40900 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 982.767374][ T30] audit: type=1400 audit(1754605332.695:1350): avc: denied { read write } for pid=26206 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 982.791639][ C0] vkms_vblank_simulate: vblank timer overrun [ 982.806408][ T30] audit: type=1400 audit(1754605332.695:1351): avc: denied { open } for pid=26206 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 982.834648][ T30] audit: type=1400 audit(1754605332.695:1352): avc: denied { ioctl } for pid=26206 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 982.860268][ C0] vkms_vblank_simulate: vblank timer overrun [ 982.868550][ T30] audit: type=1400 audit(1754605332.715:1353): avc: denied { map_create } for pid=32528 comm="syz.4.3048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 982.887747][ C0] vkms_vblank_simulate: vblank timer overrun [ 983.235212][ T30] audit: type=1400 audit(1754605333.045:1354): avc: denied { create } for pid=32531 comm="syz.9.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 983.255716][ C0] vkms_vblank_simulate: vblank timer overrun [ 983.263828][ T30] audit: type=1400 audit(1754605333.045:1355): avc: denied { prog_load } for pid=32531 comm="syz.9.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 983.343503][T32534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 984.822143][T32558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3056'. [ 984.836105][T32558] team_slave_0: entered promiscuous mode [ 984.842127][T32558] team_slave_1: entered promiscuous mode [ 984.850026][T32558] macsec1: entered promiscuous mode [ 984.856139][T32558] team0: entered promiscuous mode [ 984.865366][T32558] macsec1: entered allmulticast mode [ 984.872190][T32558] team0: entered allmulticast mode [ 984.879281][T32558] team_slave_0: entered allmulticast mode [ 984.886154][T32558] team_slave_1: entered allmulticast mode [ 984.893612][T32558] team0: Device macsec1 is already an upper device of the team interface [ 985.143622][T32558] team0: left allmulticast mode [ 985.149039][T32558] team_slave_0: left allmulticast mode [ 985.164951][T32558] team_slave_1: left allmulticast mode [ 985.172726][T32558] team0: left promiscuous mode [ 985.207872][T32558] team_slave_0: left promiscuous mode [ 985.213401][T32558] team_slave_1: left promiscuous mode [ 986.140441][T27030] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 986.157749][T32590] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 986.382855][T27030] usb 10-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 986.525994][T27030] usb 10-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 986.566160][T27030] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 986.577483][T27030] usb 10-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 986.591703][T27030] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 986.602330][T27030] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.750338][ T919] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 986.988975][ T919] usb 9-1: config 0 has an invalid interface number: 255 but max is 0 [ 987.022929][ T919] usb 9-1: config 0 has no interface number 0 [ 987.033403][T32617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3065'. [ 987.033547][ T919] usb 9-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 987.052527][ T919] usb 9-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 987.069178][ T919] usb 9-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 987.079048][ T919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.115996][ T919] usb 9-1: Product: syz [ 987.129055][ T919] usb 9-1: Manufacturer: syz [ 987.175012][ T919] usb 9-1: SerialNumber: syz [ 987.183330][T27030] ath6kl: Failed to submit usb control message: -71 [ 987.208481][T27030] ath6kl: unable to send the bmi data to the device: -71 [ 987.220833][ T919] usb 9-1: config 0 descriptor?? [ 987.249347][T27030] ath6kl: Unable to send get target info: -71 [ 987.302575][T27030] ath6kl: Failed to init ath6kl core: -71 [ 987.309399][T27030] ath6kl_usb 10-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 987.337095][ T919] vmk80xx 9-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 987.443717][ T919] vmk80xx 9-1:0.255: probe with driver vmk80xx failed with error -22 [ 987.553883][T27030] usb 10-1: USB disconnect, device number 41 [ 987.580647][ T5961] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 987.602997][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 987.603013][ T30] audit: type=1400 audit(1754605337.585:1421): avc: denied { ioctl } for pid=32634 comm="syz.0.3067" path="socket:[65046]" dev="sockfs" ino=65046 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 987.763565][ T30] audit: type=1400 audit(1754605337.625:1422): avc: denied { sys_module } for pid=32634 comm="syz.0.3067" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 987.800714][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 987.826810][ T5961] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 988.147654][T27030] usb 9-1: USB disconnect, device number 49 [ 988.155791][ T5961] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 988.201527][ T5961] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 988.225296][ T5961] usb 5-1: config 1 interface 0 has no altsetting 0 [ 988.247518][ T30] audit: type=1400 audit(1754605338.225:1423): avc: denied { read write } for pid=32659 comm="syz.9.3069" name="mouse0" dev="devtmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 988.280642][ T5961] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 988.303865][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.329139][ T5961] usb 5-1: Product: syz [ 988.338826][ T30] audit: type=1400 audit(1754605338.255:1424): avc: denied { open } for pid=32659 comm="syz.9.3069" path="/dev/input/mouse0" dev="devtmpfs" ino=986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 988.367340][ T5961] usb 5-1: Manufacturer: syz [ 988.401820][ T5961] usb 5-1: SerialNumber: syz [ 988.443490][ T30] audit: type=1400 audit(1754605338.275:1425): avc: denied { ioctl } for pid=32659 comm="syz.9.3069" path="socket:[65062]" dev="sockfs" ino=65062 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 988.539890][ T30] audit: type=1400 audit(1754605338.470:1426): avc: denied { read } for pid=32659 comm="syz.9.3069" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 988.570357][ T30] audit: type=1400 audit(1754605338.470:1427): avc: denied { open } for pid=32659 comm="syz.9.3069" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 988.931917][ T5961] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 989.133254][ T5961] usb 5-1: USB disconnect, device number 15 [ 989.152815][ T5961] usblp0: removed [ 989.305062][ T30] audit: type=1400 audit(1754605339.280:1428): avc: denied { connect } for pid=32676 comm="syz.0.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 989.636309][T32701] gfs2: gfs2 mount does not exist [ 989.700357][ T30] audit: type=1400 audit(1754605339.280:1429): avc: denied { name_connect } for pid=32676 comm="syz.0.3071" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 989.729982][ T30] audit: type=1400 audit(1754605339.540:1430): avc: denied { watch } for pid=32684 comm="syz.9.3073" path="/306" dev="tmpfs" ino=1688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 992.440324][ T5971] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 992.557985][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.566094][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.709808][T32729] mkiss: ax0: crc mode is auto. [ 992.744115][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 992.744137][ T30] audit: type=1400 audit(1754605342.710:1442): avc: denied { bind } for pid=32717 comm="syz.8.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 992.785977][ T5971] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 992.827027][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 992.875009][ T30] audit: type=1400 audit(1754605342.720:1443): avc: denied { listen } for pid=32717 comm="syz.8.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 992.901976][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 992.940158][ T5971] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 992.974713][ T30] audit: type=1400 audit(1754605342.720:1444): avc: denied { write } for pid=32717 comm="syz.8.3078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 993.014597][ T5971] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 993.046841][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.104239][ T5971] usb 6-1: config 0 descriptor?? [ 993.826019][ T5971] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0 [ 993.853668][ T5971] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0 [ 993.899538][ T5971] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0 [ 993.940514][ T5971] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0 [ 993.956396][ T5971] plantronics 0003:047F:FFFF.006A: unknown main item tag 0x0 [ 993.976715][ T5971] plantronics 0003:047F:FFFF.006A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 994.258701][ T30] audit: type=1400 audit(1754605344.230:1445): avc: denied { bind } for pid=32751 comm="syz.9.3083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 994.388443][ T30] audit: type=1400 audit(1754605344.230:1446): avc: denied { name_bind } for pid=32751 comm="syz.9.3083" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 994.506728][ T30] audit: type=1400 audit(1754605344.230:1447): avc: denied { node_bind } for pid=32751 comm="syz.9.3083" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 994.523039][T32724] netlink: 'syz.5.3080': attribute type 1 has an invalid length. [ 994.586389][ T321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 994.626196][ T30] audit: type=1400 audit(1754605344.430:1448): avc: denied { read } for pid=32753 comm="syz.8.3084" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 994.701364][T32724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 994.711870][ T919] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 994.762883][ T325] bond1: (slave veth3): Enslaving as an active interface with a down link [ 994.781317][ T30] audit: type=1400 audit(1754605344.430:1449): avc: denied { open } for pid=32753 comm="syz.8.3084" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 994.864860][ T336] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 994.893268][ T336] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 995.007058][ T919] usb 5-1: config 0 has an invalid interface number: 28 but max is 0 [ 995.015201][ T919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.035159][ T919] usb 5-1: config 0 has no interface number 0 [ 995.061885][ T919] usb 5-1: config 0 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 995.143927][ T5921] usb 6-1: USB disconnect, device number 86 [ 995.167172][ T919] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 995.187734][ T919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.251389][ T919] usb 5-1: config 0 descriptor?? [ 995.259218][ T919] usbhid 5-1:0.28: couldn't find an input interrupt endpoint [ 995.460661][T27030] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 995.662798][T27030] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 995.672935][T27030] usb 1-1: config 0 has no interface number 0 [ 995.683796][T27030] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 995.704784][T27030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.978982][ T30] audit: type=1400 audit(1754605345.850:1450): avc: denied { read } for pid=417 comm="syz.8.3089" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 996.150811][T27030] usb 1-1: Product: syz [ 996.155015][T27030] usb 1-1: Manufacturer: syz [ 996.159626][T27030] usb 1-1: SerialNumber: syz [ 996.170725][T27030] usb 1-1: config 0 descriptor?? [ 996.177942][ T30] audit: type=1400 audit(1754605345.850:1451): avc: denied { open } for pid=417 comm="syz.8.3089" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 996.380458][T27030] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 996.388806][T27030] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 996.401019][T27030] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 996.497207][T27030] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 996.529426][T27030] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 996.550540][ T5921] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 996.726469][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.737156][ T5921] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 996.834771][ T5921] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 997.034976][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.067864][ T5921] usb 6-1: config 0 descriptor?? [ 997.275383][ T5921] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 997.282671][ T5921] dvb-usb: bulk message failed: -22 (3/0) [ 997.292816][ T5921] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 997.304221][ T5921] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 997.311504][ T5921] usb 6-1: media controller created [ 997.317640][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 997.330968][ T5921] dvb-usb: bulk message failed: -22 (6/0) [ 997.337827][ T5921] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 997.362358][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input50 [ 997.427848][ T5921] dvb-usb: schedule remote query interval to 150 msecs. [ 997.459696][ T5921] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 997.483819][ T5971] usb 5-1: USB disconnect, device number 16 [ 997.517904][ T429] dibusb: i2c wr: len=158 is too big! [ 997.517904][ T429] [ 997.614216][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 997.667472][ T5921] dvb-usb: error while querying for an remote control event. [ 997.754859][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 997.754875][ T30] audit: type=1400 audit(1754605347.740:1457): avc: denied { read write } for pid=428 comm="syz.5.3090" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 997.826841][ T30] audit: type=1400 audit(1754605347.740:1458): avc: denied { open } for pid=428 comm="syz.5.3090" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 997.850624][ T5971] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 997.890638][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 997.910264][ T5921] dvb-usb: error while querying for an remote control event. [ 997.919409][ T30] audit: type=1400 audit(1754605347.860:1459): avc: denied { create } for pid=428 comm="syz.5.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 997.939018][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.947525][ T30] audit: type=1400 audit(1754605347.860:1460): avc: denied { ioctl } for pid=428 comm="syz.5.3090" path="pid:[4026532795]" dev="nsfs" ino=4026532795 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 997.972158][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.024514][ T30] audit: type=1400 audit(1754605348.010:1461): avc: denied { mount } for pid=495 comm="syz.8.3093" name="/" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 998.050005][ T5971] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 998.074435][ T5971] usb 5-1: config 0 has no interface number 0 [ 998.085369][ T5971] usb 5-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 998.106234][ T5971] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.117879][ T30] audit: type=1400 audit(1754605348.010:1462): avc: denied { search } for pid=495 comm="syz.8.3093" name="/" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 998.139983][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.172023][T27030] dvb-usb: bulk message failed: -22 (1/0) [ 998.181423][ T5971] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.198378][T27030] dvb-usb: error while querying for an remote control event. [ 998.201943][ T5971] usb 5-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 998.229174][ T30] audit: type=1400 audit(1754605348.010:1463): avc: denied { search } for pid=495 comm="syz.8.3093" name="/" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 998.268528][ T5961] usb 1-1: USB disconnect, device number 111 [ 998.318069][ T512] bridge: RTM_NEWNEIGH with invalid ether address [ 998.429732][ T5961] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 998.443071][ T5971] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 998.454100][ T5961] keyspan 1-1:0.133: device disconnected [ 998.480908][ T30] audit: type=1400 audit(1754605348.010:1464): avc: denied { read open } for pid=495 comm="syz.8.3093" path="/" dev="configfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 998.493806][T27030] dvb-usb: bulk message failed: -22 (1/0) [ 998.507470][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.766028][T27030] dvb-usb: error while querying for an remote control event. [ 998.870638][ T6011] usb 6-1: USB disconnect, device number 87 [ 998.930668][ T30] audit: type=1400 audit(1754605348.010:1465): avc: denied { create } for pid=495 comm="syz.8.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 998.956058][ T5971] usb 5-1: config 0 descriptor?? [ 998.962901][ T30] audit: type=1400 audit(1754605348.010:1466): avc: denied { connect } for pid=495 comm="syz.8.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 999.019920][ T6011] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 999.184652][ T61] Bluetooth: (null): Too short H5 packet [ 999.201602][ T565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.204402][ T5971] wacom 0003:056A:0084.006B: unknown main item tag 0x0 [ 999.218453][ T5971] wacom 0003:056A:0084.006B: unknown main item tag 0x0 [ 999.227878][ T61] Bluetooth: (null): Invalid header checksum [ 999.233009][ T5971] wacom 0003:056A:0084.006B: hidraw0: USB HID vff.ea Device [HID 056a:0084] on usb-dummy_hcd.4-1/input2 [ 999.257690][ T61] Bluetooth: (null): Invalid header checksum [ 999.258597][ T565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.302248][ T49] Bluetooth: (null): Invalid header checksum [ 999.374820][ T577] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3100'. [ 999.404553][ T49] Bluetooth: (null): Invalid header checksum [ 999.424327][ T5971] usb 5-1: USB disconnect, device number 17 [ 999.452817][T27030] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 999.512114][ T49] Bluetooth: (null): Invalid header checksum [ 999.549922][ T590] tmpfs: Unknown parameter 'grpquhta_blocr_hardlimŒº' [ 999.611953][T27030] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 999.626448][T20394] Bluetooth: (null): Invalid header checksum [ 999.627341][T27030] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 999.732762][T20394] Bluetooth: (null): Invalid header checksum [ 999.796885][T27030] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 999.828860][T27030] usb 10-1: config 0 interface 0 has no altsetting 0 [ 999.843217][T20394] Bluetooth: (null): Invalid header checksum [ 999.849807][ T598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3103'. [ 1000.023028][ T49] Bluetooth: (null): Invalid header checksum [ 1000.172878][T27030] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1000.192565][ T49] Bluetooth: (null): Invalid header checksum [ 1000.200467][T27030] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1000.251206][ T61] Bluetooth: (null): Invalid header checksum [ 1000.295164][ T751] Bluetooth: (null): Invalid header checksum [ 1000.468820][ T596] pim6reg: entered allmulticast mode [ 1000.480029][ T49] Bluetooth: (null): Invalid header checksum [ 1000.511475][ T751] Bluetooth: (null): Invalid header checksum [ 1000.549904][T27030] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1000.571663][T27030] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1000.580959][T27030] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1000.622409][ T751] Bluetooth: (null): Invalid header checksum [ 1000.732678][ T12] Bluetooth: (null): Invalid header checksum [ 1000.799561][T27030] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1000.844139][ T12] Bluetooth: (null): Invalid header checksum [ 1000.872644][ T620] fuse: Unknown parameter '000000‡@q' [ 1000.901637][T27030] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1000.951044][T27030] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1000.964230][ T49] Bluetooth: (null): Invalid header checksum [ 1000.992234][T27030] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1001.002775][T27030] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1001.011913][T27030] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1001.023765][T27030] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1001.036316][T27030] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1001.072188][ T12] Bluetooth: (null): Invalid header checksum [ 1001.084856][T27030] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1001.142963][T27030] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1001.183953][ T49] Bluetooth: (null): Invalid header checksum [ 1001.203347][T27030] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1001.254787][T27030] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1001.280553][T27030] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1001.291770][T27030] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1001.307067][T27030] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1001.310570][ T751] Bluetooth: (null): Invalid header checksum [ 1001.328707][T27030] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1001.340684][T27030] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1001.365723][T27030] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1001.392310][T27030] usb 10-1: Product: syz [ 1001.419306][T27030] usb 10-1: Manufacturer: syz [ 1001.436959][T27030] usb 10-1: SerialNumber: syz [ 1001.455851][T27030] usb 10-1: config 0 descriptor?? [ 1001.462206][ T751] Bluetooth: (null): Invalid header checksum [ 1001.502808][T27030] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 1001.522314][ T751] Bluetooth: (null): Invalid header checksum [ 1001.641310][ T7593] Bluetooth: (null): Invalid header checksum [ 1001.752669][ T751] Bluetooth: (null): Invalid header checksum [ 1001.823365][ T5956] usb 10-1: USB disconnect, device number 42 [ 1001.839739][ T5956] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 1001.970768][ T5961] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1002.162000][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1002.242274][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1002.281823][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1002.317340][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1002.348894][ T5961] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1002.368518][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.400983][ T5961] usb 6-1: config 0 descriptor?? [ 1002.864622][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1002.864640][ T30] audit: type=1400 audit(1754605352.840:1526): avc: denied { bind } for pid=670 comm="syz.4.3114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1002.892113][ T5961] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 1002.909895][ T5961] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 1002.926444][ T5961] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 1002.939911][ T5961] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 1002.947589][ T5961] plantronics 0003:047F:FFFF.006C: unknown main item tag 0x0 [ 1002.955553][ T5956] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1002.968804][ T5961] plantronics 0003:047F:FFFF.006C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1002.994578][ T30] audit: type=1400 audit(1754605352.980:1527): avc: denied { read write } for pid=675 comm="syz.9.3112" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1003.032953][ T30] audit: type=1400 audit(1754605353.000:1528): avc: denied { open } for pid=675 comm="syz.9.3112" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1003.057519][ T30] audit: type=1400 audit(1754605353.000:1529): avc: denied { ioctl } for pid=675 comm="syz.9.3112" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1003.111796][ T5956] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1003.123128][ T5956] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1003.134649][ T5956] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1003.146985][ T5956] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1003.173210][ T647] netlink: 'syz.5.3110': attribute type 1 has an invalid length. [ 1003.181428][ T5956] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1003.197005][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.269859][ T647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1003.327856][ T702] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1003.376982][ T725] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1003.388921][ T725] bond2: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1003.566300][T27030] usb 6-1: USB disconnect, device number 88 [ 1003.575202][ T747] batadv_slave_1: entered promiscuous mode [ 1003.639283][ T665] batadv_slave_1: left promiscuous mode [ 1003.646368][ T5956] ath6kl: Failed to submit usb control message: -71 [ 1003.653850][ T5956] ath6kl: unable to send the bmi data to the device: -71 [ 1003.666981][ T5956] ath6kl: Unable to send get target info: -71 [ 1003.688337][ T5956] ath6kl: Failed to init ath6kl core: -71 [ 1003.717310][ T5956] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1003.747249][ T5956] usb 1-1: USB disconnect, device number 112 [ 1003.896425][ T30] audit: type=1400 audit(1754605353.880:1530): avc: denied { name_connect } for pid=774 comm="syz.9.3117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1003.953969][ T30] audit: type=1400 audit(1754605353.940:1531): avc: denied { read } for pid=774 comm="syz.9.3117" lport=33276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1004.045440][ T30] audit: type=1400 audit(1754605354.030:1532): avc: denied { create } for pid=778 comm="syz.9.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1004.072855][ T30] audit: type=1400 audit(1754605354.050:1533): avc: denied { ioctl } for pid=778 comm="syz.9.3118" path="socket:[66602]" dev="sockfs" ino=66602 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1004.139119][ T30] audit: type=1400 audit(1754605354.120:1534): avc: denied { connect } for pid=778 comm="syz.9.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1004.220335][ T30] audit: type=1400 audit(1754605354.160:1535): avc: denied { create } for pid=763 comm="syz.4.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1004.720445][ T5956] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1004.892162][ T5956] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 1004.915320][ T5956] usb 5-1: config 0 has no interface number 0 [ 1004.924863][ T5956] usb 5-1: config 0 interface 29 has no altsetting 0 [ 1004.953366][ T5956] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1004.967512][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.976323][ T5956] usb 5-1: Product: syz [ 1004.984010][ T5956] usb 5-1: Manufacturer: syz [ 1004.988768][ T5956] usb 5-1: SerialNumber: syz [ 1004.997407][ T5956] usb 5-1: config 0 descriptor?? [ 1005.171317][ T5971] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1005.325202][ T5956] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1005.348147][ T5971] usb 9-1: config 0 has an invalid interface number: 28 but max is 0 [ 1005.358318][ T5971] usb 9-1: config 0 has no interface number 0 [ 1005.369081][ T5971] usb 9-1: config 0 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1005.446651][ T5971] usb 9-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1005.489222][ T5971] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.514853][ T5971] usb 9-1: config 0 descriptor?? [ 1005.565165][ T5971] usbhid 9-1:0.28: couldn't find an input interrupt endpoint [ 1005.662565][ T827] netlink: 'syz.0.3127': attribute type 1 has an invalid length. [ 1005.768549][ T827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1007.105960][ T5956] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 1007.134900][ T5956] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1007.211224][ T5956] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 1007.215326][ T5956] usb 5-1: USB disconnect, device number 18 [ 1008.002437][T27030] usb 9-1: USB disconnect, device number 50 [ 1008.195891][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1008.195906][ T30] audit: type=1400 audit(1754605358.180:1544): avc: denied { ioctl } for pid=940 comm="syz.0.3134" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1008.236201][ T943] FAULT_INJECTION: forcing a failure. [ 1008.236201][ T943] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.240699][ T30] audit: type=1400 audit(1754605358.210:1545): avc: denied { create } for pid=939 comm="syz.5.3133" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1008.285971][ T943] CPU: 1 UID: 0 PID: 943 Comm: syz.0.3134 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1008.286002][ T943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1008.286013][ T943] Call Trace: [ 1008.286020][ T943] [ 1008.286027][ T943] dump_stack_lvl+0x16c/0x1f0 [ 1008.286060][ T943] should_fail_ex+0x512/0x640 [ 1008.286078][ T943] ? fs_reclaim_acquire+0xae/0x150 [ 1008.286106][ T943] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1008.286131][ T943] should_failslab+0xc2/0x120 [ 1008.286153][ T943] __kmalloc_noprof+0xd2/0x510 [ 1008.286177][ T943] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1008.286204][ T943] ? tomoyo_profile+0x47/0x60 [ 1008.286239][ T943] tomoyo_path_number_perm+0x245/0x580 [ 1008.286258][ T943] ? tomoyo_path_number_perm+0x237/0x580 [ 1008.286280][ T943] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1008.286301][ T943] ? find_held_lock+0x2b/0x80 [ 1008.286347][ T943] ? find_held_lock+0x2b/0x80 [ 1008.286368][ T943] ? hook_file_ioctl_common+0x145/0x410 [ 1008.286401][ T943] ? __fget_files+0x20e/0x3c0 [ 1008.286426][ T943] security_file_ioctl+0x9b/0x240 [ 1008.286450][ T943] __x64_sys_ioctl+0xb7/0x210 [ 1008.286480][ T943] do_syscall_64+0xcd/0x4c0 [ 1008.286498][ T943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.286517][ T943] RIP: 0033:0x7f54b518ebe9 [ 1008.286532][ T943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.286549][ T943] RSP: 002b:00007f54b5f38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1008.286566][ T943] RAX: ffffffffffffffda RBX: 00007f54b53b5fa0 RCX: 00007f54b518ebe9 [ 1008.286578][ T943] RDX: 00002000000002c0 RSI: 00000000c02064b9 RDI: 0000000000000003 [ 1008.286588][ T943] RBP: 00007f54b5f38090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.286600][ T943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.286610][ T943] R13: 00007f54b53b6038 R14: 00007f54b53b5fa0 R15: 00007ffc456022e8 [ 1008.286635][ T943] [ 1008.286643][ T943] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1008.616764][ T30] audit: type=1400 audit(1754605358.590:1546): avc: denied { open } for pid=952 comm="syz.8.3135" path="/dev/ptyr5" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1008.679914][ T953] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3135'. [ 1008.694210][ T953] netlink: 'syz.8.3135': attribute type 30 has an invalid length. [ 1008.727379][ T30] audit: type=1400 audit(1754605358.630:1547): avc: denied { getopt } for pid=952 comm="syz.8.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1008.810599][ T5971] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1009.178781][ T5971] usb 5-1: Using ep0 maxpacket: 16 [ 1009.336519][ T30] audit: type=1400 audit(1754605358.990:1548): avc: denied { read } for pid=966 comm="syz.5.3140" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1009.336581][ T30] audit: type=1400 audit(1754605358.990:1549): avc: denied { open } for pid=966 comm="syz.5.3140" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1009.336618][ T30] audit: type=1400 audit(1754605359.000:1550): avc: denied { ioctl } for pid=966 comm="syz.5.3140" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1009.368253][ C0] vkms_vblank_simulate: vblank timer overrun [ 1009.416852][ C0] vkms_vblank_simulate: vblank timer overrun [ 1009.455981][ T5971] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1009.472541][ T5971] usb 5-1: config 0 has no interface number 0 [ 1009.492277][ T5971] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1009.528990][ T5971] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1009.544376][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1009.552978][ T5971] usb 5-1: Manufacturer: syz [ 1009.557738][ T5971] usb 5-1: SerialNumber: syz [ 1009.589972][ T5971] usb 5-1: config 0 descriptor?? [ 1009.825996][ T30] audit: type=1400 audit(1754605359.810:1551): avc: denied { sqpoll } for pid=954 comm="syz.4.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1009.913683][ T30] audit: type=1326 audit(1754605359.880:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=972 comm="syz.5.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf578ebe9 code=0x7ffc0000 [ 1009.937509][ T30] audit: type=1326 audit(1754605359.880:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=972 comm="syz.5.3141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf578ebe9 code=0x7ffc0000 [ 1010.137114][ T5971] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1010.369070][ T5971] usb 5-1: USB disconnect, device number 19 [ 1010.621711][ T919] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1010.823344][ T919] usb 1-1: config 0 has an invalid interface number: 28 but max is 0 [ 1010.878746][ T919] usb 1-1: config 0 has no interface number 0 [ 1010.973120][ T919] usb 1-1: config 0 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1011.016718][ T919] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1011.016750][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.021080][ T919] usb 1-1: config 0 descriptor?? [ 1011.023961][ T919] usbhid 1-1:0.28: couldn't find an input interrupt endpoint [ 1011.630103][ T1034] blktrace: Concurrent blktraces are not allowed on sg0 [ 1012.015556][ T1051] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3152'. [ 1012.015624][ T1051] netlink: 'syz.9.3152': attribute type 1 has an invalid length. [ 1012.015636][ T1051] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3152'. [ 1013.449258][T27030] usb 1-1: USB disconnect, device number 113 [ 1013.987910][ T1118] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3158'. [ 1015.495758][ T1116] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1015.503004][ T1116] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1015.928492][ T1116] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1015.957830][ T1116] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1015.991461][ T5956] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1016.110856][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1016.154720][ T5956] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1016.187619][ T5956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1016.222093][ T5956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1016.254794][ T5956] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1016.291649][ T5956] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1016.305853][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1016.324252][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1016.335413][ T5956] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.345521][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1016.355914][ T5956] usb 9-1: config 0 descriptor?? [ 1016.377557][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1016.391357][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1016.400580][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.418330][ T24] usb 5-1: config 0 descriptor?? [ 1016.775773][ T5956] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 1016.775807][ T5956] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 1016.775830][ T5956] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 1016.775853][ T5956] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 1016.775897][ T5956] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 1016.837810][ T5956] plantronics 0003:047F:FFFF.006D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1016.843734][ T24] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0 [ 1016.843766][ T24] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0 [ 1016.843788][ T24] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0 [ 1016.843810][ T24] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0 [ 1016.843832][ T24] plantronics 0003:047F:FFFF.006E: unknown main item tag 0x0 [ 1016.863896][ T24] plantronics 0003:047F:FFFF.006E: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1017.259164][ T1193] netlink: 'syz.8.3163': attribute type 1 has an invalid length. [ 1017.455996][ T1193] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1017.513007][ T1160] netlink: 'syz.4.3164': attribute type 1 has an invalid length. [ 1017.514360][ T1194] bond4: (slave veth7): Enslaving as an active interface with a down link [ 1017.519648][ T1153] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1017.519762][ T1153] bond4: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1017.626111][ T1160] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1017.659957][ T1248] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1017.694365][ T5956] usb 9-1: USB disconnect, device number 51 [ 1017.704872][ T1285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.713795][ T1285] bond2: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1017.762832][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1017.762848][ T30] audit: type=1400 audit(1754605367.750:1597): avc: denied { read write } for pid=1312 comm="syz.5.3166" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1017.797045][ T30] audit: type=1400 audit(1754605367.750:1598): avc: denied { open } for pid=1312 comm="syz.5.3166" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1017.822198][ T30] audit: type=1400 audit(1754605367.750:1599): avc: denied { map } for pid=1312 comm="syz.5.3166" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1017.951555][ T5956] usb 5-1: USB disconnect, device number 20 [ 1017.987191][ T30] audit: type=1400 audit(1754605367.970:1600): avc: denied { write } for pid=1312 comm="syz.5.3166" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1019.498104][ T30] audit: type=1400 audit(1754605369.480:1601): avc: denied { accept } for pid=1394 comm="syz.4.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1020.755661][ T30] audit: type=1400 audit(1754605370.610:1602): avc: denied { read } for pid=1391 comm="syz.5.3171" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1020.794855][ T1406] sctp: [Deprecated]: syz.5.3171 (pid 1406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1020.794855][ T1406] Use struct sctp_sack_info instead [ 1020.811475][ T30] audit: type=1400 audit(1754605370.620:1603): avc: denied { open } for pid=1391 comm="syz.5.3171" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1020.840629][ T1412] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 1020.853313][ T1412] netlink: 763 bytes leftover after parsing attributes in process `syz.8.3175'. [ 1020.898078][ T30] audit: type=1400 audit(1754605370.770:1604): avc: denied { firmware_load } for pid=14012 comm="kworker/u8:12" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1020.935872][ T1412] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1020.962318][ T30] audit: type=1400 audit(1754605370.920:1605): avc: denied { mount } for pid=1411 comm="syz.8.3175" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1021.033718][ T30] audit: type=1400 audit(1754605371.010:1606): avc: denied { unmount } for pid=17284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1022.504740][ T1427] fuse: Unknown parameter 'user_id00000000000000000000' [ 1022.514149][ T1427] genirq: Flags mismatch irq 5. 00200000 (pcl812) vs. 00200000 (pcl812) [ 1023.168322][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1023.168334][ T30] audit: type=1400 audit(1754605373.150:1610): avc: denied { write } for pid=1483 comm="syz.4.3183" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1023.216348][ T1484] netlink: 'syz.4.3183': attribute type 10 has an invalid length. [ 1023.226382][ T1484] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3183'. [ 1023.235665][ T1484] team0: entered promiscuous mode [ 1023.242757][ T1484] team_slave_0: entered promiscuous mode [ 1023.250656][ T1484] team_slave_1: entered promiscuous mode [ 1023.256558][ T1484] team0: entered allmulticast mode [ 1023.267532][ T1484] team_slave_0: entered allmulticast mode [ 1023.275641][ T1484] team_slave_1: entered allmulticast mode [ 1023.290375][ T1484] bridge0: port 3(team0) entered blocking state [ 1023.297698][ T1484] bridge0: port 3(team0) entered disabled state [ 1023.400589][ T1484] bridge0: port 3(team0) entered blocking state [ 1023.407141][ T1484] bridge0: port 3(team0) entered forwarding state [ 1024.583292][ T30] audit: type=1400 audit(1754605374.570:1611): avc: denied { read } for pid=1501 comm="syz.4.3188" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1024.631660][ T1502] input: syz0 as /devices/virtual/input/input55 [ 1025.894095][ T1531] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3194'. [ 1025.928109][ T1531] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3194'. [ 1026.040243][T27030] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1026.199667][ T30] audit: type=1400 audit(1754605376.180:1612): avc: denied { setopt } for pid=1534 comm="syz.8.3197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1026.203113][ T1537] bond0: (slave bond2): Error -95 calling ndo_bpf [ 1026.285166][T27030] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1026.510354][T27030] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1026.557325][T27030] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1026.573009][T27030] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1026.588672][T27030] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1026.610918][T27030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.726447][ T1537] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3197'. [ 1026.738965][ T1535] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3197'. [ 1026.950837][ T1573] batadv_slave_1: entered promiscuous mode [ 1026.970899][T27030] ath6kl: Failed to submit usb control message: -71 [ 1026.971281][ T1522] batadv_slave_1: left promiscuous mode [ 1026.977540][T27030] ath6kl: unable to send the bmi data to the device: -71 [ 1026.977557][T27030] ath6kl: Unable to send get target info: -71 [ 1027.009295][T27030] ath6kl: Failed to init ath6kl core: -71 [ 1027.034919][T27030] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1027.040330][ T5956] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1027.053120][T27030] usb 5-1: USB disconnect, device number 21 [ 1027.218687][ T5956] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1027.228790][ T5956] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.237153][ T5956] usb 9-1: Product: syz [ 1027.241464][ T5956] usb 9-1: Manufacturer: syz [ 1027.246061][ T5956] usb 9-1: SerialNumber: syz [ 1027.246138][ T1583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.254483][ T5956] usb 9-1: config 0 descriptor?? [ 1027.259834][ T1583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.269008][ T5956] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 052 [ 1027.416924][ T30] audit: type=1400 audit(1754605377.400:1613): avc: denied { ioctl } for pid=1582 comm="syz.5.3199" path="socket:[67537]" dev="sockfs" ino=67537 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1027.539722][ T1589] afs: Unknown parameter 'G®½Ë9§öí;©mZ³V(ü<ÜVÁÆ‹B¾·9¥ÿ:ÀN¡œ )L9Ð(~¤Î3ÃZÖ… ”u´ÙÈÚzP:ëÁRïÛÜ«½·l”v`Î`îP6÷^¢‘òOŸF õTPB€Öè¥%ZD/ë°å¸`MlÎŽü¶pp§U ví:Gň-Ö‚"cÍ'7ªíJáx±š|wë©¡rx!wSatŒQÝ_Ûµaxÿÿÿÿÿÿÿÿ' [ 1027.832609][ T5956] (null): failure setting delay to 10us [ 1027.844934][ T5956] i2c-tiny-usb 9-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1027.856898][ T5956] usb 9-1: USB disconnect, device number 52 [ 1028.200507][ T30] audit: type=1400 audit(1754605378.170:1614): avc: denied { read } for pid=1608 comm="syz.5.3204" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1028.231288][ T30] audit: type=1400 audit(1754605378.170:1615): avc: denied { open } for pid=1608 comm="syz.5.3204" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1028.257023][ T30] audit: type=1400 audit(1754605378.170:1616): avc: denied { ioctl } for pid=1608 comm="syz.5.3204" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1028.257066][ T30] audit: type=1400 audit(1754605378.220:1617): avc: denied { write } for pid=1608 comm="syz.5.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1028.710387][ T5921] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1028.883098][ T5921] usb 9-1: config 0 has an invalid interface number: 28 but max is 0 [ 1028.896358][ T5921] usb 9-1: config 0 has no interface number 0 [ 1029.180542][ T5921] usb 9-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.205143][ T5921] usb 9-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1029.214474][ T5921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.225266][ T5921] usb 9-1: config 0 descriptor?? [ 1029.233417][ T5921] usbhid 9-1:0.28: couldn't find an input interrupt endpoint [ 1029.990714][ T5956] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1030.150726][ T5956] usb 6-1: Using ep0 maxpacket: 16 [ 1030.157264][ T5956] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1030.165364][ T5956] usb 6-1: config 0 has no interface number 0 [ 1030.173649][ T5956] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1030.182735][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.191085][ T5956] usb 6-1: Product: syz [ 1030.195323][ T5956] usb 6-1: Manufacturer: syz [ 1030.199915][ T5956] usb 6-1: SerialNumber: syz [ 1030.206165][ T5956] usb 6-1: config 0 descriptor?? [ 1030.213685][ T5956] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1031.483822][ T5971] usb 9-1: USB disconnect, device number 53 [ 1031.931157][ T5956] gspca_spca1528: reg_w err -110 [ 1031.932337][ T1730] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3213'. [ 1031.951253][ T1729] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3213'. [ 1031.951722][ T5956] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 1031.969353][ T30] audit: type=1400 audit(1754605381.950:1618): avc: denied { ioctl } for pid=1727 comm="syz.8.3213" path="socket:[68038]" dev="sockfs" ino=68038 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1032.653121][ T5956] usb 6-1: USB disconnect, device number 89 [ 1033.616375][ T1753] tmpfs: Unknown parameter 'usrquota0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1033.616375][ T1753] 0 [ 1034.469756][ T30] audit: type=1400 audit(1754605384.450:1619): avc: denied { listen } for pid=1759 comm="syz.5.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1034.801624][ T30] audit: type=1400 audit(1754605384.790:1620): avc: denied { ioctl } for pid=1759 comm="syz.5.3219" path="socket:[68083]" dev="sockfs" ino=68083 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1035.180266][ T5971] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1035.333674][ T5971] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1035.346982][ T5971] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1035.357334][ T5971] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1035.366611][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.377697][ T1766] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1035.389003][ T5971] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1037.818448][T27030] usb 5-1: USB disconnect, device number 22 [ 1038.520897][ T5971] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1038.672554][ T5971] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1038.683464][ T5971] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1038.695104][ T5971] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1038.706000][ T5971] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1038.719402][ T5971] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1038.728460][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.989360][ T1803] batadv_slave_1: entered promiscuous mode [ 1038.998655][ T1802] batadv_slave_1: left promiscuous mode [ 1039.005510][ T5971] ath6kl: Failed to submit usb control message: -71 [ 1039.012268][ T5971] ath6kl: unable to send the bmi data to the device: -71 [ 1039.019311][ T5971] ath6kl: Unable to send get target info: -71 [ 1039.026730][ T5971] ath6kl: Failed to init ath6kl core: -71 [ 1039.033948][ T5971] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1039.049332][ T5971] usb 5-1: USB disconnect, device number 23 [ 1039.563561][ T1820] 9pnet_fd: Insufficient options for proto=fd [ 1039.870824][ T30] audit: type=1400 audit(1754605389.710:1621): avc: denied { create } for pid=1819 comm="syz.4.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1039.890817][ T30] audit: type=1400 audit(1754605389.800:1622): avc: denied { connect } for pid=1819 comm="syz.4.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1039.914310][ T30] audit: type=1400 audit(1754605389.900:1623): avc: denied { write } for pid=1819 comm="syz.4.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1041.917216][ T1830] FAULT_INJECTION: forcing a failure. [ 1041.917216][ T1830] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1041.931381][ T1830] CPU: 1 UID: 0 PID: 1830 Comm: syz.4.3225 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1041.931409][ T1830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1041.931418][ T1830] Call Trace: [ 1041.931424][ T1830] [ 1041.931430][ T1830] dump_stack_lvl+0x16c/0x1f0 [ 1041.931460][ T1830] should_fail_ex+0x512/0x640 [ 1041.931480][ T1830] should_fail_alloc_page+0xe7/0x130 [ 1041.931502][ T1830] prepare_alloc_pages+0x3c2/0x610 [ 1041.931525][ T1830] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1041.931553][ T1830] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1041.931584][ T1830] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1041.931607][ T1830] ? policy_nodemask+0xea/0x4e0 [ 1041.931628][ T1830] alloc_pages_mpol+0x1fb/0x550 [ 1041.931653][ T1830] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1041.931670][ T1830] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1041.931686][ T1830] vma_alloc_folio_noprof+0xed/0x1e0 [ 1041.931700][ T1830] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1041.931715][ T1830] ? rcu_read_unlock+0x2d/0xb0 [ 1041.931729][ T1830] do_wp_page+0x1136/0x4f00 [ 1041.931748][ T1830] ? __pfx_do_wp_page+0x10/0x10 [ 1041.931763][ T1830] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1041.931776][ T1830] ? ___pte_offset_map+0x2ad/0x4f0 [ 1041.931792][ T1830] __handle_mm_fault+0x1b2d/0x2a50 [ 1041.931813][ T1830] ? __pfx___handle_mm_fault+0x10/0x10 [ 1041.931831][ T1830] ? __pte_offset_map_lock+0x174/0x310 [ 1041.931844][ T1830] ? find_held_lock+0x2b/0x80 [ 1041.931862][ T1830] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1041.931880][ T1830] handle_mm_fault+0x589/0xd10 [ 1041.931900][ T1830] __get_user_pages+0x551/0x34a0 [ 1041.931918][ T1830] ? down_read_killable+0x220/0x4b0 [ 1041.931931][ T1830] ? __lock_acquire+0x62e/0x1ce0 [ 1041.931947][ T1830] ? __pfx___get_user_pages+0x10/0x10 [ 1041.931962][ T1830] ? __lock_acquire+0x62e/0x1ce0 [ 1041.931980][ T1830] __gup_longterm_locked+0xa92/0x17e0 [ 1041.931998][ T1830] ? try_get_folio+0x1d2/0x730 [ 1041.932010][ T1830] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1041.932027][ T1830] ? try_get_folio+0x255/0x730 [ 1041.932040][ T1830] ? sanity_check_pinned_pages+0x58a/0x11d0 [ 1041.932057][ T1830] gup_fast_fallback+0xf78/0x23f0 [ 1041.932082][ T1830] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1041.932102][ T1830] ? is_bpf_text_address+0x8a/0x1a0 [ 1041.932114][ T1830] ? bpf_ksym_find+0x127/0x1c0 [ 1041.932129][ T1830] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1041.932145][ T1830] ? is_bpf_text_address+0x94/0x1a0 [ 1041.932158][ T1830] pin_user_pages_fast+0xa7/0xf0 [ 1041.932173][ T1830] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1041.932191][ T1830] iov_iter_extract_pages+0x3a2/0x1ed0 [ 1041.932206][ T1830] ? __pfx_stack_trace_save+0x10/0x10 [ 1041.932221][ T1830] ? stack_depot_save_flags+0x29/0x9c0 [ 1041.932232][ T1830] ? find_held_lock+0x2b/0x80 [ 1041.932244][ T1830] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1041.932257][ T1830] ? sock_kmalloc+0x111/0x170 [ 1041.932268][ T1830] ? kasan_save_stack+0x42/0x60 [ 1041.932277][ T1830] ? kasan_save_stack+0x33/0x60 [ 1041.932287][ T1830] ? kasan_save_track+0x14/0x30 [ 1041.932296][ T1830] ? __kasan_kmalloc+0xaa/0xb0 [ 1041.932306][ T1830] ? __kmalloc_noprof+0x223/0x510 [ 1041.932315][ T1830] ? sock_kmalloc+0x111/0x170 [ 1041.932325][ T1830] ? af_alg_alloc_areq+0xbc/0x2e0 [ 1041.932341][ T1830] ? skcipher_recvmsg+0x32b/0x1030 [ 1041.932350][ T1830] ? sock_recvmsg+0x1f9/0x250 [ 1041.932361][ T1830] ? ____sys_recvmsg+0x218/0x6b0 [ 1041.932371][ T1830] ? ___sys_recvmsg+0x114/0x1a0 [ 1041.932386][ T1830] ? __sys_recvmsg+0x16a/0x220 [ 1041.932401][ T1830] ? do_syscall_64+0xcd/0x4c0 [ 1041.932411][ T1830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.932427][ T1830] extract_iter_to_sg+0xf6e/0x20c0 [ 1041.932449][ T1830] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1041.932475][ T1830] af_alg_get_rsgl+0x2b8/0x7f0 [ 1041.932497][ T1830] skcipher_recvmsg+0x38c/0x1030 [ 1041.932513][ T1830] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1041.932528][ T1830] sock_recvmsg+0x1f9/0x250 [ 1041.932545][ T1830] ____sys_recvmsg+0x218/0x6b0 [ 1041.932559][ T1830] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1041.932576][ T1830] ? __lock_acquire+0x62e/0x1ce0 [ 1041.932595][ T1830] ___sys_recvmsg+0x114/0x1a0 [ 1041.932611][ T1830] ? __pfx____sys_recvmsg+0x10/0x10 [ 1041.932634][ T1830] ? __mutex_unlock_slowpath+0x100/0x800 [ 1041.932656][ T1830] __sys_recvmsg+0x16a/0x220 [ 1041.932672][ T1830] ? __pfx___sys_recvmsg+0x10/0x10 [ 1041.932698][ T1830] do_syscall_64+0xcd/0x4c0 [ 1041.932709][ T1830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.932719][ T1830] RIP: 0033:0x7fd8f0b8ebe9 [ 1041.932729][ T1830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.932740][ T1830] RSP: 002b:00007fd8f1980038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1041.932752][ T1830] RAX: ffffffffffffffda RBX: 00007fd8f0db5fa0 RCX: 00007fd8f0b8ebe9 [ 1041.932759][ T1830] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1041.932765][ T1830] RBP: 00007fd8f1980090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.932771][ T1830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.932778][ T1830] R13: 00007fd8f0db6038 R14: 00007fd8f0db5fa0 R15: 00007ffdbab8c378 [ 1041.932791][ T1830] [ 1042.738718][ T1834] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3226'. [ 1043.542577][ T1838] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3227'. [ 1045.331754][ T1846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3229'. [ 1045.509058][ T1846] mkiss: ax0: crc mode is auto. [ 1045.643943][ T1855] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3230'. [ 1045.655229][ T30] audit: type=1400 audit(1754605395.640:1624): avc: denied { name_bind } for pid=1854 comm="syz.4.3230" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1045.940622][ T5971] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1046.071131][ T5971] usb 5-1: device descriptor read/64, error -71 [ 1046.310490][ T5971] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1046.442904][ T5971] usb 5-1: device descriptor read/64, error -71 [ 1046.551643][ T5971] usb usb5-port1: attempt power cycle [ 1046.904381][ T5971] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 1046.941648][ T5971] usb 5-1: device descriptor read/8, error -71 [ 1047.190716][ T5971] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1047.210905][ T5971] usb 5-1: device descriptor read/8, error -71 [ 1047.322800][ T5971] usb usb5-port1: unable to enumerate USB device [ 1054.002859][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.009224][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1077.534899][ T13] bridge0: port 3(team0) entered disabled state [ 1077.543345][ T13] bridge_slave_1: left allmulticast mode [ 1077.548995][ T13] bridge_slave_1: left promiscuous mode [ 1077.554690][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.563821][ T13] bridge_slave_0: left promiscuous mode [ 1077.569468][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.939896][ T13] bond0 (unregistering): left promiscuous mode [ 1077.946155][ T13] bond_slave_0: left promiscuous mode [ 1077.951907][ T13] bond_slave_1: left promiscuous mode [ 1077.957330][ T13] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 1077.964291][ T13] dummy0: left promiscuous mode [ 1077.970415][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.981010][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.991085][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1077.999757][ T13] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1078.009173][ T13] bond0 (unregistering): Released all slaves [ 1078.146942][ T13] bond1 (unregistering): left promiscuous mode [ 1078.153448][ T13] bond1 (unregistering): left allmulticast mode [ 1078.161058][ T13] team0: Port device bond1 removed [ 1078.166984][ T13] bond1 (unregistering): Released all slaves [ 1078.318903][ T13] bond2 (unregistering): (slave veth3): Releasing active interface [ 1078.328196][ T13] bond2 (unregistering): Released all slaves [ 1078.464135][ T13] bond3 (unregistering): (slave veth5): Releasing active interface [ 1078.474077][ T13] bond3 (unregistering): Released all slaves [ 1078.614038][ T13] bond4 (unregistering): (slave veth7): Releasing active interface [ 1078.624138][ T13] bond4 (unregistering): Released all slaves [ 1078.765040][ T13] bond5 (unregistering): (slave veth9): Releasing active interface [ 1078.775142][ T13] bond5 (unregistering): Released all slaves [ 1078.904561][ T13] bond6 (unregistering): (slave veth11): Releasing active interface [ 1078.913817][ T13] bond6 (unregistering): Released all slaves [ 1079.047282][ T13] bond7 (unregistering): (slave veth13): Releasing active interface [ 1079.057639][ T13] bond7 (unregistering): Released all slaves [ 1079.179999][ T13] bond8 (unregistering): (slave veth15): Releasing active interface [ 1079.189183][ T13] bond8 (unregistering): Released all slaves [ 1079.325670][ T13] bond9 (unregistering): Released all slaves [ 1079.472353][ T13] bond10 (unregistering): (slave veth19): Releasing active interface [ 1079.481806][ T13] bond10 (unregistering): Released all slaves [ 1079.623352][ T13] bond11 (unregistering): Released all slaves [ 1079.757013][ T13] bond12 (unregistering): (slave bond13): Releasing backup interface [ 1079.765802][ T13] bond12 (unregistering): Released all slaves [ 1079.914830][ T13] bond13 (unregistering): Released all slaves [ 1080.058002][ T13] bond14 (unregistering): (slave veth23): Releasing active interface [ 1080.067449][ T13] bond14 (unregistering): Released all slaves [ 1080.209153][ T13] bond15 (unregistering): (slave veth25): Releasing active interface [ 1080.218580][ T13] bond15 (unregistering): Released all slaves [ 1080.375949][ T13] tipc: Disabling bearer [ 1080.381713][ T13] tipc: Left network mode [ 1080.436624][ T13] IPVS: stopping master sync thread 8525 ... [ 1115.432160][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.438495][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1166.631120][ T31] INFO: task kworker/0:2:919 blocked for more than 143 seconds. [ 1166.638796][ T31] Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 [ 1166.646559][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1166.655357][ T31] task:kworker/0:2 state:D stack:22024 pid:919 tgid:919 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1166.667717][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1166.674475][ T31] Call Trace: [ 1166.677815][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1166.681187][ T31] __schedule+0x1190/0x5de0 [ 1166.685839][ T31] ? find_held_lock+0x2b/0x80 [ 1166.687641][ T30] audit: type=1400 audit(1754605516.670:1625): avc: denied { write } for pid=5829 comm="syz-executor" path="pipe:[4382]" dev="pipefs" ino=4382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1166.690586][ T31] ? __pfx___schedule+0x10/0x10 [ 1166.690623][ T31] ? find_held_lock+0x2b/0x80 [ 1166.690648][ T31] ? schedule+0x2d7/0x3a0 [ 1166.690673][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 1166.690693][ T31] schedule+0xe7/0x3a0 [ 1166.690718][ T31] schedule_preempt_disabled+0x13/0x30 [ 1166.690744][ T31] __mutex_lock+0x82a/0x10b0 [ 1166.690762][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 1166.690784][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 1166.690813][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1166.690829][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1166.690869][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 1166.690890][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 1166.690913][ T31] process_one_work+0x9cc/0x1b70 [ 1166.690943][ T31] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 1166.690970][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1166.690998][ T31] ? assign_work+0x1a0/0x250 [ 1166.691020][ T31] worker_thread+0x6c8/0xf10 [ 1166.691052][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1166.691073][ T31] kthread+0x3c5/0x780 [ 1166.691093][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.691112][ T31] ? rcu_is_watching+0x12/0xc0 [ 1166.760180][ T30] audit: type=1400 audit(1754605516.700:1626): avc: denied { recv } for pid=30 comm="kauditd" saddr=10.128.0.169 src=33938 daddr=10.128.1.4 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1166.761007][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.891325][ T31] ret_from_fork+0x5d4/0x6f0 [ 1166.895979][ T31] ? __pfx_kthread+0x10/0x10 [ 1166.900647][ T31] ret_from_fork_asm+0x1a/0x30 [ 1166.905436][ T31] [ 1166.908598][ T31] INFO: task syz.9.3156:1095 blocked for more than 143 seconds. [ 1166.916516][ T31] Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 [ 1166.923840][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1166.932712][ T31] task:syz.9.3156 state:D stack:25512 pid:1095 tgid:1095 ppid:19354 task_flags:0x400040 flags:0x00004006 [ 1166.944661][ T31] Call Trace: [ 1166.947932][ T31] [ 1166.951180][ T31] __schedule+0x1190/0x5de0 [ 1166.955710][ T31] ? __pfx___schedule+0x10/0x10 [ 1166.960589][ T31] ? find_held_lock+0x2b/0x80 [ 1166.965261][ T31] ? schedule+0x2d7/0x3a0 [ 1166.969573][ T31] ? rfkill_unregister+0xec/0x2c0 [ 1166.974784][ T31] schedule+0xe7/0x3a0 [ 1166.978853][ T31] schedule_preempt_disabled+0x13/0x30 [ 1166.984316][ T31] __mutex_lock+0x82a/0x10b0 [ 1166.988878][ T31] ? class_to_subsys+0x10f/0x160 [ 1166.994141][ T31] ? rfkill_unregister+0xec/0x2c0 [ 1166.999165][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1167.004202][ T31] ? device_del+0x6b6/0x9f0 [ 1167.008697][ T31] ? __pfx_device_del+0x10/0x10 [ 1167.013732][ T31] ? rfkill_unregister+0xec/0x2c0 [ 1167.018730][ T31] rfkill_unregister+0xec/0x2c0 [ 1167.023603][ T31] nfc_unregister_device+0x94/0x330 [ 1167.028786][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1167.034681][ T31] virtual_ncidev_close+0x4b/0xa0 [ 1167.039685][ T31] __fput+0x402/0xb70 [ 1167.043687][ T31] task_work_run+0x150/0x240 [ 1167.048262][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1167.053573][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 1167.059272][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1167.064611][ T31] do_syscall_64+0x3f6/0x4c0 [ 1167.069187][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.075254][ T31] RIP: 0033:0x7fefd358ebe9 [ 1167.079668][ T31] RSP: 002b:00007ffebc659b78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1167.088102][ T31] RAX: 0000000000000000 RBX: 00007fefd37b7da0 RCX: 00007fefd358ebe9 [ 1167.096272][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1167.104313][ T31] RBP: 00007fefd37b7da0 R08: 0000000000000208 R09: 0000001ebc659e6f [ 1167.112671][ T31] R10: 00007fefd37b7cb0 R11: 0000000000000246 R12: 00000000000f7813 [ 1167.120667][ T31] R13: 00007fefd37b6270 R14: ffffffffffffffff R15: 00007ffebc659c90 [ 1167.128620][ T31] [ 1167.131834][ T31] INFO: task syz.0.3157:1116 blocked for more than 143 seconds. [ 1167.139443][ T31] Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 [ 1167.146769][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1167.155633][ T31] task:syz.0.3157 state:D stack:26328 pid:1116 tgid:1112 ppid:30318 task_flags:0x400140 flags:0x00004006 [ 1167.167544][ T31] Call Trace: [ 1167.171120][ T31] [ 1167.174042][ T31] __schedule+0x1190/0x5de0 [ 1167.178556][ T31] ? __pfx___schedule+0x10/0x10 [ 1167.183434][ T31] ? find_held_lock+0x2b/0x80 [ 1167.188094][ T31] ? schedule+0x2d7/0x3a0 [ 1167.192595][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 1167.197159][ T31] schedule+0xe7/0x3a0 [ 1167.201245][ T31] schedule_preempt_disabled+0x13/0x30 [ 1167.206765][ T31] __mutex_lock+0x82a/0x10b0 [ 1167.211681][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 1167.216277][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1167.221334][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1167.226356][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 1167.231280][ T31] ? mark_held_locks+0x49/0x80 [ 1167.236045][ T31] nfc_dev_down+0x2d/0x2e0 [ 1167.240495][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 1167.245526][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1167.251503][ T31] rfkill_set_block+0x1fe/0x550 [ 1167.256333][ T31] rfkill_fop_write+0x2c0/0x580 [ 1167.261190][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1167.266553][ T31] ? __pfx_bpf_lsm_kernfs_init_security+0x10/0x10 [ 1167.273455][ T31] ? security_file_permission+0x71/0x210 [ 1167.279091][ T31] ? rw_verify_area+0xcf/0x6c0 [ 1167.283882][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1167.289249][ T31] vfs_write+0x2a0/0x1150 [ 1167.293768][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1167.298509][ T31] ? find_held_lock+0x2b/0x80 [ 1167.303192][ T31] ? __fget_files+0x204/0x3c0 [ 1167.307861][ T31] ? __fget_files+0x20e/0x3c0 [ 1167.312728][ T31] ksys_write+0x1f8/0x250 [ 1167.317032][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1167.321897][ T31] do_syscall_64+0xcd/0x4c0 [ 1167.326391][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.332628][ T31] RIP: 0033:0x7f54b518ebe9 [ 1167.337033][ T31] RSP: 002b:00007f54b5f16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1167.345450][ T31] RAX: ffffffffffffffda RBX: 00007f54b53b6090 RCX: 00007f54b518ebe9 [ 1167.355443][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 1167.363454][ T31] RBP: 00007f54b5211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1167.371621][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1167.379587][ T31] R13: 00007f54b53b6128 R14: 00007f54b53b6090 R15: 00007ffc456022e8 [ 1167.387569][ T31] [ 1167.390956][ T31] [ 1167.390956][ T31] Showing all locks held in the system: [ 1167.398664][ T31] 4 locks held by kworker/u8:1/13: [ 1167.403792][ T31] #0: ffff88801c6f4148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1167.415486][ T31] #1: ffffc90000127d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1167.425436][ T31] #2: ffffffff90368b30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 1167.434939][ T31] #3: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 1167.445148][ T31] 1 lock held by khungtaskd/31: [ 1167.450036][ T31] #0: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1167.460246][ T31] 3 locks held by kworker/0:2/919: [ 1167.465337][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1167.475951][ T31] #1: ffffc90003a57d10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1167.488870][ T31] #2: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 1167.500480][ T31] 2 locks held by getty/5610: [ 1167.505133][ T31] #0: ffff88814e1380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1167.514908][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1167.525237][ T31] 2 locks held by kworker/u8:13/20394: [ 1167.530720][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1167.542099][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 1167.550820][ T31] 2 locks held by syz.9.3156/1095: [ 1167.555916][ T31] #0: ffff88805f6b7100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 1167.565831][ T31] #1: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 1167.575934][ T31] 2 locks held by syz.0.3157/1116: [ 1167.581372][ T31] #0: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x166/0x580 [ 1167.591793][ T31] #1: ffff88805f6b7100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 1167.600956][ T31] 2 locks held by syz-executor/1618: [ 1167.606211][ T31] #0: ffff88807a149918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 1167.615627][ T31] #1: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1167.625718][ T31] 2 locks held by syz-executor/1638: [ 1167.631012][ T31] #0: ffff888034e59918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 1167.640709][ T31] #1: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1167.650663][ T31] 3 locks held by syz.8.3213/1730: [ 1167.655755][ T31] #0: ffffffff90422190 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1167.664254][ T31] #1: ffffffff90422248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1167.673329][ T31] #2: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1167.683483][ T31] 2 locks held by syz.5.3219/1760: [ 1167.688572][ T31] #0: ffffffff90422190 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1167.696765][ T31] #1: ffffffff90422248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1167.705938][ T31] 2 locks held by syz-executor/1862: [ 1167.711257][ T31] #0: ffff8880236eb118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 1167.720908][ T31] #1: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1167.730859][ T31] 2 locks held by syz.4.3232/1870: [ 1167.735952][ T31] #0: ffffffff90422190 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1167.744318][ T31] #1: ffffffff90422248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1167.753274][ T31] 2 locks held by syz-executor/1873: [ 1167.758531][ T31] #0: ffff8880764da118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 1167.768111][ T31] #1: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1167.778045][ T31] 2 locks held by syz-executor/1876: [ 1167.783701][ T31] #0: ffff88802b4cd918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 1167.793166][ T31] #1: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1167.803298][ T31] 2 locks held by syz-executor/1881: [ 1167.808581][ T31] #0: ffff888143749918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 1167.817978][ T31] #1: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1167.828180][ T31] 2 locks held by syz-executor/1883: [ 1167.833541][ T31] #0: ffff88806425d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 1167.843324][ T31] #1: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1167.853347][ T31] 2 locks held by syz-executor/1886: [ 1167.858635][ T31] #0: ffff888031393118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 1167.868210][ T31] #1: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1167.878157][ T31] 2 locks held by syz-executor/1889: [ 1167.883620][ T31] #0: ffff88807a943118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 1167.893045][ T31] #1: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1167.903187][ T31] 2 locks held by syz-executor/1892: [ 1167.908452][ T31] #0: ffff88802c956118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 1167.918426][ T31] #1: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1167.928612][ T31] 2 locks held by syz-executor/1896: [ 1167.933926][ T31] #0: ffff88807a8d1918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 1167.943652][ T31] #1: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1167.953610][ T31] 2 locks held by syz-executor/1898: [ 1167.958867][ T31] #0: ffff88802ac0e118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 1167.968451][ T31] #1: ffffffff9081b8e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 1167.978430][ T31] [ 1167.980951][ T31] ============================================= [ 1167.980951][ T31] [ 1167.989348][ T31] NMI backtrace for cpu 1 [ 1167.989360][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1167.989374][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1167.989380][ T31] Call Trace: [ 1167.989385][ T31] [ 1167.989389][ T31] dump_stack_lvl+0x116/0x1f0 [ 1167.989410][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1167.989424][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1167.989443][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1167.989458][ T31] watchdog+0xf0e/0x1260 [ 1167.989474][ T31] ? __pfx_watchdog+0x10/0x10 [ 1167.989485][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1167.989502][ T31] ? __kthread_parkme+0x19e/0x250 [ 1167.989519][ T31] ? __pfx_watchdog+0x10/0x10 [ 1167.989530][ T31] kthread+0x3c5/0x780 [ 1167.989542][ T31] ? __pfx_kthread+0x10/0x10 [ 1167.989553][ T31] ? rcu_is_watching+0x12/0xc0 [ 1167.989567][ T31] ? __pfx_kthread+0x10/0x10 [ 1167.989578][ T31] ret_from_fork+0x5d4/0x6f0 [ 1167.989589][ T31] ? __pfx_kthread+0x10/0x10 [ 1167.989599][ T31] ret_from_fork_asm+0x1a/0x30 [ 1167.989619][ T31] [ 1167.989623][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1168.108049][ C0] NMI backtrace for cpu 0 [ 1168.108066][ C0] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1168.108084][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1168.108094][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1168.108116][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 1168.108135][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 db 6a 96 f5 cc [ 1168.108149][ C0] RSP: 0018:ffffc90000b97910 EFLAGS: 00000082 [ 1168.108160][ C0] RAX: 0000000000000000 RBX: ffff888022a82440 RCX: 0000000000000006 [ 1168.108169][ C0] RDX: 0000000000000000 RSI: ffffffff8de293c0 RDI: ffffffff8c161100 [ 1168.108178][ C0] RBP: ffffffff82172ae5 R08: 0000000000000000 R09: 0000000000000001 [ 1168.108186][ C0] R10: ffffffff90aaff97 R11: 0000000000000000 R12: 0000000000000ae9 [ 1168.108195][ C0] R13: ffffffff8e762bc0 R14: 0000000000000001 R15: 8000000000000063 [ 1168.108204][ C0] FS: 0000000000000000(0000) GS:ffff8881246c4000(0000) knlGS:0000000000000000 [ 1168.108218][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1168.108228][ C0] CR2: 000055572293cb48 CR3: 000000000e380000 CR4: 00000000003526f0 [ 1168.108237][ C0] Call Trace: [ 1168.108242][ C0] [ 1168.108248][ C0] lockdep_hardirqs_on_prepare+0xd2/0x1d0 [ 1168.108272][ C0] trace_hardirqs_on+0x36/0x40 [ 1168.108289][ C0] __text_poke+0x778/0xb70 [ 1168.108305][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1168.108322][ C0] ? __pfx___text_poke+0x10/0x10 [ 1168.108337][ C0] ? kmem_cache_alloc_bulk_noprof+0x175/0xbc0 [ 1168.108353][ C0] smp_text_poke_batch_finish+0x4f1/0xdb0 [ 1168.108373][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1168.108392][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1168.108413][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1168.108431][ C0] jump_label_update+0x376/0x550 [ 1168.108452][ C0] static_key_disable_cpuslocked+0x158/0x1c0 [ 1168.108473][ C0] static_key_disable+0x1a/0x20 [ 1168.108491][ C0] toggle_allocation_gate+0x145/0x280 [ 1168.108505][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1168.108521][ C0] ? rcu_is_watching+0x12/0xc0 [ 1168.108545][ C0] process_one_work+0x9cc/0x1b70 [ 1168.108563][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1168.108579][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1168.108595][ C0] ? assign_work+0x1a0/0x250 [ 1168.108609][ C0] worker_thread+0x6c8/0xf10 [ 1168.108626][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1168.108640][ C0] kthread+0x3c5/0x780 [ 1168.108653][ C0] ? __pfx_kthread+0x10/0x10 [ 1168.108667][ C0] ? rcu_is_watching+0x12/0xc0 [ 1168.108682][ C0] ? __pfx_kthread+0x10/0x10 [ 1168.108695][ C0] ret_from_fork+0x5d4/0x6f0 [ 1168.108707][ C0] ? __pfx_kthread+0x10/0x10 [ 1168.108720][ C0] ret_from_fork_asm+0x1a/0x30 [ 1168.108740][ C0] [ 1168.109047][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1168.400192][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full) [ 1168.411641][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1168.421675][ T31] Call Trace: [ 1168.424933][ T31] [ 1168.427843][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1168.432423][ T31] vpanic+0x6e8/0x7a0 [ 1168.436389][ T31] ? __pfx_vpanic+0x10/0x10 [ 1168.440877][ T31] ? __irq_work_queue_local+0x1d7/0x580 [ 1168.446414][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1168.452299][ T31] panic+0xca/0xd0 [ 1168.456015][ T31] ? __pfx_panic+0x10/0x10 [ 1168.460415][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1168.465774][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1168.471908][ T31] ? watchdog+0xd78/0x1260 [ 1168.476304][ T31] ? watchdog+0xd6b/0x1260 [ 1168.480702][ T31] watchdog+0xd89/0x1260 [ 1168.484926][ T31] ? __pfx_watchdog+0x10/0x10 [ 1168.489592][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1168.494775][ T31] ? __kthread_parkme+0x19e/0x250 [ 1168.499785][ T31] ? __pfx_watchdog+0x10/0x10 [ 1168.504441][ T31] kthread+0x3c5/0x780 [ 1168.508488][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.513057][ T31] ? rcu_is_watching+0x12/0xc0 [ 1168.517801][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.522369][ T31] ret_from_fork+0x5d4/0x6f0 [ 1168.526934][ T31] ? __pfx_kthread+0x10/0x10 [ 1168.531507][ T31] ret_from_fork_asm+0x1a/0x30 [ 1168.536265][ T31] [ 1168.539486][ T31] Kernel Offset: disabled [ 1168.543786][ T31] Rebooting in 86400 seconds..