last executing test programs: 9m11.32299524s ago: executing program 3 (id=1084): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, 0x0, &(0x7f00000004c0)=0x1, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e21, @private=0xa010182}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x39) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x2, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000140)={0x9}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000440)=ANY=[@ANYRES8, @ANYRES16, @ANYRESDEC=r3, @ANYRES16], 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000010000000850000003e00020095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0xf26f5a31d1e29085) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="3aadca36f01f1b4c3e21caa067fa3a5f256967248d0a41392876298ae61a635f5e01ee61526ab73ae6ec3091eb6768b283dc4f9410aae67ac2cb46ea5fb3fdf3c4c7778821f60686f064858b4f5fd14433d6f3d6ac185ccd89f77f2c1f43d0815adac8c63c936f921619c36164567b147ddba9f56826ad2016ee004d94f760fd59ce7a11cf99061ac7c15d4d26f503073c4f34382c1b59260cc20b8162890b01a3c098e84f58d4ac942b17b95c9e4e64e7558cc4cd8225e2c8071bf3116a3bd9f55aca1624d10dcda0c5313b", @ANYRES64=0x0], 0x10) close(r5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x23ad, 0x10000, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) migrate_pages(0x0, 0x1000000000000009, &(0x7f0000000040)=0x4, &(0x7f0000000100)=0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000190001002bbd5a00fcdbdf251c008004fe03000200320000"], 0x1c}}, 0x0) 9m10.339173183s ago: executing program 3 (id=1087): lstat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$getown(r0, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0)=0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) syz_open_dev$amidi(&(0x7f00000006c0), 0x3e0, 0x123e81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x166) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x2, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x101b, 0x0, 0x0, 0x6, 0x2, 0x1}}) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000004060500000000000000000002000001050001000700000005000100070000000500010207000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) 9m8.497417944s ago: executing program 3 (id=1092): sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setxattr$security_ima(0x0, &(0x7f0000000000), &(0x7f0000000180)=ANY=[@ANYBLOB], 0xa, 0x3) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xec) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x1b, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0x87, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2136, 0x2, &(0x7f0000000100), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) syz_open_dev$dri(0x0, 0x1f, 0x0) (async) syz_open_dev$dri(0x0, 0x1f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000200)='omfs\x00', 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x900) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f0000000840)={{0x3, 0x5, 0x0, 0x0, 'syz0\x00', 0xfffffff7}, 0x4, 0x10, 0x8001, 0xffffffffffffffff, 0x9, 0x4, 'syz0\x00', &(0x7f0000000180)=['[\xa3:^,!%:$\x00', 'GPL\x00', '$-\x00', 'GPL\x00', 'security.ima\x00', 'gid', 'omfs\x00', 'z-.^\x00', '{]]{#z)!\x00'], 0x38}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) pwritev2(r7, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) (async) pwritev2(r7, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) 9m8.300853951s ago: executing program 3 (id=1093): r0 = openat$mixer(0xffffff9c, &(0x7f00000001c0), 0x80002, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d03, &(0x7f0000000180)=0x3f) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) listen(r2, 0x401) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x399881, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001100), 0x200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000001140)={0x0, 0x3, 0x8001, 0x2, 0xffff4e64}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000500)=0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="14000100ff010000000000000000000000000001140006"], 0x70}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x926fdb2c68a18847, 0x1000, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 9m7.335176898s ago: executing program 3 (id=1095): openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000140)=""/27, 0x1b) getdents64(r3, &(0x7f0000002fc0)=""/4108, 0x100c) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000180900000098ff9ac58d9d26138fbf0000000000", @ANYRES32=0x0, @ANYBLOB="0131010000000000180012800e00010069703665727370616e00000004000280"], 0x38}}, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = timerfd_create(0x8, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) socket$inet_mptcp(0x2, 0x1, 0x106) timerfd_settime(r6, 0x3, &(0x7f0000000140), 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r7 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 9m6.210973967s ago: executing program 3 (id=1098): r0 = socket$unix(0x1, 0x1, 0x0) (async) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x17, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r1, 0x4) (async) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r0, 0x6) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000300)={@val, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x15, 0x28, 0x64, 0x0, 0xc2, 0x6, 0x0, @local, @broadcast}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x200, 0x0, 0x4}}}}}}}, 0x42) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000040), 0x0) write$binfmt_aout(r4, &(0x7f0000000680)={{0x108, 0x0, 0x29, 0x39, 0x14, 0xf9, 0x2e0, 0x4}, "1bcd38ab9e0a4ddc7c5422ff5ff74356968092000b6c775420130595c06c1c563902777a5ed9330e4a27b23bed6b1ec5191e476dfe1b9c6cdad20aa8fe12e1e9a07095227d76063d9f583c0dd944d4d2e7d69bb9e44e21e77f49658031591f2d9d7a2d45834ad5116dcd261241924b08bbf7e7296a235370029d4e72bff8e508cde05e6a6939171237230c3441480c2eed871459df2d2d098b567eed3acd729af191910d2486a8d47efee2e4f63a80ce5fcae54c6f6cd2601e7fe602cb5c2322776f5ae6297c873983e78008d3fc1065d3113b0734c9e2140dd9d2d6b253ee", ['\x00']}, 0x1ff) (async) socket(0x3, 0x6, 0x7f) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r7}, 0x10) (async) shmdt(0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) close(r6) getsockopt$inet6_int(r5, 0x29, 0x13, 0x0, &(0x7f00007d0000)) setrlimit(0x7, &(0x7f00000000c0)={0x4, 0x6}) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 8m50.081458762s ago: executing program 32 (id=1098): r0 = socket$unix(0x1, 0x1, 0x0) (async) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x17, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r1, 0x4) (async) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r0, 0x6) (async) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000300)={@val, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x15, 0x28, 0x64, 0x0, 0xc2, 0x6, 0x0, @local, @broadcast}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x200, 0x0, 0x4}}}}}}}, 0x42) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000040), 0x0) write$binfmt_aout(r4, &(0x7f0000000680)={{0x108, 0x0, 0x29, 0x39, 0x14, 0xf9, 0x2e0, 0x4}, "1bcd38ab9e0a4ddc7c5422ff5ff74356968092000b6c775420130595c06c1c563902777a5ed9330e4a27b23bed6b1ec5191e476dfe1b9c6cdad20aa8fe12e1e9a07095227d76063d9f583c0dd944d4d2e7d69bb9e44e21e77f49658031591f2d9d7a2d45834ad5116dcd261241924b08bbf7e7296a235370029d4e72bff8e508cde05e6a6939171237230c3441480c2eed871459df2d2d098b567eed3acd729af191910d2486a8d47efee2e4f63a80ce5fcae54c6f6cd2601e7fe602cb5c2322776f5ae6297c873983e78008d3fc1065d3113b0734c9e2140dd9d2d6b253ee", ['\x00']}, 0x1ff) (async) socket(0x3, 0x6, 0x7f) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r7}, 0x10) (async) shmdt(0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) close(r6) getsockopt$inet6_int(r5, 0x29, 0x13, 0x0, &(0x7f00007d0000)) setrlimit(0x7, &(0x7f00000000c0)={0x4, 0x6}) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 7m46.901514635s ago: executing program 2 (id=1411): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=[0x0, 0x0], 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000025c0)=@newtaction={0xf90, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0xf7c, 0x1, [@m_ipt={0xc0, 0x1a, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x64, 0x6, "9dbf40cf4270866e31eb9ceef43dbaaaae6878a5cfb956cd1845904574e4eb7cabf2552ac0c61f81346206199f24b7eb01445d9c61e7b67d3b4c8dd33fee2aae32b4373e200fadb3c5365bef285d00000000000000057ce24ef9b9376a8555c8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0xd28, 0x12, 0x0, 0x0, {{0x8}, {0xc44, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffff8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0xca, 0x6, {0x8, 'security\x00', 0x28, 0x3, "f4b0775f0e6de4b4ff29d42ad934f5473bc8764d6675f3b39fc177f509bf9a5cd9390f6cf52dd1341ee7d98950cc5dfdce1169a6c65843df84dd4361a3f30850687b3e21fbac48a0b280741f48026eb05907f6d7a55be422489ceb89469556bbe3561a13f626ba8855a2309f9a9fbf1d2dd368199d6c7f07183fabeb4b23330fc52289d37e74d575ad816ba4915ce2c751dd2d6c485410b40295d0216984262d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0x8, 'raw\x00', 0xc}}, @TCA_IPT_TARG={0xae7, 0x6, {0x4, 'security\x00', 0x1, 0x0, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7f4f}]}, {0xbe, 0x6, "1b3ec043f25e80566bc4eb402e2bc33874852d29b48a9934d226d2f5a403d6d03d6c825988153d860d07e1371e057ac538e21d2d9877f0654a0b1f761ca7b971025cac9d94bd6759765489180ed5d8fe9cdbfd63453f6f6307afd0f56de6ee8c27937598679411da1b1951c8366bbd4d0ed8538869fe88774cd1c225699b855e8c25bc3ee5968e46f35b3e67033a09a851e844ae81e2cd40ee043e913c830c207d40ea8e961cede4eea5f75502a7cae28f639a470ec2a25a3ec6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x2c, 0xc, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x5c, 0x1e, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x30, 0x6, {0x7, 'nat\x00', 0xdd, 0x9180, "7aaa39b5f9f1"}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x2c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xdc, 0x14, 0x0, 0x0, {{0x8}, {0x4}, {0xb3, 0x6, "6fca8a236a3932d0ec4a44fc16cf3cf1a0a90ef0a5b1e0c3ea864b11cb277c58c880fad0740dc662ba19d7bdd865ced6d620bab74fb0377bc5fe0104e8c5dc3b16b4863f2093bb77825476535579878e167fb2fac451b9e604266fb468cbdfc21a9e7fa45a2ea537fe73b13a42c93ce2616f1869767905535fbcca1197871b3794f4dc3f3ae12a05d318ab2e2aada1b5b530fdb48d9f881765ccd59544aab0b492e8f889a966725ac61bdd34b469c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0xf90}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 7m45.939113769s ago: executing program 2 (id=1413): syz_emit_ethernet(0x6e, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment]}}}}}}}, 0x0) unshare(0x2000400) socket(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="402345000000453061639c545d2ce9daa7602630c6863773fddd911869efc89610aab1b0d2363bdd00b77c5bdfd51207b2908fceb485a8995d9125"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000100)={'pim6reg1\x00', @ifru_flags=0x4000}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) syz_emit_ethernet(0x6e, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment]}}}}}}}, 0x0) (async) unshare(0x2000400) (async) socket(0x10, 0x3, 0x0) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x755, 0x2626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x2}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="402345000000453061639c545d2ce9daa7602630c6863773fddd911869efc89610aab1b0d2363bdd00b77c5bdfd51207b2908fceb485a8995d9125"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000100)={'pim6reg1\x00', @ifru_flags=0x4000}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) (async) 7m44.04316372s ago: executing program 2 (id=1425): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x400, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x200006e64, 0x80040) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000380)=""/88) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async, rerun: 32) syz_fuse_handle_req(r3, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42731b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c32768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e179100a0000000000000021e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90a14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc83cccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r5 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2, "0500"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="401402"], 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$printer(r5, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) (async, rerun: 64) io_setup(0x202, &(0x7f0000000200)=0x0) (rerun: 64) io_submit(r7, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r6, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) dup3(r6, r3, 0x0) (async, rerun: 64) mknodat$loop(r6, &(0x7f0000000140)='./file0\x00', 0x2000, 0x1) (rerun: 64) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000005700)={{0x3, 0x3f, 0x80, {0x6000, 0xeeee8000}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd8f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) (async) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) 7m42.063941569s ago: executing program 2 (id=1429): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0xb0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x1000, 0x1) (async) chdir(&(0x7f00000003c0)='./bus\x00') r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) add_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000200)="ed9aabd2450ee011cfd2f80caebec4a82bdaca73ac949cb0c799d1", 0x1b, 0xfffffffffffffffe) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) tkill(r2, 0x12) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 32) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d5f549a, 0x0, [0x4, 0x0, 0x7, 0x0, 0x0, 0xd5a5]}) (async, rerun: 32) ptrace(0x4208, r2) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e732b7463702c706f72743d307a30303030303230301a303030346532332c00"]) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x1b, 0x0, 0x1}, 0x28) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0xf00, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) 7m41.681980806s ago: executing program 2 (id=1435): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1c9, 0x12) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') lseek(r3, 0x36, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4048aecb, &(0x7f0000001440)={{0x0, 0x0, 0x80, {0xdddd0000, 0x1}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b91fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b7fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) mremap(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000208000/0x2000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) capset(&(0x7f0000000000)={0x19980330}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_clone3(&(0x7f0000000400)={0x52000, &(0x7f00000003c0), &(0x7f0000000140), &(0x7f0000000540)=0x0, {0x3e}, &(0x7f0000000200)=""/242, 0xf2, &(0x7f0000000300)=""/172, &(0x7f0000000180)=[0x0, 0x0], 0x2, {r3}}, 0x58) capset(&(0x7f0000000480)={0x20080522, r7}, &(0x7f00000004c0)={0x9, 0xfffffffb, 0x3d7, 0x7f, 0x584f0990, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) chdir(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x2, 0x0, 0x0) r8 = socket(0x1e, 0x4, 0x0) r9 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 7m40.049601281s ago: executing program 2 (id=1442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="060000fb030000005b0000008a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="17cdb83b2016748c3eccba140f0bade0a0c96f9d8fea39c4a21d5b5ee207a904b14141327efe1ce5656b034147bb3065f2bade36b7556da2d3a743e73634afce2eea16ffb4ff8d2dc9006f809899cf75ce15628d8e9d4282ff48ff405235e6d81a137e10bc3af5fca8446039c9ecc9f7044d04ffc3a9d80429808b219bd9ce6509d1c5d995d351587ffa2903b6a04c9b7253edb0f89b05c78502996796a46c314596ca6e2089a5a40063b39a689f46d1bbfca8d69210b0c0eab976522d21e738ebe2bab644e7f46704c6575e1c2eff8a97ce86e151104d4d1caae1784fc92867756619bcb9988537f06daeceea0c98f8065e670a90b7", @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x1, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) mount$binderfs(0x0, &(0x7f0000000340)='./binderfs2\x00', 0x0, 0x20, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x801, 0x1ffa, 0x8c, 0x10, 0x1, 0xcb02, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x180}, 0x50) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x1000001000, 0xd66c}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4000000000007, 0xfffffffffffffffc, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000080)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 7m39.748031426s ago: executing program 33 (id=1442): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="060000fb030000005b0000008a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="17cdb83b2016748c3eccba140f0bade0a0c96f9d8fea39c4a21d5b5ee207a904b14141327efe1ce5656b034147bb3065f2bade36b7556da2d3a743e73634afce2eea16ffb4ff8d2dc9006f809899cf75ce15628d8e9d4282ff48ff405235e6d81a137e10bc3af5fca8446039c9ecc9f7044d04ffc3a9d80429808b219bd9ce6509d1c5d995d351587ffa2903b6a04c9b7253edb0f89b05c78502996796a46c314596ca6e2089a5a40063b39a689f46d1bbfca8d69210b0c0eab976522d21e738ebe2bab644e7f46704c6575e1c2eff8a97ce86e151104d4d1caae1784fc92867756619bcb9988537f06daeceea0c98f8065e670a90b7", @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x1, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) mount$binderfs(0x0, &(0x7f0000000340)='./binderfs2\x00', 0x0, 0x20, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setrlimit(0x6, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x801, 0x1ffa, 0x8c, 0x10, 0x1, 0xcb02, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x180}, 0x50) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x1000001000, 0xd66c}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4000000000007, 0xfffffffffffffffc, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000080)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 5m22.143049104s ago: executing program 6 (id=2039): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000030000000300000000200000000000000000000130400000000000000000000090100000000000000010000040002000000000000000000"], 0x0, 0x4a}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000f065ab42f8e43af030323131009377bf8f01db16ad35c5ea1dd22c5b798a7fdd7d5588895d946769224c853c09742133607ccd9ed03ba496148d88ff50026ef4e78873e0093c40dea772f601739bf74846be1f3ecf6a4dc2538319b45d894790181e609c02fd85072d0477866eaeefe0d965361c72f48f20b2da63fbaad3a441bf1b934197d8a90b11a99e344f342e6d05c087031b4d74d9f33d7e5f8f"], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{}], 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x25, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r5 = userfaultfd(0x80801) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) sendto$inet6(r6, &(0x7f00000003c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000c40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc6e}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 5m22.1013753s ago: executing program 6 (id=2040): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, &(0x7f0000000040)) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x40, 0x7, 0x1, 0x6, {{0x16, 0x4, 0x0, 0x33, 0x58, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast2, @loopback, {[@lsrr={0x83, 0x27, 0x5f, [@dev={0xac, 0x14, 0x14, 0x2c}, @local, @empty, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @empty]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x4f, [@rand_addr=0x64010100, @remote, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7f}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x81}, 0x4040894) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) r3 = socket(0x10, 0x6, 0x400) sched_getscheduler(r0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000400)=0x6, 0x2) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000440), 0x84100, 0x0) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) (async) r5 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r5, 0xc) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'veth1_to_bond\x00', 0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r0, 0x0, 0x4004) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) get_robust_list(r0, &(0x7f0000000600)=&(0x7f00000005c0)={&(0x7f0000000500)={&(0x7f00000004c0)}, 0x0, &(0x7f0000000580)={&(0x7f0000000540)}}, &(0x7f0000000640)=0x18) (async) get_robust_list(r0, &(0x7f0000000600)=&(0x7f00000005c0)={&(0x7f0000000500)={&(0x7f00000004c0)}, 0x0, &(0x7f0000000580)={&(0x7f0000000540)}}, &(0x7f0000000640)=0x18) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r9, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x8}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x25}]}, 0x54}, 0x1, 0x0, 0x0, 0x44004}, 0x0) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) (async) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000800)=0xf000) (async) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000800)=0xf000) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000ac0)={0x0, &(0x7f0000000840)=[@wr_crn={0x46, 0x20, {0x3, 0xd6f}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x29b}, @cpuid={0x14, 0x18, {0x0, 0x7}}, @cpuid={0x14, 0x18, {0x8000, 0x1}}, @wrmsr={0x1e, 0x20, {0x22f, 0x4c3c}}, @wr_crn={0x46, 0x20, {0x0, 0x4}}, @wr_crn={0x46, 0x20, {0x8, 0x3}}, @code={0xa, 0x77, {"48b8eeb30000000000000f23c80f21f835080070000f23f866b835018ee8c744240002000000c744240200300000c7442406000000000f01142465f3ad66b825010f00d00f2243c442d1b65700c4817f70c10666b8c0008ec8440f20c0350a000000440f22c0"}}, @uexit={0x0, 0x18, 0x5}, @wr_crn={0x46, 0x20, {0x8, 0xfffffffffffffc01}}, @wr_crn={0x46, 0x20, {0x4, 0x703}}, @code={0xa, 0x7a, {"c744240091000000c744240204000000ff1c2466baf80cb8a465888def66bafc0cec48b80080ffffffffffff0f23c80f21f835040010000f23f8f2460f20c62e663e400f00df8f0830cc880900000006430f1bedf2ab450f01c866baf80cb8f706d38cef66bafc0cec"}}, @rdmsr={0x32, 0x18, {0xa6f}}], 0x241}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r10, 0x4018aee1, &(0x7f0000000b40)=@attr_other={0x0, 0x9, 0x2, &(0x7f0000000b00)=0x5}) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000b80)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="26a5ce7525bbf63e86a86d7c17e94128d1fe3145c06b0db1d57999cc897f0688d82f19ce8290e458ddbde183e9b9020158f99479d0fcc698580129f8d5dbfe78f0bd5c76dc8701bf62134a894f6682fd384e6257419b97d917e4d726bc92d15d21d1f2c1df582e387b6a450770c5aa8d1713c3063d8fc40ee341132f517829c038e66d74db4985dd53d25b363d0841b6", 0x90}, {&(0x7f0000000c80)="6b638910dc62c8eb3ef3f61376d377615e444d6ca7ab2931", 0x18}, {&(0x7f0000000cc0)="531ea75f37dd37070dcfb071d0ba9c0e295b974444858bf57503b6cea49561555bdd27d893f04ec3001d489e87bd047a9012088069bd9de1816ca8831ac314fb0e1289823525aa8c9ea8e7cfeac692bfd61257085eeacd0347018b50ef34f42ee200cec47e0e713a0e7f5f8cc3feb0a2033f7a", 0x73}, {&(0x7f0000000d40)="11a4ad4e593cb643ed34606a72832985e71234b9154fdd2d17650cf79f4797adfb3398e9ed97863a9dced6253dd05e43dcb4b5913cf04ba7783ef8783027af6e554004b5ec3cdec39602b40b5ef06eef29cca78d", 0x54}, {&(0x7f0000000dc0)="eb380c0ff97a", 0x6}, {&(0x7f0000000e00)="022e82ea2658914d0b9b868b28340221a1dab27619e68c38448cc3e970703d1315cc60013d59949b033adc986d1799d91d864d2752cc41d0ddec50cb", 0x3c}], 0x6, &(0x7f0000000ec0)=[@ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x95, 0x1, 0x1, [{@broadcast, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0x8000}, {@multicast1, 0x2800000}]}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x1, [{@remote}]}, @lsrr={0x83, 0x27, 0xc7, [@remote, @multicast1, @multicast1, @rand_addr=0x64010101, @rand_addr=0x64010102, @multicast2, @rand_addr=0x64010101, @multicast2, @multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x7, 0x0, 0xc, [0x9, 0xa58, 0x7fdf, 0xfffff001, 0x0]}, @timestamp={0x44, 0x10, 0x8b, 0x0, 0x7, [0x0, 0x1, 0x100]}, @lsrr={0x83, 0xf, 0x9c, [@remote, @multicast1, @loopback]}]}}}], 0xd0}, 0xc801) (async) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000b80)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="26a5ce7525bbf63e86a86d7c17e94128d1fe3145c06b0db1d57999cc897f0688d82f19ce8290e458ddbde183e9b9020158f99479d0fcc698580129f8d5dbfe78f0bd5c76dc8701bf62134a894f6682fd384e6257419b97d917e4d726bc92d15d21d1f2c1df582e387b6a450770c5aa8d1713c3063d8fc40ee341132f517829c038e66d74db4985dd53d25b363d0841b6", 0x90}, {&(0x7f0000000c80)="6b638910dc62c8eb3ef3f61376d377615e444d6ca7ab2931", 0x18}, {&(0x7f0000000cc0)="531ea75f37dd37070dcfb071d0ba9c0e295b974444858bf57503b6cea49561555bdd27d893f04ec3001d489e87bd047a9012088069bd9de1816ca8831ac314fb0e1289823525aa8c9ea8e7cfeac692bfd61257085eeacd0347018b50ef34f42ee200cec47e0e713a0e7f5f8cc3feb0a2033f7a", 0x73}, {&(0x7f0000000d40)="11a4ad4e593cb643ed34606a72832985e71234b9154fdd2d17650cf79f4797adfb3398e9ed97863a9dced6253dd05e43dcb4b5913cf04ba7783ef8783027af6e554004b5ec3cdec39602b40b5ef06eef29cca78d", 0x54}, {&(0x7f0000000dc0)="eb380c0ff97a", 0x6}, {&(0x7f0000000e00)="022e82ea2658914d0b9b868b28340221a1dab27619e68c38448cc3e970703d1315cc60013d59949b033adc986d1799d91d864d2752cc41d0ddec50cb", 0x3c}], 0x6, &(0x7f0000000ec0)=[@ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x95, 0x1, 0x1, [{@broadcast, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0x8000}, {@multicast1, 0x2800000}]}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x1, [{@remote}]}, @lsrr={0x83, 0x27, 0xc7, [@remote, @multicast1, @multicast1, @rand_addr=0x64010101, @rand_addr=0x64010102, @multicast2, @rand_addr=0x64010101, @multicast2, @multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x7, 0x0, 0xc, [0x9, 0xa58, 0x7fdf, 0xfffff001, 0x0]}, @timestamp={0x44, 0x10, 0x8b, 0x0, 0x7, [0x0, 0x1, 0x100]}, @lsrr={0x83, 0xf, 0x9c, [@remote, @multicast1, @loopback]}]}}}], 0xd0}, 0xc801) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x2010, r4, 0x0) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) (async) r11 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_INFO(r11, 0xe, &(0x7f0000001000)=""/136) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000010c0)={'wlan0\x00', {0x2, 0x200, @remote}}) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000010c0)={'wlan0\x00', {0x2, 0x200, @remote}}) pipe(&(0x7f0000001100)) (async) pipe(&(0x7f0000001100)={0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f0000001480)=[{{&(0x7f0000001140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001340)=[{&(0x7f00000011c0)="13", 0x1}, {&(0x7f0000001200)="2439e6b7cae76fc161e7cf3d2aedb56f514d31d3a2be8ce344dbbd976a0c87364d4b7d57c4208152e4cbf5cd1de1141684831f1da3beff3654be92c1097b50522158b325a8edfbdbe4826ef99068a82ec1491ab7be0d5352c8fea81c0595fae2d161b67e1487b14a17e5c8f69ba307fd1064fd", 0x73}, {&(0x7f0000001280)="c739d529adc656b132acae8abd2c74d1b2b473728bed35ff2f5147a8c987935e34d604d50ce91b973fbb24e7411dbeb46293b4c3d81554e2dff7eed8500245d9d95ef498830dbda681f41e4fdd0eeb2890b922dfbb1fccdbe7a07f837d83b600e5a2ba025d52219dbda6ff19ea1c977067aa4a41e0c56f57ba0d47a36092b2ec77ac829291abccc5a84f6e1e7478cd2162b8323ac08db8254b65e0253dd0624b8a3a98b8b862bca8b2730bb8d3876330a2e567855f", 0xb5}], 0x3, &(0x7f0000001400)=[@rights={{0x38, 0x1, 0x1, [r8, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r10, r8, r10, r8, r8]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}], 0x50, 0x4004850}}], 0x1, 0x814) 5m21.982377035s ago: executing program 6 (id=2041): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r1 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) (async) r4 = socket$kcm(0x10, 0x2, 0x4) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0x10, &(0x7f0000000a40)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) rt_sigaction(0x4, &(0x7f00000001c0)={&(0x7f0000000140)="44dfa3998999998f083087649e0d0036660f38df2b660fbab97500000000c3c4a37905d708f246ad66450f28e20f9218c401f5e84c5700", 0x50000003, 0x0, {[0x1]}}, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000001000/0x400000)=nil) (async) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0xeeee8000, 0x3, 0x8, 0xe, 0x0, [{0x0, 0x8, 0x6, '\x00', 0x7f}, {0x2, 0xff, 0x4, '\x00', 0x3}, {0xe7, 0x7, 0xf6, '\x00', 0xf8}, {0x6, 0x5b, 0x2a, '\x00', 0x6}, {0x7, 0x7f, 0x2, '\x00', 0x2}, {0x42, 0x7f, 0x5, '\x00', 0x2}, {0x40, 0xe, 0x2, '\x00', 0x1}, {0xb, 0x0, 0x5, '\x00', 0x1}, {0x8, 0x4, 0x70, '\x00', 0x81}, {0xbf, 0xb2, 0x6, '\x00', 0x1}, {0x4, 0x17, 0x4, '\x00', 0x4}, {0x6, 0xf8, 0x2, '\x00', 0x6}, {0x9, 0x1, 0x3, '\x00', 0x9}, {0x1, 0xd, 0x3b, '\x00', 0x8d}, {0xfb, 0x8, 0x2}, {0x3, 0x2, 0x7, '\x00', 0x3}, {0x9, 0xfc, 0x7f, '\x00', 0x6}, {0x10, 0x5, 0x3, '\x00', 0x5}, {0x3, 0x11, 0x8}, {0x3, 0xfc, 0x8, '\x00', 0x2}, {0xe5, 0x1, 0x2, '\x00', 0x40}, {0x1, 0xd, 0x9, '\x00', 0x6}, {0x0, 0x8, 0x2, '\x00', 0x7}, {0x5, 0xc, 0x80, '\x00', 0x2}]}}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0xfff, 0x10000000215b9037, 0x40180, 0x1, 0x11, 0x8000000000f2, 0x0, 0x3, 0x5, 0x5, 0xc6bd, 0x566, 0x45, 0x5, 0x7], 0x6006, 0x1c0293}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b20000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000020000008500000086008fae3ee2702dfd085fcc82718f733a44ea00b3f600d8675b777b", @ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000018110000", @ANYRES32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_open_dev$swradio(&(0x7f00000003c0), 0x0, 0x2) (async) r10 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) read(r10, &(0x7f0000000180)=""/19, 0x13) (async) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000100)={0x0, 0x2, 0x2, {0xb, @win={{0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8, 0x0, 0xdc}, 0x18) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r11}, 0x10000, 0x6, 0x6}) 5m21.775017563s ago: executing program 6 (id=2043): syz_open_dev$video(&(0x7f0000000b40), 0x80000001, 0x8a800) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pimreg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x21dfdbfb, {0x0, 0x0, 0x0, r0, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "538943b61e2ef018bc69d78937ab1f27"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xa, 0x0, 0x0, r2}) syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8004}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23, 0xfffffffc}, 0x18}}, 0x20008050) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r7, @ANYBLOB="2496d7eb6be18e54710a00e504d10d30abb3"], 0x48}, 0x4, 0x700000000000000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6802000000050104000000000000fff5080000025402010002000000060000000107060000001b0073797a300000000000000000000000000000000000000000000000000000000072a71e2c99c31a0dd41557599f216ffdb5a2a6da7ca67f882ca0b091c029e22eef0e8f3d3d9be6686726939aff1018c31c4c3fe2ccf236e8c2b867a695827725"], 0x268}, 0x1, 0x0, 0x0, 0x8004}, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ubifs\x00', 0x808f53, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 5m21.329731535s ago: executing program 6 (id=2044): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0x6, &(0x7f0000000200)={0x8, 0x10001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) setreuid(0x0, 0x0) getpriority(0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x50d800) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001080006040002aaaaaaaaaaaa0000000036b8eb190000ac1414aa716e13cb6087e114633fa670cc30a4674602c95e76a8eace61f684acf62be93aef08e3d85e015c91a3645a9dc89748aed8786093a69c697e47f27ac3b9c4ddf21c71029660fe8287803e9d34f207f6444bc65b99a2744842ef9e5b63e382acbc9ba219595d2afb04966c4afd2bda39588bfd44ae18a7663983259e9d9ae5b7d41a05989867d9f8f745405e83e2fe6f0e8c39f8ca02710898c7df47852bd76238a58e49b093"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 5m19.817668187s ago: executing program 6 (id=2055): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d0000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a3100000000080004426868a4080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x8c0) (async) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x100000000000000) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000700)={0x5, &(0x7f00000006c0)=[{0xca, 0x8, 0x5, 0x8}, {0x100, 0x6, 0x2e, 0x300}, {0x8000, 0x4c, 0x6, 0xfffffffa}, {0xb, 0x6, 0x4, 0xbcd}, {0x8001, 0xaa, 0x40}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000ce"]) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x200001, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000680)={'wg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=@setlink={0x168, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_MASTER={0x8}, @IFLA_PROTO_DOWN={0x5}, @IFLA_LINK={0x8}, @IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MASTER={0x8}, @IFLA_AF_SPEC={0xf4, 0x1a, 0x0, 0x1, [@AF_INET6={0x21, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x19}, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x24}, @IFLA_INET6_TOKEN={0x0, 0x7, @private0}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_EXT_MASK={0x8}, @IFLA_PROMISCUITY={0x8}]}, 0x168}}, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') read$FUSE(r7, &(0x7f0000000700)={0x2020}, 0x2020) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) 5m4.443445279s ago: executing program 34 (id=2055): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d0000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a3100000000080004426868a4080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x8c0) (async) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x100000000000000) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000700)={0x5, &(0x7f00000006c0)=[{0xca, 0x8, 0x5, 0x8}, {0x100, 0x6, 0x2e, 0x300}, {0x8000, 0x4c, 0x6, 0xfffffffa}, {0xb, 0x6, 0x4, 0xbcd}, {0x8001, 0xaa, 0x40}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000ce"]) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x200001, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000680)={'wg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=@setlink={0x168, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_MASTER={0x8}, @IFLA_PROTO_DOWN={0x5}, @IFLA_LINK={0x8}, @IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MASTER={0x8}, @IFLA_AF_SPEC={0xf4, 0x1a, 0x0, 0x1, [@AF_INET6={0x21, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x19}, @IFLA_INET6_TOKEN={0x0, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x0, 0x8, 0x24}, @IFLA_INET6_TOKEN={0x0, 0x7, @private0}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8}]}}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_EXT_MASK={0x8}, @IFLA_PROMISCUITY={0x8}]}, 0x168}}, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') read$FUSE(r7, &(0x7f0000000700)={0x2020}, 0x2020) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) 12.563128833s ago: executing program 7 (id=3257): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0xffffffffffffff93) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket(0x2, 0x80805, 0x1ff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x23f}, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffe, 0x0, 0x2, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x787242, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0), 0x10) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 11.140275566s ago: executing program 7 (id=3265): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x95, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, 0x0, 0x24010819) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)}], 0x1}, 0x0) io_setup(0x8, &(0x7f00000001c0)) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0) r4 = syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000001840)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="260302000000b23b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r6, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_DESTROY$hwpt(r5, 0x3b80, &(0x7f0000000340)={0x8, r8}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x4e, 0x9e, 0x9, 0x40, 0x499, 0x101a, 0x4426, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x80, 0x80, 0x0, [{{0x9, 0x4, 0x3d, 0x5, 0x1, 0x7f, 0x52, 0xb4, 0x8, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x4, 0x2, 0xf9}}]}}]}}]}}, &(0x7f0000000b00)={0x1, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x5, 0xd9, 0x4e, 0x8, 0x4}, 0x0, 0x0, 0x31}) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x7fff, 0x2, 0x3) 8.189116877s ago: executing program 1 (id=3279): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x7c2}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000280)=0x9) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7, r6}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000300)={r6, 0x101, 0x83da}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10000000005, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x45, 0x0, 0x42, 0x7fff}, {0x1, 0x0, 0x8, 0x9d}]}) 7.925265935s ago: executing program 7 (id=3280): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0xc6, 0x1e, 0x40, 0x7c9, 0x12, 0xc2f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0x8e, 0x2f}}]}}]}}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) bind$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x8, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0xf0fb1c915450e0f1, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0x9, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0xf, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfffe, 0x3], [0x0, 0x8]}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_prio={{}, {0x0, 0x2, {0x2, "50dcc843149aafbf97145189da7719b6"}}}]}, 0xac}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000380)=@random="c12fd58c", 0x4, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x2, 0xffffffffffffffff, 0x7ff}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r7 = syz_open_dev$mouse(&(0x7f0000000680), 0x0, 0x14b200) read(r7, 0x0, 0x2) write$char_usb(r6, &(0x7f0000000040)="e2", 0x918) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="149f82c5f4ce1bc8"], 0x24}}, 0x0) 7.763924102s ago: executing program 1 (id=3281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x11b) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000340)=0x1, 0xa, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x6a, 0xa}, 0x100000}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @in6=@mcast1, @in=@multicast1, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24040014}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$video(&(0x7f0000000140), 0x7, 0xc0000) ioctl$VIDIOC_G_AUDIO(r8, 0x80345621, &(0x7f0000001b40)) shutdown(0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 7.299227781s ago: executing program 5 (id=3283): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) io_setup(0x3ff, 0x0) io_getevents(0x0, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_destroy(0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_open_dev$sndmidi(&(0x7f0000000200), 0x1, 0x40001) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x92000000500d0000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000009c0)}, {&(0x7f0000000100)="c74a32edc6beec5d2b", 0x9}, {0x0}], 0x3}}], 0x1, 0x9200000000000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800dd8d00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@getlink={0x20, 0x12, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2e82, 0x2}}, 0x20}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40054) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) 7.231058648s ago: executing program 1 (id=3284): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005fe2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600060007000000080000000900000000040000323f4cc5127a57d56d1113799b779f4e8c08e8ca4270"], 0x12e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8004}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000002c0), 0x9, 0x400000) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x134, 0x4}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008050) r5 = syz_open_dev$sg(&(0x7f0000000200), 0x8000000000, 0x139100) fcntl$dupfd(r5, 0x0, r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x60e80, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x5}, {0x1}}}, 0x24}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 6.39957493s ago: executing program 0 (id=3285): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/74, 0x4a}, 0x2}, {{0x0, 0xfffffffffffffdca, &(0x7f0000001d40), 0x16, &(0x7f0000001ec0)=""/129, 0x87}, 0x8}], 0x2, 0x1832b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000001400)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207", 0x31, 0x6d91fb6102dc910c, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8, @ANYRES64=r0], 0x0) 6.351221021s ago: executing program 1 (id=3286): r0 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0x7d3c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r5 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x20000}) close(r5) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r6 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f00000009c0)=""/66, 0x42}], 0x2}, 0x81}], 0x1, 0x8040, 0x0) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 6.202995546s ago: executing program 4 (id=3287): syz_open_dev$video(0x0, 0x80000001, 0x8a800) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pimreg0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8004}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20008050) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r6], 0x48}, 0x4, 0x700000000000000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6802000000050104000000000000fff5080000025402010002000000060000000107060000001b0073797a300000000000000000000000000000000000000000000000000000000072a71e2c99c31a0dd41557599f216ffdb5a2a6da7ca67f882ca0b091c029e22eef0e8f3d3d9be6686726939aff1018c31c4c3fe2ccf236e8c2b867a695827725"], 0x268}, 0x1, 0x0, 0x0, 0x8004}, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ubifs\x00', 0x808f53, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 5.347553722s ago: executing program 1 (id=3288): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x95, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, 0x0, 0x24010819) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)}], 0x1}, 0x0) io_setup(0x8, &(0x7f00000001c0)) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0) r4 = syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000001840)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="260302000000b23b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_pidfd_open(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000340)={0x8, r7}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x4e, 0x9e, 0x9, 0x40, 0x499, 0x101a, 0x4426, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x80, 0x80, 0x0, [{{0x9, 0x4, 0x3d, 0x5, 0x1, 0x7f, 0x52, 0xb4, 0x8, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x4, 0x2, 0xf9}}]}}]}}]}}, &(0x7f0000000b00)={0x1, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x5, 0xd9, 0x4e, 0x8, 0x4}, 0x0, 0x0, 0x31}) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x7fff, 0x2, 0x3) 5.22404939s ago: executing program 4 (id=3289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) fcntl$setlease(r4, 0x400, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x5, 0x6, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) fcntl$setlease(r4, 0x400, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xc5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x480, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX, @ANYBLOB="a63ea75050e76243c885b1c1e5998759a7771dfee1913a6ba736eb31aa94c36fe4d002a985f1a983356d2be9bb3eeae0b49b63d76c70a5836caf11be179e74900a658892c74882c7e6b8aaf8d0e364b4e4214b45fcfc0e759abeab050fc64552ee8919cf088999938e3be21821703d188c8110917394acce097f8e8d07db3fe383ac2f2c05f0513b244324d4fb9d9667c1f54b1db0a0e6ff775f7bad8aba6b951e35aaa95ab991bddf48f2c7cf000000"]) 4.435042097s ago: executing program 7 (id=3290): r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) clock_nanosleep(0x1, 0xca9a3b, &(0x7f00000001c0)={0x77359400}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x4000080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f0000000040), 0x1004) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553ff73042486134529f62054673877e37"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x80002, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) getpid() (async) sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) (async) clock_nanosleep(0x1, 0xca9a3b, &(0x7f00000001c0)={0x77359400}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x4000080) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ptrace$ARCH_GET_GS(0x1e, r1, &(0x7f0000000040), 0x1004) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) newfstatat(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x1000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553ff73042486134529f62054673877e37"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) 4.221369269s ago: executing program 4 (id=3291): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x7c2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x52) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="da6177bc1174ab83467e25dea6b927ae8f916bfa032d867e8684115f9d9a7ce3e716ecf08ff5f5c1d92842aa", 0x2c}, {&(0x7f0000000100)="d77823fdf7c98e", 0x7}, {&(0x7f0000000180)="920c4012e2606ad23ada45b43958832ec77bef9bdb7dd6cb91101155", 0x1c}, {&(0x7f0000000380)="8a53998d6a1acb6032d38c7a323375eefa12bb3651100af92e054cc87e45cd81d0e32f01deb1251c7e4e3aaaadd9b4ef1e0d6719af6378e516013f2d8822a2cc6e2d1af61c459376ee2091b5cdb4bd3a088b7f0441af8ddeefebe2184681b8bf4f414877d34f57959c2dd06f7b65d0439aa878e5e49a8203693efeaa16cb20dd70a6a9822696ade4c1e67f65807a9cc215bbb23728e614b8d657b91c9b261988337edc76abecc58c6448a848f90d668149375d7cb7da57814bf1ad7a896dbf66847c6c6fad1d21b63e3216aea8e362baf767dd", 0xd3}, {&(0x7f0000000480)="112548b419186b391658ed5eb23d114f11a1a479123d711ae8212f361a9b277c8f928c4d4041a8f7be8ee212fb21d678381c3412a56e9d08581e8070b3e4b2d264ebb6faf241efcb48e5732f7e4564dd4d1f7c292e0facc4d558aa5b113029e96bbf6b936ac4c50a20cb06cf0c86e05943ee815d6ad686d81858c09ba67f180f2dd4b3953e15628c3a7d2d3feb37d597938a079ed4f157", 0x97}], 0x5, &(0x7f00000028c0)=ANY=[@ANYRES16=r4, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32, @ANYBLOB="06000000040000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x20000800}}], 0x1, 0x4000814) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.002115075s ago: executing program 7 (id=3292): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe0000010000ddff070001"], 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x10000049, 0x12) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r2, 0x0) (async) ioctl(r2, 0x1, &(0x7f0000000080)) (async) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x40014) 3.86706381s ago: executing program 0 (id=3293): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$set_timeout(0xf, r8, 0x3ff) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000280)) r10 = socket$packet(0x11, 0x3, 0x300) r11 = fcntl$dupfd(r9, 0x0, r10) ioctl$VHOST_SET_VRING_ADDR(r11, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) 3.656520547s ago: executing program 0 (id=3294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$video(&(0x7f0000000140), 0x7, 0xc0000) ioctl$VIDIOC_G_AUDIO(r5, 0x80345621, &(0x7f0000001b40)) shutdown(0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xa, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.597629667s ago: executing program 7 (id=3295): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) r2 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000100)=0x2) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f00000000c0)=0x32) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) migrate_pages(r4, 0x8, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x5) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0x8000000000000003, 0x16b142) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0x9, @vbi={0x7, 0x5, 0x24a2, 0x34363248, [0x7fffffff, 0x10001], [0xa, 0x3], 0x1}}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x4000800) syz_usb_connect(0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r5, 0xff08, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x18, 0x3, 0x3) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r11, @ANYBLOB="8014000004848dd105210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 3.419065879s ago: executing program 0 (id=3296): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f00000004c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000440)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d40100001a0013070000000000000000fe8000000000000000000000000000aa7f00000100000000000000000000000000000000000000020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000033c000000ac1414000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000b40000000000000000000000000000000000000000000000000000200000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000100002350000020000006000000000000000e10001"], 0x1d4}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r1, r1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1792c1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xd4) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, 0x0) setpgid(0x0, r6) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00') ioctl$AUTOFS_IOC_CATATONIC(r7, 0x9362, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r4, &(0x7f0000000740)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000050100002020702500000000002020207b0007010000f8ffffffb702000008000000b75603000000000000850000008a000000"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 3.395591527s ago: executing program 5 (id=3297): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xed, 0x0, 0x33f2}) 3.200250735s ago: executing program 5 (id=3298): r0 = socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0x7d3c, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r5 = io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x20000}) close(r5) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r6 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}, {&(0x7f00000009c0)=""/66, 0x42}], 0x2}, 0x81}], 0x1, 0x8040, 0x0) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 3.039066495s ago: executing program 4 (id=3299): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005fe2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600060007000000080000000900000000040000323f4cc5127a57d56d1113799b779f4e8c08e8ca"], 0x12e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$video(0x0, 0x80000001, 0x8a800) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8004}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x9, 0x400000) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x134, 0x4}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008050) r6 = syz_open_dev$sg(&(0x7f0000000200), 0x8000000000, 0x139100) fcntl$dupfd(r6, 0x0, r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x60e80, 0x0) ioctl$PPPIOCGFLAGS1(r7, 0x5319, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0x5}, {0x1}}}, 0x24}}, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 2.088004167s ago: executing program 5 (id=3300): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty}, 0xc) epoll_create(0x10000e9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x6}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_elf64(r6, &(0x7f0000000ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x12, 0x2c, 0x7, 0x7fffffff, 0x0, 0x6, 0x9, 0x25b, 0x40, 0x24e, 0x7, 0x7, 0x38, 0x4, 0x101, 0x4, 0x7}, [{0x4, 0x42b, 0x92, 0xe, 0x2, 0x1, 0x2}, {0x7, 0xfffff6b7, 0x1, 0x2e9, 0x101, 0x0, 0x0, 0x1}, {0x6, 0x2, 0x338f, 0x6, 0x1c, 0x1000, 0x200, 0x3}, {0x6474e551, 0x0, 0x1e25, 0xd8b, 0x40, 0x92ac, 0x1, 0x21}], "ba08a5930c859cc2eba5b7b15ce207ae9e397235a58e4dcb3c1bae97e219899fb2225442cedbedfd1012cf770d59974a415cfc1901b819929e4c55c7323ff57bf354877febfd7182e6a1de00fb4b8b4386afcc84809b90a0607a4346b222a844a28403e2d949fe8eb97c9b49f8d491c8cf7b88def0af0f3053d60ca60aa7297e2ba24d6ad6bfbc6a8608436d2d274d7686dbe3e5639b99b67f549f1982255f19faa419fb659b9a51efef281a783af2f7016634ccd833479c7ce31ac1be35924e56b5ceb60b819bf1add2260ba125e0a9cdefc302b857b35b01", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9f9) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/30, 0x1e}], 0x1}, 0x1c}, {{0x0, 0x0, 0x0}, 0x1007}], 0x2, 0x0, 0x0) 1.912860196s ago: executing program 1 (id=3301): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r0 = syz_usb_connect$cdc_ecm(0x1, 0xcb, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x1, 0x1, 0x2, 0xb0, 0x6e, [{{0x9, 0x4, 0x0, 0xe9, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0xfff6}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x7, 0x1, 0x4}, [@country_functional={0xa, 0x24, 0x7, 0x3, 0x4, [0x2, 0xfff9]}, @mdlm_detail={0x6b, 0x24, 0x13, 0x3, "249a72e829785787d9e0dbe0fc81b8011f67c34db02947969071364681dd08d20c345f73d76b137cb454673bdb557f239fdd3662678a9be10a5bdb072e7a4738b3ac4180cd4a1654465511ce177025e97cca8a57b58c0bc7f3bbbfb503b8b850876b48a9b1bc2a"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xc, 0xff}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x54, 0x5, 0x7}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x8, 0x6, 0x4, 0x20, 0x9}, 0xd5, &(0x7f0000000480)={0x5, 0xf, 0xd5, 0x1, [@generic={0xd0, 0x10, 0x1, "0c2ce3c4f8f9d843daa784c80b933be9b15a3ae2197273dcf354ddbf11372d39ab52b9c5afe55b459a606dcab884e12c59c92b88065d84e337a4a0984c1fa671f75edd6d66eed570b1c55f341e543395a70073bda1f982a29223bd97a6af15560d03843dd1358a338af2216a3094a48d790f23a77ab4ee92676e45700b579aef7ce49365eca19406f206f8dfd8def9e845f8f01c5a9180a0fae4c1768273668570f5f26959076a2d309fd438c0931af8c5ffe6425cf95e5570eba51e3c0d501bfd9652b22cb9befdaceabf7b5d"}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2001}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, &(0x7f0000000280)={0x0, 0x3, 0x39, {0x39, 0x3, "7f87cb9a2d276026ec68b8153e3257dd880011d0bc15858a81e2ff810e5d12d0a4b15e5fcbd4a8d6ca9d59d69728b2bcc79fb714f94fce"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, &(0x7f0000000600)={0x40, 0x9, 0xf1, "6df2fc4389f7f10319cf5c9cb01df712ac511b3a932f379bf30b960db89009365e8df3f5af8b9c217e224184b860c12baa0b9cfd6250b76758cffa89d8b8ae9078b1beaa67d7d811cd32d4f90b946c3d4d99fff735d7214c3aad3c19c6bc22fd9c2e3a30f20dd7a65ceaecc58170e7ee87b1e0f845bd36f52137b2ea02b7e77cc2c9498ea7c6f8486106e50d5cd2690cf4535b6070505a2d89822466553a5c9e65ed56f0b9929bcae16807720fcfcbc35ae465d9501a5d5ae700259769eccf7a09efc04b6addc41b7639f1b0b30cac35119b939eacacd81a902de7865e321ea8ab574d640a260ae462105e36c7637382c8"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x20}}) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = syz_clone(0x99a1cfb1edd42446, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000140)='\x18\x00\x00vD\x17\rf\x90V\xf1X\xb3\x8fv\xa6\xa3UU\xf1P\xa9\xab\xcc.\xdd\xf8\xef\xf1\x92wc\x02\xeb\xb0\x8ba~\x10\xce\xab\xf8\xb93ytz\xf6\xa2<\x9b\x80\x89\xb5l\b\xa3Z^\xd8\x16\x11n\xc8V,\x1d\x18\xc7\x9b\xf2\xdb\x16\xbe\xd2l\\\xfb|\xfaC\xddL\x00\x00\x00\x00\x04\a\x12\xa9v\xa1\x0f\xa3|\x85\xa4\x8a\xb2\xa5j\xfbe\xd4\xc7-\xcff\x15\x10O\xceKRL\x84\xbb\xa0\xd0;\xc0\xf9j]\xecp\x11\xf4\xda(\xd7^\xc6\xfe\xc3\xc5;\xad\x94X\xda\xb5\xa2\xe8\r\x11\xa5m\xf3OC\x82\xed\x03=\xc5+A\xab\xb6y\xf9P8A\xa7\f\xcf6\xba\x9en\x11\nj\x90\xd3mp\x05\\;Z\x86j\xb2\x84\xea\x15\xef\xd8K\x9e\x98\xb8\xb7\x8a\x9e\xf9\x03\"a]\fm\xbe6\xbf\x897G', 0x40, 0x1b4, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigqueueinfo(0x0, 0x29, 0x0) stat(&(0x7f0000000580)='./cgroup\x00', 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x6}, 0x0, 0x0, 0x4, 0x9, 0x0, 0x1, 0xeb4f, 0xff, 0x7, 0x8, r1, r1}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0xf2ffffff) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000040)=0xfff) syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) 1.855041984s ago: executing program 4 (id=3302): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20200e0752d7cc66b7f420000000000004e200018907804fc0000e8c20ebb380864c60800"/58], 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0xfffffffffffffd57, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0x1}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefc", 0xb0}], 0x2}, 0x0) recvmmsg(r8, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0) 1.036787366s ago: executing program 0 (id=3303): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f000040b000/0x1000)=nil, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x6, &(0x7f0000000180)) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0xea100, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x3, r5}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) socket$netlink(0x10, 0x3, 0x6) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f000019e000/0x1000)=nil, 0x1000}, 0x1}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.036210797s ago: executing program 5 (id=3304): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x7, 0x8, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket(0x1f, 0x5, 0x0) prctl$PR_GET_SECUREBITS(0x1b) bind$packet(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='hwmon_attr_show_string\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r4, 0x400, 0x1) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) mount$nfs4(&(0x7f0000000880)='clsact\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000940), 0x1, &(0x7f0000000b00)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008c}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) 829.090391ms ago: executing program 4 (id=3305): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r2, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="401072"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x60, 0x1, 0x4, "28dffad9"}, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x6, 0x0]}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 49.587927ms ago: executing program 5 (id=3306): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x502, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc}}}}}]}}]}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0406"], 0x6) creat(0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) socket(0x2b, 0x80801, 0x1) (async) r2 = socket(0x2b, 0x80801, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002c0500fbdbdf251000000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) setuid(0xee01) (async) setuid(0xee01) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40280) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') setns(r6, 0x20000) (async) setns(r6, 0x20000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = getpgid(0x0) fcntl$setownex(r8, 0xf, &(0x7f0000000140)={0x2, r9}) (async) fcntl$setownex(r8, 0xf, &(0x7f0000000140)={0x2, r9}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r10}, 0x18) modify_ldt$read_default(0x2, 0x0, 0x0) (async) modify_ldt$read_default(0x2, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f000001f600)='S', 0x1}], 0x1, 0x0, 0x0, 0x20008000}}], 0x1, 0x20000015) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) (async) connect$inet6(r2, &(0x7f00000004c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000440), 0x4) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006) (async) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 0 (id=3307): syz_open_dev$video(&(0x7f0000000200), 0x5, 0x2800) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) setrlimit(0xb, &(0x7f0000000280)={0x3, 0x3}) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (rerun: 64) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async, rerun: 64) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000003e0001000000080000000000010000008400000024000180200010801a000b80ea16cd75d4b7fef9ae54f5768dd2ea9602911c20603100000c0002000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0xfffffffa, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001, 0x2}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x15}, 0x80) kernel console output (not intermixed with test programs): 728.934679][T16397] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2697'. [ 730.097163][T16420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 730.393720][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 730.393731][ T30] audit: type=1400 audit(2000000721.348:1562): avc: denied { bind } for pid=16416 comm="syz.4.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 730.935461][T16427] FAULT_INJECTION: forcing a failure. [ 730.935461][T16427] name failslab, interval 1, probability 0, space 0, times 0 [ 730.948333][T16427] CPU: 1 UID: 0 PID: 16427 Comm: syz.1.2706 Not tainted syzkaller #0 PREEMPT(full) [ 730.948354][T16427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 730.948363][T16427] Call Trace: [ 730.948368][T16427] [ 730.948374][T16427] dump_stack_lvl+0x16c/0x1f0 [ 730.948398][T16427] should_fail_ex+0x512/0x640 [ 730.948418][T16427] ? __kmalloc_noprof+0xbf/0x510 [ 730.948436][T16427] ? alloc_pipe_info+0x1ec/0x590 [ 730.948453][T16427] should_failslab+0xc2/0x120 [ 730.948472][T16427] __kmalloc_noprof+0xd2/0x510 [ 730.948493][T16427] alloc_pipe_info+0x1ec/0x590 [ 730.948513][T16427] splice_direct_to_actor+0x77d/0xa30 [ 730.948532][T16427] ? __pfx_direct_splice_actor+0x10/0x10 [ 730.948547][T16427] ? inode_has_perm+0x16f/0x1d0 [ 730.948566][T16427] ? file_has_perm+0x27d/0x350 [ 730.948583][T16427] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 730.948602][T16427] ? __pfx_file_has_perm+0x10/0x10 [ 730.948626][T16427] do_splice_direct+0x174/0x240 [ 730.948643][T16427] ? __pfx_do_splice_direct+0x10/0x10 [ 730.948660][T16427] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 730.948677][T16427] ? bpf_lsm_file_permission+0x9/0x10 [ 730.948696][T16427] ? security_file_permission+0x71/0x210 [ 730.948720][T16427] ? rw_verify_area+0xcf/0x6c0 [ 730.948746][T16427] do_sendfile+0xb06/0xe50 [ 730.948765][T16427] ? __pfx_do_sendfile+0x10/0x10 [ 730.948780][T16427] ? __fget_files+0x20e/0x3c0 [ 730.948803][T16427] __x64_sys_sendfile64+0x1d8/0x220 [ 730.948821][T16427] ? ksys_write+0x1ac/0x250 [ 730.948836][T16427] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 730.948862][T16427] do_syscall_64+0xcd/0x4c0 [ 730.948885][T16427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.948902][T16427] RIP: 0033:0x7fc02818ebe9 [ 730.948915][T16427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.948929][T16427] RSP: 002b:00007fc02908c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 730.948945][T16427] RAX: ffffffffffffffda RBX: 00007fc0283c6090 RCX: 00007fc02818ebe9 [ 730.948956][T16427] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 730.948965][T16427] RBP: 00007fc02908c090 R08: 0000000000000000 R09: 0000000000000000 [ 730.948974][T16427] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000001 [ 730.948983][T16427] R13: 00007fc0283c6128 R14: 00007fc0283c6090 R15: 00007ffdba139898 [ 730.949004][T16427] [ 731.185818][ C1] vkms_vblank_simulate: vblank timer overrun [ 731.475075][T16437] block nbd0: Attempted send on invalid socket [ 731.648055][T16437] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 731.675231][T16437] block nbd0: Attempted send on invalid socket [ 731.689192][T16437] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 731.698641][T16437] Mount JFS Failure: -5 [ 731.808953][T16452] sp0: Synchronizing with TNC [ 731.850954][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2711'. [ 731.884019][ T30] audit: type=1400 audit(2000000722.838:1564): avc: denied { read write } for pid=16445 comm="syz.1.2711" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 731.999635][ T30] audit: type=1400 audit(2000000722.838:1565): avc: denied { open } for pid=16445 comm="syz.1.2711" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 732.073987][ T30] audit: type=1400 audit(2000000722.838:1566): avc: denied { ioctl } for pid=16445 comm="syz.1.2711" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 732.134938][ T30] audit: type=1400 audit(2000000722.868:1567): avc: denied { create } for pid=16454 comm="syz.7.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 732.139606][ T5908] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 732.160959][ T30] audit: type=1400 audit(2000000722.868:1568): avc: denied { read } for pid=16454 comm="syz.7.2712" dev="nsfs" ino=4026534000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 732.185075][ T30] audit: type=1400 audit(2000000722.868:1569): avc: denied { open } for pid=16454 comm="syz.7.2712" path="net:[4026534000]" dev="nsfs" ino=4026534000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 732.275465][ T30] audit: type=1400 audit(2000000722.868:1570): avc: denied { create } for pid=16454 comm="syz.7.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 732.304405][ T30] audit: type=1400 audit(2000000722.868:1571): avc: denied { bind } for pid=16454 comm="syz.7.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 732.325912][ T30] audit: type=1400 audit(2000000722.868:1572): avc: denied { ioctl } for pid=16454 comm="syz.7.2712" path="socket:[53017]" dev="sockfs" ino=53017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 732.389719][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 732.397976][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.408512][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 732.417076][ T5908] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 732.427322][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.445466][ T5908] usb 2-1: Product: syz [ 732.450866][ T5908] usb 2-1: Manufacturer: syz [ 732.455502][ T5908] usb 2-1: SerialNumber: syz [ 732.463285][ T5908] usb 2-1: config 0 descriptor?? [ 732.474089][ T5908] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 732.691720][ T5908] usb 2-1: USB disconnect, device number 83 [ 732.697725][ T3498] usb 2-1: Failed to submit usb control message: -71 [ 732.709281][T16445] [U] è [ 732.731251][ T3498] usb 2-1: unable to send the bmi data to the device: -71 [ 732.749314][ T3498] usb 2-1: unable to get target info from device [ 732.768481][ T3498] usb 2-1: could not get target info (-71) [ 732.788348][ T3498] usb 2-1: could not probe fw (-71) [ 733.103358][T16478] futex_wake_op: syz.0.2716 tries to shift op by 32; fix this program [ 733.605077][T16478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 734.048780][T16486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.802076][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 735.802091][ T30] audit: type=1400 audit(2000000726.758:1629): avc: denied { create } for pid=16497 comm="syz.5.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 736.208011][ T30] audit: type=1400 audit(2000000727.158:1630): avc: denied { create } for pid=16502 comm="syz.1.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 736.283186][ T30] audit: type=1400 audit(2000000727.198:1631): avc: denied { create } for pid=16502 comm="syz.1.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 736.676653][ T30] audit: type=1400 audit(2000000727.628:1632): avc: denied { create } for pid=16516 comm="syz.7.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 736.819384][ T30] audit: type=1400 audit(2000000727.768:1633): avc: denied { create } for pid=16516 comm="syz.7.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 736.895663][ T30] audit: type=1400 audit(2000000727.828:1634): avc: denied { read } for pid=16516 comm="syz.7.2726" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 736.975434][ T30] audit: type=1400 audit(2000000727.828:1635): avc: denied { open } for pid=16516 comm="syz.7.2726" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 737.032005][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2728'. [ 737.116246][ T30] audit: type=1400 audit(2000000727.838:1636): avc: denied { ioctl } for pid=16516 comm="syz.7.2726" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 737.163533][ T30] audit: type=1400 audit(2000000727.838:1637): avc: denied { setopt } for pid=16516 comm="syz.7.2726" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 737.184802][ T30] audit: type=1400 audit(2000000727.838:1638): avc: denied { write } for pid=16516 comm="syz.7.2726" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 737.336217][T16530] IPVS: Error connecting to the multicast addr [ 737.594911][T16533] IPVS: Error connecting to the multicast addr [ 737.854327][T16538] FAULT_INJECTION: forcing a failure. [ 737.854327][T16538] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 737.867774][T16538] CPU: 0 UID: 0 PID: 16538 Comm: syz.1.2732 Not tainted syzkaller #0 PREEMPT(full) [ 737.867798][T16538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 737.867808][T16538] Call Trace: [ 737.867814][T16538] [ 737.867820][T16538] dump_stack_lvl+0x16c/0x1f0 [ 737.867846][T16538] should_fail_ex+0x512/0x640 [ 737.867870][T16538] should_fail_alloc_page+0xe7/0x130 [ 737.867891][T16538] prepare_alloc_pages+0x3c2/0x610 [ 737.867918][T16538] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 737.867938][T16538] ? copy_splice_read+0x1a8/0xc20 [ 737.867955][T16538] ? stack_trace_save+0x8e/0xc0 [ 737.867978][T16538] ? __pfx_stack_trace_save+0x10/0x10 [ 737.868002][T16538] ? stack_depot_save_flags+0x29/0x9c0 [ 737.868029][T16538] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 737.868046][T16538] ? kasan_save_stack+0x33/0x60 [ 737.868063][T16538] ? __kasan_kmalloc+0xaa/0xb0 [ 737.868079][T16538] ? copy_splice_read+0x1a8/0xc20 [ 737.868094][T16538] ? do_splice_read+0x282/0x370 [ 737.868109][T16538] ? splice_direct_to_actor+0x2a1/0xa30 [ 737.868125][T16538] ? do_splice_direct+0x174/0x240 [ 737.868141][T16538] ? do_sendfile+0xb06/0xe50 [ 737.868160][T16538] ? __x64_sys_sendfile64+0x1d8/0x220 [ 737.868181][T16538] ? do_syscall_64+0xcd/0x4c0 [ 737.868221][T16538] alloc_pages_bulk_noprof+0x71c/0x1410 [ 737.868247][T16538] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 737.868272][T16538] ? trace_kmalloc+0x2b/0xd0 [ 737.868292][T16538] ? __kmalloc_noprof+0x242/0x510 [ 737.868315][T16538] copy_splice_read+0x1e1/0xc20 [ 737.868338][T16538] ? __pfx_copy_splice_read+0x10/0x10 [ 737.868358][T16538] ? look_up_lock_class+0x6b/0x150 [ 737.868382][T16538] ? lockdep_init_map_type+0x5c/0x280 [ 737.868400][T16538] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 737.868420][T16538] ? __pfx_copy_splice_read+0x10/0x10 [ 737.868437][T16538] do_splice_read+0x282/0x370 [ 737.868456][T16538] splice_direct_to_actor+0x2a1/0xa30 [ 737.868476][T16538] ? __pfx_direct_splice_actor+0x10/0x10 [ 737.868499][T16538] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 737.868518][T16538] ? __pfx_file_has_perm+0x10/0x10 [ 737.868543][T16538] do_splice_direct+0x174/0x240 [ 737.868562][T16538] ? __pfx_do_splice_direct+0x10/0x10 [ 737.868580][T16538] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 737.868599][T16538] ? bpf_lsm_file_permission+0x9/0x10 [ 737.868621][T16538] ? security_file_permission+0x71/0x210 [ 737.868647][T16538] ? rw_verify_area+0xcf/0x6c0 [ 737.868676][T16538] do_sendfile+0xb06/0xe50 [ 737.868697][T16538] ? __pfx_do_sendfile+0x10/0x10 [ 737.868714][T16538] ? __fget_files+0x20e/0x3c0 [ 737.868741][T16538] __x64_sys_sendfile64+0x1d8/0x220 [ 737.868765][T16538] ? ksys_write+0x1ac/0x250 [ 737.868782][T16538] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 737.868812][T16538] do_syscall_64+0xcd/0x4c0 [ 737.868835][T16538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.868853][T16538] RIP: 0033:0x7fc02818ebe9 [ 737.868867][T16538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.868883][T16538] RSP: 002b:00007fc02908c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 737.868899][T16538] RAX: ffffffffffffffda RBX: 00007fc0283c6090 RCX: 00007fc02818ebe9 [ 737.868910][T16538] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 737.868920][T16538] RBP: 00007fc02908c090 R08: 0000000000000000 R09: 0000000000000000 [ 737.868930][T16538] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000001 [ 737.868940][T16538] R13: 00007fc0283c6128 R14: 00007fc0283c6090 R15: 00007ffdba139898 [ 737.868964][T16538] [ 738.527963][T16547] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2735'. [ 738.539974][T16547] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2735'. [ 738.548961][T16547] netlink: 'syz.4.2735': attribute type 1 has an invalid length. [ 738.667795][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2735'. [ 738.707894][T16547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2735'. [ 738.749215][T16547] netlink: 'syz.4.2735': attribute type 18 has an invalid length. [ 738.769500][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2735'. [ 738.801423][T16547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2735'. [ 738.838117][T16547] netlink: 'syz.4.2735': attribute type 18 has an invalid length. [ 739.046581][T16554] block nbd0: Attempted send on invalid socket [ 739.109855][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2738'. [ 739.514486][T16554] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 739.526237][T16554] block nbd0: Attempted send on invalid socket [ 739.533135][T16554] I/O error, dev nbd0, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 739.542845][T16554] Mount JFS Failure: -5 [ 739.726310][T16571] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2741'. [ 740.417955][T16582] FAULT_INJECTION: forcing a failure. [ 740.417955][T16582] name failslab, interval 1, probability 0, space 0, times 0 [ 740.431625][T16582] CPU: 0 UID: 0 PID: 16582 Comm: syz.7.2744 Not tainted syzkaller #0 PREEMPT(full) [ 740.431650][T16582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 740.431660][T16582] Call Trace: [ 740.431666][T16582] [ 740.431673][T16582] dump_stack_lvl+0x16c/0x1f0 [ 740.431698][T16582] should_fail_ex+0x512/0x640 [ 740.431720][T16582] ? __kvmalloc_node_noprof+0x124/0x620 [ 740.431739][T16582] should_failslab+0xc2/0x120 [ 740.431759][T16582] __kvmalloc_node_noprof+0x137/0x620 [ 740.431774][T16582] ? alloc_pages_bulk_noprof+0xa67/0x1410 [ 740.431793][T16582] ? seq_read_iter+0x826/0x12c0 [ 740.431815][T16582] ? seq_read_iter+0x826/0x12c0 [ 740.431829][T16582] seq_read_iter+0x826/0x12c0 [ 740.431858][T16582] proc_reg_read_iter+0x220/0x310 [ 740.431885][T16582] copy_splice_read+0x618/0xc20 [ 740.431909][T16582] ? __pfx_copy_splice_read+0x10/0x10 [ 740.431929][T16582] ? look_up_lock_class+0x6b/0x150 [ 740.431954][T16582] ? lockdep_init_map_type+0x5c/0x280 [ 740.431973][T16582] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 740.431994][T16582] ? __pfx_copy_splice_read+0x10/0x10 [ 740.432010][T16582] do_splice_read+0x282/0x370 [ 740.432031][T16582] splice_direct_to_actor+0x2a1/0xa30 [ 740.432050][T16582] ? __pfx_direct_splice_actor+0x10/0x10 [ 740.432073][T16582] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 740.432092][T16582] ? __pfx_file_has_perm+0x10/0x10 [ 740.432117][T16582] do_splice_direct+0x174/0x240 [ 740.432136][T16582] ? __pfx_do_splice_direct+0x10/0x10 [ 740.432155][T16582] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 740.432172][T16582] ? bpf_lsm_file_permission+0x9/0x10 [ 740.432197][T16582] ? security_file_permission+0x71/0x210 [ 740.432222][T16582] ? rw_verify_area+0xcf/0x6c0 [ 740.432247][T16582] do_sendfile+0xb06/0xe50 [ 740.432268][T16582] ? __pfx_do_sendfile+0x10/0x10 [ 740.432285][T16582] ? __fget_files+0x20e/0x3c0 [ 740.432310][T16582] __x64_sys_sendfile64+0x1d8/0x220 [ 740.432330][T16582] ? ksys_write+0x1ac/0x250 [ 740.432347][T16582] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 740.432377][T16582] do_syscall_64+0xcd/0x4c0 [ 740.432402][T16582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.432420][T16582] RIP: 0033:0x7fe7e398ebe9 [ 740.432435][T16582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.432450][T16582] RSP: 002b:00007fe7e4822038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 740.432466][T16582] RAX: ffffffffffffffda RBX: 00007fe7e3bc6090 RCX: 00007fe7e398ebe9 [ 740.432477][T16582] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 740.432487][T16582] RBP: 00007fe7e4822090 R08: 0000000000000000 R09: 0000000000000000 [ 740.432497][T16582] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000001 [ 740.432507][T16582] R13: 00007fe7e3bc6128 R14: 00007fe7e3bc6090 R15: 00007fffc377e578 [ 740.432530][T16582] [ 741.031714][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 741.031730][ T30] audit: type=1400 audit(2000000731.988:1668): avc: denied { append } for pid=16587 comm="syz.1.2747" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 741.071653][ T30] audit: type=1400 audit(2000000732.028:1669): avc: denied { read write } for pid=16587 comm="syz.1.2747" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 741.073331][T16592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2748'. [ 741.241535][ T30] audit: type=1400 audit(2000000732.028:1670): avc: denied { open } for pid=16587 comm="syz.1.2747" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 741.265193][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.279604][ T30] audit: type=1400 audit(2000000732.068:1671): avc: denied { bind } for pid=16589 comm="syz.0.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 741.300104][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.308487][T16595] input: syz1 as /devices/virtual/input/input30 [ 741.316642][ T30] audit: type=1400 audit(2000000732.068:1672): avc: denied { setopt } for pid=16589 comm="syz.0.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 741.342648][ T30] audit: type=1400 audit(2000000732.078:1673): avc: denied { mounton } for pid=16589 comm="syz.0.2748" path="/524" dev="tmpfs" ino=2866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 741.370416][ T30] audit: type=1400 audit(2000000732.078:1674): avc: denied { mount } for pid=16589 comm="syz.0.2748" name="/" dev="hugetlbfs" ino=54197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 741.395635][ T30] audit: type=1400 audit(2000000732.258:1675): avc: denied { ioctl } for pid=16587 comm="syz.1.2747" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 741.420742][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.488231][ T30] audit: type=1400 audit(2000000732.438:1676): avc: denied { create } for pid=16583 comm="syz.7.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 741.515447][ T30] audit: type=1400 audit(2000000732.468:1677): avc: denied { setopt } for pid=16583 comm="syz.7.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 742.560226][T16610] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 742.702533][T16609] IPVS: stopping master sync thread 16610 ... [ 742.976639][T16620] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2755'. [ 743.179614][ T5908] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 743.331615][ T5908] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 743.341417][ T5908] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 743.353185][ T5908] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 255, setting to 64 [ 743.364129][ T5908] usb 1-1: config 0 interface 0 has no altsetting 0 [ 743.373549][ T5908] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 743.382891][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.391046][ T5908] usb 1-1: Product: syz [ 743.395338][ T5908] usb 1-1: Manufacturer: syz [ 743.400150][ T5908] usb 1-1: SerialNumber: syz [ 743.406132][ T5908] usb 1-1: config 0 descriptor?? [ 743.412151][T16619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 743.966962][T16627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2756'. [ 744.022079][T16628] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 744.134659][ T5908] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input31 [ 745.092756][ T10] hid (null): unknown global tag 0xc [ 745.102005][ T10] hid-generic 0006:0007:0008.0028: unknown main item tag 0x3 [ 745.110269][ T10] hid-generic 0006:0007:0008.0028: unknown global tag 0xc [ 745.117987][ T10] hid-generic 0006:0007:0008.0028: item 0 1 1 12 parsing failed [ 745.341142][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2760'. [ 745.451351][ T10] hid-generic 0006:0007:0008.0028: probe with driver hid-generic failed with error -22 [ 746.010678][ T5985] usb 1-1: USB disconnect, device number 90 [ 746.053707][T16652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2762'. [ 746.237409][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 746.237431][ T30] audit: type=1400 audit(2000000737.188:1698): avc: denied { create } for pid=16663 comm="syz.4.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 746.296042][ T30] audit: type=1400 audit(2000000737.218:1699): avc: denied { write } for pid=16663 comm="syz.4.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 746.499679][ T5985] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 746.689773][ T5985] usb 1-1: device descriptor read/64, error -71 [ 746.712820][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.729610][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.939728][ T5985] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 747.089945][ T5985] usb 1-1: device descriptor read/64, error -71 [ 747.133794][ T30] audit: type=1400 audit(2000000738.088:1700): avc: denied { accept } for pid=16668 comm="syz.4.2769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 747.159321][ T30] audit: type=1400 audit(2000000738.088:1701): avc: denied { append } for pid=16668 comm="syz.4.2769" name="qrtr-tun" dev="devtmpfs" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 747.202499][ T5985] usb usb1-port1: attempt power cycle [ 747.269294][ T30] audit: type=1400 audit(2000000738.218:1702): avc: denied { set_context_mgr } for pid=16670 comm="syz.4.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 747.325617][ T30] audit: type=1400 audit(2000000738.248:1703): avc: denied { map } for pid=16670 comm="syz.4.2770" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 747.570833][ T5985] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 747.690023][ T5985] usb 1-1: device descriptor read/8, error -71 [ 748.061603][ T5985] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 748.090487][ T5985] usb 1-1: device descriptor read/8, error -71 [ 748.200590][ T5985] usb usb1-port1: unable to enumerate USB device [ 748.354176][T16687] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.937303][ T30] audit: type=1400 audit(2000000739.888:1704): avc: denied { create } for pid=16696 comm="syz.5.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 748.942549][T16697] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2778'. [ 748.966338][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2778'. [ 749.124879][T16704] netlink: 'syz.4.2777': attribute type 12 has an invalid length. [ 749.154644][ T30] audit: type=1400 audit(2000000740.108:1705): avc: denied { connect } for pid=16694 comm="syz.4.2777" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 749.227759][T16706] IPVS: Error connecting to the multicast addr [ 749.268196][ T30] audit: type=1400 audit(2000000740.218:1706): avc: denied { connect } for pid=16694 comm="syz.4.2777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 749.327594][ T30] audit: type=1400 audit(2000000740.218:1707): avc: denied { name_connect } for pid=16694 comm="syz.4.2777" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 749.639140][T16718] vlan0: entered promiscuous mode [ 749.644316][T16718] bridge0: entered promiscuous mode [ 750.947859][T16735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 751.686657][T16750] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 751.815507][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 751.815522][ T30] audit: type=1400 audit(2000000742.768:1713): avc: denied { write } for pid=16754 comm="syz.7.2795" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 751.849617][T10460] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 751.967867][ T30] audit: type=1400 audit(2000000742.918:1714): avc: denied { execute } for pid=16754 comm="syz.7.2795" name="file1" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 752.002831][ T30] audit: type=1400 audit(2000000742.918:1715): avc: denied { execute_no_trans } for pid=16754 comm="syz.7.2795" path="/124/file1" dev="tmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 752.076093][T10460] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.088241][T10460] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.134568][T10460] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 752.157058][T10460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.208866][T10460] usb 2-1: config 0 descriptor?? [ 752.478609][T16769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2799'. [ 752.742674][ T30] audit: type=1400 audit(2000000743.418:1716): avc: denied { ioctl } for pid=16766 comm="syz.4.2799" path="socket:[54939]" dev="sockfs" ino=54939 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 752.796411][ T30] audit: type=1400 audit(2000000743.428:1717): avc: denied { nlmsg_read } for pid=16766 comm="syz.4.2799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 753.000194][T10460] cp2112 0003:10C4:EA90.0029: item fetching failed at offset 5/7 [ 753.011247][ T30] audit: type=1400 audit(2000000743.968:1718): avc: denied { create } for pid=16774 comm="syz.7.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 753.015682][T10460] cp2112 0003:10C4:EA90.0029: parse failed [ 753.042306][T10460] cp2112 0003:10C4:EA90.0029: probe with driver cp2112 failed with error -22 [ 753.285799][T16743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.359444][T16789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2802'. [ 753.460491][T16743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.675061][T10460] usb 2-1: USB disconnect, device number 84 [ 754.194311][ T30] audit: type=1400 audit(2000000745.148:1719): avc: denied { read write } for pid=16800 comm="syz.1.2805" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 754.257714][ T30] audit: type=1400 audit(2000000745.178:1720): avc: denied { open } for pid=16800 comm="syz.1.2805" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 754.576794][ T30] audit: type=1400 audit(2000000745.528:1721): avc: denied { name_connect } for pid=16808 comm="syz.5.2807" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 754.724842][T16815] Invalid ELF header magic: != ELF [ 754.734229][ T30] audit: type=1400 audit(2000000745.678:1722): avc: denied { module_load } for pid=16804 comm="syz.1.2806" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 754.917933][T16816] netlink: 'syz.5.2807': attribute type 10 has an invalid length. [ 754.931579][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2807'. [ 756.401374][T16775] delete_channel: no stack [ 756.969835][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 756.969866][ T30] audit: type=1400 audit(2000000747.918:1733): avc: denied { write } for pid=16841 comm="syz.1.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 757.078727][T16850] lo speed is unknown, defaulting to 1000 [ 757.085757][T16850] lo speed is unknown, defaulting to 1000 [ 757.092734][T16850] wlan0 speed is unknown, defaulting to 1000 [ 757.314194][T16846] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 758.184788][T16863] IPVS: Error connecting to the multicast addr [ 758.326844][ T30] audit: type=1400 audit(2000000749.278:1734): avc: denied { read } for pid=16868 comm="syz.4.2821" name="cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 758.394477][ T30] audit: type=1400 audit(2000000749.278:1735): avc: denied { open } for pid=16868 comm="syz.4.2821" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 758.431466][T16870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.485296][ T30] audit: type=1400 audit(2000000749.438:1736): avc: denied { create } for pid=16868 comm="syz.4.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 758.889970][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 759.166830][ T10] usb 2-1: config 0 has no interfaces? [ 759.218585][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 759.249437][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.282699][ T10] usb 2-1: Product: syz [ 759.286862][ T10] usb 2-1: Manufacturer: syz [ 759.308620][ T10] usb 2-1: SerialNumber: syz [ 759.332687][ T10] usb 2-1: config 0 descriptor?? [ 759.957731][T16890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16890 comm=syz.7.2824 [ 760.405462][ T30] audit: type=1400 audit(2000000750.858:1737): avc: denied { create } for pid=16887 comm="syz.7.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 761.172620][ T30] audit: type=1400 audit(2000000750.858:1738): avc: denied { write } for pid=16887 comm="syz.7.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 761.309184][ T30] audit: type=1400 audit(2000000751.888:1739): avc: denied { write } for pid=16892 comm="syz.5.2826" path="socket:[55912]" dev="sockfs" ino=55912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 761.310998][T16901] tipc: New replicast peer: 255.255.255.255 [ 761.340468][T16901] tipc: Enabled bearer , priority 10 [ 761.599765][ T30] audit: type=1400 audit(2000000752.128:1740): avc: denied { write } for pid=16891 comm="syz.4.2825" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 761.719950][ T30] audit: type=1400 audit(2000000752.128:1741): avc: denied { open } for pid=16891 comm="syz.4.2825" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 761.868163][ T30] audit: type=1400 audit(2000000752.148:1742): avc: denied { mount } for pid=16873 comm="syz.1.2822" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 762.216474][T16919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 762.484218][ T30] audit: type=1400 audit(2000000752.148:1743): avc: denied { execute } for pid=16873 comm="syz.1.2822" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=55919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 762.529602][ T30] audit: type=1400 audit(2000000752.728:1744): avc: denied { getopt } for pid=16905 comm="syz.5.2828" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 763.661394][T16930] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2834'. [ 763.685253][ T30] audit: type=1400 audit(2000000754.638:1745): avc: denied { firmware_load } for pid=16928 comm="syz.7.2834" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 763.879826][ T30] audit: type=1400 audit(2000000754.638:1746): avc: denied { mount } for pid=16928 comm="syz.7.2834" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 763.904910][ T30] audit: type=1400 audit(2000000754.638:1747): avc: denied { bind } for pid=16928 comm="syz.7.2834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 764.036168][ T30] audit: type=1400 audit(2000000754.858:1748): avc: denied { write } for pid=16926 comm="syz.4.2832" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 764.151335][ T30] audit: type=1400 audit(2000000755.098:1749): avc: denied { unmount } for pid=14161 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 764.734804][ T30] audit: type=1400 audit(2000000755.338:1750): avc: denied { bind } for pid=16933 comm="syz.4.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 765.079087][ T30] audit: type=1400 audit(2000000755.348:1751): avc: denied { listen } for pid=16933 comm="syz.4.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 765.193492][ T30] audit: type=1400 audit(2000000755.348:1752): avc: denied { setopt } for pid=16933 comm="syz.4.2836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 765.806586][ T10] usb 2-1: USB disconnect, device number 85 [ 766.267434][T16964] 9pnet_fd: Insufficient options for proto=fd [ 766.471851][T16966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2841'. [ 766.709663][T10460] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 766.950978][T10460] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 766.959142][T10460] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.969756][T10460] usb 2-1: config 0 has no interface number 0 [ 766.981872][T10460] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 767.432691][T10460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.447197][T10460] usb 2-1: config 0 descriptor?? [ 767.469037][T10460] usb 2-1: bad CDC descriptors [ 767.596190][T16976] vlan2: entered promiscuous mode [ 767.607305][T16976] bridge0: entered promiscuous mode [ 767.613968][T16976] vlan2: entered allmulticast mode [ 767.625969][T16976] bridge0: entered allmulticast mode [ 767.666325][ T5858] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 767.768169][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 767.768199][ T30] audit: type=1400 audit(2000000758.708:1755): avc: denied { unlink } for pid=10471 comm="syz-executor" name="file0" dev="tmpfs" ino=2379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 767.908145][T16985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 768.143810][ T5858] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 768.485660][T16998] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2848'. [ 768.900139][T17008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.434218][ T5985] usb 2-1: USB disconnect, device number 86 [ 769.737118][T17014] netlink: 'syz.1.2854': attribute type 27 has an invalid length. [ 770.624091][T17029] block nbd1: Attempted send on invalid socket [ 770.639572][T17029] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 770.648976][T17029] block nbd1: Attempted send on invalid socket [ 770.655208][T17029] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 770.669631][T17029] Mount JFS Failure: -5 [ 772.100554][ T30] audit: type=1400 audit(2000000762.998:1756): avc: denied { mounton } for pid=17036 comm="syz.5.2858" path="/453/file0" dev="tmpfs" ino=2401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 772.214584][ T30] audit: type=1400 audit(2000000763.148:1757): avc: denied { read } for pid=17043 comm="syz.4.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 773.018077][ T30] audit: type=1400 audit(2000000763.958:1758): avc: denied { connect } for pid=17054 comm="syz.1.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 774.265903][ T30] audit: type=1400 audit(2000000765.218:1759): avc: denied { ioctl } for pid=17063 comm="syz.0.2864" path="socket:[56381]" dev="sockfs" ino=56381 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 775.053403][T17088] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2869'. [ 775.105124][ T30] audit: type=1400 audit(2000000766.058:1760): avc: denied { sqpoll } for pid=17083 comm="syz.7.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 775.144327][ T30] audit: type=1400 audit(2000000766.098:1761): avc: denied { bind } for pid=17086 comm="syz.4.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 775.168173][ T30] audit: type=1400 audit(2000000766.098:1762): avc: denied { setopt } for pid=17086 comm="syz.4.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 775.482045][ T30] audit: type=1400 audit(2000000766.438:1763): avc: denied { create } for pid=17093 comm="syz.0.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 775.605911][ T30] audit: type=1400 audit(2000000766.558:1764): avc: denied { read } for pid=17098 comm="syz.7.2872" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 777.404781][ T30] audit: type=1400 audit(2000000766.558:1765): avc: denied { open } for pid=17098 comm="syz.7.2872" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 777.429030][ T30] audit: type=1400 audit(2000000766.558:1766): avc: denied { ioctl } for pid=17098 comm="syz.7.2872" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 777.599666][ T30] audit: type=1400 audit(2000000768.548:1767): avc: denied { accept } for pid=17106 comm="syz.7.2874" lport=41340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 777.747750][T17114] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 777.765575][T17115] netlink: 'syz.4.2877': attribute type 1 has an invalid length. [ 777.776308][T17115] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2877'. [ 777.851722][T17114] raw_sendmsg: syz.4.2877 forgot to set AF_INET. Fix it! [ 778.993173][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2884'. [ 779.593283][T17148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2886'. [ 779.661892][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2886'. [ 779.679790][T17148] netlink: 'syz.5.2886': attribute type 7 has an invalid length. [ 779.717056][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 779.717078][ T30] audit: type=1400 audit(2000000770.668:1769): avc: denied { ioctl } for pid=17150 comm="syz.4.2887" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 781.138129][ T30] audit: type=1400 audit(2000000772.078:1770): avc: denied { mount } for pid=17156 comm="syz.1.2889" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 781.272668][ T30] audit: type=1400 audit(2000000772.228:1771): avc: denied { setopt } for pid=17156 comm="syz.1.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 781.630547][T17175] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2892'. [ 781.810095][ T30] audit: type=1400 audit(2000000772.758:1772): avc: denied { mount } for pid=17169 comm="syz.4.2894" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 782.006263][T17181] sctp: [Deprecated]: syz.7.2895 (pid 17181) Use of int in max_burst socket option deprecated. [ 782.006263][T17181] Use struct sctp_assoc_value instead [ 783.393198][ T30] audit: type=1400 audit(2000000774.338:1773): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 783.663551][ T30] audit: type=1400 audit(2000000774.608:1774): avc: denied { read } for pid=17195 comm="syz.4.2899" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 783.699821][ T30] audit: type=1400 audit(2000000774.618:1775): avc: denied { open } for pid=17195 comm="syz.4.2899" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 783.812775][ T30] audit: type=1400 audit(2000000774.768:1776): avc: denied { create } for pid=17195 comm="syz.4.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 783.846504][ T30] audit: type=1400 audit(2000000774.768:1777): avc: denied { listen } for pid=17195 comm="syz.4.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 783.867385][ T30] audit: type=1400 audit(2000000774.768:1778): avc: denied { accept } for pid=17195 comm="syz.4.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 785.541157][ T30] audit: type=1400 audit(2000000774.988:1779): avc: denied { getopt } for pid=17193 comm="syz.1.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 785.593230][ T30] audit: type=1400 audit(2000000776.518:1780): avc: denied { map } for pid=17210 comm="syz.7.2902" path="socket:[57601]" dev="sockfs" ino=57601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 785.729574][ T30] audit: type=1400 audit(2000000776.518:1781): avc: denied { accept } for pid=17210 comm="syz.7.2902" path="socket:[57601]" dev="sockfs" ino=57601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 786.547916][T17225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2905'. [ 786.794868][ T30] audit: type=1400 audit(2000000777.468:1782): avc: denied { wake_alarm } for pid=17220 comm="syz.4.2905" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 786.971444][ T30] audit: type=1400 audit(2000000777.478:1783): avc: denied { remount } for pid=17220 comm="syz.4.2905" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 787.183374][T17235] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 787.403441][ T30] audit: type=1400 audit(2000000778.138:1784): avc: denied { map } for pid=17230 comm="syz.1.2907" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 787.652320][T17244] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2910'. [ 788.514327][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2906'. [ 789.329877][ T30] audit: type=1400 audit(2000000780.288:1785): avc: denied { shutdown } for pid=17252 comm="syz.1.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 789.688237][ T30] audit: type=1400 audit(2000000780.638:1786): avc: denied { ioctl } for pid=17257 comm="syz.7.2915" path="socket:[57656]" dev="sockfs" ino=57656 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 789.849588][ T30] audit: type=1400 audit(2000000780.638:1787): avc: denied { getopt } for pid=17257 comm="syz.7.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 789.889620][ T30] audit: type=1400 audit(2000000780.638:1788): avc: denied { setopt } for pid=17257 comm="syz.7.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 789.977566][T17265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2914'. [ 790.339611][T17266] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 790.433700][T17266] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 790.619118][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 790.619132][ T30] audit: type=1400 audit(2000000781.568:1798): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 790.706351][ T30] audit: type=1400 audit(2000000781.608:1799): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 790.712155][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 790.841278][ T30] audit: type=1400 audit(2000000781.798:1800): avc: denied { connect } for pid=17274 comm="syz.1.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 791.332408][ T30] audit: type=1400 audit(2000000781.998:1801): avc: denied { read } for pid=17276 comm="syz.0.2921" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 791.381794][ T30] audit: type=1400 audit(2000000781.998:1802): avc: denied { open } for pid=17276 comm="syz.0.2921" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 791.449949][ T30] audit: type=1400 audit(2000000782.008:1803): avc: denied { map } for pid=17276 comm="syz.0.2921" path="/dev/sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 791.755643][ T30] audit: type=1400 audit(2000000782.708:1804): avc: denied { append } for pid=17288 comm="syz.7.2923" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 791.866292][ T30] audit: type=1400 audit(2000000782.708:1805): avc: denied { ioctl } for pid=17288 comm="syz.7.2923" path="/dev/sg0" dev="devtmpfs" ino=750 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 792.245275][ T30] audit: type=1400 audit(2000000783.198:1806): avc: denied { create } for pid=17303 comm="syz.1.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 792.356542][ T30] audit: type=1800 audit(2000000783.308:1807): pid=17291 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2923" name="bus" dev="ramfs" ino=57723 res=0 errno=0 [ 792.521536][T13577] Bluetooth: hci6: Frame reassembly failed (-84) [ 792.546835][T17310] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2928'. [ 792.642785][T17311] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 793.740134][T17325] lo speed is unknown, defaulting to 1000 [ 793.746479][T17325] lo speed is unknown, defaulting to 1000 [ 793.754951][T17325] wlan0 speed is unknown, defaulting to 1000 [ 794.517622][T17341] netlink: 'syz.4.2937': attribute type 1 has an invalid length. [ 794.551002][ T5858] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 794.551234][T15634] Bluetooth: hci6: command 0x1003 tx timeout [ 795.889548][T10451] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 796.037104][T17362] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2943'. [ 796.051400][T10451] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 796.064669][T10451] usb 2-1: config 0 has no interface number 0 [ 796.078191][T10451] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 796.099312][T10451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.108277][T10451] usb 2-1: Product: syz [ 796.112684][T10451] usb 2-1: Manufacturer: syz [ 796.117465][T10451] usb 2-1: SerialNumber: syz [ 796.124949][T10451] usb 2-1: config 0 descriptor?? [ 796.230002][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 796.384632][T17356] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 796.395321][ T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 796.411799][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.428990][ T10] usb 1-1: config 0 descriptor?? [ 796.645433][ T10] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 796.816573][T17356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2942'. [ 796.860016][T10451] usb 2-1: Firmware version (0.0) predates our first public release. [ 796.878376][T10451] usb 2-1: Please update to version 0.2 or newer [ 796.931277][T10451] usb 2-1: USB disconnect, device number 87 [ 797.128214][ T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 797.137706][ T10] [drm] Initialized udl on minor 2 [ 797.298002][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 797.402698][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 797.413157][ T10] usb 1-1: USB disconnect, device number 95 [ 797.460305][T10451] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 798.324970][T17388] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 799.559560][T10451] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 799.719910][T10451] usb 1-1: Using ep0 maxpacket: 16 [ 799.733227][T10451] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 799.806086][T10451] usb 1-1: config 0 has no interface number 0 [ 799.855554][T10451] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 23, changing to 8 [ 799.969520][T10451] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 57344, setting to 1024 [ 800.030414][T10451] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 800.083706][T10451] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 800.223376][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 800.223393][ T30] audit: type=1400 audit(2000000791.158:1814): avc: denied { setopt } for pid=17407 comm="syz.7.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 800.223475][T10451] usb 1-1: Product: syz [ 800.373912][T10451] usb 1-1: Manufacturer: syz [ 800.393125][T10451] usb 1-1: SerialNumber: syz [ 800.414297][T10451] usb 1-1: config 0 descriptor?? [ 800.436466][T10451] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 800.469276][T10451] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 800.504361][T10451] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 800.516162][T15634] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 800.524868][T15634] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 800.550132][T10451] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 800.561413][T15634] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 800.584349][T15634] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 800.592693][T15634] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 800.609773][ T30] audit: type=1400 audit(2000000791.558:1815): avc: denied { mounton } for pid=17414 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 800.728947][T17414] lo speed is unknown, defaulting to 1000 [ 800.763290][T10451] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 800.793165][T17417] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2956'. [ 800.796500][T17414] lo speed is unknown, defaulting to 1000 [ 800.814673][T10451] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 800.850380][T10451] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 800.874005][T10451] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 800.895303][T10451] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 800.937671][T10451] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 800.956250][T17414] wlan0 speed is unknown, defaulting to 1000 [ 800.966003][T10451] usb 1-1: USB disconnect, device number 96 [ 801.120127][T10451] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 801.183426][T10451] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 801.222442][ T58] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.236121][T10451] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 801.271586][T10451] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 801.320349][T10451] keyspan 1-1:0.107: device disconnected [ 801.380722][ T58] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.463236][ T58] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.556490][ T58] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.624069][T17427] tipc: Enabling of bearer rejected, already enabled [ 801.707450][T17414] chnl_net:caif_netlink_parms(): no params data found [ 802.056987][T17414] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.087300][T17414] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.150585][T17414] bridge_slave_0: entered allmulticast mode [ 802.163506][T17414] bridge_slave_0: entered promiscuous mode [ 802.204497][T17444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2962'. [ 802.216596][T17414] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.251339][T17414] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.260881][T17414] bridge_slave_1: entered allmulticast mode [ 802.296052][T17414] bridge_slave_1: entered promiscuous mode [ 802.562724][ T58] tipc: Disabling bearer [ 802.739622][ T5858] Bluetooth: hci6: command tx timeout [ 802.901939][ T58] bond1 (unregistering): (slave gretap1): Releasing active interface [ 803.381490][ T58] team0: Port device geneve0 removed [ 803.817447][T17458] overlayfs: missing 'workdir' [ 803.909436][ T30] audit: type=1400 audit(2000000794.848:1816): avc: denied { setopt } for pid=17454 comm="syz.0.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 804.317877][ T58] team0: Port device bond0 removed [ 804.333431][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.345420][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.356906][ T58] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 804.368363][ T58] bond0 (unregistering): Released all slaves [ 804.556624][ T58] bond1 (unregistering): Released all slaves [ 804.596062][T17414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.613434][T17414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.730499][T17414] team0: Port device team_slave_0 added [ 804.778197][T17414] team0: Port device team_slave_1 added [ 804.789596][ T5858] Bluetooth: hci6: command tx timeout [ 804.856667][ T30] audit: type=1400 audit(2000000795.808:1817): avc: denied { read write } for pid=17471 comm="syz.0.2969" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 804.901264][T17414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.908219][T17414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.992375][ T30] audit: type=1400 audit(2000000795.838:1818): avc: denied { open } for pid=17471 comm="syz.0.2969" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 805.037310][T17414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.291999][T17414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.299312][T17414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.395856][ T30] audit: type=1400 audit(2000000796.328:1819): avc: denied { getopt } for pid=17471 comm="syz.0.2969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 805.442663][T17414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.559200][T17494] fuse: Unknown parameter 'user_i00000000000000000000' [ 805.588584][T17414] hsr_slave_0: entered promiscuous mode [ 805.610347][T17414] hsr_slave_1: entered promiscuous mode [ 805.628473][T17414] debugfs: 'hsr0' already exists in 'hsr' [ 805.638618][T17414] Cannot create hsr debugfs directory [ 806.433325][ T58] tipc: Left network mode [ 806.869679][ T5858] Bluetooth: hci6: command tx timeout [ 806.926064][T17414] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 807.020811][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2978'. [ 807.189829][T17414] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 807.448691][T17414] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 807.455902][T10451] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 807.471274][T17414] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 807.486997][ T58] hsr_slave_0: left promiscuous mode [ 807.495494][ T58] hsr_slave_1: left promiscuous mode [ 807.504358][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.538596][ T58] team0 (unregistering): Port device batadv1 removed [ 807.637192][T10451] usb 1-1: config 0 has no interfaces? [ 807.766955][T10451] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 807.780055][T10451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.788080][T10451] usb 1-1: Product: syz [ 807.794368][T10451] usb 1-1: Manufacturer: syz [ 807.798994][T10451] usb 1-1: SerialNumber: syz [ 807.805689][T10451] usb 1-1: config 0 descriptor?? [ 808.157971][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.165497][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.263709][ T58] team0 (unregistering): Port device team_slave_1 removed [ 808.295567][ T58] team0 (unregistering): Port device team_slave_0 removed [ 808.525569][ T30] audit: type=1400 audit(2000000799.478:1820): avc: denied { create } for pid=17524 comm="syz.4.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 808.959543][ T5858] Bluetooth: hci6: command tx timeout [ 809.538698][T17529] uprobe: syz.7.2982:17529 failed to unregister, leaking uprobe [ 810.022369][T17534] FAULT_INJECTION: forcing a failure. [ 810.022369][T17534] name failslab, interval 1, probability 0, space 0, times 0 [ 810.040793][T17414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.058486][T17534] CPU: 0 UID: 0 PID: 17534 Comm: syz.7.2983 Not tainted syzkaller #0 PREEMPT(full) [ 810.058511][T17534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 810.058521][T17534] Call Trace: [ 810.058527][T17534] [ 810.058534][T17534] dump_stack_lvl+0x16c/0x1f0 [ 810.058561][T17534] should_fail_ex+0x512/0x640 [ 810.058583][T17534] ? fs_reclaim_acquire+0xae/0x150 [ 810.058608][T17534] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 810.058636][T17534] should_failslab+0xc2/0x120 [ 810.058658][T17534] __kmalloc_noprof+0xd2/0x510 [ 810.058682][T17534] tomoyo_realpath_from_path+0xc2/0x6e0 [ 810.058711][T17534] ? tomoyo_profile+0x47/0x60 [ 810.058736][T17534] tomoyo_path_number_perm+0x245/0x580 [ 810.058757][T17534] ? tomoyo_path_number_perm+0x237/0x580 [ 810.058781][T17534] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 810.058806][T17534] ? find_held_lock+0x2b/0x80 [ 810.058851][T17534] ? find_held_lock+0x2b/0x80 [ 810.058872][T17534] ? hook_file_ioctl_common+0x145/0x410 [ 810.058896][T17534] ? __fget_files+0x20e/0x3c0 [ 810.058921][T17534] security_file_ioctl+0x9b/0x240 [ 810.058947][T17534] __x64_sys_ioctl+0xb7/0x210 [ 810.058976][T17534] do_syscall_64+0xcd/0x4c0 [ 810.059002][T17534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.059019][T17534] RIP: 0033:0x7fe7e398ebe9 [ 810.059034][T17534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.059050][T17534] RSP: 002b:00007fe7e4843038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 810.059068][T17534] RAX: ffffffffffffffda RBX: 00007fe7e3bc5fa0 RCX: 00007fe7e398ebe9 [ 810.059080][T17534] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000003 [ 810.059091][T17534] RBP: 00007fe7e4843090 R08: 0000000000000000 R09: 0000000000000000 [ 810.059101][T17534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.059111][T17534] R13: 00007fe7e3bc6038 R14: 00007fe7e3bc5fa0 R15: 00007fffc377e578 [ 810.059136][T17534] [ 810.059165][T17534] ERROR: Out of memory at tomoyo_realpath_from_path. [ 810.199339][T17414] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.313742][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.320853][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.351777][T10467] usb 1-1: USB disconnect, device number 97 [ 810.376749][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.383897][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.675671][ T58] IPVS: stop unused estimator thread 0... [ 811.227679][T17414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.285114][T17414] veth0_vlan: entered promiscuous mode [ 811.302884][T17414] veth1_vlan: entered promiscuous mode [ 811.405662][T17414] veth0_macvtap: entered promiscuous mode [ 811.416150][T17565] binder: 17564:17565 ioctl c0306201 200000000080 returned -14 [ 811.430581][T17414] veth1_macvtap: entered promiscuous mode [ 811.450237][ T30] audit: type=1400 audit(2000000802.408:1821): avc: denied { execute } for pid=17564 comm="syz.4.2990" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=59423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 811.481089][T17414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.517844][T17414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.542330][ T2930] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.565042][ T2930] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.595612][ T2930] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.622492][ T2930] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.699909][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.710372][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.759781][ T8480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.783842][ T8480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.831506][ T30] audit: type=1400 audit(2000000802.778:1822): avc: denied { mounton } for pid=17414 comm="syz-executor" path="/root/syzkaller.NpFkhz/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 811.873661][ T30] audit: type=1400 audit(2000000802.818:1823): avc: denied { mount } for pid=17414 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 811.901538][ T30] audit: type=1400 audit(2000000802.818:1824): avc: denied { mounton } for pid=17414 comm="syz-executor" path="/root/syzkaller.NpFkhz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 811.959423][ T30] audit: type=1400 audit(2000000802.818:1825): avc: denied { mounton } for pid=17414 comm="syz-executor" path="/root/syzkaller.NpFkhz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=59662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 811.994206][ T30] audit: type=1400 audit(2000000802.868:1826): avc: denied { mounton } for pid=17414 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 812.181749][ T30] audit: type=1400 audit(2000000802.868:1827): avc: denied { mount } for pid=17414 comm="syz-executor" name="/" dev="gadgetfs" ino=7561 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 812.357819][ T30] audit: type=1400 audit(2000000802.878:1828): avc: denied { mounton } for pid=17414 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 812.906310][ T30] audit: type=1400 audit(2000000803.858:1829): avc: denied { read write } for pid=17574 comm="syz.0.2994" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 812.938444][ T30] audit: type=1400 audit(2000000803.858:1830): avc: denied { open } for pid=17574 comm="syz.0.2994" path="/567/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 814.132726][T17613] lo speed is unknown, defaulting to 1000 [ 814.140087][T17613] lo speed is unknown, defaulting to 1000 [ 814.661205][T17619] kAFS: No cell specified [ 815.353209][T17635] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 815.359730][T17635] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 815.367188][T17635] vhci_hcd vhci_hcd.0: Device attached [ 815.397487][T17645] block nbd1: Attempted send on invalid socket [ 815.424791][T17645] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 815.436143][T17645] block nbd1: Attempted send on invalid socket [ 815.442812][T17645] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 815.452938][T17645] Mount JFS Failure: -5 [ 815.570132][T10450] vhci_hcd: vhci_device speed not set [ 815.629805][T10451] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 815.670064][T10450] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 816.083575][T10451] usb 1-1: config 0 has no interfaces? [ 816.089868][T10451] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 816.098939][T10451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.117171][T10451] usb 1-1: config 0 descriptor?? [ 816.331742][T17641] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 816.824357][ T3498] vhci_hcd: stop threads [ 816.839309][ T3498] vhci_hcd: release socket [ 816.841522][T17650] 8021q: adding VLAN 0 to HW filter on device bond3 [ 816.886499][ T3498] vhci_hcd: disconnect device [ 816.991290][T17655] comedi comedi0: dt2815: a I/O base address must be specified [ 817.303969][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 817.303986][ T30] audit: type=1400 audit(2000000808.258:1833): avc: denied { write } for pid=17656 comm="syz.7.3012" path="socket:[58776]" dev="sockfs" ino=58776 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 818.266982][T10451] usb 1-1: USB disconnect, device number 98 [ 820.184203][T17679] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 820.201654][T17675] lo speed is unknown, defaulting to 1000 [ 820.229206][T17675] lo speed is unknown, defaulting to 1000 [ 820.235996][T17688] lo speed is unknown, defaulting to 1000 [ 820.244000][T17688] lo speed is unknown, defaulting to 1000 [ 820.799645][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3023'. [ 821.396897][T10450] vhci_hcd: vhci_device speed not set [ 821.559347][T17714] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3025'. [ 821.706943][T17716] I/O error, dev loop7, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 821.720942][T17716] gfs2: error -5 reading superblock [ 823.454620][ T8480] Bluetooth: Error in BCSP hdr checksum [ 823.523425][T17732] block nbd1: Attempted send on invalid socket [ 823.610139][T17754] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 823.657193][T17732] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 823.668854][T17732] block nbd1: Attempted send on invalid socket [ 823.675343][T17732] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 823.686990][T17732] Mount JFS Failure: -5 [ 824.339682][ T30] audit: type=1400 audit(2000000815.028:1834): avc: denied { write } for pid=17755 comm="syz.7.3039" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 824.590103][T17764] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 825.268247][T17771] Invalid source name [ 825.509791][ T5858] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 825.748082][ T30] audit: type=1400 audit(2000000816.698:1835): avc: denied { create } for pid=17779 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 825.800420][ T30] audit: type=1400 audit(2000000816.728:1836): avc: denied { write } for pid=17779 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 825.908282][ T30] audit: type=1400 audit(2000000816.858:1837): avc: denied { execute } for pid=17779 comm="syz.0.3042" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 826.038129][T17783] can0: slcan on ttyS3. [ 826.319685][ T30] audit: type=1400 audit(2000000817.278:1838): avc: denied { getopt } for pid=17792 comm="syz.1.3046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 826.414661][T17800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=17800 comm=syz.5.3048 [ 826.477889][T17780] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 826.508599][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 826.515204][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 827.236240][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3049'. [ 827.487320][T17812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3050'. [ 828.422789][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.501349][T17779] can0 (unregistered): slcan off ttyS3. [ 828.549739][T15634] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 828.551459][ T5858] Bluetooth: hci0: command 0x1003 tx timeout [ 828.593363][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3051'. [ 828.625256][T17818] netlink: 'syz.4.3053': attribute type 1 has an invalid length. [ 829.606631][T17823] bond4 (unregistering): Released all slaves [ 829.735335][ T30] audit: type=1400 audit(2000000820.678:1839): avc: denied { ioctl } for pid=17830 comm="syz.0.3055" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 829.867101][T17818] bond4: entered promiscuous mode [ 829.877470][T17818] 8021q: adding VLAN 0 to HW filter on device bond4 [ 829.950083][ T30] audit: type=1400 audit(2000000820.898:1840): avc: denied { mount } for pid=17838 comm="syz.1.3057" name="/" dev="autofs" ino=59189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 830.514530][T17856] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3062'. [ 831.103114][T17864] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3064'. [ 833.086722][ T30] audit: type=1400 audit(2000000824.038:1841): avc: denied { kexec_image_load } for pid=17875 comm="syz.1.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 833.087433][T17876] 9pnet_fd: Insufficient options for proto=fd [ 833.122576][ T30] audit: type=1400 audit(2000000824.038:1842): avc: denied { append } for pid=17875 comm="syz.1.3068" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 833.175137][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3069'. [ 833.298588][ T5985] hid (null): unknown global tag 0xc [ 833.307541][ T5985] hid-generic 0006:0007:0008.002A: unknown main item tag 0x3 [ 833.326918][ T5985] hid-generic 0006:0007:0008.002A: unknown global tag 0xc [ 833.335726][ T5985] hid-generic 0006:0007:0008.002A: item 0 1 1 12 parsing failed [ 833.366773][ T5985] hid-generic 0006:0007:0008.002A: probe with driver hid-generic failed with error -22 [ 833.398166][T17901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3071'. [ 833.418831][T17905] rdma_op ffff8880547761f0 conn xmit_rdma 0000000000000000 [ 833.587976][T17910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3077'. [ 833.597312][T17910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3077'. [ 833.606466][T17910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3077'. [ 833.638306][ T30] audit: type=1400 audit(2000000824.588:1843): avc: denied { write } for pid=17906 comm="syz.5.3076" lport=46555 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 833.702975][ T30] audit: type=1400 audit(2000000824.588:1844): avc: denied { setopt } for pid=17906 comm="syz.5.3076" lport=46555 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 833.742494][ T30] audit: type=1400 audit(2000000824.618:1845): avc: denied { mount } for pid=17906 comm="syz.5.3076" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 833.769865][ T30] audit: type=1400 audit(2000000824.628:1846): avc: denied { ioctl } for pid=17906 comm="syz.5.3076" path="socket:[60186]" dev="sockfs" ino=60186 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 833.880564][T10450] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 834.042299][T10450] usb 2-1: Using ep0 maxpacket: 16 [ 834.048843][T10450] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 834.058495][T10450] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 834.070546][T10450] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 834.081710][T10450] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 834.090173][T10450] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 834.099113][T10450] usb 2-1: config 0 has no interface number 0 [ 834.107445][T10450] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 834.118894][T10450] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 834.133354][T10450] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 834.144685][T10450] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 834.161475][T10450] usb 2-1: config 0 interface 125 has no altsetting 0 [ 834.168299][T10450] usb 2-1: config 0 interface 125 has no altsetting 2 [ 834.179622][T10450] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 834.194459][T10450] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.204170][T10450] usb 2-1: Product: syz [ 834.208435][T10450] usb 2-1: Manufacturer: syz [ 834.214817][T10450] usb 2-1: SerialNumber: syz [ 834.221907][T10450] usb 2-1: config 0 descriptor?? [ 834.228642][T10450] usb 2-1: selecting invalid altsetting 2 [ 834.834438][ C0] usb 2-1: async_complete: urb error -71 [ 834.840150][ C0] usb 2-1: async_complete: urb error -71 [ 834.847309][ T30] audit: type=1400 audit(2000000825.788:1847): avc: denied { ioctl } for pid=17909 comm="syz.1.3077" path="socket:[60183]" dev="sockfs" ino=60183 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 834.874346][T10450] get_1284_register: usb error -71 [ 834.879584][T10450] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 834.900619][T10450] usb 2-1: USB disconnect, device number 88 [ 835.059538][ T30] audit: type=1400 audit(2000000826.008:1848): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 835.216303][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3082'. [ 835.826225][ T30] audit: type=1400 audit(2000000826.778:1849): avc: denied { create } for pid=17948 comm="syz.5.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 835.860284][ T30] audit: type=1400 audit(2000000826.808:1850): avc: denied { ioctl } for pid=17948 comm="syz.5.3087" path="socket:[59336]" dev="sockfs" ino=59336 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 835.935881][ T30] audit: type=1400 audit(2000000826.808:1851): avc: denied { accept } for pid=17948 comm="syz.5.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 836.023226][ T30] audit: type=1400 audit(2000000826.958:1852): avc: denied { create } for pid=17953 comm="syz.4.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 836.039859][T10470] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 836.042773][ C1] vkms_vblank_simulate: vblank timer overrun [ 836.240553][T10470] usb 2-1: config 0 has no interfaces? [ 836.257262][T10470] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 836.272324][T10470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.289039][T10470] usb 2-1: Product: syz [ 836.297614][T10470] usb 2-1: Manufacturer: syz [ 836.306993][T10470] usb 2-1: SerialNumber: syz [ 836.319181][T10470] usb 2-1: config 0 descriptor?? [ 837.888887][ T30] audit: type=1400 audit(2000000828.818:1853): avc: denied { append } for pid=17966 comm="syz.4.3091" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 838.230616][ T5985] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 838.764382][ T5985] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.813896][ T5985] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 838.931451][ T5985] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 838.942860][ T30] audit: type=1400 audit(2000000829.898:1854): avc: denied { read } for pid=17981 comm="syz.7.3095" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 838.975742][ T30] audit: type=1400 audit(2000000829.898:1855): avc: denied { open } for pid=17981 comm="syz.7.3095" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 839.003772][ T30] audit: type=1400 audit(2000000829.908:1856): avc: denied { ioctl } for pid=17981 comm="syz.7.3095" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 839.041086][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.060537][ T5985] usb 1-1: Product: syz [ 839.073756][ T5985] usb 1-1: Manufacturer: syz [ 839.084242][ T5985] usb 1-1: SerialNumber: syz [ 839.389936][T17971] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 839.665960][T10451] usb 2-1: USB disconnect, device number 89 [ 839.778203][ T5985] cdc_ncm 1-1:1.0: bind() failure [ 839.793250][ T5985] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 839.821359][ T5985] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 839.845728][ T5985] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 839.874301][ T5985] usb 1-1: USB disconnect, device number 99 [ 840.050327][T18005] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 840.070657][T18005] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 841.559675][ T30] audit: type=1400 audit(2000000832.508:1857): avc: denied { write } for pid=18011 comm="syz.0.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 841.685400][T18023] block nbd4: Attempted send on invalid socket [ 841.699810][T18023] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 841.724377][T18023] block nbd4: Attempted send on invalid socket [ 841.733246][T18023] I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 841.754982][T18023] Mount JFS Failure: -5 [ 841.997373][ T30] audit: type=1400 audit(2000000832.948:1858): avc: denied { create } for pid=18024 comm="syz.1.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 842.077761][ T30] audit: type=1400 audit(2000000832.948:1859): avc: denied { setopt } for pid=18024 comm="syz.1.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 842.126668][ T30] audit: type=1400 audit(2000000832.948:1860): avc: denied { write } for pid=18024 comm="syz.1.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 842.160944][ T30] audit: type=1400 audit(2000000832.948:1861): avc: denied { read } for pid=18024 comm="syz.1.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 842.184506][ T30] audit: type=1400 audit(2000000832.998:1862): avc: denied { getopt } for pid=18024 comm="syz.1.3103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 843.022709][T18050] Invalid source name [ 844.504517][T15634] Bluetooth: hci6: unexpected subevent 0x0e length: 30 > 15 [ 844.512021][T15634] Bluetooth: hci6: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 845.233626][ T30] audit: type=1400 audit(2000000836.188:1863): avc: denied { shutdown } for pid=18070 comm="syz.1.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 845.424153][T18083] fuse: Unknown parameter '0x0000000000000003' [ 845.842153][ T5908] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 846.155961][ T5908] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 846.249780][ T5908] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 846.258838][ T5908] usb 1-1: config 1 has no interface number 1 [ 846.266687][ T5908] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 846.286938][ T5908] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 846.298068][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.306528][ T5908] usb 1-1: Product: syz [ 846.309268][ T30] audit: type=1400 audit(2000000837.268:1864): avc: denied { read } for pid=18085 comm="syz.1.3119" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 846.320078][ T5908] usb 1-1: Manufacturer: syz [ 846.339046][ T5908] usb 1-1: SerialNumber: syz [ 846.343795][ T30] audit: type=1400 audit(2000000837.268:1865): avc: denied { open } for pid=18085 comm="syz.1.3119" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 846.447923][ T5858] Bluetooth: hci6: unexpected subevent 0x0e length: 30 > 15 [ 846.456568][ T5858] Bluetooth: hci6: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 846.635666][ T5908] usb 1-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 846.644397][ T5908] usb 1-1: found format II with max.bitrate = 180, frame size=4095 [ 846.652319][ T5908] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 846.666185][ T5908] usb 1-1: USB disconnect, device number 100 [ 847.198393][ T30] audit: type=1400 audit(2000000838.148:1866): avc: denied { audit_write } for pid=18117 comm="syz.5.3129" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 847.269657][ T5858] Bluetooth: hci6: command 0x0405 tx timeout [ 848.249582][ T30] audit: type=1400 audit(2000000838.698:1867): avc: denied { name_bind } for pid=18123 comm="syz.4.3130" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 848.478378][ T30] audit: type=1400 audit(2000000839.398:1868): avc: denied { ioctl } for pid=18143 comm="syz.0.3134" path="socket:[60817]" dev="sockfs" ino=60817 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 848.543934][ T30] audit: type=1326 audit(2000000839.488:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18143 comm="syz.0.3134" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9134b8ebe9 code=0x0 [ 848.744398][ T5858] Bluetooth: hci4: unexpected subevent 0x0e length: 30 > 15 [ 848.760694][ T5858] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 850.110286][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3142'. [ 850.772506][T18196] geneve2: entered promiscuous mode [ 850.861215][T10451] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 850.999510][T10451] usb 2-1: device descriptor read/64, error -71 [ 851.010166][ T30] audit: type=1800 audit(2000000841.968:1870): pid=18202 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3146" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 851.302721][T10451] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 851.439869][T10451] usb 2-1: device descriptor read/64, error -71 [ 851.527724][T18211] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18211 comm=syz.4.3149 [ 851.602964][T10451] usb usb2-port1: attempt power cycle [ 852.446069][ T30] audit: type=1400 audit(2000000843.398:1871): avc: denied { mounton } for pid=18200 comm="syz.0.3147" path="/590/file0" dev="tmpfs" ino=3215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 852.499662][T18208] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 852.514936][T18208] FAT-fs (loop1): unable to read boot sector [ 852.858788][T10451] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 852.900011][T10451] usb 2-1: device descriptor read/8, error -71 [ 853.289954][T10451] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 853.320606][T10451] usb 2-1: device descriptor read/8, error -71 [ 853.450025][T10451] usb usb2-port1: unable to enumerate USB device [ 853.544283][T10451] hid (null): unknown global tag 0xc [ 853.621616][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3158'. [ 853.743543][T10451] hid-generic 0006:0007:0008.002B: unknown main item tag 0x3 [ 853.759281][T10451] hid-generic 0006:0007:0008.002B: unknown global tag 0xc [ 853.768952][T10451] hid-generic 0006:0007:0008.002B: item 0 1 1 12 parsing failed [ 853.785803][T10451] hid-generic 0006:0007:0008.002B: probe with driver hid-generic failed with error -22 [ 853.810916][ T5858] Bluetooth: hci6: unexpected subevent 0x0e length: 30 > 15 [ 853.818258][ T5858] Bluetooth: hci6: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 854.149672][ T5908] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 854.289780][ T5908] usb 2-1: device descriptor read/64, error -71 [ 854.408144][ T30] audit: type=1400 audit(2000000845.358:1872): avc: denied { create } for pid=18238 comm="syz.7.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 854.477910][ T30] audit: type=1400 audit(2000000845.408:1873): avc: denied { ioctl } for pid=18238 comm="syz.7.3157" path="socket:[61001]" dev="sockfs" ino=61001 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 854.590490][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3164'. [ 854.699602][ T5908] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 854.849727][ T5908] usb 2-1: device descriptor read/64, error -71 [ 855.041377][ T5908] usb usb2-port1: attempt power cycle [ 855.429643][ T5908] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 855.450187][ T5908] usb 2-1: device descriptor read/8, error -71 [ 855.699643][ T5908] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 855.750111][ T5908] usb 2-1: device descriptor read/8, error -71 [ 855.914963][ T5908] usb usb2-port1: unable to enumerate USB device [ 856.129669][T18290] overlayfs: missing 'lowerdir' [ 856.981574][T18310] block nbd4: Attempted send on invalid socket [ 857.040425][T18310] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 857.049900][T18310] block nbd4: Attempted send on invalid socket [ 857.057545][T18310] I/O error, dev nbd4, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 857.067297][T18310] Mount JFS Failure: -5 [ 857.088644][T18312] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 857.306343][ T30] audit: type=1326 audit(2000000848.258:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18315 comm="syz.7.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e398ebe9 code=0x7ffc0000 [ 857.339521][T10470] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 857.376790][ T30] audit: type=1326 audit(2000000848.258:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18315 comm="syz.7.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e398ebe9 code=0x7ffc0000 [ 857.495899][ T30] audit: type=1326 audit(2000000848.258:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18315 comm="syz.7.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe7e398ebe9 code=0x7ffc0000 [ 857.532136][T10470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 857.556231][T10470] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 857.583296][T10470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 857.623650][T10470] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 857.641677][T10470] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 857.650778][T10470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.658745][T10470] usb 2-1: Product: syz [ 857.663771][T10470] usb 2-1: Manufacturer: syz [ 857.668363][T10470] usb 2-1: SerialNumber: syz [ 857.687869][T10470] usb 2-1: config 0 descriptor?? [ 857.712741][ T30] audit: type=1326 audit(2000000848.258:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18315 comm="syz.7.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7e398ec23 code=0x7ffc0000 [ 857.744055][ T30] audit: type=1326 audit(2000000848.288:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18315 comm="syz.7.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7e398ec23 code=0x7ffc0000 [ 857.771299][T10470] kvaser_usb 2-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 857.823957][ T30] audit: type=1326 audit(2000000848.308:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18315 comm="syz.7.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e398ebe9 code=0x7ffc0000 [ 857.876648][T10470] kvaser_usb 2-1:0.0: error -EMSGSIZE: Failed to initialize card [ 857.894980][T10470] kvaser_usb 2-1:0.0: probe with driver kvaser_usb failed with error -90 [ 857.971100][ T5985] usb 2-1: USB disconnect, device number 98 [ 858.089548][ T30] audit: type=1326 audit(2000000848.308:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18315 comm="syz.7.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e398ebe9 code=0x7ffc0000 [ 858.117295][ T30] audit: type=1326 audit(2000000848.308:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18315 comm="syz.7.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fe7e398ebe9 code=0x7ffc0000 [ 858.175186][ T30] audit: type=1326 audit(2000000848.308:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18315 comm="syz.7.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e398ebe9 code=0x7ffc0000 [ 858.205423][ T30] audit: type=1326 audit(2000000848.308:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18315 comm="syz.7.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fe7e398ebe9 code=0x7ffc0000 [ 858.239017][ T30] audit: type=1400 audit(2000000848.368:1884): avc: denied { block_suspend } for pid=18315 comm="syz.7.3176" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 858.262085][ T30] audit: type=1326 audit(2000000848.368:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18315 comm="syz.7.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7e398ebe9 code=0x7ffc0000 [ 858.629615][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3183'. [ 858.650595][T18342] Invalid source name [ 858.911752][T18339] block nbd7: shutting down sockets [ 859.500521][T10448] hid (null): unknown global tag 0xc [ 859.508061][T10448] hid-generic 0006:0007:0008.002C: unknown main item tag 0x3 [ 859.577906][T18362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3189'. [ 859.955791][T10448] hid-generic 0006:0007:0008.002C: unknown global tag 0xc [ 859.987815][T10448] hid-generic 0006:0007:0008.002C: item 0 1 1 12 parsing failed [ 860.155139][T18367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3187'. [ 860.205815][T10448] hid-generic 0006:0007:0008.002C: probe with driver hid-generic failed with error -22 [ 862.031301][T18405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.058309][T18405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.088963][T18405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.127796][T18405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.158107][T18405] batman_adv: batadv0: Removing interface: ip6gretap1 [ 862.188602][T18405] batman_adv: batadv0: Removing interface: team0 [ 862.269506][T10467] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 863.309533][T10467] usb 1-1: device descriptor read/64, error -71 [ 863.529582][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 863.529602][ T30] audit: type=1400 audit(2000000854.428:1958): avc: denied { bind } for pid=18416 comm="syz.5.3203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 863.599876][T10467] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 863.729840][T10467] usb 1-1: device descriptor read/64, error -71 [ 863.841982][T10467] usb usb1-port1: attempt power cycle [ 864.803297][T10467] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 864.826094][ T30] audit: type=1400 audit(2000000855.778:1959): avc: denied { read } for pid=18413 comm="syz.7.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 864.846847][T10467] usb 1-1: device descriptor read/8, error -71 [ 864.915929][ T30] audit: type=1326 audit(2000000855.848:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18432 comm="syz.5.3206" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7fa18ebe9 code=0x0 [ 865.452104][ T5985] hid (null): unknown global tag 0xc [ 865.458616][ T5985] hid-generic 0006:0007:0008.002D: unknown main item tag 0x3 [ 865.466071][ T5985] hid-generic 0006:0007:0008.002D: unknown global tag 0xc [ 865.473434][ T5985] hid-generic 0006:0007:0008.002D: item 0 1 1 12 parsing failed [ 865.750623][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3212'. [ 865.798338][ T5985] hid-generic 0006:0007:0008.002D: probe with driver hid-generic failed with error -22 [ 865.849539][T10467] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 865.975382][T10467] usb 1-1: Using ep0 maxpacket: 32 [ 865.982244][T10467] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 865.990580][T10467] usb 1-1: config 0 has no interface number 0 [ 865.996672][T10467] usb 1-1: config 0 interface 184 has no altsetting 0 [ 866.005320][T10467] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 866.014391][T10467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.022396][T10467] usb 1-1: Product: syz [ 866.027606][T10467] usb 1-1: Manufacturer: syz [ 866.032371][T10467] usb 1-1: SerialNumber: syz [ 866.065990][T10467] usb 1-1: config 0 descriptor?? [ 866.450952][T18459] lo speed is unknown, defaulting to 1000 [ 866.457937][T18459] lo speed is unknown, defaulting to 1000 [ 866.489030][T10467] smsc75xx v1.0.0 [ 866.844044][T10467] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 866.855395][T10467] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 866.893650][T18471] block nbd1: Attempted send on invalid socket [ 866.899332][ T30] audit: type=1400 audit(2000000857.848:1961): avc: denied { write } for pid=18464 comm="syz.7.3215" path="socket:[62477]" dev="sockfs" ino=62477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 866.923660][T18471] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 866.943546][T18471] block nbd1: Attempted send on invalid socket [ 866.951467][T18471] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 866.962646][T18471] Mount JFS Failure: -5 [ 866.976319][T10467] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 866.993381][T10467] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 867.036752][T10467] usb 1-1: USB disconnect, device number 104 [ 867.556445][T15634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 867.568180][T15634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 867.576761][T15634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 867.586343][T15634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 867.596338][T15634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 867.874837][T18481] lo speed is unknown, defaulting to 1000 [ 867.927247][T18481] lo speed is unknown, defaulting to 1000 [ 868.361645][T18481] chnl_net:caif_netlink_parms(): no params data found [ 868.409572][T10467] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 868.549511][T10467] usb 2-1: device descriptor read/64, error -71 [ 868.939646][T10467] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 869.026109][T18481] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.048311][T18481] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.090213][T18481] bridge_slave_0: entered allmulticast mode [ 869.097203][T10467] usb 2-1: device descriptor read/64, error -71 [ 869.106986][T18481] bridge_slave_0: entered promiscuous mode [ 869.129774][T18481] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.156257][T18481] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.179682][T18481] bridge_slave_1: entered allmulticast mode [ 869.208134][T18481] bridge_slave_1: entered promiscuous mode [ 869.214341][T10467] usb usb2-port1: attempt power cycle [ 869.377010][T18481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.408791][T18481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.516247][T18512] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 869.799804][ T5858] Bluetooth: hci0: command tx timeout [ 869.808505][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.817166][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.847866][T18481] team0: Port device team_slave_0 added [ 869.859379][T18481] team0: Port device team_slave_1 added [ 869.869641][T10467] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 869.890009][T10467] usb 2-1: device descriptor read/8, error -71 [ 869.898799][T18481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.906329][T18481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.932888][T18481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.945894][T18481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.954092][T18481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.980371][T18481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.074621][T18509] delete_channel: no stack [ 870.236396][T18517] overlayfs: failed to resolve './bus/file0': -2 [ 870.293240][T18518] netlink: 'syz.5.3224': attribute type 1 has an invalid length. [ 870.368274][T18481] hsr_slave_0: entered promiscuous mode [ 870.384776][T18481] hsr_slave_1: entered promiscuous mode [ 870.399691][T10467] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 870.402729][T18481] debugfs: 'hsr0' already exists in 'hsr' [ 870.414499][T18481] Cannot create hsr debugfs directory [ 870.430134][T10467] usb 2-1: device descriptor read/8, error -71 [ 870.554480][T10467] usb usb2-port1: unable to enumerate USB device [ 870.568460][T18481] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.578772][T18481] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.655067][T18481] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.667705][T18481] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.714036][T18481] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.724208][T18481] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.774650][T18481] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.788448][T18481] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.989389][T18481] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 871.007442][T18481] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 871.025438][T18481] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 871.181614][T18481] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 871.342947][T18547] sp0: Synchronizing with TNC [ 871.426001][T18547] sp0: Found TNC [ 871.434135][T18546] [U]  [ 871.469848][T18481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.484336][T18481] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.499241][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.506303][ T8480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.524495][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.531552][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.725371][T18481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.767808][T18481] veth0_vlan: entered promiscuous mode [ 871.783752][T18481] veth1_vlan: entered promiscuous mode [ 871.809287][T18481] veth0_macvtap: entered promiscuous mode [ 871.818636][T18481] veth1_macvtap: entered promiscuous mode [ 871.830735][ T5858] Bluetooth: hci0: command tx timeout [ 871.835792][T18481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.851445][T18481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.867293][T13577] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.869948][T10451] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 871.895203][T13577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.929934][T13577] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.954023][T13577] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.995060][T13577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.015763][T13577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.047181][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.060893][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.469979][T10451] usb 2-1: Using ep0 maxpacket: 16 [ 872.478721][T10451] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 872.493357][T10451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.504138][T10451] usb 2-1: config 0 descriptor?? [ 872.513913][T10451] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 872.715397][T10451] usb 2-1: Detected FT232B [ 872.790476][ T5985] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 872.894576][T18559] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3234'. [ 872.952544][ T5985] usb 1-1: Using ep0 maxpacket: 16 [ 872.964251][T10451] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 872.978129][T10451] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 872.992848][ T5985] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.004148][T10451] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 873.015710][T10451] usb 2-1: USB disconnect, device number 103 [ 873.023087][T10451] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 873.032805][T10451] ftdi_sio 2-1:0.0: device disconnected [ 873.051930][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.063326][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 873.073259][ T5985] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 873.083026][ T5985] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 873.098541][ T5985] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 873.178916][ T5985] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 873.189620][ T5985] usb 1-1: Manufacturer: syz [ 873.199855][ T5985] usb 1-1: config 0 descriptor?? [ 873.450284][ T5985] rc_core: IR keymap rc-hauppauge not found [ 873.456343][ T5985] Registered IR keymap rc-empty [ 873.461682][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 873.479609][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 873.503438][ T5985] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 873.636942][ T5985] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input32 [ 873.863174][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 873.890423][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 873.909715][ T5858] Bluetooth: hci0: command tx timeout [ 873.915437][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 873.950003][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 873.969090][ T30] audit: type=1400 audit(2000000864.918:1962): avc: denied { mount } for pid=18577 comm="syz.4.3238" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 873.993732][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 874.044244][ T30] audit: type=1400 audit(2000000864.958:1963): avc: denied { bind } for pid=18554 comm="syz.0.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 874.151779][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 874.260899][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 874.439674][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 874.462462][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 874.490075][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 874.525477][ T5985] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 874.536660][ T5985] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 874.571912][T18585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.586718][T18585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.654675][T18596] netlink: 'syz.0.3217': attribute type 3 has an invalid length. [ 874.683613][T18596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3217'. [ 874.762494][T18602] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 875.814126][T10467] usb 1-1: USB disconnect, device number 105 [ 875.905021][ T30] audit: type=1400 audit(2000000866.858:1964): avc: denied { setopt } for pid=18607 comm="syz.7.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 875.989983][ T5858] Bluetooth: hci0: command tx timeout [ 876.359526][ T5908] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 876.389750][T10448] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 876.499742][ T5908] usb 2-1: device descriptor read/64, error -71 [ 876.539791][T10448] usb 1-1: Using ep0 maxpacket: 32 [ 876.576824][T10448] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 876.630071][T10448] usb 1-1: config 0 has no interface number 0 [ 876.657517][T10448] usb 1-1: config 0 interface 184 has no altsetting 0 [ 876.690590][T10448] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 876.702071][T10448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.713842][T10448] usb 1-1: Product: syz [ 876.718040][T10448] usb 1-1: Manufacturer: syz [ 876.724958][T10448] usb 1-1: SerialNumber: syz [ 876.733494][T10448] usb 1-1: config 0 descriptor?? [ 876.745540][T10448] smsc75xx v1.0.0 [ 876.779532][ T5908] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 876.959754][ T5908] usb 2-1: device descriptor read/64, error -71 [ 877.057531][T18626] netlink: 'syz.5.3250': attribute type 11 has an invalid length. [ 877.107522][ T5908] usb usb2-port1: attempt power cycle [ 877.391709][T10448] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 877.402697][T10448] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 877.470396][ T5908] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 877.489936][ T5908] usb 2-1: device descriptor read/8, error -71 [ 877.598795][T18640] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3253'. [ 877.610167][ T30] audit: type=1800 audit(2000000868.568:1965): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3253" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 877.729522][ T5908] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 877.780874][ T5908] usb 2-1: device descriptor read/8, error -71 [ 877.920005][ T5908] usb usb2-port1: unable to enumerate USB device [ 878.067242][T10448] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 878.093305][T10448] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 878.124684][T10448] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 878.198903][ T5858] Bluetooth: hci4: unknown advertising packet type: 0x82 [ 878.199018][ T5858] Bluetooth: hci4: Dropping invalid advertising data [ 878.215041][ T5858] Bluetooth: hci4: Malformed LE Event: 0x02 [ 878.226795][T10448] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 878.649058][T18656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.684052][T18656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.957257][ T5908] usb 1-1: USB disconnect, device number 106 [ 880.017837][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3264'. [ 880.132551][T18685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18685 comm=syz.0.3264 [ 880.294078][T18693] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 880.330557][T18700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 880.341774][T18693] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 880.363725][T18693] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 880.375462][T18693] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 881.497931][ T5858] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 881.505690][ T5858] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 882.467386][ T5858] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 882.475255][ T5858] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 882.883497][ T30] audit: type=1400 audit(2000000873.838:1966): avc: denied { map } for pid=18733 comm="syz.1.3278" path="socket:[63620]" dev="sockfs" ino=63620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 882.923490][T18735] netlink: 'syz.0.3277': attribute type 5 has an invalid length. [ 882.934341][ T30] audit: type=1400 audit(2000000873.838:1967): avc: denied { read } for pid=18733 comm="syz.1.3278" path="socket:[63620]" dev="sockfs" ino=63620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 883.381643][ T30] audit: type=1804 audit(2000000874.338:1968): pid=18742 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3281" name="/newroot/65/file0" dev="tmpfs" ino=365 res=1 errno=0 [ 884.353420][T10470] hid (null): unknown global tag 0xc [ 884.513040][T18756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3284'. [ 884.657205][T10470] hid-generic 0006:0007:0008.002E: unknown main item tag 0x3 [ 884.669849][T10470] hid-generic 0006:0007:0008.002E: unknown global tag 0xc [ 884.677094][T10470] hid-generic 0006:0007:0008.002E: item 0 1 1 12 parsing failed [ 884.695741][T10470] hid-generic 0006:0007:0008.002E: probe with driver hid-generic failed with error -22 [ 885.487930][T18770] Invalid source name [ 885.718422][ T5908] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 885.892387][ T5908] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.945684][ T5908] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 885.974328][ T5908] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 885.998154][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 886.120192][ T5908] usb 1-1: SerialNumber: syz [ 886.615162][T18780] 9pnet_fd: Insufficient options for proto=fd [ 886.629043][ T5908] usb 1-1: 0:2 : does not exist [ 886.654934][ T5908] usb 1-1: USB disconnect, device number 107 [ 886.730298][T10451] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 887.434356][T18800] netlink: 'syz.7.3292': attribute type 1 has an invalid length. [ 887.435855][T18800] netlink: 'syz.7.3292': attribute type 2 has an invalid length. [ 887.435871][T18800] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3292'. [ 887.533518][T10451] usb 2-1: config 3 has an invalid interface number: 61 but max is 0 [ 887.546883][T10451] usb 2-1: config 3 has no interface number 0 [ 887.559089][T10451] usb 2-1: config 3 interface 61 has no altsetting 0 [ 887.614604][T10451] usb 2-1: string descriptor 0 read error: -22 [ 887.637806][T10451] usb 2-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 887.646979][T10451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.666816][T10451] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 887.686341][T10451] snd-usb-audio 2-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 887.970733][T18815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.978147][T18815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.049959][T18815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.094518][T18815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.094789][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3299'. [ 889.106075][ T5985] hid (null): unknown global tag 0xc [ 889.113383][ T5985] hid-generic 0006:0007:0008.002F: unknown main item tag 0x3 [ 889.137902][ T5985] hid-generic 0006:0007:0008.002F: unknown global tag 0xc [ 889.158094][ T5985] hid-generic 0006:0007:0008.002F: item 0 1 1 12 parsing failed [ 889.184899][ T5985] hid-generic 0006:0007:0008.002F: probe with driver hid-generic failed with error -22 [ 889.256947][ T5985] usb 2-1: USB disconnect, device number 108 [ 889.698754][T18839] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 889.713374][ T30] audit: type=1400 audit(2000000880.648:1969): avc: denied { connect } for pid=18835 comm="syz.4.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 890.136430][ T5985] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 890.144242][ T30] audit: type=1400 audit(2000000880.668:1970): avc: denied { read } for pid=18835 comm="syz.4.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 890.163847][ T30] audit: type=1400 audit(2000000881.078:1971): avc: denied { unmount } for pid=18481 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 890.375697][T18849] wireguard0: entered promiscuous mode [ 890.391600][T18849] wireguard0: entered allmulticast mode [ 890.416067][ T5985] usb 2-1: No LPM exit latency info found, disabling LPM. [ 890.425257][ T5985] usb 2-1: config 1 interface 0 altsetting 233 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 890.465106][ T5985] usb 2-1: config 1 interface 0 altsetting 233 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 890.577885][ T5985] usb 2-1: config 1 interface 0 altsetting 233 endpoint 0x82 is Bulk; changing to Interrupt [ 890.608510][ T5985] usb 2-1: config 1 interface 0 altsetting 233 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 890.629104][ T5985] usb 2-1: config 1 interface 0 has no altsetting 0 [ 891.170344][T18854] [ 891.172684][T18854] ===================================================== [ 891.179589][T18854] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 891.187022][T18854] syzkaller #0 Not tainted [ 891.191417][T18854] ----------------------------------------------------- [ 891.198332][T18854] syz.5.3306/18854 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 891.206039][T18854] ffffffff8e20c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0xed/0xc80 [ 891.214653][T18854] [ 891.214653][T18854] and this task is already holding: [ 891.221996][T18854] ffff8880256fe620 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 891.230680][T18854] which would create a new lock dependency: [ 891.236545][T18854] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 891.244092][T18854] [ 891.244092][T18854] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 891.253522][T18854] (&dev->event_lock#2){..-.}-{3:3} [ 891.253548][T18854] [ 891.253548][T18854] ... which became SOFTIRQ-irq-safe at: [ 891.266401][T18854] lock_acquire+0x179/0x350 [ 891.270980][T18854] _raw_spin_lock_irqsave+0x3a/0x60 [ 891.276249][T18854] input_inject_event+0x9f/0x3b0 [ 891.281261][T18854] led_set_brightness+0x217/0x290 [ 891.286355][T18854] led_trigger_event+0xda/0x270 [ 891.291270][T18854] kbd_bh+0x21b/0x300 [ 891.295319][T18854] tasklet_action_common+0x281/0x400 [ 891.300672][T18854] handle_softirqs+0x219/0x8e0 [ 891.305520][T18854] __irq_exit_rcu+0x109/0x170 [ 891.310263][T18854] irq_exit_rcu+0x9/0x30 [ 891.314572][T18854] sysvec_irq_work+0xa4/0xc0 [ 891.319226][T18854] asm_sysvec_irq_work+0x1a/0x20 [ 891.324227][T18854] finish_task_switch.isra.0+0x22a/0xc10 [ 891.329927][T18854] __schedule+0x1198/0x5de0 [ 891.334494][T18854] schedule+0xe7/0x3a0 [ 891.338623][T18854] worker_thread+0x2e5/0xf10 [ 891.343279][T18854] kthread+0x3c2/0x780 [ 891.347409][T18854] ret_from_fork+0x5d4/0x6f0 [ 891.352063][T18854] ret_from_fork_asm+0x1a/0x30 [ 891.356893][T18854] [ 891.356893][T18854] to a SOFTIRQ-irq-unsafe lock: [ 891.363882][T18854] (tasklist_lock){.+.+}-{3:3} [ 891.363902][T18854] [ 891.363902][T18854] ... which became SOFTIRQ-irq-unsafe at: [ 891.376481][T18854] ... [ 891.376487][T18854] lock_acquire+0x179/0x350 [ 891.383613][T18854] _raw_read_lock+0x5f/0x70 [ 891.388177][T18854] __do_wait+0x105/0x890 [ 891.392478][T18854] do_wait+0x21e/0x5a0 [ 891.396607][T18854] kernel_wait+0x9f/0x160 [ 891.400998][T18854] call_usermodehelper_exec_work+0xf1/0x170 [ 891.406953][T18854] process_one_work+0x9cc/0x1b70 [ 891.411953][T18854] worker_thread+0x6c8/0xf10 [ 891.416606][T18854] kthread+0x3c2/0x780 [ 891.420738][T18854] ret_from_fork+0x5d4/0x6f0 [ 891.425390][T18854] ret_from_fork_asm+0x1a/0x30 [ 891.430218][T18854] [ 891.430218][T18854] other info that might help us debug this: [ 891.430218][T18854] [ 891.440418][T18854] Chain exists of: [ 891.440418][T18854] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 891.440418][T18854] [ 891.453430][T18854] Possible interrupt unsafe locking scenario: [ 891.453430][T18854] [ 891.461722][T18854] CPU0 CPU1 [ 891.467060][T18854] ---- ---- [ 891.472394][T18854] lock(tasklist_lock); [ 891.476608][T18854] local_irq_disable(); [ 891.483332][T18854] lock(&dev->event_lock#2); [ 891.490505][T18854] lock(&f_owner->lock); [ 891.497334][T18854] [ 891.500762][T18854] lock(&dev->event_lock#2); [ 891.505593][T18854] [ 891.505593][T18854] *** DEADLOCK *** [ 891.505593][T18854] [ 891.513708][T18854] 2 locks held by syz.5.3306/18854: [ 891.518880][T18854] #0: ffff88802532cac8 (&u->lock){+.+.}-{3:3}, at: unix_stream_sendmsg+0xd35/0x1340 [ 891.528336][T18854] #1: ffff8880256fe620 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 891.537444][T18854] [ 891.537444][T18854] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 891.547822][T18854] -> (&dev->event_lock#2){..-.}-{3:3} { [ 891.553619][T18854] IN-SOFTIRQ-W at: [ 891.557834][T18854] lock_acquire+0x179/0x350 [ 891.564488][T18854] _raw_spin_lock_irqsave+0x3a/0x60 [ 891.571835][T18854] input_inject_event+0x9f/0x3b0 [ 891.578923][T18854] led_set_brightness+0x217/0x290 [ 891.586097][T18854] led_trigger_event+0xda/0x270 [ 891.593090][T18854] kbd_bh+0x21b/0x300 [ 891.599222][T18854] tasklet_action_common+0x281/0x400 [ 891.606657][T18854] handle_softirqs+0x219/0x8e0 [ 891.613569][T18854] __irq_exit_rcu+0x109/0x170 [ 891.620392][T18854] irq_exit_rcu+0x9/0x30 [ 891.626782][T18854] sysvec_irq_work+0xa4/0xc0 [ 891.633517][T18854] asm_sysvec_irq_work+0x1a/0x20 [ 891.640599][T18854] finish_task_switch.isra.0+0x22a/0xc10 [ 891.648378][T18854] __schedule+0x1198/0x5de0 [ 891.655025][T18854] schedule+0xe7/0x3a0 [ 891.661242][T18854] worker_thread+0x2e5/0xf10 [ 891.667977][T18854] kthread+0x3c2/0x780 [ 891.674187][T18854] ret_from_fork+0x5d4/0x6f0 [ 891.680921][T18854] ret_from_fork_asm+0x1a/0x30 [ 891.687833][T18854] INITIAL USE at: [ 891.691963][T18854] lock_acquire+0x179/0x350 [ 891.698529][T18854] _raw_spin_lock_irqsave+0x3a/0x60 [ 891.705786][T18854] input_inject_event+0x9f/0x3b0 [ 891.712788][T18854] led_set_brightness+0x217/0x290 [ 891.719873][T18854] kbd_led_trigger_activate+0xcb/0x110 [ 891.727394][T18854] led_trigger_set+0x59a/0xc50 [ 891.734213][T18854] led_trigger_set_default+0x1e0/0x2e0 [ 891.741732][T18854] led_classdev_register_ext+0x7b8/0xa10 [ 891.749426][T18854] input_leds_connect+0x552/0x8e0 [ 891.756520][T18854] input_attach_handler.isra.0+0x176/0x250 [ 891.764390][T18854] input_register_device+0xab9/0x1180 [ 891.771823][T18854] atkbd_connect+0x5f8/0xa40 [ 891.778473][T18854] serio_driver_probe+0x7c/0xd0 [ 891.785383][T18854] really_probe+0x241/0xa90 [ 891.791945][T18854] __driver_probe_device+0x1de/0x440 [ 891.799290][T18854] driver_probe_device+0x4c/0x1b0 [ 891.806373][T18854] __driver_attach+0x283/0x580 [ 891.813197][T18854] bus_for_each_dev+0x13e/0x1d0 [ 891.820104][T18854] serio_handle_event+0x335/0xc30 [ 891.827189][T18854] process_one_work+0x9cc/0x1b70 [ 891.834186][T18854] worker_thread+0x6c8/0xf10 [ 891.840837][T18854] kthread+0x3c2/0x780 [ 891.846966][T18854] ret_from_fork+0x5d4/0x6f0 [ 891.853614][T18854] ret_from_fork_asm+0x1a/0x30 [ 891.860441][T18854] } [ 891.863173][T18854] ... key at: [] __key.7+0x0/0x40 [ 891.870524][T18854] -> (&client->buffer_lock){....}-{3:3} { [ 891.876401][T18854] INITIAL USE at: [ 891.880439][T18854] lock_acquire+0x179/0x350 [ 891.886831][T18854] _raw_spin_lock+0x2e/0x40 [ 891.893220][T18854] evdev_pass_values+0x10e/0x9b0 [ 891.900049][T18854] evdev_events+0x1bb/0x390 [ 891.906439][T18854] input_pass_values+0x74e/0x880 [ 891.913264][T18854] input_handle_event+0xf00/0x14d0 [ 891.920265][T18854] input_inject_event+0x1e8/0x3b0 [ 891.927181][T18854] evdev_write+0x457/0x750 [ 891.933478][T18854] vfs_write+0x29d/0x11d0 [ 891.939694][T18854] ksys_write+0x1f8/0x250 [ 891.945926][T18854] do_syscall_64+0xcd/0x4c0 [ 891.952330][T18854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.960115][T18854] } [ 891.962770][T18854] ... key at: [] __key.1+0x0/0x40 [ 891.970044][T18854] ... acquired at: [ 891.973999][T18854] _raw_spin_lock+0x2e/0x40 [ 891.978656][T18854] evdev_pass_values+0x10e/0x9b0 [ 891.983750][T18854] evdev_events+0x1bb/0x390 [ 891.988410][T18854] input_pass_values+0x74e/0x880 [ 891.993505][T18854] input_handle_event+0xf00/0x14d0 [ 891.998772][T18854] input_inject_event+0x1e8/0x3b0 [ 892.003950][T18854] evdev_write+0x457/0x750 [ 892.008520][T18854] vfs_write+0x29d/0x11d0 [ 892.013010][T18854] ksys_write+0x1f8/0x250 [ 892.017494][T18854] do_syscall_64+0xcd/0x4c0 [ 892.022158][T18854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.028205][T18854] [ 892.030509][T18854] -> (&new->fa_lock){....}-{3:3} { [ 892.035697][T18854] INITIAL USE at: [ 892.039660][T18854] lock_acquire+0x179/0x350 [ 892.045892][T18854] _raw_write_lock_irq+0x36/0x50 [ 892.052548][T18854] fasync_remove_entry+0xb2/0x1e0 [ 892.059290][T18854] fasync_helper+0xaf/0xd0 [ 892.065423][T18854] sock_fasync+0x92/0x140 [ 892.071470][T18854] __fput+0x968/0xb70 [ 892.077167][T18854] task_work_run+0x150/0x240 [ 892.083468][T18854] exit_to_user_mode_loop+0xeb/0x110 [ 892.090470][T18854] do_syscall_64+0x3f6/0x4c0 [ 892.096784][T18854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.104390][T18854] INITIAL READ USE at: [ 892.108779][T18854] lock_acquire+0x179/0x350 [ 892.115441][T18854] _raw_read_lock_irqsave+0x74/0x90 [ 892.122792][T18854] kill_fasync+0x138/0x510 [ 892.129364][T18854] sock_wake_async+0x132/0x160 [ 892.136279][T18854] sock_def_error_report+0x352/0x400 [ 892.143713][T18854] sk_error_report+0x3c/0x290 [ 892.150538][T18854] unix_dgram_disconnected+0x121/0x150 [ 892.158148][T18854] unix_dgram_connect+0x86f/0xc80 [ 892.165319][T18854] __sys_connect_file+0x141/0x1a0 [ 892.172491][T18854] __sys_connect+0x13b/0x160 [ 892.179228][T18854] __x64_sys_connect+0x72/0xb0 [ 892.186135][T18854] do_syscall_64+0xcd/0x4c0 [ 892.192788][T18854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.200827][T18854] } [ 892.203386][T18854] ... key at: [] __key.0+0x0/0x40 [ 892.210562][T18854] ... acquired at: [ 892.214426][T18854] _raw_read_lock_irqsave+0x74/0x90 [ 892.219772][T18854] kill_fasync+0x138/0x510 [ 892.224338][T18854] evdev_pass_values+0x619/0x9b0 [ 892.229429][T18854] evdev_events+0x1bb/0x390 [ 892.234092][T18854] input_pass_values+0x74e/0x880 [ 892.239183][T18854] input_handle_event+0xf00/0x14d0 [ 892.244446][T18854] input_inject_event+0x1e8/0x3b0 [ 892.249626][T18854] evdev_write+0x457/0x750 [ 892.254199][T18854] vfs_write+0x29d/0x11d0 [ 892.258676][T18854] ksys_write+0x1f8/0x250 [ 892.263154][T18854] do_syscall_64+0xcd/0x4c0 [ 892.267808][T18854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.273848][T18854] [ 892.276149][T18854] -> (&f_owner->lock){....}-{3:3} { [ 892.281331][T18854] INITIAL USE at: [ 892.285197][T18854] lock_acquire+0x179/0x350 [ 892.291242][T18854] _raw_write_lock_irq+0x36/0x50 [ 892.297718][T18854] __f_setown+0x61/0x3c0 [ 892.303501][T18854] f_setown+0x122/0x290 [ 892.309198][T18854] do_fcntl+0xfa6/0x15a0 [ 892.314979][T18854] __x64_sys_fcntl+0x163/0x200 [ 892.321285][T18854] do_syscall_64+0xcd/0x4c0 [ 892.327330][T18854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.334757][T18854] INITIAL READ USE at: [ 892.339061][T18854] lock_acquire+0x179/0x350 [ 892.345540][T18854] _raw_read_lock_irqsave+0x74/0x90 [ 892.352713][T18854] send_sigio+0x31/0x3e0 [ 892.358933][T18854] dnotify_handle_event+0x15e/0x2b0 [ 892.366108][T18854] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 892.374493][T18854] fsnotify+0x13d6/0x1dc0 [ 892.380792][T18854] path_openat+0x1b50/0x2cb0 [ 892.387356][T18854] do_filp_open+0x20b/0x470 [ 892.393831][T18854] do_sys_openat2+0x11b/0x1d0 [ 892.400483][T18854] __x64_sys_creat+0xcc/0x120 [ 892.407136][T18854] do_syscall_64+0xcd/0x4c0 [ 892.413617][T18854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.421480][T18854] } [ 892.423952][T18854] ... key at: [] __key.1+0x0/0x40 [ 892.431043][T18854] ... acquired at: [ 892.434817][T18854] _raw_read_lock_irqsave+0x74/0x90 [ 892.440165][T18854] send_sigio+0x31/0x3e0 [ 892.444557][T18854] kill_fasync+0x214/0x510 [ 892.449125][T18854] lease_break_callback+0x23/0x30 [ 892.454299][T18854] __break_lease+0x674/0x1810 [ 892.459124][T18854] vfs_truncate+0x4d3/0x6e0 [ 892.463774][T18854] __x64_sys_truncate+0x172/0x1e0 [ 892.468945][T18854] do_syscall_64+0xcd/0x4c0 [ 892.473600][T18854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.479639][T18854] [ 892.481939][T18854] [ 892.481939][T18854] the dependencies between the lock to be acquired [ 892.481945][T18854] and SOFTIRQ-irq-unsafe lock: [ 892.495399][T18854] -> (tasklist_lock){.+.+}-{3:3} { [ 892.500499][T18854] HARDIRQ-ON-R at: [ 892.504451][T18854] lock_acquire+0x179/0x350 [ 892.510586][T18854] _raw_read_lock+0x5f/0x70 [ 892.516717][T18854] __do_wait+0x105/0x890 [ 892.522581][T18854] do_wait+0x21e/0x5a0 [ 892.528273][T18854] kernel_wait+0x9f/0x160 [ 892.534224][T18854] call_usermodehelper_exec_work+0xf1/0x170 [ 892.541742][T18854] process_one_work+0x9cc/0x1b70 [ 892.548309][T18854] worker_thread+0x6c8/0xf10 [ 892.554526][T18854] kthread+0x3c2/0x780 [ 892.560220][T18854] ret_from_fork+0x5d4/0x6f0 [ 892.566431][T18854] ret_from_fork_asm+0x1a/0x30 [ 892.572820][T18854] SOFTIRQ-ON-R at: [ 892.576772][T18854] lock_acquire+0x179/0x350 [ 892.582906][T18854] _raw_read_lock+0x5f/0x70 [ 892.589036][T18854] __do_wait+0x105/0x890 [ 892.594902][T18854] do_wait+0x21e/0x5a0 [ 892.600596][T18854] kernel_wait+0x9f/0x160 [ 892.606550][T18854] call_usermodehelper_exec_work+0xf1/0x170 [ 892.614067][T18854] process_one_work+0x9cc/0x1b70 [ 892.620630][T18854] worker_thread+0x6c8/0xf10 [ 892.626848][T18854] kthread+0x3c2/0x780 [ 892.632540][T18854] ret_from_fork+0x5d4/0x6f0 [ 892.638755][T18854] ret_from_fork_asm+0x1a/0x30 [ 892.645143][T18854] INITIAL USE at: [ 892.649008][T18854] lock_acquire+0x179/0x350 [ 892.655055][T18854] _raw_write_lock_irq+0x36/0x50 [ 892.661531][T18854] copy_process+0x4caf/0x7690 [ 892.667748][T18854] kernel_clone+0xfc/0x930 [ 892.673703][T18854] user_mode_thread+0xc7/0x110 [ 892.680011][T18854] rest_init+0x23/0x2b0 [ 892.685709][T18854] start_kernel+0x3ee/0x4d0 [ 892.691752][T18854] x86_64_start_reservations+0x18/0x30 [ 892.698752][T18854] x86_64_start_kernel+0x130/0x190 [ 892.705401][T18854] common_startup_64+0x13e/0x148 [ 892.711876][T18854] INITIAL READ USE at: [ 892.716175][T18854] lock_acquire+0x179/0x350 [ 892.722654][T18854] _raw_read_lock+0x5f/0x70 [ 892.729131][T18854] __do_wait+0x105/0x890 [ 892.735343][T18854] do_wait+0x21e/0x5a0 [ 892.741384][T18854] kernel_wait+0x9f/0x160 [ 892.747683][T18854] call_usermodehelper_exec_work+0xf1/0x170 [ 892.755551][T18854] process_one_work+0x9cc/0x1b70 [ 892.762463][T18854] worker_thread+0x6c8/0xf10 [ 892.769027][T18854] kthread+0x3c2/0x780 [ 892.775073][T18854] ret_from_fork+0x5d4/0x6f0 [ 892.781661][T18854] ret_from_fork_asm+0x1a/0x30 [ 892.788408][T18854] } [ 892.790880][T18854] ... key at: [] tasklist_lock+0x18/0x40 [ 892.798578][T18854] ... acquired at: [ 892.802352][T18854] lock_acquire+0x179/0x350 [ 892.807012][T18854] _raw_read_lock+0x5f/0x70 [ 892.811663][T18854] send_sigurg+0xed/0xc80 [ 892.816147][T18854] sk_send_sigurg+0x76/0x360 [ 892.820888][T18854] unix_stream_sendmsg+0xfa5/0x1340 [ 892.826240][T18854] ____sys_sendmsg+0xa98/0xc70 [ 892.831162][T18854] ___sys_sendmsg+0x134/0x1d0 [ 892.835991][T18854] __sys_sendmmsg+0x200/0x420 [ 892.840820][T18854] __x64_sys_sendmmsg+0x9c/0x100 [ 892.845910][T18854] do_syscall_64+0xcd/0x4c0 [ 892.850565][T18854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.856608][T18854] [ 892.858906][T18854] [ 892.858906][T18854] stack backtrace: [ 892.864771][T18854] CPU: 0 UID: 60929 PID: 18854 Comm: syz.5.3306 Not tainted syzkaller #0 PREEMPT(full) [ 892.864789][T18854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 892.864797][T18854] Call Trace: [ 892.864801][T18854] [ 892.864806][T18854] dump_stack_lvl+0x116/0x1f0 [ 892.864824][T18854] check_irq_usage+0x7dc/0x920 [ 892.864848][T18854] ? check_path.constprop.0+0x24/0x50 [ 892.864869][T18854] ? __lock_acquire+0x12bc/0x1ce0 [ 892.864887][T18854] __lock_acquire+0x12bc/0x1ce0 [ 892.864908][T18854] ? find_held_lock+0x2b/0x80 [ 892.864924][T18854] lock_acquire+0x179/0x350 [ 892.864943][T18854] ? send_sigurg+0xed/0xc80 [ 892.864963][T18854] _raw_read_lock+0x5f/0x70 [ 892.864977][T18854] ? send_sigurg+0xed/0xc80 [ 892.864995][T18854] send_sigurg+0xed/0xc80 [ 892.865011][T18854] ? find_held_lock+0x2b/0x80 [ 892.865028][T18854] sk_send_sigurg+0x76/0x360 [ 892.865042][T18854] unix_stream_sendmsg+0xfa5/0x1340 [ 892.865062][T18854] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 892.865084][T18854] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 892.865104][T18854] ____sys_sendmsg+0xa98/0xc70 [ 892.865126][T18854] ? copy_msghdr_from_user+0x10a/0x160 [ 892.865141][T18854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 892.865160][T18854] ? find_held_lock+0x2b/0x80 [ 892.865176][T18854] ? futex_unqueue+0x133/0x2c0 [ 892.865196][T18854] ___sys_sendmsg+0x134/0x1d0 [ 892.865212][T18854] ? __pfx____sys_sendmsg+0x10/0x10 [ 892.865231][T18854] ? find_held_lock+0x2b/0x80 [ 892.865253][T18854] __sys_sendmmsg+0x200/0x420 [ 892.865270][T18854] ? __pfx___sys_sendmmsg+0x10/0x10 [ 892.865288][T18854] ? __pfx_do_futex+0x10/0x10 [ 892.865310][T18854] ? __might_fault+0x13b/0x190 [ 892.865324][T18854] ? xfd_validate_state+0x61/0x180 [ 892.865346][T18854] __x64_sys_sendmmsg+0x9c/0x100 [ 892.865361][T18854] ? lockdep_hardirqs_on+0x7c/0x110 [ 892.865378][T18854] do_syscall_64+0xcd/0x4c0 [ 892.865396][T18854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.865408][T18854] RIP: 0033:0x7ff7fa18ebe9 [ 892.865420][T18854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.865433][T18854] RSP: 002b:00007ff7fb01b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 892.865447][T18854] RAX: ffffffffffffffda RBX: 00007ff7fa3c5fa0 RCX: 00007ff7fa18ebe9 [ 892.865456][T18854] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000008 [ 892.865464][T18854] RBP: 00007ff7fa211e19 R08: 0000000000000000 R09: 0000000000000000 [ 892.865472][T18854] R10: 0000000020000015 R11: 0000000000000246 R12: 0000000000000000 [ 892.865480][T18854] R13: 00007ff7fa3c6038 R14: 00007ff7fa3c5fa0 R15: 00007ffc9356f1a8 [ 892.865493][T18854] [ 893.128104][ C0] vkms_vblank_simulate: vblank timer overrun [ 893.171366][ T5985] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 893.182135][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.192756][ T5985] usb 2-1: can't set config #1, error -71 [ 893.200547][ T5985] usb 2-1: USB disconnect, device number 109