last executing test programs: 11m3.831773844s ago: executing program 32 (id=1158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000000)='gpio_value\x00', r0, 0x0, 0x1}, 0x18) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, 0x0, 0x0) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) (rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xa8, &(0x7f0000000500)=ANY=[@ANYRESDEC=r3, @ANYRES32]) (rerun: 64) r5 = socket(0x8, 0x2, 0x40) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000800)={0xff, 0x5, 0xff, 0x18, 0x5, 0x7, 0x5, 0x5, 0x7, 0xe, 0x0, 0x9, 0x81, 0x4}, 0xe) (async) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x10}}, './file0\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r3, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xb, 0x40, 0xb216, 0x0, 0x6, 0x5, 0x9c88, 'syz0\x00'}) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8) (async, rerun: 64) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') (async) syz_usb_control_io$printer(r4, &(0x7f0000000400)={0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="202426000000260abfac4b69720795571f6fbb0bbe6d1038d2d0234fc5d7e6ec54be78dd4df9a7162106bb44"], &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="200a84000000ce7d18cd24d45f981d5f0cacf52e2fc007c3a9462e9b7f148e559e63b4fb1a09d120c4a361dfa71cf39521642c1df27fad9b924e47ad49bf385df9be35eed608e4bf6df113a8cab2a368c6f950da8e44c9e9d7eb90bf8c9ca8b7994c0ae8647a867d813e4f8cd3ed80c867fc53756188ef427b39b42c8be4723fa914748eda257c8f6400"/149], &(0x7f0000000440)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000600)={0x20, 0x0, 0x102, {0x100, "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"}}, &(0x7f0000000740)={0x20, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x5}}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r10, 0x3b82, &(0x7f00000001c0)={0x18, r11, 0x5, 0x0, &(0x7f0000000240)=[{0x81}, {0x1000, 0x2}, {0x6, 0xde6a}, {0x0, 0x100}, {0x4bc, 0x1}]}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf2575001b0008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20008014}, 0x24000000) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001800600060008"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 10m40.035331404s ago: executing program 5 (id=1259): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0xc00) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='btrfs_transaction_commit\x00', r2}, 0x18) syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006001000000010"], 0x68}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7e, 0x1ff, 0x1, 0x1}, 0x1c) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}, {&(0x7f0000000100)=""/103, 0x67}], 0x2, 0xe, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x9, 0x3, 0x1, 0x4, 0x1ff, 0x388, 0x1}, 0x1c) ioctl$SIOCNRDECOBS(r1, 0x89e2) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c5bd5c6e7897ff0100008169f797fd0cd3369594f3e4c2c320bcbdefa3d6d38163a9a253baffe77071c6861411123ebb966dd7347151b033551b6e698984d349db957ccb", 0x39}], 0x1}}], 0x1, 0x9200000000000000) bind$tipc(r8, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r5, 0x0, 0x68e}, 0x18) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="300000000000000084"], 0x30}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 10m36.562439767s ago: executing program 5 (id=1268): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x208000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r4, 0x1, &(0x7f0000000240)) sendmsg$key(0xffffffffffffffff, 0x0, 0x88c0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'pimreg\x00', 0x1}, 0x18) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000080) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10m33.534007287s ago: executing program 2 (id=1276): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x65, 0x0, 0x6, 0x2, 0x0, @private=0xa010102, @local}, {0x12, 0xff, 0x0, @rand_addr=0x64010102}}}}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000080)={0x18}, 0x18) 10m32.551572139s ago: executing program 2 (id=1278): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000003017c0000040042800c00018006000600800a0000200002801c00068018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 10m32.41749996s ago: executing program 2 (id=1279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) dup(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x2c, 0x0, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$setlease(r9, 0x400, 0x0) write$tcp_congestion(r6, &(0x7f0000000100)='reno\x00', 0x5) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x1e, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @generic={0x4, 0x8, 0x5, 0x7fff, 0x8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x0, 0xa, 0x7, 0x6, 0x40, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r10, 0x12, 0x25, 0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r10, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 10m31.957530893s ago: executing program 4 (id=1280): r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000240)={0x100000000, 0x0, 0x1}) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0xfc, 0x20000) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x80879) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000001222d31ea289b040500000000000000d6272fd1b4b4174909d66001d59ae7c225b3d4e63db52d0866de28cfdc4f3b64ab9d4b8cbbebb246d1b24311e405fd720e569242e945f7bdfd4ea4f1bed19471e7574fe7fb2d636fb6"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x4004000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff14, &(0x7f0000000040)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000080)={0xd, 0x102, 0x4, 0xebf, 0x1a, '\x00\x00\b\x00'}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0x9) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000080)={0x0, 0x7d, 0x20f}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002, 0x30, 0xffffffffffffffff, 0x8000000) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, 0x0, 0x24000008) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r9, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, 0x0) 10m31.655713964s ago: executing program 1 (id=1281): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$video(0x0, 0x8, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) chdir(&(0x7f0000000280)='./file0\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r2, r0, 0x0, 0x80000000) 10m31.106980432s ago: executing program 2 (id=1282): creat(&(0x7f0000000400)='./bus\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff0800fffffdfd10000100000100000000fc", 0x64, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7ffe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) 10m31.060474187s ago: executing program 1 (id=1283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0xffffffe7, 0x32314152}}) 10m29.851077179s ago: executing program 4 (id=1284): syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab82) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) syz_init_net_socket$ax25(0x3, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x4000000000000045, r3, 0xcccccccc}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x3) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r3], &(0x7f0000000040), &(0x7f0000000600)=[r4], &(0x7f0000000200)}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40048094) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000380)="5800000014000300000000000000679abeff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff5a60525808f91cb2cd3d8586dd77daf2f7a5512cd5f0c6", 0x6f}], 0x1) sched_setscheduler(0x0, 0x5, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 10m29.627044466s ago: executing program 2 (id=1285): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022910500000047"], 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ecf85fbcee5586dd6001010000161100fe8000000000000000000000000000bbfe8000004b0000000000000000000000aa00030e22001690788c03000000000000ffb00afe4e70"], 0x0) 10m29.353049575s ago: executing program 1 (id=1286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000240)={0x1, 0x1, {0xa, 0x2f, 0x4, 0x4, 0x2000007, 0xfe3, 0x0, 0x151, 0xffffffffffffffff}}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000340)="abe12cadab131da22d82af1a5f01572b23cb0fecee44920fcf7ce03f6330eb36a2d35ff1adbd76adc889412fed", 0x2d, 0xfffffffffffffff9) sendto$unix(r5, &(0x7f00000002c0)="4e08a0ef9ac7f14143949466fbb7d16dbb8b2049c0bba0eaf39d88e725ec9edfea49a56f4e718451bfdee5e13254324baf222ce2cf99b06ad6ccdb8fecc92933c3d5b1fb893bcc012624958354ab790e", 0x50, 0x20008001, 0x0, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/85, 0x55}], 0x1}, 0x100) 10m29.316828725s ago: executing program 5 (id=1287): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000080)={[{@quota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) write(r5, &(0x7f0000000000)="3b000000010006", 0x7) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xf}, {0xa, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x4, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0xa8a, 0xd, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r6) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x1c4fb}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) r11 = syz_open_dev$video4linux(&(0x7f0000000040), 0x6, 0x80) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r11, 0xc040564a, &(0x7f00000000c0)={0x73f, 0x0, 0xf, 0x5, 0x800, 0x9, 0x8000004}) 10m28.161338446s ago: executing program 1 (id=1288): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x24, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d00"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x22000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000001980)=@urb_type_bulk={0x3, {0xf}, 0x80, 0xe3, 0x0, 0x0, 0x3, 0x3, 0x3, 0x8, 0x6, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='timer_expire_entry\x00', r3, 0x0, 0xd277}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x6032, 0x2021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x20}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 10m27.90578502s ago: executing program 1 (id=1290): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) listen(0xffffffffffffffff, 0x0) 10m27.597962577s ago: executing program 5 (id=1291): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x25, 0x5, 0x0) sendmsg(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)="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", 0x1023}, {&(0x7f00000003c0)="113f0475c1f82d365ceee5b3675bdbf7daece20cd3bc0e600c509f853241d3eed945d91171e5357d8653de763c10a7bc1a7d45468b217c50a4f834a7e100183796a70cb418d1f0b22c1ea2803a0688b9c8e0f91bd532ea048872a1edbabd5a6c908439fb3923db0ccfc8fa8a80190c26d0f25f7deea296758189eff950a43792f1faa9a9fe37ca554e73a88961a1ae358d427a667a074d", 0x97}], 0x2}, 0x11) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x34c}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) 10m26.700745378s ago: executing program 4 (id=1292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0x84}}, 0x0) 10m26.529552932s ago: executing program 4 (id=1293): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r1 = socket(0x15, 0x5, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200480d1}, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, r0, 0x4, 0x0, 0x1}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, r3, &(0x7f0000000340)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$dri(0x0, 0xd21, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000005c0)={0x8, {{0xa, 0x4e22, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x4e20, 0x10000, @mcast2, 0xfff}}]}, 0x110) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='timerslack_ns\x00') pread64(r8, &(0x7f0000000140)=""/15, 0xf, 0x4) 10m26.323529794s ago: executing program 5 (id=1294): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r1 = dup(r0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x3d13, &(0x7f0000000080)=""/96) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x12, r3, 0x100000000) userfaultfd(0x80001) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x2, 0x0) (async, rerun: 64) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = getpid() io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000280)={&(0x7f0000000240)={&(0x7f0000000080)="8d981ea1d21e9c323ca7d532cdec0937b316013f0f25553ba24b280ed978b136d7c5e1f61ecbc67ba0bbd43817d8692de4a30854a3bbdd34b11ba9ec35055e155a51332b733d192394554b300de4e21ab2e3c465", 0x54, 0x1, 0xe28, 0xfffffffffffffff2}}, 0x1) (async) r7 = syz_pidfd_open(r6, 0x0) open_by_handle_at(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=ANY=[@ANYBLOB="1800000024000103000000000000000001028c000400ae6c3312da106cf2ebc8e75f2afde673"], 0x18}}, 0x4000) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) (async, rerun: 32) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x1, 0x2002, 0x0) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000001240)={0xfffffffe, 0x0, {0x0, 0x1, 0x20000000, 0x0, 0x4}, 0x5e}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r9, &(0x7f00000001c0)=""/4068, 0xfe4) (async) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r10, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="16d6000001a32952a6"]) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r11, 0x0, 0x8f, 0xf0, &(0x7f00000012c0)="cf693437a3281a8f903b209d1a336b50554425ec1ab4ba9405e78b6433fb9f34af31412880fea539442bbc5adc9c7e066c3a95034ed49237af7bfda01d51c8820d5680d915b790444d8bab50ee1a9037ec1f66aba1b9dfec80567cf90b13240a3ac71ce110ff813693c25f5b7b81401e627350f53367abbf3cf6f24815ef901c9ed13f521879e589f4985f87cfd403", &(0x7f00000001c0)=""/240, 0xffff0001, 0x0, 0x85, 0x29, &(0x7f00000002c0)="3ab10c86c5b569b0cbf564aca6d05973ba417220fda38aed92c6e9ff1ebac3497a4b45b38b49d626b62f0d3927a829dfba6ca60a9f33170db8cdf8ebe805e8889fa1090b1382076c465c38cd13a6177d5eae9daca8afc3f9ec7b1fdba495b37cb67e3f1d2a8d2a5256e25fb829e2499b6e45849cb8402da0d39ab9df9709b37cf88f530c13", &(0x7f0000000140)="4613d55e3ee9fde2fca6df46df01ee1d984ea449cefd0784baecf4f3160fd41e713a43fd888f331c8f", 0x4, 0x0, 0xbf733546}, 0x50) 10m25.539967673s ago: executing program 1 (id=1295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4000010) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0001, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000020601080000000400000000000000001400078008001140000000000500150009ab0000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c"], 0x64}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket(0x10, 0x3, 0x3b7) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r4 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty=0x2000000}}]}, 0x1fffc) syz_emit_vhci(&(0x7f0000001e00)=ANY=[@ANYBLOB="2136077dfa7a74abaaaa"], 0xa) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0xfffffffffffeffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) 10m25.315949339s ago: executing program 5 (id=1296): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000380), &(0x7f00000004c0)=0x8) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0xa00}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6, 0x0, 0x6}, 0x18) 10m25.315525139s ago: executing program 2 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000a00d"]) r6 = syz_io_uring_setup(0x7aab, &(0x7f0000000740)={0x0, 0x1c2a, 0x2000, 0x802, 0xfffffffe, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x200f000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r9, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xb0, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x71, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x33, 0x2f, 0x2d, 0x2d]}}}}]}) connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r10, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1) 10m25.233764141s ago: executing program 4 (id=1298): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000240)={0x1, 0x1, {0xa, 0x2f, 0x4, 0x4, 0x2000007, 0xfe3, 0x0, 0x151, 0xffffffffffffffff}}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000340)="abe12cadab131da22d82af1a5f01572b23cb0fecee44920fcf7ce03f6330eb36a2d35ff1adbd76adc889412fed", 0x2d, 0xfffffffffffffff9) sendto$unix(r6, &(0x7f00000002c0)="4e08a0ef9ac7f14143949466fbb7d16dbb8b2049c0bba0eaf39d88e725ec9edfea49a56f4e718451bfdee5e13254324baf222ce2cf99b06ad6ccdb8fecc92933c3d5b1fb893bcc012624958354ab790e", 0x50, 0x20008001, 0x0, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/85, 0x55}], 0x1}, 0x100) 10m23.720279116s ago: executing program 4 (id=1299): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x2140, 0xb) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x2000, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='.', 0x1, 0x8000, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="698b1ce4", 0xff9d}], 0x1}}], 0x1, 0x800) 10m7.614438968s ago: executing program 33 (id=1289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) shutdown(r1, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x21}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) fcntl$lock(r7, 0x5, &(0x7f0000000200)={0x1}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000000240)) ioctl$SNDCTL_SEQ_TESTMIDI(r7, 0x40045108, &(0x7f0000000a40)=0x7ff) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000080)={0xa, 0x37}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f00001b1000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x29, 0x1a, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001fc0)=0x0) sendmmsg$nfc_llcp(r7, &(0x7f0000005140)=[{&(0x7f0000000ac0)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x1, 0xff, "c980133e49f813a3012a30d3baa1c4f1413f76cd5cba3e439eef7a4a03232196b69062b6a9b1633661a0d1392dc02be8f1974ba21ffd9f1b4249d99a576df1", 0x1c}, 0x60, &(0x7f0000001e40)=[{&(0x7f0000000b40)="323aadf902204fa72026411f9a14b8b9a7bb705324b748f1b7766acd092e185587163dbcb0a9dc798597eb6029951dca3fe1163143ee83d81475105dd741050daf81451fe5a8afda1a464c088462871d6d8c30933399ad5555ce824c3db4b379f09d03f5cad81fc89a9f5d198a6124b8db3aefe2549d571232db4a0ed86021dfe40e51db4ad131506a092d345e1526da9e9df4e3de373e2a17f66f475296cd3af5ba8afe832f341a90b08aed0a3f182091532b1ba6182ee696da50c1360dce8f0330daf81ffd6875b29bfbb213aaac65407c550550d7494a4c7fecc32b892bf36793060d87ef35078c05a58094509ab6a4377a45bf6aaa60d39cbe4495c0150c1dcde6e898a672bf5ddd2082cd34f409d3f733e1d00d1f62b14349e874bad77ab9058e611d28a7f17bdef30edb74c4edaf00a78a2a4640b63b74dd4cdc8b88b35ca7c68c1b5955e6b4ec63ea253273c40f6069bce7f439739f9b1534eadef55eb7836c2061191815938a2a055c0baec4004553adc2e6fdb76366c6b2d1a11a37d017afd6857027a5eabe5807cdd8ec09245101f40652a1d064f98f2b31844bf10f0436f48a9466954054ea694f00e51274f2a810a11d17447bda83e4603a865e0d2f4b1cb430a99864641dd405e15638c241650f86c863e849e4c17d4b2bb8857202c9baabde4c7e0fe183f8027cf26e2bff3f825caf1bd0864c7ebd9361e0d9e46d0ff589f74dac91f27b2fb86360791b12d423f1612785fda6d63325cf5f25dc8e99f7d3114c952f0dfe882c13a951c5bc29aff8d4b90aa8258f56453c149527ddc1d3731cdd8c595a717d681ed5614eb415b88faa20ea04347010e975baa6febd5a6cdd379b599ae1bbaf48a2989c1a27d691d8aa0bcf8cfd573334746035da3d0204579e5f834e4ec7f048ee6c5a19e648f3c409493c1afa1c3049d2e69c8a6a70e69db52dbb16b101138eb8a1b97e40976a8e38eabb64c2a0271d027ad5af77e873e9c1e6b1e3d9f30e4585f36198fc129fba0b43db73af73f63426c03a47131cb0e1b719cef1761820937205572266e6a7f1e90964747f28d58fd0b7e828b6fdc2b291c9ab81113a88fcab82712d1089b50db7dde386e1b3b13d86f264a9f60bf3215ad6d920f959eaddd234a0a13193eacf1d5c99141cd12911570611e5cbc9b09f2edc45104da524a7dff2b9cda122803e1d7cb028179f073d7d2af22f359dad5e01697dc824b63d45de7f8d9d329f2b79fd994c9ce3ca2f6a1f1d51a2a889f4b97f9b86ad7f0c33a8f862103682c82d4b98559bf72c9ba37bd0a1c902e073634c1aeffe287de44162bd97f5fdf42758dad629cd562be5ecf28417593cea61f983a64d7d468ec8fc33ccc77a1b0325aa59e7794a18aa8cc4b060bcc37848d29710e2b12e99ccb740cf2130e48b4908230383887dc780a24aa5df64155b595a713c587f49b85fe878d674e22bdad0c79fe0c9d5458504f69bc283098fa1782d3de6b64f4248a4b6b89394bfb5a50e0691bc84421fbee277a5159658a6a26aeb3ec91b9b6b7b9714d3a604c53210254e2560baff63928e0a388687b9d727dc97ab778bca0ea2a447576a9ef6460504588f0e868766249f58dc0da5035b1b3729733dc692c85a9b6bf6421371e30dcb5881c9728943ac3dd5526fbd8d89edf7553b492824aef669a903c15132f07d1798020d6d04f333988eceb71c6396b358600490762fc3ae11db2d8f8a213181127b39a38f76d97b9dc2fc719402a2b81e087c48b96ac799df9ad4b21cbad6aac13b96a15a1ecb29b5fd0013b5bdbb4ffc30a5d9303f9f2fc99431034698e256f3c4e8a92614e30c5886067a514a92a2c244b161c67bb91f79123b20b5e5a18bb317e7492a92c3f1bc9aeadf54ce07c8c2bfe849d5523496d7030b181bed7b0d8812dd27d27f10eaa36da4a35decede90ee701b72a668074cc1707e409f9e6e8b092a563556f50ef565585de5d029f3c10f779e9e560a7607e8a36af4145a48daf21f8909960a7e42bc47d4e492557afd77bf7b0a5b89a9051627d3162765a2b10779359c5d84dc69570e780eb4462251ac4f70476ebcc18ead6d3ac36aa00c85383da0229c2cca77941454dacdbc3da0b0735b93f15245988d16af4d3a53824814b53159e5562f3348216a554e5bcb61d2488b0915846490ef75fbdaaabbaaf76540b7c02fe96cb15b586b51aa0d5ccb7ed488ff6a45a71d555bad242cb6695c76c9d98da109363ab3dc29cdd795dea5e4b28c9fa582c90a9fc6a0b0f385a51d1e5c26bd1531ab43921a8ea7c3049d568fa4f36a71c376fd31c44188688c6beb0aec7cb8d70ec846a67da8bed989a5e15ee785cb397b8f4a60fe9199e12a7ae43a1b4fe2c051e8ad824a0cd08e8e70f79edea142b04db3ff9fe6a82147c357cfdfddcb2af084a289b8ae904eb3a9e36c3bcef1f23d47bf10eeddb85773149667da9d37d8bdd0f6c71c6e379af92c538f1c6c0a194f21c68126f8459be8fe98e338dd0a74382c1622fda4028815d922f7abc957b394c4bcb9d374367d84463d44e2032f5b5858bdfd7dcaf7c21415f120f7be481abc6aca7a7424411d74c21e748f090d705d020f833d1c64ed4e484849e44b55703a2a972fe7ff0df56b3241f25f4ed82e7c581e28da9101fc9cb87578176bef3aa7182e3486b24ee835e873d9951a3754a8a2990f6d9979562182b8902620f8e46468f6597a68890708f244e76fc37a2ef7789748f90ee3de8a5db6a6e2beb8a51609bf58de33cbbbb83f570215715bd933cef7fac9da2c86e02654464ffb406182f7d173fa36ef2fdd2224ec86820448e74c4d24793cb3887176e5a5df693b8dd333e8ef6a77625be541f745aea5659023bd7482c90becd7e153fc00a2a3d7660dd1313c4ac0ca39fdb89a3a70e165b548713e03c84b82fac3a697d994524a9e0829d76b5ab89e5262209b296ea7d0e44786d26e9ed90f1ed9a262cef7da9cfed2a29a8c99ec59af30c0905d0f15953ac6596ddf4142545c4136a4144aea57eda2d0e8fdaed67bbcb847afeab8cf3c1f1403c9798cf213f8f582b3e2ae2e09a1aa4fbfee5b0abd961c8aef3f5a0faea9ed9aa3aa35a426509ce7983999ec531fb1c073271f99cfe7643f6ac503096bddd6b14d51735ceb8ec04595d6b708dbcdacbabc29bf0b6295035c016f22cca417604b4e87f192e5c8b9830383c41c4d3dc47696ae130ac694b2fc6b1fc12f5bfbefcbd16b296747e0da663996245fe825ddd7ad1479712d249b4913cbde7ddec7faa05af9daeb1f8dd3d124d5f962d3a2fd07821cd17093061f5a0e7276cc3af87f0ee0f3d99243977ec5afb78568b110161e080956d464e81d62959b9c025ec52af8c59830ac747f8863c84c2656d93a0f7303315387cfd8927e8b86277a35a03660de66c896988fc2a978a79900e9f889ee8e4dadde0f88bb040742fbbb9e66b3a9d2fcfabfe80bee54d4d37abf7fd8d484ba8ba933999192ded9f788720adf77cfe95dc811966c9fe9a78230f23412e604e5d403c2451177341f3ae0ee6d846045ba19b328618427bbec37802ba108806694c8f07a99eebb0e6a73573e4b44a66bbf8fbd06e950f279934dce79c461f5af24bf9ee522f02031785f0780292be4c5d276fe95f81d4aff8f63b72edf51cfdc245520ca0afca008cdbb57fdbbcaef3a3c0b499509147d050feddba25a1e3c57fe4b6b3bfe28d9761b4e5cfaf8d4dd8a90d11543bc564c0973484f73685ca66c250058fad66238129e392d9c0c21ab4d86db8ce682838f3a581fe862084dda1dcc391f56f90aa06dc2d74f69f5217f6c4d2d16bcecd92b2dd30f2d88ba61094e266ce9546f28cc8eb1d3f91fea46323263fbcdfd8fdad836f314d1d05fbda050cd982443ce4eb44fc460416d015826bf8e62c617bb3aa43b16bd58fa9007d42024151470ce7e1f16fb46373ed59e932400ca6d26db36c65338046fba5dfd052992cf298cfe4d806d3e96473a47ab1342f0981c7a73e345c6182f57e35dd5e6a0ff9182513b0b795c5eb2205b364fad1e5415e81682c47fb38c91d7a53b803185d84f061039cc00d814c10d379e39da1dc317b2b32cc88f030c4f9e4510d6bc8aaf0a523278579f6fc541b61e3b530cf1560ffb6878ba436ce897ac013ef9293d5a684c2fec91dd8daccedc136a874cbb0195cb52ee77c040155840008a0b3f8775a4018b94fa4bc0b97f017c5dd559ced657195dd3e78c84cae82ac259f9c94573c7838dd6225953cd1a8f1780961e8eb7863ebcc390f83ce75d713b559b36b50d3c30d590664ebb7e1278e75143b1a71d2ec50c7cbcd2e3ea75f5b717aa134dafaa0df6c86e15a05ab0766a89c5ccfe776ad0bfe99e3727ef7f888b5d3db00917046a619beb2764f1091dc567be1b90baa2c9e3d552c76583deddd163c6a641e7549081f54dc2da26e3c012e9e1ebf1158555ff612c359425e33ad19993e90ecd520cd5b35d0a075213cfc761059c9ef19da04a5fb3472ec38c7085700b3f215686c9f66528b30118408557dc2e335538a40d55346996ed7b8861363196ef3b067cd1b97bb7eddb9e724338e55795c0688ae7bdd1d0f3bf0908e269d8f4417edf3f51ffc00c0a2acdf87436e405375010f0ae0601555cb173a58c97555aa3eab7d6ed27b773fecb0436c7665cd4f773d213e92daecb9411ba9b9b23486a81d81406733425493b84b7d395effd49dc87496d979dd190a508b52c90d6283a268a869baeaf0eadddfb9830ec99e373fd4e7bed1c15ac30264e2259f3addd3bee3fb5cf239861e469b2abcb0da36ff6eab70c447b6bc8cb910aee869e2e1fff0b8eb03f02443cf189743a6d1d828cbce6d9a6e9dc70c8f9132226b9f71dad47a68c3073eedb55c91fa5d0f3e7b6d51d2983473e9d5ccad4dc4f92fff5c0e80da40ba44eb437113531bbae88b00f601ba4a252c9300e820acafa1b3cb7640fa1d234dabacd50157130c900bf171dcce5f5978ecaa7daaa0368f2b26a09b3301d3291b86d208a97eee2f9804fc8e71e9215b5808329cb9f87c41413444741719c6c6d17d39f8e17fa9c5d80bc17f8f8a229683f2d54571bb1de067ce2a5efe9c68f404eccfb7db03af462234434216c36b8ee10c558623ff6dac559096c42251a28fa7abcb2bc8beaeb94509b4154e18ee30b6e8adb904534d85428a172154d83448a511a4b33d9de6bebcb54f117e3dced72e990fefbd2641978e3b2f87ac03cb60dde014b786be06e142b348f6edbb8e8613efa67c43e1d2ea374aec55b7d8b5f00e7e7c0929a8dbef3236302efa2c3fec990fa3e255346d9579ee95a49a3491a62045faee35b9c121d0deb042879ac40d3d27b051d136c9ff45571448728fc174c1e58c10cf36d14814347c1d5e163726b35b5c254f43ecc5e81e185fa7e0ddd1c22624ca5838d635286668d2ca9176cc4e80f91715f1bb995567325f0fd3a1108a7911d245325ec9c0ee11999e51116a040ecd30cc31cec6817afeb897c002170b4fdfd1fe62eb1df0c107fc9171c9e0b1e63da6188100ca63ffbbe99bf7366f701e1bf00d980c98037be917f6f2a0a8df7f8a81cd47ee721185c3b19420a67741e884ffd99b06fa1a9c05cebeecd7b31eafa16f7b8823e807e2ee25c9ac9f89e305292c9b8a7cfca6e8252354258326b455343895e3b989d89c18122deae42bef8a34e7b16eccb03c4bc7bd7068a22b15be0d067ec6ebe38d6f508a17010387157b1565ad6230260f84d2829a4428f5e8abba58bd1cfbca77", 0x1000}, {&(0x7f0000001b40)="9d3957f26a9f9fcd39a25ea7ad731f0e60612a03fd55260deb04e778e9f4dda8cde8b4c378fa56fa6e29fe4ba547d90f2d6e2d1afc34f6bc727cc28aef608a449b727b2cf0d61776afba6166cb7d086fa2b81c5b1f3dec99c97aa32d5234351e1557389b5deade1f26c146d9d5257e4b73be8eb96146638dac2a7973662dd9e7b35ee7a495af3665847d", 0x8a}, {&(0x7f0000001c00)="54c7d97500ae8883976fa7ff47485b8bb161281f617b7f5eeada692d2a4268f1bbf83c3eb7dc567190bf2d80e80fbe87be0a7afb886d2837580972d57ba2753f27ad974ffbc212c5fe7af20ef3065aec6cd273c13cc8800b2a7594c584a82e97d5663d46a6871777bcf758477f4d6871fbd9895a4f35367364b4e401990c2e01a7418bb7dd25f0010d82f502a738d7954318b943f2084b49f7445bc6ac26b8569937644391f5", 0xa6}, {&(0x7f0000001cc0)="4b2730372943a3b9904b9fefe3efff8844c6f344c4d6bf6b7de85bd2982e884cfc66ba9c804985e3", 0x28}, {&(0x7f0000001d00)="808ade81430745d1a0b0cc93bb07ffaf8b24861b5702f410e15a9c4008858e1e15ce18337318a8bf0af3396278c67839c4c9ebb362df029653440f8ba50d5f9a7717b9d862686d0aea65381c92aef299", 0x50}, {&(0x7f0000001d80)="659c91f2eb2ef4a667aca4933374274c748d80ccc68c80123a70d6006c9c314da8c2dad7bac3eeb3fb02d842", 0x2c}, {&(0x7f0000001dc0)="04fb49fe538d14ee21f7f23b905f99efe730ac99f01de86daf1085fa2fe9e6306a1ca0e893e2c37cf350961e2dafdd76e98ca89d49c8ba23e4ca1aba6f769b08147b36f53463ce5875235c018822e61d1d0956fec222b290b327a6244e6646190a6d008ef98a605e38c8763b2a90c8e4cc9a", 0x72}], 0x7, &(0x7f0000001ec0)={0xe8, 0x33e, 0xfffffffc, "e7644f9c817251701d0f2d00e31918b3fd4c2fca4c29308b248194e39aecbc61eab4f1bac1cad98ebdf7ba0f8d9414b018b6d336f7c4fb32e7ae18b76d52b0c34ad1849f1744bbb7b43207cacce6f71852c12e8893d71a2cf73f00e7401357895f5341c7fcde285f5449d49508c3dc4e42667ff59b6af0fd9bd56f79d2581a5af2db184ed10a16c71a60515e6a08c238e7c63ca2fbdbce697bf18204b25a101ab61d06ad42961b73c56a2f620c78b1096a38aece13f5280327692945e2f5d0c2c5ea6728487eebc347cbe028888ee46af5ee5d90c7"}, 0xe8, 0x4855}, {&(0x7f0000002000)={0x27, r10, 0x1, 0x2, 0x5, 0x8, "b7a2e03b2f5391ef23cfe958544f17d5183483e37a07be30932a3d4140f36a446430a295547aff0accd2987aac7274525f4f6f58a0f61a38cc980fce48d252", 0x1d}, 0x60, &(0x7f0000004740)=[{&(0x7f0000004200)="6260078c914e283ff429dbe1beb398585f3a162276c6591f575804d8fbe8000e8c0b804bb44433087eea63fd02f50e07b80b0f9cf5ad0e13b02f7ba894f5fc04bc74885b7db7e86aae701d6dd637b31e2b65e5bb6800dd3daa171149b517168a21371d86305bb4d197d5e16f08acb47af0ae83bdce5125597a", 0x79}, {&(0x7f0000004280)="3a98f5cb196652cfaf73f0af8c01ce98669cbed3e82a9d9b5148025b1efc068580ec36b81335725d801d4e38cf237e3b25ca2f24991557473bed7fe8c43b53c624e2077e1a47f59ef58087acd6e93494d212de2442a44533f7caf986b2a221f43aac6d6bfde5e6a956dfb42bcafccbf15485eb313b1dd64939c49f0bd912478b56dbc60fb261eb0572635deb268b2c37a55bcbce134f1c69774540e200be036a9eb66da8e5f34ec63b2d9990171c5337bfa900b87bdebc449686c8d21fc2a61ab235fdd8d39f0227eeb7db97a6884aa89fd3f5e445d0cc12bad1f8af668d987cc11f0b4826ee4233fdcf7fd3d814070fe48b878f5d795178", 0xf8}, {&(0x7f0000004380)="03a3a2eca88968fd13e5f970bca5948dc85456fe18742c1bf97e74776d85cc7a9ef2221c415ed1cc21e060dba7058af7d06e132409acea157b9a080635226b8477804e0e4283f0aa57ad27fac23c2a4b10af2a93283efcabd6b2bc488b19ba7fe0dd2587172fc12fee076e80f12c3d6ec09702bf", 0x74}, {&(0x7f0000004400)="9c46ddd2441cda71a581ab42ffe391c5f65a6433f27eb0171adad0a6acc9339d2e97c927c6a2a8539e8c3fb87a50078eb4201d2b25359efa29bae9bfef9695dcf7ad9b5038b3f7dec3ed0b1626200a5823ad2bef301c9405de69c93afb73b3c10445ab251419550f913d93520824df8b4c58444c5c5d61e210ecd842", 0x7c}, {&(0x7f0000002080)="5a776b823d10b9f957eed62bddec02f8e499149bdec505bcac13f2ed069fee9e986fb61ef596666ab3a73df8d0fe92", 0x2f}, {&(0x7f0000002100)="d76e07cff4246d37290e0f8ff27812eff787c51b44a7e3c7a1e7805cda20c27536b3b88f3691d73d1b4c62bd17ee376b9b", 0x31}, {&(0x7f0000004480)="c8136283c6405f23cec134c8c53d058bf8ff096a0be1acbeeeb3ee951818a509d23a2e998cbc9d883f2b0934b07c5030c53928a974a5297e25aec0e98f6fbc7a2e6c30ffde15246cd1ac3a1c49dfbec5bc232fff7575744c4d63e5b2f6c4625e1cff9781db5c0bb42a430348f59382f98f93ac098dead6087aa6f5895eca01396ae03310b87b10c5524f79d0b6a7962b867cb2fbb7c8c08aad80ab595fa861b6d4a3a1c511abdcad0d0d9d025c5fd1034ce692e806f27e15acacf99c14f357235b8c857f33b5942152239b714355211d841d464b4dc642789e66045577a73a1a89c61c1d", 0xe4}, {&(0x7f0000004580)="8c5112845a15e5c9f8191327b6a0b6ef904166a852d3b00430074205dae1bd380b467fec4a519575ed8a5ca02bd71c3f7897fbdc2d4739b47211c47aa75c2efeee1cbf80107578f34c0f5c32fe089fe1a7342a4084cfb983855230be9f2ac2b46b0116591896b7697fb758b740ae09a94dabcd5811ce052749df77a20fdd9afd8b7c0e93d4ba6445548b5a6d5719de1c4a86a6e04a25c7d79ed300392eb4d0e9ba993f9d4fee", 0xa6}, {&(0x7f0000004640)="ea81fb0de15f28daf8ef7d1099dd6d39d3d91b3e3a704311913c34cb778acd9654cecc5caed09a7242ea054b9ead9785fb2aaa80f31c199f1f04cfa6c7042474b7606aee486db107d41327e11c68693a7294ae83dea0ce66582ab35d99c404977b6cd709f5e125fdbcac89efdd52f683f17102fee17ea2f28825ffbceeb1750a", 0x80}, {&(0x7f00000046c0)="f8c8e75d27a9deefa368462bdb583d03de23a71bd286082db49b4e09a9967ffba3b66cbef1672eae77983a9437f4f224d4e688fcbcc8f79f77378748ba16296dd9ec8c7fcb5a3981f41ec89b329219db7e810e2c770e", 0x56}], 0xa, &(0x7f0000004800)={0x100, 0x1, 0x9, "8a58ec3f6ba4abec5f6d178fb9f3fa14b7665c7590db90c675f79cd8fca9add3dd4e0e685a292dbfab0debec1a81da2305ccf987330bc7f057a3295c02d990b4aebc907477ef2a90dae9e996ec50a7b9b984c4b64533fade20a62619a833376aca249345158e2e70c93e8e54eb71236a593203574ee3de88b394f0b7248f664c9f2b7ce704841305fa7ad83a1d31e8b4d18e330a59afe64eaf564269845908f160934f9e82c114b045d4d19672338aad5c09af4b454f32f88a63b0f99e8851a56520ba398b5da45cd668936fb39c995a5cf80f03eb89c45d6133ae4b1ba8c58ad5193d22704a73283cb850fc1c044e97"}, 0x100, 0x44801}, {&(0x7f0000004900)={0x27, 0x0, 0x0, 0x2, 0x8, 0xfa, "c444a45b30e3cc5378c7df45dacd17a182a0ff12b72bb23a399f074ca98ed52f744304436985d5040b6b968f59c2b6bf7a2752d6e8075384bdd3e2657dc02d", 0x25}, 0x60, &(0x7f0000004dc0)=[{&(0x7f0000004980)="d55f7dbcf6ed67c9d363cad68fb0bdb91bcffb9ed390cfa70779e0b94f44d11e10a54d93e634526d14044c240affb3546d288919d4b98c3201617bf75f64ddc273266c9b62c4d644a72167f273cc78e4ece8f668606de4ff46bc927a8059b4bc8dda661754e5241f4d198a432dc7a263222d38249e47a5045314cc36f54c41a53aeaec19b56f0d639212685ab5930dcca09faa2b60acdc21df6746a99ae0dfa35a371355b818a07099969f8497b22693262e4d32930412743b718860f052a489a6b69088805bbdde2022dd3e0f4461585dfd94ae5e37eb6b82ad0341849e79a443b23809fcedbf2e37fe5820eb317a9c472756", 0xf3}, {&(0x7f0000004a80)="9877d100a9c65662ed17fc0f2528cd193643922a1c594e8cbb5fff9c4fd560204a69a2641879931f2535a84560d687bc27bbf8ae339a3e13fb17510a836e3a0d4efaa04b6e17489d45c9e29b995258620e77", 0x52}, {&(0x7f0000006380)="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", 0x1000}, {&(0x7f0000004b00)="177b50b7e2aacac968b728654a4ad792e6c98737371b61b1f27e2451cf4aeddae3e4c13c3d0bb453ac84a04251bc7b5f06304eed3ea847062b4061892fa1e314b22dff7419ca020b67a973366906cdca8f3d72b4a458ec46ab0e6b040ba6403916972f47333ffb3885cebe6d15138c273bff6c130c52869255bfaf1a4979644df0fbd2ac738473c7dea7c4b3a0ddf9470f85bfe1823c7740fc2f85622c166a1458c1f1700a33364ae1b4bf89de7c73151b85dfa0c82530a912b68a8f59caca8b2180ab34c7f938a392a443776ecd251b1ed5e64f42c61ad747", 0xd9}, {&(0x7f0000004c00)="031260e7f93c6eada99d694868f76f254493a042b62575af862b195d024dcda0f7c8f3cc17cff69ce4f14d6267d9cbc3c5f4", 0x32}, {&(0x7f0000004c40)="6025215eedf7bd6dd6024f25ff6b1049335e0004a5cdf349a41336e6b1dac546812fd42cfea6474adfbea63f381c92", 0x2f}, {&(0x7f0000004c80)="0d70df1ca878427fa8bb25be1ac2b87fe5ca7c433b1fa04cf041c6e8fecfe1f46cc6de8319a25049fd5249ba5fa0a24eaefcc6562d9fe4df1127deba5d0ab7db8a6b83eb855e6c62edb7be9f31f1c9b1006694926d4dd81f4c0bcfdd4345647ea2f414cbda24a3bd1d9392f427ae39227fd1e24899131dad552d56eb852ad72e0846cd50595bfc730a441f1de9c46098abe3e202149cac27e90e80de9a", 0x9d}, {&(0x7f0000004d40)="1edbf60482f1b234d83419c750d0f4192e55c2ccf71f10410d03bcbe22a9fc938a1df36ae7de3def57e8df867ce387651b7ff0687de34d11663a27221c56444b9b4ded30e44219a321ee892b19052f0d52cfa7ec713d7f7de552f14a4d34b2a525c761852597753796d51d3a5e57fc2f49", 0x71}], 0x8, &(0x7f0000004e40)={0x28, 0x118, 0x9, "7061909546abf24705963a1859cec856182c88"}, 0x28, 0x4}, {0xffffffffffffffff, 0x0, &(0x7f0000005000)=[{&(0x7f0000004e80)="df8bb9b01a02b2402731cea33dc18e58a41a32b38916c6bff6928f9ad3525ef03dcacb68a0f916c00e8853d9996c80b71823fbe05b77e98fa8c8c3d3cc0bbede8155bfcd1ace68d28ac269ba7d268497ea3a5acc60a5190a17bd84a86d0ee5970c0b", 0x62}, {&(0x7f0000004f00)="e0bc6060c7c608c8ed1f530ef35b523600b1761560ee9f2e2012c26523618b0dadacdf991f8a77d1d9a7899d5baf4d9c7d9d68cd4821b26ba7fd8ebc2d14b793fb2127c57f335f4240f23c948e6167c4788c984ca7344f70255674dcb7ef39f05568aca4c278f2330173aa622c51e1bf887364162f5ec9e9512d4e98143bcbfd7fde3558e528d5512e36bc34cf4f8852b482f5962a96a629a20226561dd1551bd91aaafd88c922046a1f", 0xaa}, {&(0x7f0000004fc0)="8960f865e270e66669ea3582", 0xc}], 0x3, &(0x7f0000005040)={0xc8, 0x118, 0x5, "b84db5960aded608470ea3bf9963b14f4f3cd7684d7424df017ef9fdc8328dfa127e326dad0d8d7d1c15fbb9b247e4b2a1241787dd602156be4552be127bf8cf7b23d95fd7969772a0c1c4f8b8dbad6c96a34b0d519ef60308272d5ba46f93a8f3e2c6dc5935413705aa2521ca5935c77575fcfcb1d691e32900a6f879117311683f9c2f07953a9f1016cc2fa74910d40012f9d76d635b6f8465eab52bc07080c0fba0411a6fa2317abb311065a9baa77e36"}, 0xc8, 0x40}], 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000340)={'vcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000005240)=@newtclass={0x118, 0x28, 0x5710a0a282c2bb6d, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xc}, {0x9, 0x10}, {0x7, 0xffe0}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x44, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x679b, 0x5, 0xf46}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x4, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x98, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x2, 0x2}}]}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x44, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0xfffffa96, 0x1, 0x1}}, @TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x0, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0xcb, 0x4}}, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x1802, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xb}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x7fff8000}}}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_cbs={0x8}]}, 0x118}}, 0x4c890) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x20) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x0, 0x9f6a364b3fac2a63, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000540)={0x40, 0x30, 0x96, {0x96, 0x9, "4e848ef232fc6d8afba3fbeea23d72d6d51884255bbe7899324e545fc4b5507077323cc2342970e5bd4d469c2041989ce4f247bcf47dd01a6a64a253ac0f70db69698b91a41f27009fc52ffc77d0a8ac01e35adf61dcbc87faecd7e01d5be21f92c045c45efb2ec4d52a3ce9a2dcd9c4703a2a38a33fc2e28d554d358069452213f0779ecaa40eb3af10a1b7a33b196edccbbd6b"}}, &(0x7f00000006c0)={0x0, 0x3, 0xce, @string={0xce, 0x3, "1c9c49d0b78703c64da4ec8d720e208be69253343b64d2479a9b8201b5c85d0e59bac6e7e703c5050c8ca5b22dbca4abbf25882dff7bab481ba9879890617c9fcb2dd65f14e3d53d44c77a0b380e2c98adab08868d04b667faff105e60005093024065b386cefef4ce07e0bc8a2738d25a84460d239900b2f20583d34aa63879ff6489f636c0fb2d9999069f26766d0f48bbabcba258c9f9dc527c2eb290fbcfb807b18993f402435cadbe87a172cb3f95dcdd339ba41e9c159da3a604895a0237938dc38fc3e72190d2989d"}}}, &(0x7f00000009c0)={0x44, &(0x7f00000007c0)={0x40, 0x10, 0xdc, "b3e5f163150b2d922704530113fd51ce9cebaeb3d81fa2579c5ac162cccb0217c15fac3187bd691a970863154b814aae1357080d091f66704be7557819bb0963ce9f50fba3eed6e2ed635504664018fe3fc26f3c501b259820f9cad3f34c912ab56f2f954902024a87f5b94bc5f833d60afe12092222a6541fc2c2005dd3f1ca03f0a889267ca40d6b95d55a79914d6e9596d9c1ee46617b62f2969267e476ea156762dbd8eedac75a32bf02b1e776c80f90c4c580cee7e15992d79a15e0f0cee57e683d345c8310cefa118655b6aacc1b24979acc2655b716b91317"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000600)={0x20, 0x81, 0x1, "e7"}, &(0x7f00000008c0)={0x20, 0x82, 0x3, "2b07cf"}, &(0x7f0000000900)={0x20, 0x83, 0x2, "fefd"}, &(0x7f0000000940)={0x20, 0x84, 0x2, "6699"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "57153c"}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10m7.451136589s ago: executing program 34 (id=1296): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000380), &(0x7f00000004c0)=0x8) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0xa00}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6, 0x0, 0x6}, 0x18) 10m7.403467932s ago: executing program 35 (id=1295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4000010) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0001, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000020601080000000400000000000000001400078008001140000000000500150009ab0000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c"], 0x64}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket(0x10, 0x3, 0x3b7) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r4 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty=0x2000000}}]}, 0x1fffc) syz_emit_vhci(&(0x7f0000001e00)=ANY=[@ANYBLOB="2136077dfa7a74abaaaa"], 0xa) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0xfffffffffffeffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) 10m7.29297768s ago: executing program 36 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000a00d"]) r6 = syz_io_uring_setup(0x7aab, &(0x7f0000000740)={0x0, 0x1c2a, 0x2000, 0x802, 0xfffffffe, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x200f000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r9, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xb0, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x71, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x33, 0x2f, 0x2d, 0x2d]}}}}]}) connect$llc(r10, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r10, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1) 10m7.082159984s ago: executing program 37 (id=1299): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x2140, 0xb) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x2000, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='.', 0x1, 0x8000, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="698b1ce4", 0xff9d}], 0x1}}], 0x1, 0x800) 52.541831253s ago: executing program 6 (id=2856): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r3, r1) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x100000000000000, 0xf, 0x80000006}, 0x0, 0x0) 48.671664936s ago: executing program 6 (id=2869): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x14) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x644380, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) 47.891849121s ago: executing program 6 (id=2872): syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab82) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) syz_init_net_socket$ax25(0x3, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x4000000000000045, r3, 0xcccccccc}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x3) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r3], &(0x7f0000000040), &(0x7f0000000600)=[r4], &(0x7f0000000200)}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40048094) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000380)="5800000014000300000000000000679abeff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff5a60525808f91cb2cd3d8586dd77daf2f7a5512c", 0x6c}], 0x1) sched_setscheduler(0x0, 0x5, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 45.466192814s ago: executing program 6 (id=2881): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000240)={0x3, 0xf8, 0x200}) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x1f8d, 0x20, 0x0, 0x3e2}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x254, 0x0, 0x4, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0x80) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x4, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 44.400188512s ago: executing program 6 (id=2887): socket$inet(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000080)={'dac02\x00', [0x2, 0x80007ffe, 0x1, 0xfffffffe, 0x0, 0x3, 0x1, 0xf, 0xffe, 0x1, 0x8, 0x1, 0x1006, 0x0, 0xffff, 0x6, 0xffffffa7, 0xf0, 0xfffffffd, 0x7, 0x3ff, 0x10000, 0x5, 0xe2df, 0x9, 0x1, 0x1, 0x3, 0x7, 0x5, 0x5]}) getdents64(0xffffffffffffffff, &(0x7f0000000f00)=""/4104, 0x1008) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000f1401002db57000fcdbdf250c00450072646d695f636d00"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x4040084) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) connect$inet6(r5, &(0x7f0000004100)={0xa, 0x4e24, 0x1, @remote, 0x5}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000003c0)='y\xf2\x8e\xbd\x00\x00', &(0x7f00000004c0)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x20048081) lsm_get_self_attr(0x65, 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) lsm_set_self_attr(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6b000000000000000300000000000000390000000000000019000000002000006910536c1ffd0b0dceffef6f9ac42730b29f2879d476f5dd9a"], 0x39, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000000300)={0x0, &(0x7f0000000540)="04aa1fc67fcf69a8f93ce1baf8136d4c3ef58474ed0db78de18d7cbd2e1cb7c206bff460737f5ae44acd785bdcfa0f4f788348c096ec51926a539f133f19c91b9509e4691d957348e2af851a6da24293335f11a900530b7866f0716f7758f4b2a023abc1835be1b1ea506185edc8f974ad7a753ddcb23187d3934291a0ace57fef28ca12bc2ad552fd69437b05c4181c26bc80f252a786dc0eeb494ab855d8414463672e2f955969230732429f822b5dedd0ded6538a62aa1f684418cc53848ba5592d7c1f566d4aa695fd5dab1d1e880b85cd3935571a8cf18b73bf51a29ca7757c460083dacd88d8b472b6931aa1f6e5e5", 0xf2}) 27.853787314s ago: executing program 38 (id=2892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0500000007000000090000000500000080000000", @ANYRESHEX, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="86d8e897748aab148765b6503a70c335411e25e24398ced27c5be211defb675e10d5fc8a106eeceb028a23cd5b161237f5652faf60a161b13582841e2c3033bbfd95ed2ebfd6a6b50d0849e3d3c3d803d20077dd49008afd2b5a16aef7c1257ebcb2725bcfdb6fd70013174fcc9e7820c5cbdf5e0f1d1c2c98da004b2d22093c7ff56b558a6334745afb5cceb68d35dad9b8f44f69c0006b477d4ad6cab69789238563945edf60fbdf82f6db8cb7dddaea3486a400595aab62772605bcc44520fc005b671fe203ef11a735323a504b58d3c2c4a65e6264e1d9b236b78ada054143ed450d6eea4d68b8b8537ac17c5157f9cf5996ec20b27f49172f66138a588743851bbf655b94e471b08e693b9bced82cce24cd50766fb1fd91c30bf39fd606d2a5280dd305de008cdec6975a27bc16ae251d9f3a16e92ae5d65b7142916b05e7013b635b899fd57fdfda9c166f8b1b0031522d1227c35997b05f11bd4ff86ace8f4c7094f5d03f9b9e4fe0298edbfcd33ebd5566f6caf1beec8748d82e66b03a4f10eb7e144e84035d723ff732f646a2eb714f7ea788748c9bbe9a9cae2465198702f1fdabbe36dbb3e6c6562a89af014f8aa8b764d9ac603245d85c0c44de08f3cd92d7587231fbc5c4093ae28333e71ebe73b72f73e5ca72e640eef89e9d626878979274618b4634448e583368283def50b316ee387a5cddcffc77791f4138b43f51f4e55f3d794ce8d743f093e311f85207c5e27d010dbea768aa7076452a896c488415d7b9c427986ffaf6ef012c94adbded5862bcd9133aadb01f6b3c31cf18d7e6c17c0e9c2f53322f992d9ab34af38c6c0c7da4bf5646b85070b311f4e9c9c7b8be3c4bbf4e019a8181843a88f4718f0962c74d9a7eaf2edc90ececd1cfc8cec352e1cc7be2bae25eeb655c1569fe708cdfc58306877b9f702beef4dc8f1a3026245c957dd57e925d74b2f76591654cf287a9e991f161de887ca8456274ab5a83263cd9bf77821177d42c09aae851dcb0f3850a0bfc11f22c431e0229527349d6eca3cee026409ccd23d2785656b8e15892e0a808910b0f44efbd8cada084ae9277e917fd53b95bb355540a76be5840aa4f91c2b59f52a49c891190e36c5f71e9c8d18ea843f0e2b8f5c84907ee2fcaabe8f6b16cfbdf2249003833ee72a21ca73ac11a742c8dfc290176640b8b6505f79941c525cc9566bd8821701fce0959e800f1ef544ebf81531e49e0df19b71a3d276f3adc8259f439578757dfb1024594e863542b6015095599a69a12ef6f03e5ad7cc7a3d653fc73caf04d5d51cd59fa2cb54562e124920efb47ee262fbd2c58e97df446dde73ce156df8186b201f942c2c74588e0d28a6c64787c8320ca11514d17fac546c05a3fdd856759bbd4cff1fe7888687e3b0825228ac1ee9aa1f1f05f612f699fc0dc4af289ecff5947b58d16c9bb5cef57613ace9fbfdc38483b136c234a49422c1567f7345dfd445130991c818c877aa88d8620bcf8aea2df16a15cad9c008f83dfda56932ab28086c13f0c743ce5b1893756b22875233e25b90adfb51df8432905754943af194bdc5aea57d6ba120ea4d957516b326871d5cf3b6502ffadfcb66af1ca6473694c623b2f15e1346175f154ea2958b4ec8c6eef9df7a43c68660ec529c0d5d8692bc655c461bb19f6f7098396a065a39850dd3a6677d1749ba9997403c20c3bd7f0f675eb95343c42477768bd66906775f8410b5c0a0f61c3380eaf1b58504a4c4cef8e64331993dd80281f45a5399bd1572c60afb6817e10e41eab331317675008cbc7154df5de05e8311e51fce9ef7d65a53a3c36005aadbdcee0dde31402348793cc624f45e2c1cb54a3ea9401de454f2101231e278c89986cd4d1a522e54a22ebb503442b8ec2402b5003adceea816a62df531fb57dcef1c0ce27143ed616a7edb830f4f6b270b19fdc5ac954b96d728b86aa7c198b5965b3406268e14e9ec8e3bf970df4aa429ede6e60ba146c6299160d2425c64d2f40983b54235d47268ea816295e111969f56238c79f25e163cf30beef0527e1e58c5ec70bb7118572a1a9c53a586725c25b2aed934ca2ec558e0a349d5acf11bf9b3bb1c045bd6f19773ed6f3bf5f3bc2d8426349c2f36339bb50d43be1fabd6a317c9cea36f397ec9eb1268d64fbe46034772ca77a013d970e3524b193413bbbec251374307d70a17f5ee8fc037c883a7f483a44565f9822fe99e4197a4a0b28822694816ffb5a99191f12ff9ba78f0bc4a191f75c661180ec13dc156474942d831d76428c99ce43c91feff51cda116d2553fb9cc7d31b0f5fe30124533e40f59dc707d48e2751fdbfa225a22b09a00601f239601f6190f07edf841b45a9f43ac57db9c5f3e5c7ece85a551a9862abfeb978efed7c9880864c47b3f5df7c0a5d92fad8820b4f3e2d3f2a1b16c5bf39ef8a65b51877ea7af64870e52b3c57142278c51cb8f7c00c38b7ca39497e8f3087b1f026da18faa9fc8867dbcd98fcc7a1d19e6b231e9a5d8e00111536f7faf0b474b4133d4fda8be8cad9189e5ed8978df9a97befb3b6d92d8d8421b9e6cf84833355e3790598f368e38abaf20c653fc0492f639395a1ace4118dfd18320d278b51a26c3abb0acdb2c57acec8811ab7742970d4a40fc3b71a4cb429290a427a7c5fa26e722c7c1633e9035c26f67787cf3b0631deb1c908a3a22b45506935000b4940b19cd66d6ca11ec0c643cab8923972d6c3df8305abb2dc34e2c946d36c356516806794dd66314ec7ae75d015309dbf88a0032c53af28730477a8ec91edbcfd6f55a2d6c5bcb1b9c6d5973051199ea2cac81ef9c58843da0708f31fe799b201e725d6cc6322a54fc5ee5e0fccbf711fec444938602137a59e913adfb166bc0309660b4900fe2dbebf001a5dd8e07d123bc0ca4fd44c2d9290137005849bf2b8e63cc891a00c6737c2217c88f88f20bfe515293774b26aa6b97e7a5147281702ad782587f8da6835e6c8df12f0775808ee8ca22d52f66b64ec0832c4667beceb56184fa54c5ac5507065bd6a46fe66a272179ff09c1e9592d10060a27eb20717764a873e49ec073c8745c09b745e8332ddc12098300786c031c062ea5ac357da03ce2045958598c6b849463edb01f053db590d00632130513ebdcb50e28356f0ba2567d747620f0c7529cae72c878a830544e4c927c37c54de6900a0d1571a91dc2be77f89b607225f224d9d14215f30baac19bb94500b00a5e086c0bbca78ea0ed9c1e2b8e66d7f589470b6e90ff8b7dc8b715a882d3e57dad6c6da97c86ae2c85337b5cacb949e78bb50c81aa613b8d49f34889ed8c432710ba00bb97f4010e5bf2e23e0713ad28286167618e9f9b66ed197c0e487db7a4a1cbfda03a4eb0d1b2bdc7cb93bc0457c8a660b5bf474956745cb067f7ae84971294c8deec932bb85ec1c37e30401204cc30cc5e13ffb367a09df28ea2efe943a9f77cdc200b0259e187c2b65e2cd018efa427da1ceedc8afa8dde3fdafd14cefe15389b8586093c24e858a17970a33ad65b342d8b1be5c2198d630dfeb043b51c59300e738d1cb35a11a5236c9e13d1b2133b9320acaf155bbafec2b3c933b042969210a4a8775b12140f722c59fd3ae1ab09cf05889018a12051492e15a72f6008002a4a50c680d7e61361739e7052c710618f3366b35aae64cfd3e0da69ba66bdb3861cda7fadeab6b98ab44288920cf1b6cca2a9f2c542ff78e441816d963bd65c8dcd5ec031c791a97be11469b7b657998ba80b726cde67bb0c9e6cd5058ed90eba64eac5bd22fd66b12e7b2aa6bedb1441c0f8817d1ae2390e94eabba9ec61553edf942a9af9f91d8035363e45c1ab168451b089eb24145cf22d146b909c1bea8f88eba43e0fe4e2a3ec2ff42b1ad4c9a881ffad3aa613f21a8ad29db330d0732f5dfc934a6a9d71f1ce6288b801161075f6b6baf8d563a4b59bc8913fd7d0c8d7d89e4cdc075014472c3024b844b674522fb9d63cebe22a3185317dd907a6a931f46484426f1e94d76a2edcf9bc1e7ad892e2911adf14789f9938ec56e2d11d7700ec747609266d6b4452f05bef409ef59c1fd62a7f766ffe8b744cd69a790d7364215ae061612b074b2986e6ed3744ed8d58dc98f8dd3a2c5fd692071413f106125637f7a059b457c5d84460ca9b5aa92ba0780fa06b77544d61923b60bf86ac45d1f6ed7ffd2040224202e40b53d2d3ce7afb07a465f7560dfcdad001cf4b50c302823ca8ebefe0be216c34470cd1a9c6d232188ac05cda4270c716bfe3a3b63bbdb80bfc6992326a9cd769f40d3e971f116433e86d2c24d1a7a622bf8df230810910ac70a819f2d26be170d3ffaae5c6a5294759d59fef3440ff12dd8d4209d838e5fb25349393a2286c54243bd4245dea36addfc21c8397bdd3f952ec2cfe65afa5eb3c7447e53dbd0a9e6a2e744e23a001d03107e91124780342f28161339e136af84e7ee89c5878af2e81a44812fc0449fc00c2aa492ce248e6fefd518f4e43e9a47f1c3eadcac029691775a3346cc5a0e66c603d95222f92bb2e7e117783ab5e52b669f63b96c603af3d277c295648a749dcf8d171d18fe83eba57e1a0229eacb2a95dd1e87a67a49127ab5af35c357f60a453f88e5d8336fb0d45c736948c8f5505f1718b457d1785e1c42564aecd2ac2ee3578372d1636c3db493c1e2b49ac5e3cf5fd615b0ffd77cdc60243f10af434b0cd9a37174e0c8d9cbe7f33c17ad3293c3c897c1f386c19f79725d3f985638c1f174f1e664fdbad34a76b2220e134a13b41b3eae61065d51f636223b510987b5ed129d3adceece26f33064cec707c0920454f0551493057f976d390fd744056ea68b07dcdd651a6d53ad64c878056a90aa5aa1467f9ebf50579c5f471df6eb8c8f7bbc7e6a7170c3a34fca420e14bba0cc9db71e8228b720bbd73bd8769c5cdd9266871afd3acae184a9ae05aa13908ab07f02c9b5876c5760f456ef90f27a59fe37a31bf1c7ec8a528b16d49843d1fca58bbbe56a1f4018667fee2e70c9c3fc08d45cefcd7a8883578707b46a5aaaac00e859a79200a4217ae1d0a89264150b4345bfb5e35d00f371916d55673479d20a0be48687382438a6e684605f3835de98916cbecd64f1bfd9b4d6181b1816ff5a159b9bb4da9dfaa633e7a3395151d0e577695929c33156301a3e32cc5bd191378c40c4f9f4fb0e21a18ccf205b7d5eec0248356406c0de54b70bbc9d37f659b7dfc62963a2a85e2a96f2426be3e266b272931c24bf33ee122783b9417ca9b3d00dce984f145813abe73104432b18cb1f5eb0ff9fb657df37cf111c0e252043cc1c2c0fa4f022e42605d96f4949d49db55412d1ed44f65c2c78e93a2e2a3a6b1ce914501d875964e586d2e22fa6a998ff7fdddddf96d127f97df828e356f52a9b6b8ec94f086e5bfb1a1c6c3edef87939170571a616ec499f95e4fa935e8faae961cc66302c707ba820c730ad5e3ebf1192f1bdbaf6e9f9941a4fcd29558995f6b045c49046c30e0230ffc2ebc747fa56dd876dfe2018518e68169b3eff352130bb8c195800400eb655594fe10fa7de6bdbfdb5a4c1cdc7f614dda47c52ee412683c33bbb25a53a51b2f7a413d6f8e8cea8c62a271e75f2d4ddb80055b5f69782f021f423821029243462d4c3c83296c66e48aa861d3b4b430fb6f80c03be1c1f0fb3c592a536ee4d70dee8601493c6cfd3f90975bf5d75928acd5274b3da7ef8579b926fad944ef98cbf063119b7cae6d9677ec2", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="080000000000000000fcffdd0900000001000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r5 = dup3(r3, r2, 0x80000) r6 = syz_io_uring_setup(0x5729, &(0x7f00000004c0)={0x0, 0x8b7f, 0x800, 0x7, 0x22}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x20048081) lsm_get_self_attr(0x65, 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) lsm_set_self_attr(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6b000000000000000300000000000000390000000000000019000000002000006910536c1ffd0b0dceffef6f9ac42730b29f2879d476f5dd9a"], 0x39, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000000300)={0x0, &(0x7f0000000540)="04aa1fc67fcf69a8f93ce1baf8136d4c3ef58474ed0db78de18d7cbd2e1cb7c206bff460737f5ae44acd785bdcfa0f4f788348c096ec51926a539f133f19c91b9509e4691d957348e2af851a6da24293335f11a900530b7866f0716f7758f4b2a023abc1835be1b1ea506185edc8f974ad7a753ddcb23187d3934291a0ace57fef28ca12bc2ad552fd69437b05c4181c26bc80f252a786dc0eeb494ab855d8414463672e2f955969230732429f822b5dedd0ded6538a62aa1f684418cc53848ba5592d7c1f566d4aa695fd5dab1d1e880b85cd3935571a8cf18b73bf51a29ca7757c460083dacd88d8b472b6931aa1f6e5e5", 0xf2}) 12.582886207s ago: executing program 7 (id=2966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) socket$packet(0x11, 0x3, 0x300) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) mount$fuse(0x0, 0x0, &(0x7f0000000740), 0x8040a4, &(0x7f0000000240)=ANY=[]) syz_usb_connect$uac1(0x4, 0x98, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003000000106b1d01014000010203010902860003010140750904000000010100000a24010600080201020904010000010200000904010101010200000b2402010c038f076d15630a24020198010f07347c0924020208000180020924020109010809590905010940020610050725010001070009040200000102000009040201010141d9420a0582090004ee007f072501020407"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000202505a8a440400102030109021b000101cb300f0904000001070103010905010208001003"], &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x71, 0x1a, 0x1, 0xff, 0x4}, 0x21, &(0x7f0000000140)={0x5, 0xf, 0x21, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x7, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xe, 0x0, 0x8}, @wireless={0xb, 0x10, 0x1, 0x6, 0xca, 0x1, 0x60, 0x8, 0x1}]}, 0x6, [{0xbf, &(0x7f0000000340)=@string={0xbf, 0x3, "769f60be6da4a11b5240b55265af4a1cf18d4ce2fbdf3a5fad6d1a16924df7971f071299c6699535e9fd74bfa6d6aeeb5d9c6b8d7dac38a09a1985cdbf2880ebcbf0b6835f45d4955eac9950dd2acd22c3d7058454f02f3a3b6be9afc46dbf1cbf78ea3e3f16085ee1e62e729249d4e106dd5d4f7cab3c7d2bd64556f2ece258b0b8d853cce475eccc0f6f8b3716be1ce5309944f8bf13a4a00d7e4c29f50f79cfa2eab4e06104c00593e2d450514c65e3eb73a686c89bb392b89f2ce5"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc04}}, {0x2, &(0x7f00000004c0)=@string={0x2}}, {0x49, &(0x7f0000000540)=@string={0x49, 0x3, "22e397cfd2169b886272289e7ca1a0bc48f23f6b9d863a54eeb4bc37fcaeea14da15cf9347a796a19ecdb11d11aa38cdec8760ec80bad158daa2feaa8781192261875c5c5e1915"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x809}}]}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 11.249652755s ago: executing program 0 (id=2968): ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f00002e4000/0x2000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r6, 0x5, 0x7, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0xfffd, r5, 0x0, 0x0, 0x0, 0xffff3f00}]) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0x2711, @host}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570646174030c60ca6661756c7420747275737465643a747275737465643a"], 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 10.187531872s ago: executing program 0 (id=2970): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4820, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000002e80)={0x9, 0x7ffffffe, 0x7, 0xffffffffffffff35, 0xedc3, 0x4, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 9.83199435s ago: executing program 8 (id=2971): syz_usb_connect(0x0, 0x0, 0x0, 0x0) eventfd2(0x7, 0x80800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x400, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x29, 0x8, 0x0, 0x20b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x1048001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x900, 0xe, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) 9.523642505s ago: executing program 3 (id=2972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2004c0a0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x24}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x803) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0xfffffffe, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000740)={0x30}, 0x30) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x183741, 0x42) 8.674697173s ago: executing program 0 (id=2973): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x64e10, 0x36a01}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x28, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xf}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x404c080}, 0x4882) r3 = syz_usb_connect$hid(0x4, 0x36, &(0x7f00000003c0)=ANY=[], 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x149a82, 0x40) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000bc0)={0x8, {"f1f65521bfa1cb8caec091e929540e7c53f1c6adfd7936b2e1d9742876f2d4f8912f29a72940ddd8a00dcbe3fe4b8f1791e008ad2f9d232766fd8a97773a7c13f441ab74f99c8c79669cc37aab2c9b6c6e3a16cf16187dd7cec5706a16fa37ae4b926d3b631c7bc053334165b469ec959a2f45cbf5c9ef3a2761a9051238d4ecb49e8edd0241aa31d01256d1138da5a494a81fd907e6ffe93adc06be1999564503edd1d1d4c7ddb5f709b124ea627da493656ed15dc0219ad3f552972853f8d03cc9cbf8242f1f44aac42b88d91d8ae5e2f06b45a07e975877ee1a61abcd198f93bb469ba20bc9a5c044a8acb215b3856552d9daef1ca18a9b7e2ab87ff5721d707eb7092342b41b8b83a9870e0c049250f2382a30ef58a0c35bcaf863ec9c5e7717158d1e29bf249183a4006615a416ef7f8fa79f4aff943a0630dcd417081b97cf7c681196327be2c6a1acd5aba3fef51bcc112c3fc96eb7b8475311441736cdd22c1312c740c76037aa6ab3acd9c71fde27de70d898e5d3ad65ae090c6c9d899a5f7246a7091413e1b71c38fec536b898eb93a3641bc2c53aa9f76e54a4824fbc36b8b7ec3e5478838978a69c52e304f7723a9f60d6a1fa61719c76fed1a63cb84067af9dde179ea9b67128536f33fc5683f8432541900e645830582e9a56a5be37d3f959144cd91e88770d0be7c637feeeab8d6c33e7de70e64b17127def247a2e98adb0ffc1ab2f669a2746a1e527882b71216d1b5fa4679b15cff41ec0b3787fe7707a239f64bb6db49e8dd596bfcea61ed00c8af04954d027588623e61599668b0b3ab8c907e1f3d01c97436242d37bd135f450be62503528710b9495f54a3c8bb2f8cb772f48a271a820c06b27947f298c487921a1d45f205d87a46bf74885501e4db139f29e9164fa9923fd7d92488e1069cf6f119d792e56b511b977640ce42f30dd825f88b455240ac112bd668c4cd134c30c19e8ed9f72de4a9e767233d5571b2129d43bc7250663946bd5818335319fd8057848afc9aafc4024d18b348539ee5612a365366cbefed32ffec4973fbaf8424e29e0dda2106351ebb409d0c2736a212af08f95d0ad95b61054934b8c59ce4ad2b6fec78fed1f17ddaff2814fa140b2c523d0f075335ad900b11fbd1f6608d29a8d7e1c1982b71d69510669482a9ab24a34f201823d0b0b8938ee7456a7acc55448319973c58eb5b4e1fadc9e13e90fdc410bd74434759de4872d756d7a0a988fd3f940065d447e37823d219e534c6d0aa546d5c636019e94eb87f0259b1ee2eb3f227a657b03b4bacdfafa5a2442e5b236b34a4fdafab307d444753924f89e953ba6dcc6993c418ee4ea799e1411fc2444c353a14c4ca66a7c9d50a3aeef00f4d73aead03272001e0635f4c9dd3ab4ebe72f64e7c86f32f8bcbc1ed7ea55b11c4c4c5da4c1628023ec357c4f2bf94cbad2b259843e634756e226446f23490c1b8c612c0bcf7e3cf2c995fafb2a37e5e97b6d70efe35d52133332ebc474e2d1c0297c0049a4cdb17ebfe8f3b7797a54acb916f62a25697e55683fb2f6b55d8190bb1b3d1995bafa2f0366872106a76e7183afcbc0ba6673dc3d0c6bfe0b2e49b444dd20a7385335515d0615e6e79eaafd4b40aedf9333db3e06295bf2abdd3cb65f756e2d4c59e7b32e5212fb6053e8e9cc33f297fdbf65f78d48cb2f4e750147036cdbbb5a6e8fa95211cf2831ef6fcddedd1784e659a86822631405e68d339ef9a3e4b028f0b89eb302ed6ff15f29f393689ee469556f7eb04ec30433adaac589615eba9dd929aa5dc9a14d08c8d810a401a282af82743d8978824d84ef0666a3c052cb638902bdc815fc9c8b4473e1575387326f64ea11744ccb2c9b023d5e312a371aec2381249f67b824b3cbf475265fe9bf4878fcaf425628aeafbcc97d8d96b8078d7655325f38022561d688712050eceaaf4bca4fc24ff3e0f05179246f4b3eb9dfd14423cebe5b0d3fbdf46c84345254021254e6711b267ceeb938387c68593096b19c2c456f72868c5d2871a961f8ab3957e31fa1a2a8baa825a7311b66a6b725b27446f16ae6de195d514352dab01031f85216d6c87e4a32ca7f43c71fe475c965912aa6440167525398d8e5cf691ab2c684a325a327898ed34b68150ece1ae81e103c78aaa8e847195fe079d4b039b451e0feeed203c546a65e13b781c83bbef01158270216965f80134a2af6619e1809f47e5b18b9aa8b8c394a1b4124b9a57082f0466916a8664fee258e9512ff8a1e1c3ee0be3fa27a64e741c18304aa21c89be9e4bfa553a7fc769c2fe61bf76ad4cc3759a3a8256e6ef215d24c5cbb69eb3e94e4bd4a1e17d63af592df3b211632e47855b983d0f0107e1ee9857ef721b39013cf65d2a0f74266f24f72927f9a1507046cf76627e30dede48de67a8e653386e68628c4af6116962be0e726601e998eb1535d68f10d621295207382e964664ab01decae65e9ddc7ca8375fe77a8a4a497540137ac448e0af74e53fcb573997ab2f5379f88dc76bd189c07a5cbda4e159d8443daf75e4860624c558f0ba744fa320fbefa35b5b6743cf1cf05af95665834bc3b08fd23921f0ded0ea78a8ed0a7a7814888ab0ab57fcdb3ba268e0f15ef333f0a6e4a5611157786ec50afd8b3c97908820c486b52748c436406b32d96062461660d2943ad621a5d81b17e816c91954d553f336ae14f49685a7fcc1f53fdb3e1b0e9e62055346c1fc9fa2745975684df0ede369ce585a57ed244c66f1e62d36af713815cc1c0f38808791ff5ef48663d6f1cc8fe6c7f0d3479d12ad9308348367a09b400da3a05761ea0063262bc5d6fae6ba8af01cf96ca73c785fbb84dbbcb44689c1f21164332dda5952944d1e907c788c3096d00b35847fe350c57b91b559ef147ad83a7d87e43bfcb7d4e9507086b22f354b08bb23dfd66c004fa5bd1fa8e092dff34f93b5cd544cf142791fe78bea35a51bb6b04dc572859511374cd4aa9d1167f561e94db81d50eac1f5267dee8f3b563b5f18e4b37250400b9b1b84c0b4752eec9662c0d0ba0c4a43eef2e2677fc6caa56f88c11bf20ca8875ebecae0700cbbfa42c6b8a8d13253ca244441cf75850350f7ac20132c8844661d537421fb1599a84264729827d668f0a0747930f4bba7dd25eefd9a4ffe4f3c227a10ae5958b36f181515a91353a1518c468068198218a3bcfcde5b240b63817da1217f27f5bb82e1fb81c496ae9388ccc1d209de460de861365b6c45c3faa30493ee06eee6bd1f7518d9ad3d56469933d4044194d525d43af88bfa5a4de640cffe864705c2f566746ac26c0e6ca274eaa78bda8f4f20bc7fe7cb05b4dec74b9bfe500af6be8e85bb3b957d90d9cf3cbc56a04e931ae8d3c6eba9c814caf5dc2bcd7abb8df52fdc3183ee4db43cd49faecc1764740fc08620657fb13ba362bfd72ab6a2e7520ffc963e69ab849ae9b301c6d3536b30b803e71e025b11b223a2bd6834f8a42ae614a8701af51e1a1380fdbdeb94e671cac0f1169ac2f36aafc952e68aea0398e68e0edbb718b228151845775f74919ff6d853aeaacda5d558e12cba618ef67b976bfa7ef96dfd9854e8f9bba20f6281c403ed39e8b600fda089b5f3614331e40219e7a9c6d30e3522ef39687adfd37edd8500586076bfdaf95eddc74ba4dce4d2d984926a760abd640216a6e97d0190c3025fd101fed45e283750975bd26451414220b315a56f0773146a2c7ac89737555e90f0b01560f1af3ace61b08f631de313515edfd5c4ccafef2c9c442cdac34028976563c4a9c47c7a4cbe7507f754031029e632d3fe3cf5dbdfceb6a0d88c6dc6ace403dc3119ac10ffd6716074d32619fd34d61fbbfc8418d93b46b4240a66453d9d238d556e25aeac828e901a056e6123b1f754cf3dbe8ebc455e0aa0ce4e5616cfe7a9156abf63d71067cf715d8a49af0c577bf009af7d256e89d71409cc8f181a9215f6420e724c7dddad14fc3a06786fc2108c79fe40fe2f2465fee9c137f8e53416d14d6155694a06d42896dde59a260173ca612c85a55e2f5536f5889fd652fd8e716e4ed1b338261162bd23b50de19598ad67d6e4f922a12a186239a2887c1f5b7959ba77b8483359bf4456ca777a9dfd6bb78ad31ed2b3455498f22e1bdd492a23ab1d7feda2e359ffd029b48359c162215c395721c899044728007307e4ebe7b2c57881ca3fc9bd5f571228f2425194b5f0465877a025147b5da6ed0596fcfaeab1d8afe643f6d4a943e6a7d92bdae7ba29fdc47ac3e6f2afea9b9ec6a37322f821fd85b972e8355cb0cad494707b6c440f1db13aaa63c30029617167a167693e23ac6ce55a573e01fa2e74ff231fb03009c30c302802c42edfcd3b2d0322b57b2c335137891937fee577c003b00df64ee665b6dcb8bea8642f6f319434e3b7591342593006dd25d0ce51730edfc0eb26d657488d6537889336c100eef697a6964de19ce86a75e31e2a8c215c5f5f2d909c48e3e0232816c89cc96722d7e15dc86506689a5a87902a377276c0764343e787bd2416c71fe4fab2d289859558a5c0598389fe8d9b0d55986a21361d9a5aef25e9d2be350860e4a4b5b319b257c286553b14ca282f98326e71083bd57cc1c78a90f54c3a60c197e97c7e0d3ce074ac26a43a82efcbee46a2fab574f977615fee0dcd446013b0c1ba7767b8985cac85e0201d87ac0ae89626435ea63db11365b24c85a82c0e8b38684f5c0222b0652e55b87f8ebeb82cd98d30e0ed1457f1f339baff968593ca063d3b8e9ffb592350fe5a4cd734883005fe690e4debb0e3b1089067c7c9ede12f9d4d699da0e5b73d255893b66b024c84dd4d3970b1071410949eefcc1cc074ccef5285168066307b01f1a23df6f740ada672639d245bbbbef4eabbb6c9bfbe85b2c748d9bdf4c4b22659706c3ce882a21e67e06b2b3df61d973e8cbc9fb7b37f9f4ae2ad556903a4a99d922af19eb7a54b7f2d2db7afc38a112849e78d7d8431248c8cd5850f906cd4fa7e982f945091c1ae0fc7deaf11c0e58dc6031be413065725f2aa60e13a36d87fd7fd1e1d7317e3d379aa1a2d02accc48a7bdbcc086364d1348f5a338abc53e5222c99f00b7df1f102887dd0a7a8f1c2a233375b16807652c079450375023f0bf64728ebaf07ac111cfff0b67ad227eaf84e74b078859777fd0bfa554ef076d7575b21ef7efeb5e023c9cbd5125c1002188bbc93f312c42086a4ca376823053e5c678d544bf5a44af66351486a526d0b8ce5afcaf6b701cd8169870ebb4cef14e2ab293ef807ce735d618aaa92bab096ee6d593c57bb9631f56d6f2d1d443ff3426e72272c5ddfbb097320c72f9afed9d8dc5530867547ea291f51f0568289079c2a47f1d97bba39b4cf328d8e7182a091145b8148f13744b339510746f6b547f7c43ae2949ab70885c1034bbd05010bb2e1cf57f0217cd96fd2c01ecb357d7e102dfed44f2e4b7455f2e6274f03666339e6d3a60a8a14b8d2d556851b6913356ad12ff53f81b022a91011bc1974e31bdf3d4964f8cbaf228da684bb7ed8d528c3730f223adaeacc6261e70c8ca9143e31da1c0aa20583aaa145f4d127f7b797fb04773e608be5d32f57e949579bbeb538c4c0c9f5afc85c33f519e37d793711d8002d32ca559e92b160249649cbd5f6905e490751f2dca50d3770e61d640f39d2551d7e05a59069c9017de06f268d2eef043b7974fa53080c727a83cedfb919fcb74cc93b60dc6e23fc650cab45d134c308c542", 0x1000}}, 0x1006) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0022fa00"], 0x0}, 0x0) syz_usb_ep_write(r3, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 8.417347276s ago: executing program 7 (id=2975): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 8.206396874s ago: executing program 9 (id=2976): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000200)) 7.757253666s ago: executing program 3 (id=2977): recvfrom(0xffffffffffffffff, 0x0, 0x12, 0x40002050, 0x0, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000040)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @loopback}, 0x1c) 7.72613s ago: executing program 9 (id=2978): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x200, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfdffffff, {}, {}, @raw32={[0x2600]}}], 0xffc8) r1 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x3, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 7.337368919s ago: executing program 7 (id=2979): socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000092d010400001000000000000700fffe08010000000000000900020073797a30000000000900010073797a3000000000080005400000000d080003400000010514000000020a0103000000000000000007000002140000001000010000000000000000000084000afb6461694b602926adb27ad01818cf6608f7b573a19bad5bf2c1ea4d40ea15278cec57f73e10d80cc8fa1d325ce91641c53b579381692c282e7de55d9b094a8e18822672aa129a07dc02d61387d368ba5d38"], 0xa0}}, 0x20050800) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c420000006148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d00000000b5071fe6b1001000007dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57b6cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb165a03609151ae1e511b6adb058d22e015977a9b4eb58a0f4fab2909c56827bc32dc26954cc5519be841fd6a51e5ef468ea"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x3}, 0x10, 0x0, r1}, 0x94) ioprio_get$pid(0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0xffffff38) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18) 7.239673093s ago: executing program 3 (id=2980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2004c0a0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x24}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x803) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0xfffffffe, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0xe7d}]}}]}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000740)={0x30}, 0x30) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x183741, 0x42) 7.239281072s ago: executing program 9 (id=2981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2004c0a0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x24}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x803) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0xfffffffe, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000740)={0x30}, 0x30) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x183741, 0x42) 7.239074886s ago: executing program 0 (id=2982): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000001040)="04000000010203", 0x7}, {&(0x7f0000000300)="f8cf50a6755bdb", 0x7}], 0x2) syz_usb_connect(0x5, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x87, 0x28}}]}}]}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x12ba, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1a, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x625}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xa, 0x5, 0x3}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x4, 0xff, 0xd7, 0xff, 0x2}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xfcff}}, {0x75, &(0x7f0000000180)=@string={0x75, 0x3, "211a163d45ad4e1fa4f1bf78443df0b90f4eb8b36eb3589108f5ea6458b0291c61bc1d2c794723937308afdb0fde5f1d539fe1f6557ad84ed67e56b36474def6ec1aaa2f6ffe13fd5cb8f2147df67e79643c12de0e6c1349b9fafbb3bf18a5f8b08b7224fe389888cf640285c7694bc716be38"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1007}}]}) 6.626470274s ago: executing program 8 (id=2983): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000340)={0x0, 0x40, 0xfffffd3e, 0x3d50, 0xffffffff, 0x8, 0xffffffff, 0x9f, 0x10, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000a40)="6457d0"}) r4 = openat(r3, &(0x7f00000002c0)='./file1\x00', 0x142, 0x41) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='i2c_write\x00', r5}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)="3504000041000511d25a35400c00020001ffe72037153e370c04018006041000450000002a560000e7ff0040", 0x2c}, {&(0x7f0000000600)="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", 0x3bf}, {&(0x7f0000000000), 0x700}, {&(0x7f0000000040)="9d493c13b6b02affcc19cb904ec2bd74085b0bd225277e5a44d681809b6d764ecab211ef0c90ba361a4378457b19705b18406f35071130b4e06c4a3b1a6e9a9d7cf1453aeb21e4c30a85207027af69f536ec61a4a59614b3f59314c649223b791213aafb18e08f295189c63c72d255f34987edf7a120ed0fd80500000000000000c4bf95e695a7b864e534d2af6abeee35de087c976a02f4e4b20bdea333455b73232f9297ce2197ce", 0xa9}], 0x4}, 0x10049014) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecffffff940200000000000040000000000000000000000000000000000000002c8f380003"], 0xe6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x34f2abf5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r8, 0xc0585605, &(0x7f0000000100)={0x1, 0x2, @raw_data=[0xbad, 0x0, 0x1013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000000, 0x0, 0x40, 0x0, 0xc, 0x6c3]}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="b5c859a73957f546d4eb00cbc7", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900040000000500010004000000"], 0x44}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a58000000090a05000000000000000000000000ff0900020073797a32000000000c000b4000000000000000030900010071797a3000000000080005400000001108000a400080000008000c40000004010800034000000010140000001100010000000000000000000300000a"], 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x4000040) ioctl$TIOCNOTTY(r4, 0x5422) close(r4) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000000)=0xffffffff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x121200) r10 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r10, 0x47f6, 0x0, 0x4, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 6.329523963s ago: executing program 3 (id=2984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x11, 0x3f, {0x3f, 0x9, "d159463d639d4a5c9fc753be5cbdf24a0b33f7b4eb93a707be47d5949b14555220fee785c43a9eaf7bc571a1b9e42d8ef4364ecba4da08eef27f3f2655"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000000580)={0x34, &(0x7f00000002c0)={0x0, 0x8, 0x4f, "59f9493c425ea97226858047cb6d18bc5ab25f788f458254e7cf9d2c96a78508257e09e2afc54e59db4cc92c6689a28ca1472b99e96b277f1356a1ce34f8baf53b45fa8027e63b535c796b6610e2d5"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000003c0)={0x20, 0x0, 0x9f, {0x9d, "92442b1282d9e200638050621a8e990e92cdf3f6da03039464c210b553945b1908771550da3907419375f74b131c4e6cc23980d69fa2673ac43eb353b98ef435254f547187374791ab6ae22dbebd1cbe2c0c4ac4ac3b057b3046e2cce2fe542a696d0d0255edd913cdabc82d69ab300cd68bd78a8d250a2e6623a49c103d800f60d0ecc089f690148bfeee35d30ddcef9135c70fd8055586b4adae373b"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0xd2}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x4}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="79a3c074d3f75a9af76501"], 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 6.271207232s ago: executing program 7 (id=2985): socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000340)=ANY=[], 0x20}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x88400000}, 0xc, &(0x7f0000000540)={&(0x7f0000001ac0)=@newtaction={0x1a7c, 0x30, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{0x2cc, 0x1, [@m_mpls={0x110, 0x17, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe2601}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x6a1c, 0x4, 0x6, 0x2}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_BOS={0x5}]}, {0x90, 0x6, "4e51d0f0193e5c3d54175b491664b0e8fa8b82b67708e1b4281cddd0e8216997a3942427f90eebe1cba60453a96635e6e01b60cbfa17fd7d83ee15fd4639c0907a071d928713c69dea8acd0957a6db8ab1b1908c377d1abb5cc151eeb55c230e245110fd967a5b87126c969255ea5ab5f3377ea834f9cdbf8fc3508edea3c173bb60d4cb88076c488c82b625"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x1b8, 0x1d, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x80, 0xc, 0x1, 0xffffff80}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x8001, 0x20000000, 0x3d, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0x20000000, 0x3e4, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x8a1, 0xffffffffffffffff, 0x1, 0x22a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0xffffffffffffffff, 0x7aca}, 0x0, r1}}]}, {0xec, 0x6, "2ea2593c49bd11b52dfe044b6ade798288d6940e0c6a4fc0bc033b166190de1099f508aed8e5b72488aedecfcf5a59520f669d71b5027d0a4b312af6dc621da972db66034b0b36626129f97af7e847404ff950eb25196936bd29a45077cd9b8412b629ad73657fb2542caa7318b286aac6cb64d169557081327202db0daf1d1cb3e5f6868f51bd2c5ed1c1cb5564b74145149a8be4f5963ad45e0df11ef60fed8af23db54c6c13d2dc7e18784d9034f24f7263cd8d8dc5d67f1e9f826036a4bae0c2a994b64be6d9592360d503f6b57b03eae97c5a31c070ed199350a08b04dbe285927344a18187"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x274, 0x1, [@m_skbedit={0x88, 0x15, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x230}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xb}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x3a, 0x6, "f8bcca4b3de34de9da1bfa76cc3e3e37788d83315a75417f18129ed304bb196c19a8265f463571d28f33ab0d298680d011d4e1355088"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0xe4, 0x1a, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}]}, {0xa0, 0x6, "5397138a3c5c6fc00117c7bf43b6ce6dd06e172fad96b4dd33f3cab7c0a2104cb5eeb74b83151481a5b89d48164f4c5248bb980974db3268cf6faebf8f96435087f31d386f1a8634970a4d13f9e9d3fd124e58469e2d805e07b1c55a315ea617eb6a34da99a1a0e67677714c41a6e27ef090d11478e66a8fae12335f5e60e8307d7266936144966ecde70de690eae8d0e601086fcebe56abf0ba5788"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x70, 0xc, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xb32e, 0x10000000, 0x2, 0x8000}}, @TCA_DEF_DATA={0x8, 0x3, ',%+\x00'}]}, {0x22, 0x6, "be2ee517359c824df2a47820f408afbe4464626e634c30cb2fada9797637"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x94, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x7, 0x7, 0x5, 0x7}, 0x2}}]}, {0x48, 0x6, "324ae366e97c4aea287c2badd68eb3e88a578a0b858e75eac535a4bed7fc8c6f6b5436ccf888b85705b678b95d4b73016b7c5412b816140069c9ff0d3b9def230b6c571b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x52c, 0x1, [@m_mpls={0xc0, 0x20, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x4ae8}]}, {0x8a, 0x6, "b6e42ee0f1b18a30466486ff67d36aeef9d434d7ed5d1d4dc2053291ebeca230a8491c174ac4f1e36edf87b03495fa98cd0bdffba69f6f8316bedd7d617188a905591ba908d88b2e28724227b1b75cb3c139a3a183f4c63ea5a342f5962d0cb77f1d8125954b305111e807f68dd0a89adbf9711651e1ae430f2027ce4b0936dc50e6c809839a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0xdc, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0xb0, 0x6, "b133045b6f71113528b2c7e03366b34f8bbcbeac82201dda6a583d1a693c014d5c3e486bd3c7b6be57b9d03be6d61d25460fe782dcd53d0fa542c7db7853666df008ab8d757dc66c3c50499c87f0d3ed0c9a682ce929e70bd3bf8c0228c3fd51624e7e7c34886b943206181c45c8971198816030f50f7a0cabd115c07fb99998b6955c8fd38f5ff3d95efa3c6f2c2b72cf1c2c8f35140033315af21bd9dd1ac0bba17fbea627eed1fe280073"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x118, 0x17, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa02}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x87d, 0x10000000, 0xc, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0xffff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0xab, 0x6, "b14ad6501cc8766ecdd0a4afd52a61e4ff0b8d482c58debbf5035b7f59268d2a835d05a8342484ada650f4cefb21116253a7f5f83bdf4936bb843ebd786796adc4a8c32ac65ba47e99cf5e63e49508644e9b7db71a2b4f27a30951be1b8857de66d8d20c241fc1d69542fd921a568e7081e8cc0b43b5b9e73e20fccb8fa5f1020605be0efa58c0f7fd344a349a8d59ac3fa500a86d4bc14797f39d8dd189350f30e0a8baac77b2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x10c, 0x0, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xaf313}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x7f}, @TCA_MPLS_PROTO={0x6, 0x4, 0x886c}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x3, 0x7, 0x5, 0x7}, 0x1}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0xbcd1, 0xfffffffffffffffc, 0x9, 0x6}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88fb}]}, {0x78, 0x6, "729d12a47b631a5e9bb6ddb936146071838abdfc0e165b67eb2ff19289449e91624d925f4d31ca29255c61b39fb8184265548448abf9a872a6e1774e975c5659ebcfa6053fc0e059d4c8bf7d668569711094286e5c6bef274209e1713222f92b254a89fb947e255c9db9de04de852981c5cb3ff2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x168, 0x12, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8001, 0x5, 0x4, 0x9}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @random="df10b4bd41be"}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x200, 0x20000000, 0xb719, 0x98}, 0x1}}]}, {0xe5, 0x6, "1d03f33cc7c1374cbb072f8861e694489cf1130f09b6cf62971a67a435f3cae79e568b6831310792b85189bc4e7399bd64784def2f0c1c3f7e87c713b28f141c42dc3d1100d44f80d261bf0a89f4987acf8823f8c230d269cf8d0bdf3c61ff417ee60956baabd3745dc0b7aa69f89ecb874c456db4c19807e075e5b4285f157b851bf2733443ca29860410856a471983c7f1839878219bb6eed5818e5e403db1b29da0d84e346a65a5add8c9f31009077e3aa85c41169e66e179d144158a28a90d2ca065c733b6a1be74f5dbd86c43903eeee85bd28f5d0927ba68553499cd5426"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0xffc, 0x1, [@m_skbedit={0xff8, 0x19, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8001, 0x5c, 0x7, 0x9, 0x800}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xab6f}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8, 0x20000000, 0x5d1cf863}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0x2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0xf3e2, 0xffffffffffffffff, 0x1, 0xe}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0xf64, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1a7c}, 0x1, 0x0, 0x0, 0x10}, 0x20008004) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x5}, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x36) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x86, 0xbe, 0x74, 0x40, 0xb48, 0x1008, 0xb7de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc4, 0x28, 0x47}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 6.260640114s ago: executing program 9 (id=2986): socket$netlink(0x10, 0x3, 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r1, &(0x7f00000001c0)=""/200, 0xc8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) umount2(0x0, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000340)) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000117000080000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r5, 0x6000000, r0}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x34010, 0x4) keyctl$session_to_parent(0x12) 5.496543525s ago: executing program 8 (id=2987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2004c0a0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x24}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x803) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x801, 0xfffffffe, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0xe7d}]}}]}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c\x87\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000740)={0x30}, 0x30) r6 = syz_open_procfs(0x0, 0x0) fchdir(r6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x183741, 0x42) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r7, 0x0, r8) 3.968274211s ago: executing program 0 (id=2988): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1f9083, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f00002c0000/0x1000)=nil, &(0x7f00004ad000/0x1000)=nil, 0x1000}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000010", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) 3.965186715s ago: executing program 9 (id=2989): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x0, @dev}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000201040500000100000000000001000403"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0xd, 0xd09a, 0x3d, 0xffffffff, 0xfffffffe, 0x20000004, 0x9, 0xffe, 0x9, 0xbc7, 0x1, 0x4, 0x1, 0xffff, 0x100006, 0x5, 0x5, 0x830, 0x30000, 0x10000, 0xc, 0x8, 0xe2df, 0x1000002, 0x8001, 0x7, 0x3, 0x4, 0x5, 0x470f]}) ioctl$COMEDI_INSN(r9, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0x4, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x200, 0x4, 0x6], 0x3, 0x4}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f00000001c0)="f08309ced0fd0f01f266b99a0000400f32d811ba2100ecea4de9400001010a27baf80c66b89c5bc08966efbafc0cec0f7923", 0x32}], 0xaaaadcf, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.907295921s ago: executing program 7 (id=2990): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x120a, &(0x7f0000000140)={0x0, 0x1e91, 0x2, 0x3, 0x127}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x2000000, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f00000003c0)='\x00', 0x0) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x0}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) io_uring_setup(0xfc6, &(0x7f0000000180)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000b00)="86cf8445f4ba1d9f20174688f169e58c", 0x10) 2.832838373s ago: executing program 8 (id=2991): recvfrom(0xffffffffffffffff, 0x0, 0x12, 0x40002050, 0x0, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000040)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @loopback}, 0x1c) 2.37966879s ago: executing program 8 (id=2992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2004c0a0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x24}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x803) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x801, 0xfffffffe, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0xe7d}]}}]}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c\x87\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000740)={0x30}, 0x30) r6 = syz_open_procfs(0x0, 0x0) fchdir(r6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x183741, 0x42) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r7, 0x0, r8) 2.09897864s ago: executing program 7 (id=2993): syz_usb_connect(0x0, 0x0, 0x0, 0x0) eventfd2(0x7, 0x80800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x400, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x29, 0x8, 0x0, 0x20b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x1048001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x847ba, 0x900, 0xe, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) 2.055196799s ago: executing program 0 (id=2994): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) getgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000a00"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x17, &(0x7f0000000400)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594e70fa55360", 0x14}], 0x1}, 0x0) getresgid(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x2ee, &(0x7f0000000180)=ANY=[@ANYBLOB="12015002dc47a310381f0100ec29010203010902dc02020102a00109041ad50675907d050a24010e0006020102072408030200040905050010007f0180072501020d00000905051040000401089e06908fc75fdae81f85dfd3f6a9231db34ddfadf5e32bdf8e452647187afec36d35e1088fe9384845cb61b6502205ccec0e10f7a3e2a8005a99a74208f052a9dcd832e4df827353916e71fab21f017e9aa51370501ae59db6686d1418eceabb8c72a745483c90f46e494de2392fa04dd59522112ca8a38e41870053ef09fb859ab48e042ddc6d393d3dd2b92171131fd28cc657f2cab9bb54666751dac710218fdb437917743e50353c8130e0a909050c02ff03e1070fdf228240baa88005f0dc574dd9037677f30cca12524c5ba6e99982a9a084aefff24a49abe17176eca7630e012341b2b6e74b7651af4b73c1a48d3a0d15594c438445162951bec0cd847bc70357c725b85390c57b8b17d133085b470ab0e95097af5f3c542f720acfaf3cf6bfd383d6c4664c9b29dcf921429a37f8f297e34865f8a1402a40127d530df459e35b6fd6c7d53d29670509aeeb1e980cfe058df3229cd341480beaf1220cf2737a7e6dc28409ec18cdda7f5d4a1c5dc96a573b2a53cc7b7a4d3ad8dac4b7fa9093199a9c6bd4fd8e0e77fa7fdd1215db1c612ee2090507100004060210072501016da674c0114cce9ae331eed7ad83db92115f1a7b445b88453117c87e82824181326d25788b45f2baa01b73030a5a49adb5802772929cefdba2e1ee5c39124b8c72829ee15eb651131a64c6aa0b4032304d7b21b50ec63fef04b3095b2a558e0fec68f6a08a1145f9900d08d9af87c17e116d95a6b69ad9dccf14785ac21e6eaaaa05603cc2d6e634cc4aae090984c5db15ee5836cffbcfb721ca7f3e82917eed26997feb5c2a1c5d69e7bf1d13b38972e25642f7b6c674c0c38acacc480e05ddc9c3ba09050d2a0800067faa07250103060400072501009a030009050800ff0308f81f090459"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4600}, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@mmap={0x6, 0x1, 0x4, 0x6e540, 0x1000, {0x77359400}, {0x1, 0xc, 0xc, 0x5, 0x4, 0x6e, "6aceab6d"}, 0x2, 0x1, {}, 0xb}) 1.344961108s ago: executing program 3 (id=2995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x2004c0a0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x24}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x803) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0xfffffffe, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0xe7d}]}}]}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000740)={0x30}, 0x30) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x183741, 0x42) 97.895958ms ago: executing program 9 (id=2996): socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000044000000092d010400001000000000000700fffe08010000000000000900020073797a30000000000900010073797a3000000000080005400000000d080003400000010514000000020a0103000000000000000007000002140000001000010000000000000000000084000afb6461694b602926adb27ad01818cf6608f7b573a19bad5bf2c1ea4d40ea15278cec57f73e10d80cc8fa1d325ce91641c53b579381692c282e7de55d9b094a8e18822672aa129a07dc02d61387d368ba5d38"], 0xa0}}, 0x20050800) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)) ioprio_get$pid(0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0xffffff38) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18) 18.104248ms ago: executing program 3 (id=2997): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0xc2010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003d0007010000000000010000047c0000"], 0x18}}, 0xc000) (fail_nth: 5) 0s ago: executing program 8 (id=2998): recvfrom(0xffffffffffffffff, 0x0, 0x12, 0x40002050, 0x0, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = dup(r1) getsockname$packet(r2, 0x0, &(0x7f0000000280)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) getpgrp(0x0) kernel console output (not intermixed with test programs): number 43 using dummy_hcd [ 990.677724][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 990.690466][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.712640][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.727205][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.737773][ T43] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 990.746914][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.769534][ T43] usb 8-1: config 0 descriptor?? [ 990.835440][T13873] usb 9-1: config 1 descriptor has 1 excess byte, ignoring [ 991.280750][T13873] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 991.293505][T13873] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 991.305011][T13873] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 991.484770][ T5901] usb 10-1: USB disconnect, device number 35 [ 991.551049][T13873] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 7668, setting to 64 [ 991.602745][T13873] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 991.620941][T13873] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 991.621332][T18019] FAULT_INJECTION: forcing a failure. [ 991.621332][T18019] name failslab, interval 1, probability 0, space 0, times 0 [ 991.630238][T13873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 991.630264][T13873] usb 9-1: SerialNumber: syz [ 991.651829][ T43] savu 0003:1E7D:2D5A.0022: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 991.663058][T18019] CPU: 0 UID: 0 PID: 18019 Comm: syz.9.2641 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 991.663083][T18019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 991.663093][T18019] Call Trace: [ 991.663098][T18019] [ 991.663105][T18019] dump_stack_lvl+0x16c/0x1f0 [ 991.663132][T18019] should_fail_ex+0x512/0x640 [ 991.663156][T18019] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 991.663175][T18019] should_failslab+0xc2/0x120 [ 991.663193][T18019] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 991.663210][T18019] ? sk_prot_alloc+0x60/0x2a0 [ 991.663228][T18019] sk_prot_alloc+0x60/0x2a0 [ 991.663245][T18019] sk_alloc+0x36/0xc20 [ 991.663267][T18019] inet_create+0x3a1/0x1040 [ 991.663286][T18019] ? inet_create+0x93/0x1040 [ 991.663307][T18019] __sock_create+0x338/0x8d0 [ 991.663328][T18019] mptcp_subflow_create_socket+0xf5/0xed0 [ 991.663349][T18019] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 991.663374][T18019] __mptcp_nmpc_sk+0x182/0x7d0 [ 991.663392][T18019] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 991.663412][T18019] ? __local_bh_enable_ip+0xa4/0x120 [ 991.663435][T18019] mptcp_sendmsg+0x163d/0x1eb0 [ 991.663459][T18019] ? sock_has_perm+0x259/0x2f0 [ 991.663475][T18019] ? __pfx_sock_has_perm+0x10/0x10 [ 991.663493][T18019] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 991.663516][T18019] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 991.663539][T18019] ? __import_iovec+0x1dd/0x650 [ 991.663556][T18019] ? __might_fault+0xe3/0x190 [ 991.663570][T18019] ? __might_fault+0x13b/0x190 [ 991.663585][T18019] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 991.663607][T18019] inet_sendmsg+0x11c/0x140 [ 991.663626][T18019] ____sys_sendmsg+0x973/0xc70 [ 991.663643][T18019] ? copy_msghdr_from_user+0x10a/0x160 [ 991.663670][T18019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 991.663690][T18019] ? __pfx__kstrtoull+0x10/0x10 [ 991.663716][T18019] ___sys_sendmsg+0x134/0x1d0 [ 991.663739][T18019] ? __pfx____sys_sendmsg+0x10/0x10 [ 991.663771][T18019] ? find_held_lock+0x2b/0x80 [ 991.663806][T18019] __sys_sendmmsg+0x200/0x420 [ 991.663830][T18019] ? __pfx___sys_sendmmsg+0x10/0x10 [ 991.663859][T18019] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 991.663892][T18019] ? fput+0x9b/0xd0 [ 991.663911][T18019] ? ksys_write+0x1ac/0x250 [ 991.663926][T18019] ? __pfx_ksys_write+0x10/0x10 [ 991.663946][T18019] __x64_sys_sendmmsg+0x9c/0x100 [ 991.663967][T18019] ? lockdep_hardirqs_on+0x7c/0x110 [ 991.663988][T18019] do_syscall_64+0xcd/0x4c0 [ 991.664013][T18019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.664029][T18019] RIP: 0033:0x7f1505b8eb69 [ 991.664043][T18019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 991.664057][T18019] RSP: 002b:00007f15069d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 991.664073][T18019] RAX: ffffffffffffffda RBX: 00007f1505db5fa0 RCX: 00007f1505b8eb69 [ 991.664084][T18019] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: 0000000000000007 [ 991.664093][T18019] RBP: 00007f15069d3090 R08: 0000000000000000 R09: 0000000000000000 [ 991.664103][T18019] R10: 000000002c000011 R11: 0000000000000246 R12: 0000000000000001 [ 991.664112][T18019] R13: 0000000000000000 R14: 00007f1505db5fa0 R15: 00007ffd58ab0d68 [ 991.664134][T18019] [ 991.787741][T18024] ptrace attach of "./syz-executor exec"[11132] was attempted by "./syz-executor exec"[18024] [ 991.984405][T18008] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 992.007780][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.018217][T18008] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 992.039260][T18008] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 992.101218][T13873] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 992.318045][ T30] audit: type=1400 audit(1754159282.609:1317): avc: denied { execute } for pid=18004 comm="syz.7.2638" dev="tmpfs" ino=1451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 992.358605][ T30] audit: type=1400 audit(1754159282.609:1318): avc: denied { execute_no_trans } for pid=18004 comm="syz.7.2638" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 992.419281][T16363] usb 9-1: USB disconnect, device number 43 [ 992.452080][ T30] audit: type=1400 audit(1754159282.879:1319): avc: denied { write } for pid=18001 comm="syz.8.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 992.558158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.569430][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.575768][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.022781][T16363] usb 8-1: reset high-speed USB device number 33 using dummy_hcd [ 993.047816][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.087791][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.474002][ T30] audit: type=1400 audit(1754159282.879:1320): avc: denied { create } for pid=18001 comm="syz.8.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 994.493938][ T30] audit: type=1400 audit(1754159282.899:1321): avc: denied { connect } for pid=18001 comm="syz.8.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 994.514531][ T30] audit: type=1800 audit(1754159283.659:1322): pid=18005 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.7.2638" name="/" dev="tmpfs" ino=1451 res=0 errno=0 [ 994.518265][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.544952][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.561172][ T30] audit: type=1800 audit(1754159283.679:1323): pid=18007 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.7.2638" name="/" dev="tmpfs" ino=1451 res=0 errno=0 [ 995.485422][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.612840][T18053] ptrace attach of "./syz-executor exec"[11125] was attempted by "./syz-executor exec"[18053] [ 995.918885][ T5952] usb 8-1: USB disconnect, device number 33 [ 995.951250][T18061] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2650'. [ 996.419622][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2650'. [ 996.812118][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.854898][ T30] audit: type=1400 audit(1754159287.409:1324): avc: denied { setopt } for pid=18057 comm="syz.9.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 996.874871][ T30] audit: type=1326 audit(1754159287.409:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18057 comm="syz.9.2649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1505b8eb69 code=0x0 [ 997.074961][ T30] audit: type=1400 audit(1754159287.629:1326): avc: denied { bind } for pid=18057 comm="syz.9.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 997.651535][T18072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.660317][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.674740][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.875726][ T5952] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 997.887666][ T30] audit: type=1400 audit(1754159288.419:1327): avc: denied { read write } for pid=18077 comm="syz.9.2655" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 997.914007][T16363] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 997.925334][ T5952] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 997.957644][ T5952] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 997.967971][T18081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.976681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.985137][ T5901] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 997.996410][ T5952] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 998.015907][ T30] audit: type=1400 audit(1754159288.419:1328): avc: denied { open } for pid=18077 comm="syz.9.2655" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 998.040426][ T5952] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 998.097731][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.123075][ T5952] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 998.137967][T16363] usb 7-1: Using ep0 maxpacket: 8 [ 998.144815][T16363] usb 7-1: config index 0 descriptor too short (expected 32146, got 36) [ 998.190529][T18085] FAULT_INJECTION: forcing a failure. [ 998.190529][T18085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.203753][T18085] CPU: 0 UID: 0 PID: 18085 Comm: syz.0.2656 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 998.203779][T18085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 998.203790][T18085] Call Trace: [ 998.203797][T18085] [ 998.203804][T18085] dump_stack_lvl+0x16c/0x1f0 [ 998.203834][T18085] should_fail_ex+0x512/0x640 [ 998.203865][T18085] _copy_to_user+0x32/0xd0 [ 998.203886][T18085] simple_read_from_buffer+0xcb/0x170 [ 998.203918][T18085] proc_fail_nth_read+0x197/0x240 [ 998.203941][T18085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 998.203964][T18085] ? rw_verify_area+0xcf/0x6c0 [ 998.203990][T18085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 998.204010][T18085] vfs_read+0x1e4/0xc60 [ 998.204031][T18085] ? __pfx___mutex_lock+0x10/0x10 [ 998.204057][T18085] ? __pfx_vfs_read+0x10/0x10 [ 998.204081][T18085] ? __fget_files+0x20e/0x3c0 [ 998.204108][T18085] ksys_read+0x12a/0x250 [ 998.204125][T18085] ? __pfx_ksys_read+0x10/0x10 [ 998.204143][T18085] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 998.204169][T18085] do_syscall_64+0xcd/0x4c0 [ 998.204196][T18085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.204215][T18085] RIP: 0033:0x7f5fba18d57c [ 998.204230][T18085] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 998.204247][T18085] RSP: 002b:00007f5fbb008030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 998.204264][T18085] RAX: ffffffffffffffda RBX: 00007f5fba3b6080 RCX: 00007f5fba18d57c [ 998.204276][T18085] RDX: 000000000000000f RSI: 00007f5fbb0080a0 RDI: 0000000000000008 [ 998.204288][T18085] RBP: 00007f5fbb008090 R08: 0000000000000000 R09: 0000000000000000 [ 998.204298][T18085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.204309][T18085] R13: 0000000000000000 R14: 00007f5fba3b6080 R15: 00007fff95aef328 [ 998.204334][T18085] [ 998.313040][ T30] audit: type=1400 audit(1754159288.679:1329): avc: denied { read } for pid=18077 comm="syz.9.2655" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 998.322006][ T5952] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 998.359897][ T30] audit: type=1400 audit(1754159288.679:1330): avc: denied { open } for pid=18077 comm="syz.9.2655" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 998.367778][ T5952] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 998.375932][ T30] audit: type=1400 audit(1754159288.679:1331): avc: denied { ioctl } for pid=18077 comm="syz.9.2655" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 998.383737][ T5952] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 998.498025][T16363] usb 7-1: config 8 has too many interfaces: 100, using maximum allowed: 32 [ 998.506939][T16363] usb 7-1: config 8 has an invalid descriptor of length 28, skipping remainder of the config [ 998.518269][T16363] usb 7-1: config 8 has 0 interfaces, different from the descriptor's value: 100 [ 998.529670][T16363] usb 7-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 998.539246][T16363] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.549736][ T5901] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.580605][ T5901] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 998.736522][ T5901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 998.748721][ T5952] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 998.759656][ T5901] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 998.770679][ T5952] hid-generic 0000:007F:FFFFFFFE.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 998.780921][ T5901] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 998.805984][ T5901] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 998.825575][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 998.845032][ T5901] usb 9-1: Product: syz [ 998.854522][ T5901] usb 9-1: Manufacturer: syz [ 998.859456][ T5901] usb 9-1: SerialNumber: syz [ 998.867225][ T5901] usb 9-1: config 0 descriptor?? [ 999.373976][T13873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.504664][ T5901] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 999.511619][ T5901] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 999.777679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.899606][T16363] usb 7-1: string descriptor 0 read error: -71 [ 999.907796][ T5901] radio-si470x 9-1:0.0: software version 0, hardware version 0 [ 999.935855][T16363] usb 7-1: USB disconnect, device number 40 [ 999.943557][ T5901] radio-si470x 9-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1000.584992][ T43] net_ratelimit: 1 callbacks suppressed [ 1000.585009][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.587656][ T5901] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1000.612419][ T5901] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 1000.952133][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.287550][T18117] misc userio: Begin command sent, but we're already running [ 1001.306429][T18115] misc userio: Can't change port type on an already running userio instance [ 1001.488096][T18115] ip6gretap0: entered promiscuous mode [ 1001.519350][T18115] macsec1: entered promiscuous mode [ 1001.524822][T18115] macsec1: entered allmulticast mode [ 1001.535621][T18115] ip6gretap0: entered allmulticast mode [ 1001.578134][T18119] Trying to write to read-only block-device nullb0 [ 1001.578311][ T30] audit: type=1400 audit(1754159292.139:1332): avc: denied { ioctl } for pid=18118 comm="syz.7.2665" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1001.613666][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.714828][T18127] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2667'. [ 1001.847699][ T5921] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1002.206512][T18132] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.283182][ T30] audit: type=1400 audit(1754159292.739:1333): avc: denied { create } for pid=18074 comm="syz.8.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1002.417451][ T30] audit: type=1400 audit(1754159292.759:1334): avc: denied { write } for pid=18074 comm="syz.8.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1002.437876][ T5901] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1002.797900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.863438][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2667'. [ 1003.163142][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.230224][ T5901] usb 9-1: USB disconnect, device number 44 [ 1003.331667][ T30] audit: type=1400 audit(1754159293.889:1335): avc: denied { ioctl } for pid=18144 comm="syz.0.2670" path="socket:[55555]" dev="sockfs" ino=55555 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1003.333961][ T5921] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1003.357148][ C1] vkms_vblank_simulate: vblank timer overrun [ 1003.410314][ T5921] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.421682][ T5921] usb 10-1: config 0 descriptor?? [ 1004.082018][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.092548][T18152] ptrace attach of "./syz-executor exec"[11132] was attempted by "./syz-executor exec"[18152] [ 1004.127876][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.170970][ T5952] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1005.235881][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.163126][ T5952] usb 8-1: config 0 has an invalid interface number: 23 but max is 0 [ 1006.177670][ T5952] usb 8-1: config 0 has no interface number 0 [ 1006.191652][ T5952] usb 8-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1006.218318][ T5952] usb 8-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1006.236237][ T5921] usb 10-1: Cannot read MAC address [ 1006.246525][ T5921] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1006.246633][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.262745][ T5921] usb 10-1: USB disconnect, device number 36 [ 1006.281289][ T5952] usb 8-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 1006.290649][ T5952] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.298705][ T5952] usb 8-1: Product: syz [ 1006.302858][ T5952] usb 8-1: Manufacturer: syz [ 1006.307445][ T5952] usb 8-1: SerialNumber: syz [ 1006.335952][ T5952] usb 8-1: config 0 descriptor?? [ 1006.343493][ T5952] usb 8-1: can't set config #0, error -71 [ 1006.359091][ T5952] usb 8-1: USB disconnect, device number 34 [ 1006.546386][T18171] tap1: tun_chr_ioctl cmd 1074025675 [ 1006.551893][T18171] tap1: persist enabled [ 1006.560318][T18171] tap1: tun_chr_ioctl cmd 1074025675 [ 1006.565676][T18171] tap1: persist enabled [ 1006.577649][T18171] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2678'. [ 1006.932604][ T30] audit: type=1400 audit(1754159297.459:1336): avc: denied { create } for pid=18176 comm="syz.0.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1006.956358][ T30] audit: type=1400 audit(1754159297.489:1337): avc: denied { connect } for pid=18176 comm="syz.0.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1007.335552][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.362894][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.411332][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.464791][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.406207][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.884620][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.964225][T18210] netlink: 'syz.0.2687': attribute type 21 has an invalid length. [ 1010.973723][T18210] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2687'. [ 1010.983007][T18210] netlink: 'syz.0.2687': attribute type 6 has an invalid length. [ 1010.990839][T18210] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2687'. [ 1011.386371][T18215] ptrace attach of "./syz-executor exec"[11125] was attempted by "./syz-executor exec"[18215] [ 1011.606720][ T5952] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1011.780627][ T5952] usb 10-1: config 0 has an invalid interface number: 69 but max is 0 [ 1011.789280][ T5952] usb 10-1: config 0 has no interface number 0 [ 1011.796552][ T5952] usb 10-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1011.807640][ T5952] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1011.825679][ T5952] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1011.844666][ T5952] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.853186][ T5952] usb 10-1: Product: syz [ 1011.857613][ T5952] usb 10-1: Manufacturer: syz [ 1011.862503][ T5952] usb 10-1: SerialNumber: syz [ 1011.873459][ T5952] usb 10-1: config 0 descriptor?? [ 1011.882424][T18208] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1011.890642][ T5952] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1011.902404][ T5952] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1011.917863][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.987666][T11314] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1012.133164][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1012.148784][T11314] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 1012.204575][T11314] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1012.219403][T18229] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2692'. [ 1012.229114][T11314] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1012.287179][T11314] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1012.527546][T11314] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1012.537057][T11314] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1012.552021][T18229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2692'. [ 1012.580133][T11314] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1012.616450][T11314] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1012.654562][T11314] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1012.695515][T11314] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1012.766251][T11314] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1012.780341][T11314] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1012.792255][T11314] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1012.806963][T11314] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1012.822354][T11314] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1012.829761][T18234] tap4: tun_chr_ioctl cmd 1074025675 [ 1012.839043][T18234] tap4: persist enabled [ 1012.869623][T18234] tap4: tun_chr_ioctl cmd 1074025675 [ 1012.875142][T18234] tap4: persist enabled [ 1012.884728][T11314] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1012.885735][T18234] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2693'. [ 1012.909359][T11314] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1012.944361][T11314] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1012.969344][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.167242][T11314] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1013.183886][T11314] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1013.999188][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.017370][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.036873][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.063042][ T30] audit: type=1400 audit(1754159303.959:1338): avc: denied { mounton } for pid=18235 comm="syz.0.2694" path="/proc/968/task" dev="proc" ino=55690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1014.210860][T11314] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1014.221813][T11314] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1014.229462][T11314] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1014.238562][T11314] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1014.249506][T11314] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1014.256468][ T30] audit: type=1400 audit(1754159303.959:1339): avc: denied { mount } for pid=18235 comm="syz.0.2694" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1014.257903][T11314] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1014.278343][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.297267][T11314] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1014.307520][T11314] usb 9-1: Product: syz [ 1014.311859][T11314] usb 9-1: Manufacturer: syz [ 1014.316459][T11314] usb 9-1: SerialNumber: syz [ 1014.333565][ T7025] usb 10-1: USB disconnect, device number 37 [ 1014.346467][ T7025] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1014.358307][T11314] usb 9-1: config 0 descriptor?? [ 1014.363802][ T7025] cyberjack 10-1:0.69: device disconnected [ 1014.375052][T11314] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 1015.063669][T13873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.483150][ T5952] usb 9-1: USB disconnect, device number 45 [ 1015.501852][ T5952] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 1015.545238][T18254] FAULT_INJECTION: forcing a failure. [ 1015.545238][T18254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.648132][T18254] CPU: 0 UID: 0 PID: 18254 Comm: syz.8.2700 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1015.648151][T18254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1015.648158][T18254] Call Trace: [ 1015.648162][T18254] [ 1015.648167][T18254] dump_stack_lvl+0x16c/0x1f0 [ 1015.648188][T18254] should_fail_ex+0x512/0x640 [ 1015.648209][T18254] _copy_from_user+0x2e/0xd0 [ 1015.648222][T18254] kstrtouint_from_user+0xd6/0x1d0 [ 1015.648238][T18254] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1015.648253][T18254] ? __lock_acquire+0xb97/0x1ce0 [ 1015.648277][T18254] proc_fail_nth_write+0x83/0x220 [ 1015.648291][T18254] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1015.648307][T18254] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1015.648319][T18254] vfs_write+0x29d/0x1150 [ 1015.648333][T18254] ? __pfx___mutex_lock+0x10/0x10 [ 1015.648350][T18254] ? __pfx_vfs_write+0x10/0x10 [ 1015.648365][T18254] ? __fget_files+0x20e/0x3c0 [ 1015.648381][T18254] ksys_write+0x12a/0x250 [ 1015.648392][T18254] ? __pfx_ksys_write+0x10/0x10 [ 1015.648407][T18254] do_syscall_64+0xcd/0x4c0 [ 1015.648425][T18254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.648437][T18254] RIP: 0033:0x7fb6d978d61f [ 1015.648447][T18254] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1015.648459][T18254] RSP: 002b:00007fb6da6c0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1015.648470][T18254] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb6d978d61f [ 1015.648477][T18254] RDX: 0000000000000001 RSI: 00007fb6da6c00a0 RDI: 0000000000000004 [ 1015.648484][T18254] RBP: 00007fb6da6c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.648491][T18254] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1015.648497][T18254] R13: 0000000000000000 R14: 00007fb6d99b5fa0 R15: 00007ffdade2a408 [ 1015.648511][T18254] [ 1015.844437][ C0] vkms_vblank_simulate: vblank timer overrun [ 1016.195328][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.368778][ T30] audit: type=1400 audit(1754159306.919:1340): avc: denied { create } for pid=18261 comm="syz.8.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1016.527099][ T30] audit: type=1400 audit(1754159306.959:1341): avc: denied { bind } for pid=18261 comm="syz.8.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1016.627343][ T30] audit: type=1400 audit(1754159306.979:1342): avc: denied { read } for pid=18261 comm="syz.8.2702" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1016.844354][T18269] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2704'. [ 1017.038029][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.311379][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.609938][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2707'. [ 1018.415199][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.727752][T11314] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1019.059236][T11314] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1019.087990][T11314] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1019.104953][T11314] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1019.137218][T11314] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.167996][T11314] usb 9-1: config 0 descriptor?? [ 1019.251709][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2712'. [ 1019.438097][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.582102][T11314] logitech 0003:046D:C29C.0024: hidraw0: USB HID v1.01 Device [HID 046d:c29c] on usb-dummy_hcd.8-1/input0 [ 1019.720406][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880565b3400: rx timeout, send abort [ 1019.780339][T18281] overlayfs: failed lookup in lower (newroot/304, name='file1', err=-40): overlapping layers [ 1019.805012][T11314] logitech 0003:046D:C29C.0024: no inputs found [ 1019.822150][T11314] usb 9-1: USB disconnect, device number 46 [ 1020.078040][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.230494][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880565b3400: abort rx timeout. Force session deactivation [ 1020.485187][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.520301][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.573271][T18329] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2720'. [ 1021.677369][T18337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.684508][T18337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.781731][ T30] audit: type=1400 audit(1754159312.339:1343): avc: denied { create } for pid=18332 comm="syz.6.2723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1022.027788][ T5952] usb 1-1: new low-speed USB device number 107 using dummy_hcd [ 1022.330711][ T5952] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1022.351942][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1022.363310][ T5952] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.375643][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1022.387885][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1022.404142][ T5952] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1022.412121][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1022.437495][ T5952] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.459847][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1022.473309][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1022.486870][ T5952] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1022.496524][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1022.517668][ T5952] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.532724][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1022.557966][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.562950][ T5952] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1022.985360][ T5952] usb 1-1: string descriptor 0 read error: -22 [ 1022.995491][ T5952] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1023.022133][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.053651][ T5952] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1023.127735][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.284333][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.367182][ T5952] usb 1-1: USB disconnect, device number 107 [ 1023.622342][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.601265][ T30] audit: type=1400 audit(1754159315.149:1344): avc: denied { getopt } for pid=18375 comm="syz.9.2733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1024.638660][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.643696][T18378] netlink: 'syz.6.2734': attribute type 4 has an invalid length. [ 1024.666116][T18378] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2734'. [ 1024.692762][T18378] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1024.757402][ T30] audit: type=1400 audit(1754159315.309:1345): avc: denied { create } for pid=18383 comm="syz.8.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1024.848512][ C0] vkms_vblank_simulate: vblank timer overrun [ 1024.912653][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2736'. [ 1025.513152][ T5845] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 1025.693375][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.157850][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.793835][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.956413][T18407] ptrace attach of "./syz-executor exec"[11132] was attempted by "./syz-executor exec"[18407] [ 1027.698843][ T30] audit: type=1400 audit(1754159318.249:1346): avc: denied { create } for pid=18413 comm="syz.6.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1027.758805][ T30] audit: type=1400 audit(1754159318.299:1347): avc: denied { bind } for pid=18413 comm="syz.6.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1027.817650][ T30] audit: type=1400 audit(1754159318.309:1348): avc: denied { setopt } for pid=18413 comm="syz.6.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1027.842106][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.288807][ T30] audit: type=1400 audit(1754159318.839:1349): avc: denied { write } for pid=18417 comm="syz.0.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1028.312874][T18429] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2746'. [ 1028.530563][ T30] audit: type=1400 audit(1754159318.869:1350): avc: denied { nlmsg_write } for pid=18417 comm="syz.0.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1028.678450][T18434] tap5: tun_chr_ioctl cmd 1074025675 [ 1028.683831][T18434] tap5: persist enabled [ 1028.696477][T18434] tap5: tun_chr_ioctl cmd 1074025675 [ 1028.701953][T18434] tap5: persist enabled [ 1028.726244][T18434] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2749'. [ 1028.876877][ T30] audit: type=1400 audit(1754159319.429:1351): avc: denied { mount } for pid=18422 comm="syz.6.2747" name="/" dev="configfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1028.902633][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.001315][ T30] audit: type=1400 audit(1754159319.559:1352): avc: denied { mounton } for pid=18422 comm="syz.6.2747" path="/299/file0" dev="configfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1029.026758][T18431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1029.559727][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.644615][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.656872][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.941083][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.199742][T18452] FAULT_INJECTION: forcing a failure. [ 1030.199742][T18452] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.689031][T18452] CPU: 0 UID: 0 PID: 18452 Comm: syz.9.2754 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1030.689060][T18452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1030.689070][T18452] Call Trace: [ 1030.689076][T18452] [ 1030.689088][T18452] dump_stack_lvl+0x16c/0x1f0 [ 1030.689117][T18452] should_fail_ex+0x512/0x640 [ 1030.689148][T18452] should_failslab+0xc2/0x120 [ 1030.689169][T18452] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1030.689190][T18452] ? skb_clone+0x190/0x3f0 [ 1030.689221][T18452] skb_clone+0x190/0x3f0 [ 1030.689246][T18452] netlink_deliver_tap+0xabd/0xd30 [ 1030.689278][T18452] netlink_unicast+0x64c/0x870 [ 1030.689308][T18452] ? __pfx_netlink_unicast+0x10/0x10 [ 1030.689337][T18452] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1030.689370][T18452] netlink_sendmsg+0x8d1/0xdd0 [ 1030.689402][T18452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.689437][T18452] ____sys_sendmsg+0xa98/0xc70 [ 1030.689457][T18452] ? copy_msghdr_from_user+0x10a/0x160 [ 1030.689481][T18452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1030.689498][T18452] ? rcu_is_watching+0x12/0xc0 [ 1030.689533][T18452] ___sys_sendmsg+0x134/0x1d0 [ 1030.689559][T18452] ? __pfx____sys_sendmsg+0x10/0x10 [ 1030.689615][T18452] __sys_sendmsg+0x16d/0x220 [ 1030.689640][T18452] ? __pfx___sys_sendmsg+0x10/0x10 [ 1030.689664][T18452] ? rcu_is_watching+0x12/0xc0 [ 1030.689695][T18452] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1030.689720][T18452] do_syscall_64+0xcd/0x4c0 [ 1030.689748][T18452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.689765][T18452] RIP: 0033:0x7f1505b8eb69 [ 1030.689780][T18452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.689796][T18452] RSP: 002b:00007f15069d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1030.689814][T18452] RAX: ffffffffffffffda RBX: 00007f1505db5fa0 RCX: 00007f1505b8eb69 [ 1030.689826][T18452] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1030.689837][T18452] RBP: 00007f15069d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.689847][T18452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.689858][T18452] R13: 0000000000000000 R14: 00007f1505db5fa0 R15: 00007ffd58ab0d68 [ 1030.689880][T18452] [ 1030.689946][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.997637][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.175473][T18426] syz.6.2747 (18426): drop_caches: 1 [ 1031.199443][T18462] veth0_vlan: left promiscuous mode [ 1031.245444][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.294345][T18423] syz.6.2747 (18423): drop_caches: 1 [ 1031.360170][ T30] audit: type=1400 audit(1754159321.899:1353): avc: denied { write } for pid=18455 comm="syz.7.2755" path="socket:[57136]" dev="sockfs" ino=57136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1031.383591][ C0] vkms_vblank_simulate: vblank timer overrun [ 1031.383697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.872784][ T30] audit: type=1400 audit(1754159322.429:1354): avc: denied { unmount } for pid=11122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1031.915199][T18468] syz_tun: entered allmulticast mode [ 1032.096193][ T30] audit: type=1400 audit(1754159322.649:1355): avc: denied { read } for pid=18470 comm="syz.6.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1032.115534][ C0] vkms_vblank_simulate: vblank timer overrun [ 1032.915182][ T5921] net_ratelimit: 2 callbacks suppressed [ 1032.915198][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.931572][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.117853][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.152705][ T30] audit: type=1400 audit(1754159323.709:1356): avc: denied { bind } for pid=18470 comm="syz.6.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1033.249313][T18483] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2761'. [ 1034.118016][ T30] audit: type=1400 audit(1754159324.679:1357): avc: denied { setopt } for pid=18498 comm="syz.0.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1034.208891][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.279034][T18504] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2764'. [ 1034.485763][T18512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2766'. [ 1034.499317][T18512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.508293][ T30] audit: type=1400 audit(1754159325.049:1358): avc: denied { read } for pid=18511 comm="syz.0.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1034.540870][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2764'. [ 1034.551081][T18512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.581141][T18512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.590996][ T30] audit: type=1400 audit(1754159325.059:1359): avc: denied { bind } for pid=18511 comm="syz.0.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1034.623648][T18512] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.699339][ T30] audit: type=1400 audit(1754159325.059:1360): avc: denied { name_bind } for pid=18511 comm="syz.0.2766" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1034.780179][T18511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.817679][ T30] audit: type=1400 audit(1754159325.059:1361): avc: denied { node_bind } for pid=18511 comm="syz.0.2766" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1034.981677][T18520] tap6: tun_chr_ioctl cmd 1074025675 [ 1034.987058][T18520] tap6: persist enabled [ 1035.000269][T18520] tap6: tun_chr_ioctl cmd 1074025675 [ 1035.005599][T18520] tap6: persist enabled [ 1035.026596][T18520] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2768'. [ 1035.161342][T18511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.187625][ T30] audit: type=1400 audit(1754159325.059:1362): avc: denied { listen } for pid=18511 comm="syz.0.2766" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1035.285634][ T30] audit: type=1400 audit(1754159325.059:1363): avc: denied { connect } for pid=18511 comm="syz.0.2766" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1035.969083][T18529] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1035.978099][T18529] overlayfs: missing 'lowerdir' [ 1036.297800][ T30] audit: type=1400 audit(1754159325.059:1364): avc: denied { name_connect } for pid=18511 comm="syz.0.2766" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1036.364857][ T30] audit: type=1400 audit(1754159326.519:1365): avc: denied { create } for pid=18525 comm="syz.0.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1036.523066][T18537] ptrace attach of "./syz-executor exec"[11122] was attempted by "./syz-executor exec"[18537] [ 1037.477275][T18548] loop6: detected capacity change from 0 to 7 [ 1037.492241][T18548] Dev loop6: unable to read RDB block 7 [ 1037.501307][T18548] loop6: unable to read partition table [ 1037.509292][T18548] loop6: partition table beyond EOD, truncated [ 1037.527129][T18548] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1038.070190][T18554] hsr0: entered promiscuous mode [ 1038.975058][ T7025] net_ratelimit: 8 callbacks suppressed [ 1038.975073][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.334025][T18561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2781'. [ 1039.454005][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.007434][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.690720][T18546] hsr0: left promiscuous mode [ 1041.301593][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.627655][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1041.627673][ T30] audit: type=1400 audit(1754159332.169:1368): avc: denied { read } for pid=18590 comm="syz.0.2786" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1041.736608][ T30] audit: type=1400 audit(1754159332.169:1369): avc: denied { open } for pid=18590 comm="syz.0.2786" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1042.017796][ T5901] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1042.189960][ T30] audit: type=1400 audit(1754159332.669:1370): avc: denied { read write } for pid=18600 comm="syz.0.2789" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1042.228524][ T5901] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.268029][ T5901] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.286529][ T5901] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1042.300758][ T30] audit: type=1400 audit(1754159332.669:1371): avc: denied { open } for pid=18600 comm="syz.0.2789" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1042.321026][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.326281][ T5901] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1042.374734][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.404005][ T5901] usb 8-1: config 0 descriptor?? [ 1042.478355][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.488165][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.207363][T18610] ptrace attach of "./syz-executor exec"[11125] was attempted by "./syz-executor exec"[18610] [ 1043.317850][ T5901] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1043.557516][T18596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.690990][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.717983][T18596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.825559][T18625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.844504][T18625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.900629][ T43] usb 8-1: USB disconnect, device number 35 [ 1043.906639][ T30] audit: type=1400 audit(1754159334.379:1372): avc: denied { write } for pid=18615 comm="syz.0.2794" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1044.121623][T18615] net_ratelimit: 53 callbacks suppressed [ 1044.121642][T18615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.379014][ T7025] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1044.587683][ T7025] usb 9-1: Using ep0 maxpacket: 32 [ 1044.602177][ T7025] usb 9-1: config 177 has too many interfaces: 127, using maximum allowed: 32 [ 1044.616347][ T30] audit: type=1400 audit(1754159335.169:1373): avc: denied { write } for pid=18633 comm="syz.6.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1044.646158][ T7025] usb 9-1: config 177 has 0 interfaces, different from the descriptor's value: 127 [ 1044.666732][ T7025] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1044.677801][ T7025] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.685811][ T7025] usb 9-1: Product: syz [ 1044.770421][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.807686][ T7025] usb 9-1: Manufacturer: syz [ 1045.295361][ T7025] usb 9-1: SerialNumber: syz [ 1045.525833][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.549588][ T7025] usb 9-1: USB disconnect, device number 47 [ 1045.763150][T18651] i2c i2c-0: Invalid block write size 33 [ 1046.052018][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.258119][ T7025] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1046.258956][T18662] comedi comedi3: das16m1: I/O port conflict (0x4f27,16) [ 1046.427689][ T7025] usb 9-1: Using ep0 maxpacket: 32 [ 1046.520554][T18666] ptrace attach of "./syz-executor exec"[11129] was attempted by "./syz-executor exec"[18666] [ 1046.739671][ T7025] usb 9-1: config 177 has too many interfaces: 127, using maximum allowed: 32 [ 1046.751177][ T7025] usb 9-1: config 177 has 0 interfaces, different from the descriptor's value: 127 [ 1046.790911][ T7025] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1046.907144][ T7025] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.005102][ T7025] usb 9-1: Product: syz [ 1047.010393][ T7025] usb 9-1: Manufacturer: syz [ 1047.015199][ T7025] usb 9-1: SerialNumber: syz [ 1047.189291][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.218976][ T30] audit: type=1400 audit(1754159337.769:1374): avc: denied { create } for pid=18668 comm="syz.8.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1047.278006][T18674] netlink: 'syz.8.2808': attribute type 2 has an invalid length. [ 1047.285811][T18674] netlink: 'syz.8.2808': attribute type 4 has an invalid length. [ 1047.398079][ T30] audit: type=1400 audit(1754159337.779:1375): avc: denied { mount } for pid=18670 comm="syz.6.2810" name="/" dev="9p" ino=4412305357440913309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1047.422398][ T30] audit: type=1400 audit(1754159337.789:1376): avc: denied { add_name } for pid=18670 comm="syz.6.2810" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1047.422561][ T7025] usb 9-1: can't set config #177, error -71 [ 1047.455378][ T30] audit: type=1400 audit(1754159337.789:1377): avc: denied { create } for pid=18670 comm="syz.6.2810" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1047.481984][T18678] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2808'. [ 1047.496688][T18678] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2808'. [ 1047.564107][T18679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.777885][ T7025] usb 9-1: USB disconnect, device number 48 [ 1047.801660][ T30] audit: type=1400 audit(1754159337.789:1378): avc: denied { associate } for pid=18670 comm="syz.6.2810" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1047.854938][ T30] audit: type=1400 audit(1754159337.909:1379): avc: denied { unmount } for pid=11122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1047.936324][ T30] audit: type=1400 audit(1754159338.479:1380): avc: denied { shutdown } for pid=18668 comm="syz.8.2808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1048.247808][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.578004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.587185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.927619][T11128] Bluetooth: hci5: command 0x0406 tx timeout [ 1050.820877][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.839348][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.371313][ T30] audit: type=1400 audit(1754159341.929:1381): avc: denied { write } for pid=18708 comm="syz.7.2819" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1051.548030][T18707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2818'. [ 1051.580950][T18711] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2819'. [ 1051.590066][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2819'. [ 1051.647276][ T30] audit: type=1400 audit(1754159342.049:1382): avc: denied { write } for pid=18708 comm="syz.7.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1051.677652][ T30] audit: type=1400 audit(1754159342.049:1383): avc: denied { getopt } for pid=18708 comm="syz.7.2819" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1051.698749][T16363] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1051.861529][T16363] usb 9-1: Using ep0 maxpacket: 32 [ 1051.873241][T16363] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.898695][T16363] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.909471][T16363] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1051.922474][T16363] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.927877][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.943228][T16363] usb 9-1: config 0 descriptor?? [ 1052.087119][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.775187][ T30] audit: type=1400 audit(1754159343.309:1384): avc: denied { accept } for pid=18723 comm="syz.6.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1052.814860][T16363] hid_parser_main: 33 callbacks suppressed [ 1052.814874][T16363] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 1053.017523][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.025999][T16363] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 1053.033217][T16363] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 1053.042011][T16363] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 1053.049295][T16363] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 1053.060779][T16363] koneplus 0003:1E7D:2D51.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.8-1/input0 [ 1053.203901][ T5921] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 1053.212064][T16363] koneplus 0003:1E7D:2D51.0026: couldn't init struct koneplus_device [ 1053.221666][T16363] koneplus 0003:1E7D:2D51.0026: couldn't install mouse [ 1053.230739][T16363] koneplus 0003:1E7D:2D51.0026: probe with driver koneplus failed with error -71 [ 1053.242413][T16363] usb 9-1: USB disconnect, device number 49 [ 1053.341596][T18740] netlink: 'syz.9.2826': attribute type 2 has an invalid length. [ 1053.753466][T18741] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2826'. [ 1053.769426][ T5921] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1053.886055][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.921324][ T5921] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.939271][ T5921] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1054.599190][ T5921] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1054.605929][ T5921] usb 1-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 1054.615115][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.624306][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.637764][ T5921] usb 1-1: config 0 descriptor?? [ 1054.646174][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.652551][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.031127][ T30] audit: type=1400 audit(1754159345.589:1385): avc: denied { bind } for pid=18752 comm="syz.9.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1055.157991][ T30] audit: type=1400 audit(1754159345.649:1386): avc: denied { map } for pid=18752 comm="syz.9.2831" path="socket:[57609]" dev="sockfs" ino=57609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1055.182134][ C0] vkms_vblank_simulate: vblank timer overrun [ 1055.304778][ T30] audit: type=1400 audit(1754159345.679:1387): avc: denied { getopt } for pid=18760 comm="syz.8.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1055.328214][T18761] syz_tun: entered allmulticast mode [ 1055.358042][ T30] audit: type=1400 audit(1754159345.679:1388): avc: denied { setopt } for pid=18752 comm="syz.9.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1055.387745][ T5921] usbhid 1-1:0.0: can't add hid device: -71 [ 1055.393896][ T5921] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1055.549227][ T5921] usb 1-1: USB disconnect, device number 108 [ 1055.557381][ T30] audit: type=1400 audit(1754159346.109:1389): avc: denied { ioctl } for pid=18767 comm="syz.7.2834" path="socket:[58767]" dev="sockfs" ino=58767 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1055.582098][ C0] vkms_vblank_simulate: vblank timer overrun [ 1055.613588][T16363] usb 9-1: new low-speed USB device number 50 using dummy_hcd [ 1055.681709][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.853596][T16363] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1056.300661][T16363] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1056.396261][T16363] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1056.444351][T16363] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1056.654366][T16363] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1056.672548][T16363] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1056.746289][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.769251][T16363] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1056.796181][T16363] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1056.821911][T16363] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1056.839448][T16363] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1056.864714][T16363] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1056.873530][T16363] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1056.884575][T16363] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1056.897124][T16363] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1056.910299][T16363] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1056.917861][T11314] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1056.931872][T16363] usb 9-1: string descriptor 0 read error: -22 [ 1056.938321][T16363] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1056.948085][T16363] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.960690][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.002425][T16363] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1057.171437][T11314] usb 1-1: Using ep0 maxpacket: 8 [ 1057.218904][T11314] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1057.228826][T11314] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1057.237051][T11314] usb 1-1: Product: syz [ 1057.408657][ T5963] usb 9-1: USB disconnect, device number 50 [ 1057.621632][T11314] usb 1-1: Manufacturer: syz [ 1057.644011][T11314] usb 1-1: SerialNumber: syz [ 1057.665648][T11314] usb 1-1: config 0 descriptor?? [ 1057.759878][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.901116][T18780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.913045][T18780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.126419][T18795] FAULT_INJECTION: forcing a failure. [ 1058.126419][T18795] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.148783][T18795] CPU: 0 UID: 0 PID: 18795 Comm: syz.6.2841 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1058.148806][T18795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1058.148816][T18795] Call Trace: [ 1058.148820][T18795] [ 1058.148825][T18795] dump_stack_lvl+0x16c/0x1f0 [ 1058.148846][T18795] should_fail_ex+0x512/0x640 [ 1058.148864][T18795] ? __kmalloc_noprof+0xbf/0x510 [ 1058.148877][T18795] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1058.148890][T18795] should_failslab+0xc2/0x120 [ 1058.148903][T18795] __kmalloc_noprof+0xd2/0x510 [ 1058.148917][T18795] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1058.148931][T18795] ? cred_has_capability.isra.0+0x190/0x310 [ 1058.148948][T18795] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1058.148960][T18795] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1058.148977][T18795] ? bpf_lsm_capable+0x9/0x10 [ 1058.148994][T18795] ? security_capable+0x7e/0x260 [ 1058.149008][T18795] genl_rcv_msg+0x55c/0x800 [ 1058.149021][T18795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1058.149033][T18795] ? __pfx_ip_vs_genl_get_cmd+0x10/0x10 [ 1058.149050][T18795] netlink_rcv_skb+0x155/0x420 [ 1058.149067][T18795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1058.149079][T18795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1058.149102][T18795] ? netlink_deliver_tap+0x1ae/0xd30 [ 1058.149120][T18795] genl_rcv+0x28/0x40 [ 1058.149130][T18795] netlink_unicast+0x5aa/0x870 [ 1058.149149][T18795] ? __pfx_netlink_unicast+0x10/0x10 [ 1058.149166][T18795] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1058.149187][T18795] netlink_sendmsg+0x8d1/0xdd0 [ 1058.149207][T18795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1058.149229][T18795] ____sys_sendmsg+0xa98/0xc70 [ 1058.149242][T18795] ? copy_msghdr_from_user+0x10a/0x160 [ 1058.149258][T18795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1058.149276][T18795] ___sys_sendmsg+0x134/0x1d0 [ 1058.149294][T18795] ? __pfx____sys_sendmsg+0x10/0x10 [ 1058.149322][T18795] ? __mutex_unlock_slowpath+0x80/0x800 [ 1058.149345][T18795] __sys_sendmsg+0x16d/0x220 [ 1058.149361][T18795] ? __pfx___sys_sendmsg+0x10/0x10 [ 1058.149391][T18795] do_syscall_64+0xcd/0x4c0 [ 1058.149409][T18795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.149422][T18795] RIP: 0033:0x7f427af8eb69 [ 1058.149432][T18795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.149443][T18795] RSP: 002b:00007f427be5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1058.149455][T18795] RAX: ffffffffffffffda RBX: 00007f427b1b5fa0 RCX: 00007f427af8eb69 [ 1058.149462][T18795] RDX: 0000000000000012 RSI: 00002000000022c0 RDI: 0000000000000003 [ 1058.149468][T18795] RBP: 00007f427be5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.149475][T18795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.149481][T18795] R13: 0000000000000000 R14: 00007f427b1b5fa0 R15: 00007fff81e0efe8 [ 1058.149495][T18795] [ 1058.860887][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.959392][T11314] usb 1-1: USB disconnect, device number 109 [ 1059.207670][ T30] audit: type=1400 audit(1754159349.619:1390): avc: denied { unmount } for pid=11121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1060.435399][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.484802][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.774609][T18816] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2846'. [ 1061.335760][T18816] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2846'. [ 1061.344678][T18816] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2846'. [ 1061.650689][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.671441][T18823] tap5: tun_chr_ioctl cmd 1074025675 [ 1061.676803][T18823] tap5: persist enabled [ 1061.692142][T18823] tap5: tun_chr_ioctl cmd 1074025675 [ 1061.697486][T18823] tap5: persist enabled [ 1061.704801][T18823] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2847'. [ 1062.022499][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.731360][ T30] audit: type=1400 audit(1754159353.229:1391): avc: denied { name_connect } for pid=18827 comm="syz.8.2850" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1062.753002][ C0] vkms_vblank_simulate: vblank timer overrun [ 1062.814402][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.438578][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.838869][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.238632][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.878034][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.684703][T18846] netlink: 'syz.0.2854': attribute type 1 has an invalid length. [ 1065.692659][T18846] netlink: 'syz.0.2854': attribute type 4 has an invalid length. [ 1065.726197][T18846] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2854'. [ 1065.933734][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.540626][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.621768][ T5921] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1066.928258][ T5921] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1066.939786][ T5921] usb 1-1: config 0 has no interface number 0 [ 1066.945891][ T5921] usb 1-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 1066.960325][ T5921] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.971882][ T5921] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.983869][ T5921] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1066.984015][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.996879][ T5921] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1066.996903][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.018168][ T5921] usb 1-1: config 0 descriptor?? [ 1067.402472][T18872] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1067.475851][T18873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18873 comm=syz.7.2860 [ 1067.904905][ T5921] wacom 0003:056A:0084.0027: unknown main item tag 0x0 [ 1067.933807][ T5921] wacom 0003:056A:0084.0027: unknown main item tag 0x0 [ 1068.026450][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.101837][ T5921] wacom 0003:056A:0084.0027: hidraw0: USB HID vff.ea Device [HID 056a:0084] on usb-dummy_hcd.0-1/input2 [ 1068.169011][ T5921] usb 1-1: USB disconnect, device number 110 [ 1068.183554][T18876] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2861'. [ 1068.535717][T18880] use of bytesused == 0 is deprecated and will be removed in the future, [ 1068.544276][T18880] use the actual size instead. [ 1068.785380][T18891] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2865'. [ 1069.325184][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.369687][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.598118][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.805252][T18906] ptrace attach of "./syz-executor exec"[11122] was attempted by "./syz-executor exec"[18906] [ 1069.957723][ T7025] usb 10-1: new low-speed USB device number 38 using dummy_hcd [ 1070.196529][ T7025] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1070.223548][T18910] tap6: tun_chr_ioctl cmd 1074025675 [ 1070.229010][T18910] tap6: persist enabled [ 1070.251761][T18910] tap6: tun_chr_ioctl cmd 1074025675 [ 1070.257129][T18910] tap6: persist enabled [ 1070.293236][ T7025] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1070.339485][ T7025] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1070.351627][T18913] ptrace attach of "./syz-executor exec"[11125] was attempted by "./syz-executor exec"[18913] [ 1070.388026][T18909] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2870'. [ 1070.408035][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.419461][ T7025] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1070.448567][ T7025] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1070.469464][ T7025] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1070.477005][ T7025] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1070.637850][ T7025] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1070.704181][T18918] tap5: tun_chr_ioctl cmd 1074025675 [ 1070.709938][T18918] tap5: persist enabled [ 1070.729309][ T7025] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1070.730012][T18918] tap5: tun_chr_ioctl cmd 1074025675 [ 1070.746279][T18918] tap5: persist enabled [ 1070.753847][ T7025] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1070.845394][ T7025] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1070.892524][T18917] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2872'. [ 1070.906601][ T7025] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1070.927699][ T7025] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1070.947613][ T30] audit: type=1400 audit(1754159361.499:1392): avc: denied { watch_mount } for pid=18919 comm="syz.8.2874" path="/339" dev="tmpfs" ino=1794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1070.977681][ T7025] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1070.997749][ T7025] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1071.023070][ T7025] usb 10-1: string descriptor 0 read error: -22 [ 1071.037696][ T7025] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1071.064089][ T7025] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.096749][ T7025] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1071.142100][T18926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2876'. [ 1071.423832][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2876'. [ 1071.432787][T18926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2876'. [ 1072.028833][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.249656][T18933] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1072.501817][ T30] audit: type=1400 audit(1754159362.689:1393): avc: denied { watch } for pid=18923 comm="syz.7.2875" path="/317/file0" dev="tmpfs" ino=1673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1072.531623][ T30] audit: type=1400 audit(1754159362.689:1394): avc: denied { watch_sb } for pid=18923 comm="syz.7.2875" path="/317/file0" dev="tmpfs" ino=1673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1072.534731][ T5901] usb 10-1: USB disconnect, device number 38 [ 1072.669353][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.812329][T18931] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2877'. [ 1072.893047][ T30] audit: type=1400 audit(1754159363.429:1395): avc: denied { append } for pid=18940 comm="syz.8.2880" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1072.959064][T18944] vivid-003: disconnect [ 1073.055536][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.180047][ T92] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1073.639836][ T92] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.650162][ T92] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1073.660354][ T92] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.670542][ T92] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1073.680611][ T92] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.691190][ T92] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1073.691652][T18938] vivid-003: reconnect [ 1073.701121][ T92] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.714957][ T92] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1073.834358][ T92] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.863374][ T92] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1073.873676][ T92] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.891994][ T92] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1073.915608][ T92] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.927719][ T92] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1074.065965][T18959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.199893][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.203335][ T92] usb 8-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=3b.70 [ 1074.255436][ T30] audit: type=1400 audit(1754159364.809:1396): avc: denied { mount } for pid=18957 comm="syz.9.2886" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1074.476557][ T92] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.529554][ T92] usb 8-1: config 0 descriptor?? [ 1074.843702][ T30] audit: type=1400 audit(1754159365.399:1397): avc: denied { unmount } for pid=11121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1074.869721][ T92] usb 8-1: USB disconnect, device number 36 [ 1075.038831][T18976] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2890'. [ 1075.286804][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.434202][T11314] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1075.627621][T13873] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1075.667581][T11314] usb 10-1: Using ep0 maxpacket: 16 [ 1075.674465][T11314] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.686220][T11314] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1075.695536][T11314] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1075.745816][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.238684][T11314] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.269585][T13873] usb 9-1: Using ep0 maxpacket: 16 [ 1076.398199][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.410428][T11314] usb 10-1: config 0 descriptor?? [ 1076.415786][T13873] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.426099][T13873] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1076.438436][T13873] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1076.448569][T13873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.467799][T13873] usb 9-1: config 0 descriptor?? [ 1077.070736][T19000] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1077.142208][T13873] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 1077.934033][ T7025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.949412][ T30] audit: type=1400 audit(1754159367.609:1398): avc: denied { mount } for pid=18974 comm="syz.9.2891" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1077.975169][ T30] audit: type=1400 audit(1754159368.509:1399): avc: denied { write } for pid=18980 comm="syz.8.2893" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1077.999120][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.013291][T19001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.022057][T19001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.107626][T13873] usb 1-1: Invalid ep0 maxpacket: 16 [ 1078.119140][T19004] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1078.267879][T13873] usb 1-1: new low-speed USB device number 112 using dummy_hcd [ 1078.557824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.566431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.574660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.797708][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.978416][ T5914] usb 8-1: new low-speed USB device number 37 using dummy_hcd [ 1078.989136][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.997699][T13873] usb 1-1: Invalid ep0 maxpacket: 16 [ 1079.005874][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.006168][T13873] usb usb1-port1: attempt power cycle [ 1079.092521][ T43] usb 10-1: USB disconnect, device number 39 [ 1079.131821][ T30] audit: type=1400 audit(1754159369.679:1400): avc: denied { unmount } for pid=11121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1079.203971][ T5914] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1079.229136][ T5914] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1079.293719][ T5914] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1079.309641][ T5914] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1079.325027][ T5914] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1079.339292][ T5914] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1079.346794][ T5914] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1079.357706][ T5914] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1079.370987][ T5914] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1079.383944][ T5914] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1079.401492][ T5914] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1079.409714][ T5914] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1079.470489][T13873] usb 1-1: new low-speed USB device number 113 using dummy_hcd [ 1079.510281][T13873] usb 1-1: Invalid ep0 maxpacket: 16 [ 1079.602163][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.617606][ T5914] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1079.639951][T19010] netlink: 'syz.9.2898': attribute type 1 has an invalid length. [ 1079.648029][T13873] usb 1-1: new low-speed USB device number 114 using dummy_hcd [ 1079.658786][ T5914] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1079.678683][T13873] usb 1-1: Invalid ep0 maxpacket: 16 [ 1079.693657][T13873] usb usb1-port1: unable to enumerate USB device [ 1079.711164][T19009] ip6tnl1: entered allmulticast mode [ 1079.772244][ T5914] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1079.833954][T19010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1079.849486][ T5914] usb 8-1: string descriptor 0 read error: -22 [ 1079.856007][ T5914] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1079.874088][ T5914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.074380][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.091822][ T5914] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1080.147688][T19015] nbd0: detected capacity change from 0 to 10 [ 1080.158614][T19016] block nbd0: shutting down sockets [ 1080.302855][ T5921] usb 9-1: USB disconnect, device number 51 [ 1080.425347][ T92] usb 8-1: USB disconnect, device number 37 [ 1080.585193][T19020] wg1 speed is unknown, defaulting to 1000 [ 1080.691549][ T30] audit: type=1400 audit(1754159371.249:1401): avc: denied { write } for pid=19028 comm="syz.0.2902" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1081.206672][T13873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.217821][ T30] audit: type=1400 audit(1754159371.509:1402): avc: denied { name_bind } for pid=19026 comm="syz.7.2901" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1081.358437][T19039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2903'. [ 1081.838200][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.808008][ T5914] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1082.927897][ T92] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1082.969272][ T5914] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1082.982218][ T5914] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.020893][ T5914] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1083.064743][ T5914] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1083.108231][ T5914] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.149679][ T92] usb 10-1: Using ep0 maxpacket: 8 [ 1083.178598][ T5914] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1083.204672][ T92] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1083.640090][ T92] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1083.654945][ T92] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.666165][ T5914] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1083.674775][ T5914] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.700082][ T5914] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1083.718410][ T5914] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1083.733386][ T5914] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.759194][ T5914] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1083.804991][ T5914] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1083.847595][T11314] net_ratelimit: 3 callbacks suppressed [ 1083.847613][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.849495][ T92] usb 10-1: config 0 descriptor?? [ 1083.861723][ T5914] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.244213][ T5914] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1084.257421][ T5914] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1084.288610][ T5914] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.306343][ T5914] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1084.315859][ T5914] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1084.336606][ T5914] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.357186][ T5914] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1084.381777][ T5914] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1084.398632][ T5914] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.417567][ T5914] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1084.436782][ T5914] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1084.464019][ T92] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1084.478982][ T5914] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1084.492328][ T5914] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1084.508159][ T5914] usb 8-1: Product: syz [ 1084.512448][ T5914] usb 8-1: Manufacturer: syz [ 1084.517037][ T5914] usb 8-1: SerialNumber: syz [ 1084.530328][ T5914] usb 8-1: config 0 descriptor?? [ 1084.547806][ T5914] yurex 8-1:0.0: Could not find endpoints [ 1084.555143][T19077] ptrace attach of "./syz-executor exec"[11132] was attempted by "./syz-executor exec"[19077] [ 1084.565796][T11314] usb 9-1: new low-speed USB device number 52 using dummy_hcd [ 1084.692122][T19081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.700877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.729573][ T24] kworker/1:0 (24) used greatest stack depth: 18200 bytes left [ 1084.749126][T11314] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1084.769635][T11314] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1084.789985][T11314] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1084.802669][T11314] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1084.814447][T11314] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1084.839787][T11314] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1084.852718][T11314] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1084.865545][T11314] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1084.866608][ T5921] usb 8-1: USB disconnect, device number 38 [ 1084.877430][T11314] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1084.895331][T13873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.903433][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.912895][T11314] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1084.978555][T11314] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1084.986803][T11314] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1085.000313][T11314] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1085.070281][T11314] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1085.144862][T11314] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1085.400870][T11314] usb 9-1: string descriptor 0 read error: -22 [ 1085.406184][T19087] overlay: Unknown parameter 'uid<00000000000000000000' [ 1085.414976][T11314] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1085.440431][T11314] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.861290][T11314] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1085.913410][ T92] usb 9-1: USB disconnect, device number 52 [ 1085.930591][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.137672][ T5921] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1086.778100][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 1086.793193][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.819922][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.830097][ T5921] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1086.840565][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.851186][ T5921] usb 1-1: config 0 descriptor?? [ 1087.007627][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.023533][T11314] usb 10-1: USB disconnect, device number 40 [ 1087.353060][ T5921] ft260 0003:0403:6030.0028: unknown main item tag 0x7 [ 1087.471136][ T5921] ft260 0003:0403:6030.0028: chip code: 6424 8183 [ 1087.580591][ T30] audit: type=1400 audit(1754159378.139:1403): avc: denied { setattr } for pid=19110 comm="syz.8.2921" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1087.672102][ T5921] ft260 0003:0403:6030.0028: failed to retrieve system status [ 1087.695243][ T5921] ft260 0003:0403:6030.0028: probe with driver ft260 failed with error -5 [ 1088.288899][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.297175][T13873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.300665][ T92] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1088.463123][ T92] usb 10-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 1088.478772][ T92] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.496244][ T92] usb 10-1: Product: syz [ 1088.516612][ T92] usb 10-1: Manufacturer: syz [ 1088.528519][ T92] usb 10-1: SerialNumber: syz [ 1088.542696][ T92] usb 10-1: config 0 descriptor?? [ 1088.555898][ T92] ttusb_dec_send_command: command bulk message failed: error -22 [ 1088.574982][ T92] ttusb-dec 10-1:0.0: probe with driver ttusb-dec failed with error -22 [ 1088.739083][ T30] audit: type=1400 audit(1754159379.299:1404): avc: denied { read } for pid=19121 comm="syz.7.2924" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1088.780453][ T30] audit: type=1400 audit(1754159379.299:1405): avc: denied { open } for pid=19121 comm="syz.7.2924" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1088.791214][T19104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1088.804750][ T30] audit: type=1400 audit(1754159379.299:1406): avc: denied { create } for pid=19121 comm="syz.7.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1088.823414][T13873] usb 10-1: USB disconnect, device number 41 [ 1088.835671][ T30] audit: type=1400 audit(1754159379.329:1407): avc: denied { write } for pid=19121 comm="syz.7.2924" path="socket:[59575]" dev="sockfs" ino=59575 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1088.958304][T19124] ptrace attach of "./syz-executor exec"[11129] was attempted by "./syz-executor exec"[19124] [ 1089.208106][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.358465][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.489664][ T5921] usb 1-1: USB disconnect, device number 115 [ 1089.958911][ T30] audit: type=1400 audit(1754159380.299:1408): avc: denied { view } for pid=19129 comm="syz.0.2928" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1090.402941][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.043061][T19149] tmpfs: Bad value for 'mpol' [ 1091.052299][T19149] netlink: 'syz.9.2932': attribute type 1 has an invalid length. [ 1091.060311][T19149] netlink: 17 bytes leftover after parsing attributes in process `syz.9.2932'. [ 1091.262812][ T30] audit: type=1400 audit(1754159381.799:1409): avc: denied { create } for pid=19150 comm="syz.7.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1091.369223][T19157] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2935'. [ 1091.378965][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.634650][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.987889][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.016119][T13873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.745311][T19157] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2935'. [ 1092.754394][T19157] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2935'. [ 1092.967819][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.976701][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.059310][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.264621][T19175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1093.571924][T19177] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1093.711439][T11128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1093.741424][T11128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1093.760432][T11128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1093.776412][T11128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1093.784334][T11128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1093.807589][ T30] audit: type=1400 audit(1754159384.359:1410): avc: denied { mounton } for pid=19182 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1093.851873][T19182] wg1 speed is unknown, defaulting to 1000 [ 1094.238922][T16363] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1095.213299][ T5952] net_ratelimit: 1 callbacks suppressed [ 1095.213318][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.243939][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.367766][T16363] usb 9-1: Using ep0 maxpacket: 32 [ 1095.385477][T16363] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1095.414781][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.449295][T16363] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.475174][T16363] usb 9-1: Product: syz [ 1095.484954][T16363] usb 9-1: Manufacturer: syz [ 1095.529325][T16363] usb 9-1: SerialNumber: syz [ 1095.576106][T16363] usb 9-1: config 0 descriptor?? [ 1095.595564][T16363] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1095.660784][T19182] chnl_net:caif_netlink_parms(): no params data found [ 1096.910469][T16363] gspca_ov534_9: reg_w failed -110 [ 1097.462098][T11128] Bluetooth: hci2: command tx timeout [ 1097.501268][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.938175][T16363] gspca_ov534_9: Unknown sensor 0000 [ 1097.938224][T16363] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 1097.998353][T16363] usb 9-1: USB disconnect, device number 53 [ 1098.099126][T19182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.106567][T19182] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.124669][T19182] bridge_slave_0: entered allmulticast mode [ 1098.139996][T19182] bridge_slave_0: entered promiscuous mode [ 1098.179382][T19182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.186851][T19182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.208258][T19182] bridge_slave_1: entered allmulticast mode [ 1098.219340][T19182] bridge_slave_1: entered promiscuous mode [ 1098.278512][ T5921] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1098.319388][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.329740][T19182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.369045][T19182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.448295][ T5921] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1098.466553][ T5921] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.500429][T19182] team0: Port device team_slave_0 added [ 1098.506244][ T5921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1098.520234][T19182] team0: Port device team_slave_1 added [ 1098.543400][ T5921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1098.560169][ T5921] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.564272][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.575451][ T5921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1098.605139][ T5921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1098.615209][ T5921] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.626503][ T5921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1098.649580][T19182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.656709][ T5921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1098.664236][T19182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1098.697174][T16363] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1098.705434][ T5921] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.730008][ T5921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1098.741467][T19182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.891418][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.900342][ T5921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1098.908239][ T5921] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.918775][ T5921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1098.931036][ T5921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1098.941977][ T5921] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.953151][ T5921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1098.976660][T19182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.983693][T16363] usb 1-1: Using ep0 maxpacket: 8 [ 1098.988932][ T5921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1098.995884][T19182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.034523][T19182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1099.039466][T16363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1099.056546][ T5921] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.087829][ T5921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1099.109986][ T5921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1099.116786][T16363] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1099.127446][ T5921] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.138806][ T5921] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1099.147825][T16363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.156006][ T5921] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1099.165323][T16363] usb 1-1: config 0 descriptor?? [ 1099.176151][T19182] hsr_slave_0: entered promiscuous mode [ 1099.178250][ T5921] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1099.197122][ T5921] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1099.207403][T19182] hsr_slave_1: entered promiscuous mode [ 1099.218402][ T5921] usb 10-1: Product: syz [ 1099.222690][ T5921] usb 10-1: Manufacturer: syz [ 1099.227388][ T5921] usb 10-1: SerialNumber: syz [ 1099.244253][ T30] audit: type=1400 audit(1754159389.799:1411): avc: denied { listen } for pid=19234 comm="syz.7.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1099.248998][ T5921] usb 10-1: config 0 descriptor?? [ 1099.446178][T16363] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1099.457593][ T5921] yurex 10-1:0.0: Could not find endpoints [ 1099.517652][T11128] Bluetooth: hci2: command tx timeout [ 1099.842883][T16363] usb 10-1: USB disconnect, device number 42 [ 1099.998013][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.277768][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.357860][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.602474][T11128] Bluetooth: hci2: command tx timeout [ 1101.966217][T19266] ksmbd: Unknown IPC event: 3, ignore. [ 1102.460903][T13873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.549672][ T92] usb 1-1: USB disconnect, device number 116 [ 1103.108384][T13873] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1103.220879][T19274] syz.9.2961: attempt to access beyond end of device [ 1103.220879][T19274] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1103.244275][T19182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1103.284086][T13873] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.378647][T19182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1103.385367][T13873] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1103.417209][T19182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1103.440542][T13873] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1103.456080][T19182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1103.543621][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.554010][T11314] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 1103.568013][T13873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.631052][T13873] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1103.649413][T13873] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1103.678107][T11128] Bluetooth: hci2: command tx timeout [ 1103.729418][T11314] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1103.737720][T11314] usb 10-1: config 0 has no interface number 0 [ 1103.743982][T11314] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1103.758651][T11314] usb 10-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 1103.768866][T11314] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.777032][T11314] usb 10-1: Product: syz [ 1103.847382][T19182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.860685][T11314] usb 10-1: Manufacturer: syz [ 1103.870897][T11314] usb 10-1: SerialNumber: syz [ 1103.889300][T11314] usb 10-1: config 0 descriptor?? [ 1103.902782][T19274] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1103.914653][T11314] usb-storage 10-1:0.132: USB Mass Storage device detected [ 1103.926155][T19182] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.953713][T11314] usb-storage 10-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 1104.041532][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.048671][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.146207][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.153379][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.397867][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.560815][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.683433][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.692664][ T5914] usb 1-1: USB disconnect, device number 117 [ 1105.711697][T19182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.773274][T19182] veth0_vlan: entered promiscuous mode [ 1105.834613][T13873] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1105.843562][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.804660][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.817578][ T5952] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1106.968275][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.982192][T19182] veth1_vlan: entered promiscuous mode [ 1106.983046][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.997394][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.006123][T13873] usb 9-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 1107.072714][T13873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.075641][T19182] veth0_macvtap: entered promiscuous mode [ 1107.105651][T19182] veth1_macvtap: entered promiscuous mode [ 1107.105799][T11314] usb 10-1: USB disconnect, device number 43 [ 1107.118061][T13873] usb 9-1: Product: syz [ 1107.130445][T13873] usb 9-1: Manufacturer: syz [ 1107.135078][T13873] usb 9-1: SerialNumber: syz [ 1107.138001][ T5952] usb 8-1: Using ep0 maxpacket: 32 [ 1107.245546][ T5952] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1107.252008][T13873] usb 9-1: config 0 descriptor?? [ 1107.259572][T19182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.272514][ T5952] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=40.40 [ 1107.283651][ T5952] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.290657][T13873] ttusb_dec_send_command: command bulk message failed: error -22 [ 1107.292666][ T5952] usb 8-1: Manufacturer: ఄ [ 1107.315774][ T5952] usb 8-1: SerialNumber: 쾗ᛒ袛牢鸨ꅼ베欿蚝吺듮㞼껼ᓪᗚ鏏ꝇꆖ춞ᶱꨑ촸蟬몀壑ꋚ꫾膇∙蝡屜ᥞ [ 1107.379417][T19313] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1107.678038][T13873] ttusb-dec 9-1:0.0: probe with driver ttusb-dec failed with error -22 [ 1107.689291][T13873] usb 9-1: USB disconnect, device number 54 [ 1107.695301][T19299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.702085][T11128] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 1107.729995][T19182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1107.747044][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.763741][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.782736][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.801093][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.854918][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.281016][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.303031][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.351710][ T30] audit: type=1400 audit(1754159398.899:1412): avc: denied { write } for pid=19320 comm="syz.9.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1108.398406][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.404689][ T30] audit: type=1400 audit(1754159398.909:1413): avc: denied { bind } for pid=19320 comm="syz.9.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1108.442977][ T6043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.452556][ T6043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.473805][ T30] audit: type=1400 audit(1754159398.909:1414): avc: denied { name_bind } for pid=19320 comm="syz.9.2969" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1108.537294][ T30] audit: type=1400 audit(1754159398.909:1415): avc: denied { node_bind } for pid=19320 comm="syz.9.2969" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1108.587411][ T30] audit: type=1400 audit(1754159398.909:1416): avc: denied { name_bind } for pid=19324 comm="syz.0.2970" src=18464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1108.752014][ T30] audit: type=1400 audit(1754159398.929:1417): avc: denied { read } for pid=19320 comm="syz.9.2969" dev="sockfs" ino=60874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1108.918226][T13873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.577615][ T5952] usb 8-1: USB disconnect, device number 39 [ 1109.591254][ T30] audit: type=1400 audit(1754159399.029:1418): avc: denied { mounton } for pid=19182 comm="syz-executor" path="/root/syzkaller.bIMy6R/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1109.796187][ T30] audit: type=1400 audit(1754159399.039:1419): avc: denied { mounton } for pid=19182 comm="syz-executor" path="/root/syzkaller.bIMy6R/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1109.993636][ T30] audit: type=1400 audit(1754159399.039:1420): avc: denied { mounton } for pid=19182 comm="syz-executor" path="/root/syzkaller.bIMy6R/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=61590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1110.021982][ T30] audit: type=1400 audit(1754159399.069:1421): avc: denied { mounton } for pid=19182 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1110.096250][T13873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.282405][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.293712][T19344] ptrace attach of "./syz-executor exec"[11129] was attempted by "./syz-executor exec"[19344] [ 1111.175423][T13873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.000203][T19371] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2983'. [ 1112.030020][ T92] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1112.060092][T19371] netlink: zone id is out of range [ 1112.077083][T19371] netlink: zone id is out of range [ 1112.082613][T19371] netlink: zone id is out of range [ 1112.088292][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.096935][T16363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.097301][T19371] netlink: zone id is out of range [ 1112.111276][T11314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.130109][T19371] netlink: zone id is out of range [ 1112.135260][T19371] netlink: zone id is out of range [ 1112.141990][T19371] netlink: zone id is out of range [ 1112.471714][ T5921] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1112.491834][ T92] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1112.514062][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.537668][ T92] usb 1-1: Product: syz [ 1112.541880][ T92] usb 1-1: Manufacturer: syz [ 1112.546486][ T92] usb 1-1: SerialNumber: syz [ 1112.570817][ T92] usb 1-1: config 0 descriptor?? [ 1112.588817][ T92] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1112.657581][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 1112.679775][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1112.717624][ T5921] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1112.726746][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.748377][ T5921] usb 4-1: config 0 descriptor?? [ 1112.757613][T13873] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1112.792063][T19364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.804630][T19364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.814801][ T92] usb 1-1: USB disconnect, device number 118 [ 1112.918203][T13873] usb 8-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 1112.960297][T13873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.969509][T19380] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1114.123183][ T5921] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1114.134042][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1114.134058][ T30] audit: type=1400 audit(1754159403.619:1424): avc: denied { bind } for pid=19377 comm="syz.9.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1114.149896][T13873] usb 8-1: Product: syz [ 1114.164315][T13873] usb 8-1: Manufacturer: syz [ 1114.205597][T13873] usb 8-1: SerialNumber: syz [ 1114.314234][T13873] usb 8-1: config 0 descriptor?? [ 1114.355119][T13873] ttusb_dec_send_command: command bulk message failed: error -22 [ 1114.400586][T13873] ttusb-dec 8-1:0.0: probe with driver ttusb-dec failed with error -22 [ 1114.478995][T18988] syz_tun (unregistering): left allmulticast mode [ 1114.668992][T19391] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2988'. [ 1114.689425][T19375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1114.699874][ T5921] usb 8-1: USB disconnect, device number 40 [ 1115.053021][T19396] netlink: 'syz.9.2989': attribute type 4 has an invalid length. [ 1115.076328][T19391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.356221][ T1155] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.444222][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.460083][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.946188][ T5914] usb 4-1: USB disconnect, device number 49 [ 1117.037722][T13873] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1117.209844][ T5914] net_ratelimit: 81 callbacks suppressed [ 1117.209858][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.231532][T13873] usb 1-1: Using ep0 maxpacket: 16 [ 1117.365304][T13873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1117.396078][T13873] usb 1-1: config 1 has an invalid interface number: 26 but max is 1 [ 1117.420694][T13873] usb 1-1: config 1 has an invalid interface number: 89 but max is 1 [ 1117.434218][T13873] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.446400][T13873] usb 1-1: config 1 has no interface number 0 [ 1117.462895][T13873] usb 1-1: config 1 has no interface number 1 [ 1117.473522][T13873] usb 1-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 1117.488550][T13873] usb 1-1: config 1 interface 26 has no altsetting 0 [ 1117.502799][T13873] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 1117.573572][T13873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.583781][T13873] usb 1-1: Product: syz [ 1117.601854][T13873] usb 1-1: Manufacturer: syz [ 1117.607134][T13873] usb 1-1: SerialNumber: syz [ 1118.000425][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.182782][ T1155] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.245864][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.398136][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.400421][ T1155] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.919783][T19439] FAULT_INJECTION: forcing a failure. [ 1118.919783][T19439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1118.921760][T19439] [ 1118.921769][T19439] ====================================================== [ 1118.921776][T19439] WARNING: possible circular locking dependency detected [ 1118.921783][T19439] 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 Not tainted [ 1118.921793][T19439] ------------------------------------------------------ [ 1118.921800][T19439] syz.3.2997/19439 is trying to acquire lock: [ 1118.921811][T19439] ffffffff8e4ce740 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 1118.921857][T19439] [ 1118.921857][T19439] but task is already holding lock: [ 1118.921862][T19439] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1118.921902][T19439] [ 1118.921902][T19439] which lock already depends on the new lock. [ 1118.921902][T19439] [ 1118.921907][T19439] [ 1118.921907][T19439] the existing dependency chain (in reverse order) is: [ 1118.921913][T19439] [ 1118.921913][T19439] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1118.921935][T19439] _raw_spin_lock_nested+0x31/0x40 [ 1118.921956][T19439] raw_spin_rq_lock_nested+0x29/0x130 [ 1118.921975][T19439] task_rq_lock+0xcf/0x490 [ 1118.922035][T19439] cgroup_move_task+0x81/0x2a0 [ 1118.922057][T19439] css_set_move_task+0x288/0x5f0 [ 1118.922072][T19439] cgroup_post_fork+0x201/0x9e0 [ 1118.922091][T19439] copy_process+0x5cfa/0x7690 [ 1118.922113][T19439] kernel_clone+0xfc/0x930 [ 1118.922134][T19439] user_mode_thread+0xc7/0x110 [ 1118.922156][T19439] rest_init+0x23/0x2b0 [ 1118.922171][T19439] start_kernel+0x3ee/0x4d0 [ 1118.922186][T19439] x86_64_start_reservations+0x18/0x30 [ 1118.922203][T19439] x86_64_start_kernel+0x130/0x190 [ 1118.922219][T19439] common_startup_64+0x13e/0x148 [ 1118.922238][T19439] [ 1118.922238][T19439] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1118.922260][T19439] _raw_spin_lock_irqsave+0x3a/0x60 [ 1118.922281][T19439] try_to_wake_up+0xb7/0x1870 [ 1118.922300][T19439] __wake_up_common+0x132/0x1f0 [ 1118.922324][T19439] __wake_up+0x31/0x60 [ 1118.922344][T19439] tty_port_default_wakeup+0x2a/0x40 [ 1118.922361][T19439] serial8250_tx_chars+0x68e/0x860 [ 1118.922376][T19439] serial8250_handle_irq+0x761/0xcb0 [ 1118.922393][T19439] serial8250_default_handle_irq+0x9a/0x250 [ 1118.922411][T19439] serial8250_interrupt+0xf5/0x1b0 [ 1118.922429][T19439] __handle_irq_event_percpu+0x22c/0x7d0 [ 1118.922449][T19439] handle_irq_event+0xab/0x1e0 [ 1118.922468][T19439] handle_edge_irq+0x3ca/0x9e0 [ 1118.922484][T19439] __common_interrupt+0xdf/0x250 [ 1118.922506][T19439] common_interrupt+0xba/0xe0 [ 1118.922523][T19439] asm_common_interrupt+0x26/0x40 [ 1118.922539][T19439] pv_native_safe_halt+0xf/0x20 [ 1118.922560][T19439] default_idle+0x13/0x20 [ 1118.922575][T19439] default_idle_call+0x6d/0xb0 [ 1118.922590][T19439] do_idle+0x391/0x510 [ 1118.922607][T19439] cpu_startup_entry+0x4f/0x60 [ 1118.922632][T19439] start_secondary+0x21d/0x2b0 [ 1118.922655][T19439] common_startup_64+0x13e/0x148 [ 1118.922673][T19439] [ 1118.922673][T19439] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1118.922695][T19439] _raw_spin_lock_irqsave+0x3a/0x60 [ 1118.922715][T19439] __wake_up+0x1c/0x60 [ 1118.922735][T19439] tty_port_default_wakeup+0x2a/0x40 [ 1118.922751][T19439] serial8250_tx_chars+0x68e/0x860 [ 1118.922767][T19439] serial8250_handle_irq+0x761/0xcb0 [ 1118.922784][T19439] serial8250_default_handle_irq+0x9a/0x250 [ 1118.922802][T19439] serial8250_interrupt+0xf5/0x1b0 [ 1118.922820][T19439] __handle_irq_event_percpu+0x22c/0x7d0 [ 1118.922839][T19439] handle_irq_event+0xab/0x1e0 [ 1118.922858][T19439] handle_edge_irq+0x3ca/0x9e0 [ 1118.922875][T19439] __common_interrupt+0xdf/0x250 [ 1118.922897][T19439] common_interrupt+0xba/0xe0 [ 1118.922914][T19439] asm_common_interrupt+0x26/0x40 [ 1118.922930][T19439] pv_native_safe_halt+0xf/0x20 [ 1118.922950][T19439] default_idle+0x13/0x20 [ 1118.922964][T19439] default_idle_call+0x6d/0xb0 [ 1118.922980][T19439] do_idle+0x391/0x510 [ 1118.922998][T19439] cpu_startup_entry+0x4f/0x60 [ 1118.923018][T19439] start_secondary+0x21d/0x2b0 [ 1118.923041][T19439] common_startup_64+0x13e/0x148 [ 1118.923059][T19439] [ 1118.923059][T19439] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1118.923080][T19439] _raw_spin_lock_irqsave+0x3a/0x60 [ 1118.923100][T19439] serial8250_console_write+0x181/0x1890 [ 1118.923119][T19439] console_flush_all+0x801/0xc60 [ 1118.923137][T19439] console_unlock+0xd8/0x210 [ 1118.923153][T19439] vprintk_emit+0x418/0x6d0 [ 1118.923171][T19439] _printk+0xc7/0x100 [ 1118.923184][T19439] register_console+0xc2d/0x11b0 [ 1118.923204][T19439] univ8250_console_init+0x5f/0x90 [ 1118.923223][T19439] console_init+0x14f/0x680 [ 1118.923239][T19439] start_kernel+0x29f/0x4d0 [ 1118.923254][T19439] x86_64_start_reservations+0x18/0x30 [ 1118.923270][T19439] x86_64_start_kernel+0x130/0x190 [ 1118.923286][T19439] common_startup_64+0x13e/0x148 [ 1118.923303][T19439] [ 1118.923303][T19439] -> #0 (console_owner){-.-.}-{0:0}: [ 1118.923325][T19439] __lock_acquire+0x12a6/0x1ce0 [ 1118.923349][T19439] lock_acquire+0x179/0x350 [ 1118.923372][T19439] console_lock_spinning_enable+0xb0/0xd0 [ 1118.923390][T19439] console_flush_all+0x7aa/0xc60 [ 1118.923408][T19439] console_unlock+0xd8/0x210 [ 1118.923426][T19439] vprintk_emit+0x418/0x6d0 [ 1118.923445][T19439] _printk+0xc7/0x100 [ 1118.923458][T19439] should_fail_ex+0x4e7/0x640 [ 1118.923483][T19439] strncpy_from_user+0x3b/0x2e0 [ 1118.923505][T19439] strncpy_from_user_nofault+0x7f/0x180 [ 1118.923525][T19439] bpf_bprintf_prepare+0xe90/0x13f0 [ 1118.923549][T19439] bpf_trace_printk+0xda/0x190 [ 1118.923565][T19439] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1118.923578][T19439] bpf_trace_run2+0x236/0x590 [ 1118.923594][T19439] __bpf_trace_contention_begin+0xc9/0x110 [ 1118.923628][T19439] trace_contention_begin.constprop.0+0xde/0x160 [ 1118.923647][T19439] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1118.923671][T19439] do_raw_spin_lock+0x20e/0x2b0 [ 1118.923688][T19439] raw_spin_rq_lock_nested+0x7e/0x130 [ 1118.923707][T19439] __schedule+0x307/0x5de0 [ 1118.923727][T19439] preempt_schedule_irq+0x51/0x90 [ 1118.923748][T19439] irqentry_exit+0x36/0x90 [ 1118.923767][T19439] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1118.923783][T19439] netlink_insert+0x13de/0x1860 [ 1118.923804][T19439] netlink_autobind.isra.0+0x337/0x600 [ 1118.923827][T19439] netlink_sendmsg+0x96f/0xdd0 [ 1118.923850][T19439] ____sys_sendmsg+0xa98/0xc70 [ 1118.923866][T19439] ___sys_sendmsg+0x134/0x1d0 [ 1118.923888][T19439] __sys_sendmsg+0x16d/0x220 [ 1118.923909][T19439] do_syscall_64+0xcd/0x4c0 [ 1118.923933][T19439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.923949][T19439] [ 1118.923949][T19439] other info that might help us debug this: [ 1118.923949][T19439] [ 1118.923955][T19439] Chain exists of: [ 1118.923955][T19439] console_owner --> &p->pi_lock --> &rq->__lock [ 1118.923955][T19439] [ 1118.923980][T19439] Possible unsafe locking scenario: [ 1118.923980][T19439] [ 1118.923984][T19439] CPU0 CPU1 [ 1118.923989][T19439] ---- ---- [ 1118.923994][T19439] lock(&rq->__lock); [ 1118.924005][T19439] lock(&p->pi_lock); [ 1118.924017][T19439] lock(&rq->__lock); [ 1118.924029][T19439] lock(console_owner); [ 1118.924040][T19439] [ 1118.924040][T19439] *** DEADLOCK *** [ 1118.924040][T19439] [ 1118.924044][T19439] 6 locks held by syz.3.2997/19439: [ 1118.924054][T19439] #0: ffff88805d7f0258 (sk_lock-AF_NETLINK){+.+.}-{0:0}, at: netlink_insert+0xc9/0x1860 [ 1118.924099][T19439] #1: ffffffff8e5c1120 (rcu_read_lock){....}-{1:3}, at: netlink_insert+0x30c/0x1860 [ 1118.924143][T19439] #2: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1118.924186][T19439] #3: ffffffff8e5c1120 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 1118.924225][T19439] #4: ffffffff8e5aeb80 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 1118.924261][T19439] #5: ffffffff8e5aebf0 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 1118.924303][T19439] [ 1118.924303][T19439] stack backtrace: [ 1118.924312][T19439] CPU: 1 UID: 0 PID: 19439 Comm: syz.3.2997 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1118.924336][T19439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1118.924347][T19439] Call Trace: [ 1118.924353][T19439] [ 1118.924360][T19439] dump_stack_lvl+0x116/0x1f0 [ 1118.924385][T19439] print_circular_bug+0x275/0x350 [ 1118.924411][T19439] check_noncircular+0x14c/0x170 [ 1118.924440][T19439] __lock_acquire+0x12a6/0x1ce0 [ 1118.924470][T19439] lock_acquire+0x179/0x350 [ 1118.924495][T19439] ? console_lock_spinning_enable+0x9f/0xd0 [ 1118.924514][T19439] ? console_lock_spinning_enable+0x88/0xd0 [ 1118.924536][T19439] console_lock_spinning_enable+0xb0/0xd0 [ 1118.924555][T19439] ? console_lock_spinning_enable+0x9f/0xd0 [ 1118.924574][T19439] console_flush_all+0x7aa/0xc60 [ 1118.924598][T19439] ? __pfx_console_flush_all+0x10/0x10 [ 1118.924630][T19439] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1118.924655][T19439] console_unlock+0xd8/0x210 [ 1118.924675][T19439] ? __pfx_console_unlock+0x10/0x10 [ 1118.924695][T19439] ? do_raw_spin_unlock+0xa0/0x230 [ 1118.924714][T19439] ? _printk+0xc7/0x100 [ 1118.924729][T19439] ? __down_trylock_console_sem+0xb0/0x140 [ 1118.924747][T19439] vprintk_emit+0x418/0x6d0 [ 1118.924768][T19439] ? __pfx_vprintk_emit+0x10/0x10 [ 1118.924789][T19439] ? __pfx_trace_clock_local+0x10/0x10 [ 1118.924812][T19439] _printk+0xc7/0x100 [ 1118.924828][T19439] ? __pfx__printk+0x10/0x10 [ 1118.924845][T19439] ? __pfx____ratelimit+0x10/0x10 [ 1118.924870][T19439] should_fail_ex+0x4e7/0x640 [ 1118.924898][T19439] strncpy_from_user+0x3b/0x2e0 [ 1118.924923][T19439] strncpy_from_user_nofault+0x7f/0x180 [ 1118.924943][T19439] bpf_bprintf_prepare+0xe90/0x13f0 [ 1118.924972][T19439] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1118.925003][T19439] ? bpf_trace_run2+0x3e1/0x590 [ 1118.925020][T19439] bpf_trace_printk+0xda/0x190 [ 1118.925037][T19439] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1118.925056][T19439] ? bpf_trace_run2+0x3e1/0x590 [ 1118.925078][T19439] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1118.925093][T19439] bpf_trace_run2+0x236/0x590 [ 1118.925111][T19439] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1118.925129][T19439] ? trace_buffer_unlock_commit_regs+0xd7/0x550 [ 1118.925156][T19439] ? trace_event_buffer_commit+0x204/0xa50 [ 1118.925180][T19439] __bpf_trace_contention_begin+0xc9/0x110 [ 1118.925207][T19439] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1118.925239][T19439] trace_contention_begin.constprop.0+0xde/0x160 [ 1118.925259][T19439] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1118.925286][T19439] ? __lock_acquire+0xb97/0x1ce0 [ 1118.925312][T19439] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1118.925339][T19439] ? do_raw_spin_lock+0x12c/0x2b0 [ 1118.925360][T19439] do_raw_spin_lock+0x20e/0x2b0 [ 1118.925377][T19439] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1118.925395][T19439] ? rcu_qs+0x2b/0xe0 [ 1118.925415][T19439] ? rcu_note_context_switch+0x192/0x1e00 [ 1118.925437][T19439] raw_spin_rq_lock_nested+0x7e/0x130 [ 1118.925459][T19439] ? preempt_schedule_irq+0x51/0x90 [ 1118.925481][T19439] __schedule+0x307/0x5de0 [ 1118.925505][T19439] ? __lock_acquire+0xb97/0x1ce0 [ 1118.925530][T19439] ? look_up_lock_class+0x59/0x150 [ 1118.925554][T19439] ? register_lock_class+0x41/0x4c0 [ 1118.925580][T19439] ? register_lock_class+0x41/0x4c0 [ 1118.925607][T19439] ? __pfx___schedule+0x10/0x10 [ 1118.925634][T19439] ? __lock_acquire+0xb97/0x1ce0 [ 1118.925661][T19439] ? __lock_acquire+0xb97/0x1ce0 [ 1118.925687][T19439] ? mark_held_locks+0x49/0x80 [ 1118.925713][T19439] preempt_schedule_irq+0x51/0x90 [ 1118.925736][T19439] irqentry_exit+0x36/0x90 [ 1118.925759][T19439] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1118.925778][T19439] RIP: 0010:netlink_insert+0x13de/0x1860 [ 1118.925803][T19439] Code: 85 ff 0f 85 3c 02 00 00 e8 9f 82 0e f8 9c 41 5d 41 81 e5 00 02 00 00 31 ff 4c 89 ee e8 fb 7d 0e f8 4d 85 ed 0f 85 15 03 00 00 7d 82 0e f8 4c 8b 7c 24 30 be 04 00 00 00 4c 89 ff e8 cb cf 74 [ 1118.925821][T19439] RSP: 0018:ffffc900025cf810 EFLAGS: 00000293 [ 1118.925835][T19439] RAX: 0000000000000000 RBX: ffff88805d7f0000 RCX: ffffffff89ad0836 [ 1118.925846][T19439] RDX: ffff888067ee2440 RSI: ffffffff89ad0844 RDI: 0000000000000007 [ 1118.925857][T19439] RBP: 0000000000000018 R08: 0000000000000007 R09: 0000000000000000 [ 1118.925868][T19439] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888140459a80 [ 1118.925880][T19439] R13: 0000000000000000 R14: ffff888077e4a200 R15: 0000000000000200 [ 1118.925894][T19439] ? netlink_insert+0x1616/0x1860 [ 1118.925918][T19439] ? netlink_insert+0x1624/0x1860 [ 1118.925947][T19439] ? __pfx_netlink_insert+0x10/0x10 [ 1118.925972][T19439] ? find_held_lock+0x2b/0x80 [ 1118.925993][T19439] ? netlink_autobind.isra.0+0x29b/0x600 [ 1118.926019][T19439] netlink_autobind.isra.0+0x337/0x600 [ 1118.926046][T19439] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1118.926074][T19439] netlink_sendmsg+0x96f/0xdd0 [ 1118.926102][T19439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1118.926132][T19439] ____sys_sendmsg+0xa98/0xc70 [ 1118.926150][T19439] ? copy_msghdr_from_user+0x10a/0x160 [ 1118.926172][T19439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1118.926187][T19439] ? find_held_lock+0x2b/0x80 [ 1118.926211][T19439] ___sys_sendmsg+0x134/0x1d0 [ 1118.926235][T19439] ? __pfx____sys_sendmsg+0x10/0x10 [ 1118.926271][T19439] __sys_sendmsg+0x16d/0x220 [ 1118.926295][T19439] ? __pfx___sys_sendmsg+0x10/0x10 [ 1118.926326][T19439] do_syscall_64+0xcd/0x4c0 [ 1118.926351][T19439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.926368][T19439] RIP: 0033:0x7f71da18eb69 [ 1118.926381][T19439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1118.926398][T19439] RSP: 002b:00007f71daf68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1118.926415][T19439] RAX: ffffffffffffffda RBX: 00007f71da3b6080 RCX: 00007f71da18eb69 [ 1118.926426][T19439] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1118.926438][T19439] RBP: 00007f71daf68090 R08: 0000000000000000 R09: 0000000000000000 [ 1118.926449][T19439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1118.926460][T19439] R13: 0000000000000000 R14: 00007f71da3b6080 R15: 00007fff93c95018 [ 1118.926478][T19439] [ 1120.329034][T19439] CPU: 1 UID: 0 PID: 19439 Comm: syz.3.2997 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1120.329056][T19439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1120.329065][T19439] Call Trace: [ 1120.329070][T19439] [ 1120.329077][T19439] dump_stack_lvl+0x116/0x1f0 [ 1120.329105][T19439] should_fail_ex+0x512/0x640 [ 1120.329132][T19439] strncpy_from_user+0x3b/0x2e0 [ 1120.329157][T19439] strncpy_from_user_nofault+0x7f/0x180 [ 1120.329180][T19439] bpf_bprintf_prepare+0xe90/0x13f0 [ 1120.329208][T19439] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1120.329233][T19439] ? bpf_trace_run2+0x3e1/0x590 [ 1120.329247][T19439] bpf_trace_printk+0xda/0x190 [ 1120.329261][T19439] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1120.329275][T19439] ? bpf_trace_run2+0x3e1/0x590 [ 1120.329292][T19439] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1120.329303][T19439] bpf_trace_run2+0x236/0x590 [ 1120.329317][T19439] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1120.329331][T19439] ? trace_buffer_unlock_commit_regs+0xd7/0x550 [ 1120.329351][T19439] ? trace_event_buffer_commit+0x204/0xa50 [ 1120.329370][T19439] __bpf_trace_contention_begin+0xc9/0x110 [ 1120.329393][T19439] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1120.329418][T19439] trace_contention_begin.constprop.0+0xde/0x160 [ 1120.329435][T19439] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1120.329457][T19439] ? __lock_acquire+0xb97/0x1ce0 [ 1120.329478][T19439] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1120.329499][T19439] ? do_raw_spin_lock+0x12c/0x2b0 [ 1120.329515][T19439] do_raw_spin_lock+0x20e/0x2b0 [ 1120.329535][T19439] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1120.329548][T19439] ? rcu_qs+0x2b/0xe0 [ 1120.329564][T19439] ? rcu_note_context_switch+0x192/0x1e00 [ 1120.329582][T19439] raw_spin_rq_lock_nested+0x7e/0x130 [ 1120.329600][T19439] ? preempt_schedule_irq+0x51/0x90 [ 1120.329618][T19439] __schedule+0x307/0x5de0 [ 1120.329637][T19439] ? __lock_acquire+0xb97/0x1ce0 [ 1120.329657][T19439] ? look_up_lock_class+0x59/0x150 [ 1120.329676][T19439] ? register_lock_class+0x41/0x4c0 [ 1120.329697][T19439] ? register_lock_class+0x41/0x4c0 [ 1120.329719][T19439] ? __pfx___schedule+0x10/0x10 [ 1120.329736][T19439] ? __lock_acquire+0xb97/0x1ce0 [ 1120.329757][T19439] ? __lock_acquire+0xb97/0x1ce0 [ 1120.329778][T19439] ? mark_held_locks+0x49/0x80 [ 1120.329798][T19439] preempt_schedule_irq+0x51/0x90 [ 1120.329817][T19439] irqentry_exit+0x36/0x90 [ 1120.329836][T19439] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1120.329851][T19439] RIP: 0010:netlink_insert+0x13de/0x1860 [ 1120.329873][T19439] Code: 85 ff 0f 85 3c 02 00 00 e8 9f 82 0e f8 9c 41 5d 41 81 e5 00 02 00 00 31 ff 4c 89 ee e8 fb 7d 0e f8 4d 85 ed 0f 85 15 03 00 00 7d 82 0e f8 4c 8b 7c 24 30 be 04 00 00 00 4c 89 ff e8 cb cf 74 [ 1120.329887][T19439] RSP: 0018:ffffc900025cf810 EFLAGS: 00000293 [ 1120.329899][T19439] RAX: 0000000000000000 RBX: ffff88805d7f0000 RCX: ffffffff89ad0836 [ 1120.329909][T19439] RDX: ffff888067ee2440 RSI: ffffffff89ad0844 RDI: 0000000000000007 [ 1120.329918][T19439] RBP: 0000000000000018 R08: 0000000000000007 R09: 0000000000000000 [ 1120.329926][T19439] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888140459a80 [ 1120.329935][T19439] R13: 0000000000000000 R14: ffff888077e4a200 R15: 0000000000000200 [ 1120.329946][T19439] ? netlink_insert+0x1616/0x1860 [ 1120.329966][T19439] ? netlink_insert+0x1624/0x1860 [ 1120.329989][T19439] ? __pfx_netlink_insert+0x10/0x10 [ 1120.330009][T19439] ? find_held_lock+0x2b/0x80 [ 1120.330025][T19439] ? netlink_autobind.isra.0+0x29b/0x600 [ 1120.330046][T19439] netlink_autobind.isra.0+0x337/0x600 [ 1120.330067][T19439] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1120.330090][T19439] netlink_sendmsg+0x96f/0xdd0 [ 1120.330111][T19439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1120.330135][T19439] ____sys_sendmsg+0xa98/0xc70 [ 1120.330150][T19439] ? copy_msghdr_from_user+0x10a/0x160 [ 1120.330169][T19439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1120.330182][T19439] ? find_held_lock+0x2b/0x80 [ 1120.330201][T19439] ___sys_sendmsg+0x134/0x1d0 [ 1120.330220][T19439] ? __pfx____sys_sendmsg+0x10/0x10 [ 1120.330249][T19439] __sys_sendmsg+0x16d/0x220 [ 1120.330268][T19439] ? __pfx___sys_sendmsg+0x10/0x10 [ 1120.330293][T19439] do_syscall_64+0xcd/0x4c0 [ 1120.330314][T19439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.330327][T19439] RIP: 0033:0x7f71da18eb69 [ 1120.330338][T19439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1120.330352][T19439] RSP: 002b:00007f71daf68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1120.330364][T19439] RAX: ffffffffffffffda RBX: 00007f71da3b6080 RCX: 00007f71da18eb69 [ 1120.330374][T19439] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1120.330383][T19439] RBP: 00007f71daf68090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.330392][T19439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1120.330400][T19439] R13: 0000000000000000 R14: 00007f71da3b6080 R15: 00007fff93c95018 [ 1120.330413][T19439] [ 1120.764870][ T30] audit: type=1400 audit(1754159409.539:1425): avc: denied { write } for pid=5830 comm="syz-executor" path="pipe:[3799]" dev="pipefs" ino=3799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1120.809248][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.291360][T13873] usb 1-1: unknown interface protocol 0x7d, assuming v1 [ 1121.306079][T13873] usb 1-1: 26:2 : does not exist [ 1121.318076][T13873] usb 1-1: cannot find UAC_HEADER [ 1121.340091][T13873] snd-usb-audio 1-1:1.89: probe with driver snd-usb-audio failed with error -22 [ 1121.405203][T13873] usb 1-1: USB disconnect, device number 119 [ 1121.456020][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.590778][ T1155] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.730233][T11129] syz_tun (unregistering): left allmulticast mode [ 1121.807915][ T1155] bridge_slave_1: left allmulticast mode [ 1121.813619][ T1155] bridge_slave_1: left promiscuous mode [ 1121.821527][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.829619][ T1155] bridge_slave_0: left allmulticast mode [ 1121.835236][ T1155] bridge_slave_0: left promiscuous mode [ 1121.842231][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.849315][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.874257][ T1155] ip6gretap0 (unregistering): left allmulticast mode [ 1121.983488][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1121.993960][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.018100][ T1155] bond0 (unregistering): Released all slaves [ 1122.198741][ T1155] hsr_slave_0: left promiscuous mode [ 1122.204394][ T1155] hsr_slave_1: left promiscuous mode [ 1122.211997][ T1155] veth0_macvtap: left allmulticast mode [ 1122.217731][ T1155] veth1_macvtap: left promiscuous mode [ 1122.223204][ T1155] veth0_macvtap: left promiscuous mode [ 1122.228768][ T1155] veth1_vlan: left promiscuous mode [ 1122.233982][ T1155] veth0_vlan: left promiscuous mode [ 1122.333314][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 1122.355643][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 1122.879026][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.919993][T13873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.477845][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.957976][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.998009][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.037931][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.517737][ T5921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.597755][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.077957][T13873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog