last executing test programs: 18m37.553109554s ago: executing program 32 (id=494): syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000010004", @ANYRES32=r2], 0x54}}, 0x200088c2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) statx(0xffffffffffffffff, &(0x7f00000004c0)='./file1\x00', 0x1000, 0x7ff, &(0x7f00000003c0)) geteuid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0xfc30) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x3, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) 14m14.290093215s ago: executing program 33 (id=1432): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x2, 0x800003fd, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='auxv\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x80}, 0x0, 0x0, &(0x7f0000000400)={0x40, 0x7, 0x2, 0xf51c}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x17, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000000c0)={0xc}) 7m57.658238095s ago: executing program 34 (id=2853): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00", @ANYRES32=r3, @ANYBLOB="14000100ff05000000000000dfce000000000001"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) (fail_nth: 3) 6m49.701311015s ago: executing program 35 (id=3047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x4000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) prlimit64(r4, 0x0, &(0x7f0000000180)={0xe, 0xb9f}, &(0x7f0000000200)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_lsm={0x1d, 0x22, &(0x7f0000001440)=@ringbuf={{}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @ringbuf_query, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x522}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000015c0)='syzkaller\x00', 0x3, 0x9a, &(0x7f0000001600)=""/154, 0x40f00, 0x21, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700)={0x5, 0x7, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001740), 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000038c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000002680)='GPL\x00', 0xaa5b, 0x1000, &(0x7f00000026c0)=""/4096, 0x41100, 0x2, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000003700)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000003740)={0x5, 0xf, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000003840)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000003880)=[{0x3, 0x5, 0xa, 0x7}, {0x0, 0x5, 0x7, 0x9}], 0x10, 0x5}, 0x94) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x400c001}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r1, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="01000000080b0000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0x400c0091}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 5m51.543503733s ago: executing program 4 (id=3272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="de5392d8b4ea00f0f555f7f032626d4b23808f25bb7edf4cf9eddc44886204403b49919fea54dea5e8ffd7497b7eb2e930c7d52ef9740a54ea8cd39feed676f5006a00f8bd3018520e1d74f16556e552"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0xc88c773df42907b4, 0x0, &(0x7f00000006c0)=[@acquire_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x7000000, 0x0, 0x0, 0x0, &(0x7f0000000600)={@flat=@weak_handle={0x77682a85, 0x1001, 0x3}, @fda={0x66646185, 0x4, 0x2, 0x2b}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/138, 0x0, 0x2, 0x1}}, &(0x7f0000000680)}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xa, 0x3, 0x1, 0x9, 0x3, 0x6, 0x5, 0x38d, 0x40, 0x384, 0x400, 0x4, 0x38, 0x3, 0x7, 0x7, 0x7}, [{0x5, 0x3, 0x1, 0x3, 0x0, 0x80000001, 0xff}, {0x60000000, 0x4c81, 0x0, 0x0, 0x5, 0xed, 0xf, 0x7}, {0x2, 0x10001, 0x3aa, 0x9, 0x7, 0x7, 0xfffffffffffffffb, 0x5}], "f3f5774bcd169032b665f2e79046fe0b2b7a45cf27b94d11bb0380806d827c571ded02af87a4a5ca79b9a36b463f977241d03c0a00f76c197f285fc09bab76eaab0fe2a1ca5ac68c"}, 0x130) chdir(0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000000)) 5m50.945288529s ago: executing program 4 (id=3273): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0xfc30) io_submit(r2, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x3000, r1, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}]) 5m49.586394178s ago: executing program 4 (id=3279): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c004}, 0x4040090) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x20008, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="010300e200000000000100040000000000000000000000003b31111cbea4d9aa0e6106bd00616024daf611139dc9c06f5a03f58e8e35665be0b4c9d2be", @ANYRES32, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYBLOB='\x00'/28, @ANYBLOB="64e7bf7db210f3d1508aa2bb6ae4dc01634607af63d286777b2a38c7923df7f79da38797e3"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r3}, 0x38) (async) io_setup(0x80000000, &(0x7f0000000a00)) (async) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f00000001c0)=0x4) r4 = add_key$user(0x0, 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) r5 = add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0xffffff4f, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r5, r4}, 0x0, 0x0, 0x0) (async) r8 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r8, 0xc1205531, &(0x7f00000101c0)={0x0, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x2, 0x10, 0x0, 0x8f1, "b6855a32474ffa64f778ddcf29c94337"}) 5m49.465719062s ago: executing program 4 (id=3281): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x6}}}}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000100020004000000003"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r0, &(0x7f0000000e80), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4e, 0x0, 0x0, 0x10, 0x4}, 0x94) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 5m48.402029775s ago: executing program 4 (id=3286): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x7040, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x4e20, 0x2, @mcast2, 0xe}, r2, 0x6}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x389, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a5976ac6bcd41fd8"}}, 0x48}}, 0x410) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB='=\x00\x00', @ANYRESHEX=r6, @ANYRES64=r6, @ANYRESDEC=r0, @ANYBLOB="bd10da70f92334bce2a696b7dea596813472ed6da8b938485ff45371229c2190305c4d1199481dad4b023f79c041158864c54fe11b42518eefa81d440f7a45abb73d4e4539147670457f58fbcd4e82de511ded07372552ef9110f7ed767afc8611ec8821a7abbe22685672b674fb685db4c6588c32fb00e8", @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x1, {0x4, 0x0, 0x2, 0x6, 0xffff, 0x8, {0x0, 0x0, 0x3, 0x0, 0xb905, 0x0, 0x40, 0x22f, 0x7, 0x6000, 0x0, 0x0, r8, 0x800, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x809000, 0x200, 0x2, 0x5, 0x3}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x2200, 0x2) ioctl$FIBMAP(r9, 0x401070c9, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r11 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r11, &(0x7f0000000080)={0x1d, r10, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r11, &(0x7f00000001c0)={&(0x7f0000000400)={0x1d, 0x0, 0x3, {0x1, 0x0, 0x4}}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) recvmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x38}, 0x8061) close(0x3) timer_create(0x0, &(0x7f0000000000)={0x0, 0x3a, 0x2, @tid=r12}, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000280)) 5m47.94962294s ago: executing program 4 (id=3288): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x87, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x80000000000009, 0x14d080) syz_open_dev$dri(0x0, 0x1, 0x0) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) socket$rds(0x15, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r3], 0x7c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r5 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)='\x00\x000w', 0x4}], 0x1}, 0x40810) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaa280180c200000086dd6008000800083a00000000000000000000000000000000010000000000000000000000000000000164009078000300316b74975be2461e9672393f2358d3325eec28c4f347c2c13fcbec459ee56fc77721f4e82725b57a2fc5f614b0a85442c6cf83e81fbf1f9bf289106c54968d66efa40f"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[], 0x40}, 0x1, 0x4000, 0x0, 0x44084}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 5m47.634642319s ago: executing program 36 (id=3288): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x87, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x80000000000009, 0x14d080) syz_open_dev$dri(0x0, 0x1, 0x0) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) socket$rds(0x15, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r3], 0x7c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r5 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)='\x00\x000w', 0x4}], 0x1}, 0x40810) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaa280180c200000086dd6008000800083a00000000000000000000000000000000010000000000000000000000000000000164009078000300316b74975be2461e9672393f2358d3325eec28c4f347c2c13fcbec459ee56fc77721f4e82725b57a2fc5f614b0a85442c6cf83e81fbf1f9bf289106c54968d66efa40f"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[], 0x40}, 0x1, 0x4000, 0x0, 0x44084}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 3m6.64928899s ago: executing program 3 (id=3900): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000060", 0x41d) 3m6.475094769s ago: executing program 3 (id=3902): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@typed={0x0, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x30}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r3, 0xd) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_adjtime(0xffffffd3, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000306830b0000000000000000010000030500010007000000cd6120e5ae4fcf65b15ed6ec2583f50f503ebc27f374e4995cd17f2f7105b55bf062bb546e832f8bff244680fce3e96c41a8f43fe1500063df89b3f43494bc92b7eba6a3ab5b213a367f209cbd80d6e6a00e1999b5c3ce216e25161f655940377003b2d37d2b5a601825e26f"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) 3m4.968847386s ago: executing program 3 (id=3908): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f00000013c0)={0x0}, 0x0) r1 = epoll_create1(0x80000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x60002013}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000000)={0xe1, 0x0, 0x12}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x112) openat2(r4, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xa040, 0x22, 0x32}, 0x18) 3m4.599940734s ago: executing program 3 (id=3910): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 3m4.471490704s ago: executing program 3 (id=3911): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lremovexattr(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000004c0)=@known='system.posix_acl_access\x00') 3m2.596558265s ago: executing program 3 (id=3920): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000240)={r3, 0xc89, 0xa, 0xfffffffa, 0x3, [0x0], [0x5, 0x5, 0xfffffffd, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffffb, 0xa679, 0x1, 0x7f]}) r7 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0xc5da, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x7}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000080), 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6}) 3m2.230174854s ago: executing program 37 (id=3920): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000240)={r3, 0xc89, 0xa, 0xfffffffa, 0x3, [0x0], [0x5, 0x5, 0xfffffffd, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffffb, 0xa679, 0x1, 0x7f]}) r7 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0xc5da, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x7}, 0x1c) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000080), 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6}) 2m18.907498893s ago: executing program 9 (id=4083): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000b1c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000400)={0x50, 0x0, r2, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m17.965807006s ago: executing program 9 (id=4087): r0 = socket$kcm(0x21, 0x2, 0x2) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_open_dev$vbi(0x0, 0x0, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$dri(&(0x7f0000000180), 0x53c, 0xc0b00) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) io_setup(0xeb0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000100)={0x761, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r1 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000180)={r2, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x6, 0x2a}, 0x90) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x80000) pselect6(0x40, &(0x7f0000000240)={0x3, 0xb400, 0xfffffffffffffff1, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0xfffffffffffffffc, 0xf, 0x80000007, 0xb06c}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r5, 0x0, 0x2a, &(0x7f00000003c0)=""/213, &(0x7f0000000500)=0xd5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) setsockopt$sock_attach_bpf(r0, 0x110, 0x7, 0x0, 0x4) 2m15.101177654s ago: executing program 9 (id=4098): socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}}], 0x2, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) (async) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10001, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4090}, 0x24044804) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010031bd", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b00000000000c00"], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000640)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x83de, 0x81, 0x603, 0x3, 0x1ff, 0x7, 0xdff8, 0xe}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x62901, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000bb88faa4b22d780900000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000ddfffffdffffff00000000"]}, 0x108) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) syz_emit_ethernet(0x14e, &(0x7f0000000200)={@multicast, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x9, 0x6, "620fb6", 0x118, 0x6, 0x0, @private0, @mcast2, {[@routing={0x1d, 0x4, 0x0, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}]}, @routing={0x87, 0x10, 0x0, 0x3, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @local, @empty, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x0, 0x6, 0x0, 0xda, 0x0, [@remote, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}], @payload_named={{{{{0x30, 0x0, 0x1, 0x0, 0x1, 0xa, 0x0, 0x2, 0x9, 0x0, 0x2, 0xd, 0x1, 0x2, 0x81, 0x9, 0x0, 0x4e21, 0x4e23}, 0x2}, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 2m14.734713316s ago: executing program 9 (id=4100): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x4e23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x330, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e0f6b5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4031ae72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f2d55c9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1953e93c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ca7c629}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ceb1d3f}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4307c910}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e603ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ddb6e2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x304a3302}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4736ecff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x332f2fb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14ede054}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7eee98f7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x589926b2}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7698f79d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34a499fb}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x12c, 0xc, 0x0, 0x1, [{0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa6e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd8f7e96}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2080}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c2a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8809}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x527a7c6f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x293fe0f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf214}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xaefd282}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd61}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b248baa}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e8aab74}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xffd1}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfe0433}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1da11e1e}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b1d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ff3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb43}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4dcdd8f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5086e67b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb90b}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4aec29b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6da27840}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d14}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2732}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa66a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb4e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a07cf24}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x447596fd}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bd3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47be7b4b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3dc0}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x8814}, 0x40040) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 2m14.421715023s ago: executing program 9 (id=4101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400003f1000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879"], 0xcc}}, 0x0) 2m14.079405554s ago: executing program 9 (id=4102): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a4, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1428}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x91ee}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6d4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40}, 0x4008001) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000002c0)) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) connect$l2tp6(r2, &(0x7f0000000340)={0xa, 0x0, 0x927, @mcast2, 0x2, 0x3}, 0x20) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x121000, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r3, 0x80045105, &(0x7f00000003c0)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000004c0)={r4, &(0x7f0000000440)=""/91}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[r5, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) recvfrom(r6, &(0x7f0000000600)=""/93, 0x5d, 0x10000, &(0x7f0000000680)=@un=@file={0x0, './file0\x00'}, 0x80) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000700)={"4e206861364540a3749d32ef5902b6baa4e5d9eb81f74e2e47a418ca17d8", 0xff, 0x0, 0x1, 0xffffffa1, 0x5, 0x3, 0xff, 0x0, [0x9, 0x7, 0x5, 0x80, 0x6da, 0xe04b, 0x7, 0x269, 0x5314, 0x0, 0x4, 0x4, 0xd, 0x3, 0x8, 0xe, 0x5, 0xfffffff5, 0x7ff]}) r7 = syz_io_uring_setup(0x1bc1, &(0x7f00000007c0)={0x0, 0xb325, 0x1000, 0x2, 0x20, 0x0, r2}, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000900)) r8 = syz_open_dev$vcsa(&(0x7f0000000a80), 0x1, 0x101002) recvfrom$inet6(r8, &(0x7f0000000ac0)=""/4096, 0x1000, 0x22, &(0x7f0000001ac0)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x634}, 0x1c) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r8, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xb}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x23}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x4) r10 = accept4$alg(r2, 0x0, 0x0, 0x0) read$alg(r10, &(0x7f0000001c40)=""/156, 0x9c) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001d00)={'vxcan0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000002180)={&(0x7f0000001d40)=@xdp={0x2c, 0x3, r11, 0x3e}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001dc0)="e5a5f1e4b932229cc9064a66e1e8f9c7db5cfa5469a001057f6a715de947c364fd5669b621c9ddc123981ef91a9d06f3f2ad4473512ddcce3da7f35b0ac9d9005856102f84d4b315484b24fd58cbbcc0a3cffc5e008d4ef443d1dcb78807611b197c9362ed0cfb010d6184652a", 0x6d}], 0x1, &(0x7f0000001e80)=[{0xe8, 0x0, 0x7445deaf, "32c8e10db08165904215d5f79220d6ba383cd96d18bd8019d8048c0b20a93275f706ce39de7e5828f16334c19928b6f5cac7a3d94a2e1d4321494920ca9a4e92963a79b649a9d3727abb813fa789c6e7f546cf559f39ac6276441a4844cc17da32d44b6c6c3c5973e1fe48ec3e703d49b97ab3f229a4b1672e77540b6ea9822ad1a012586bf0edd96c4b051cd0a0ba55016b76284f0f01f4e94bdf2f8159d7e9174bc17506a458994c292db9bda3635fefea6284873b0fdaac50fd621523bfe54623eb358e91bd20aea0cb20719ad331a22b7d17"}, {0x38, 0x1, 0x8000, "b2f592c38e00ab13c920aa3ca1ddc1befd1ecda6da8121f35a3508d81454278eca8f0b"}, {0xc8, 0x112, 0x1, "22fd10a350ed6fea250443c80deb02e7141aae3bbd7edc066e9f5fce48f9a9ac0210d7b8780efc85e5c28d1b29cde5c2810721dd94518d11c695405de6482588117a20461dd8c53d0475e4f0e8b7ba194fd111451610aa32539c8551421c98fa44e12a89d22e248c92feeae51ddcc7333c44f1899f4cbebcd4fb066142321dacf8cd4727ea2e6525ac8efafb08420ab8f9eefc9ea18d39b85f91ce79fabf7cf7358e1ce5adf5b04d0e9e41820c153323e8d1"}, {0xe8, 0x10a, 0x4, "3236d7d481828967aae5c9525b5f003d5eac6d1b0559239e88d16efbdc8c10de448f4293cd1db5eb8e528d17f7a0ad18498b1b9a8a248422fb75365cfc4bfeb47ecd26d12ef12e81bd3c50dd7c01342ec8737959bdecd711fca6fe9e6ff9b85910590f003fe0d66fdf8c7b3b06fbed531219d560350a71f3d2f5a25f73f1be8e298a524aed6b8033907a7c5724c3afb3f2696c3f3fe6ace9272b8847a394b7f9c6df49dbf00a0a4d1e832867b36c748ade4e3d422dbad930580c0ca3e4baf04e1adf75efea310fb92d7997ecda171c50aa63fcb8"}, {0x20, 0x0, 0x8, "f81e09b67d48ea937fe1e3436ef72d"}], 0x2f0}, 0xc090) syz_genetlink_get_family_id$tipc2(&(0x7f00000021c0), r6) r12 = openat$cgroup_subtree(r2, &(0x7f0000002200), 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000002780)={{r12, &(0x7f0000002240)='/selinux/status\x00', 0xa000, &(0x7f0000002280)={@_ha_fsid={[0x4ae0, 0x1]}, {0x1000, 0x5, 0x200, 0x3}}, 0x9, &(0x7f00000022c0), &(0x7f0000002300)}, 0x4, &(0x7f0000002700)=[{0x2, 0x1, &(0x7f0000002340)='\x00', &(0x7f0000002380)="2380664cf397029fa6727c360f3ffaa550af834f7c3af01c8e3c4f89fcd69715ae4ce75dc4e4c9c75ef59f46c7cbfb899607123abc8487fb3f520572513f5492f26671d61a1cffa2f7f70c0ea30aba8b5d821b750299d0eb0e321cd0815a66de7b84dc0ff26d38623a659027fa531829800fe9134a302c3d482b3999931e56a6f3eb92679d1c912c8fe752bb2a163eeb5d202ce2b65847ea9d4e9ed33d57e027fd483a30d48e4e3376fdd3f9fc1c4e68800fcc4a6f1b3a6c4629879be2f65c5168cfb213f9eb782731914db750ce05f4", 0xd0, 0x3a}, {0x1, 0x9, &(0x7f0000002480)='\x00', &(0x7f00000024c0)="d3fc0fa6e49c8fb9d093d11162714e211e8fba131c9332", 0x17, 0x20}, {0x1, 0x9, &(0x7f0000002500)='broadcast-link\x00', &(0x7f0000002540)="90d82252e3b218efb349d97b146086a3d53684a804406e1df4c9073ecc0e255447369092f4654dd55ae7304ac4f84447e1b405e42400ffa56f4a8f6277409e1e8711af2132ce686c050f2bf4", 0x4c}, {0x2, 0x2, &(0x7f00000025c0)='\x00', &(0x7f0000002600)="467d7c80dced8374f1986d6e6b02046af1a02bf98aaedbe0827c928117c0f70ce8a3ad2bc5753c7d8d1955ffe527b12074deceef201b52f0ae1c78e2b357e11667f34ac1cc4217dfddb21f837c56ea78ccfc5748f8ea4ff2def13f1b88631b17377e572a1a982b41d4672a0a0c112044f7e589f1855b0de71e8afd76db45c9dfa3c7f47b0c7759f94d2ee12e3dc79872fb2577c02aa4096a7712e2d9e730ec169b82026a41a366cdcdaba40865e3d0f46be7167273be03b8ac02d4c876c80a16ef996d2dc2351d4591ac6239856ad19810c870c31daa5702639c900d0a", 0xdd, 0xc}]}) readv(r8, &(0x7f0000003c00)=[{&(0x7f0000002800)=""/137, 0x89}, {&(0x7f00000028c0)=""/122, 0x7a}, {&(0x7f0000002940)=""/220, 0xdc}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/109, 0x6d}, {&(0x7f0000003ac0)=""/158, 0x9e}, {&(0x7f0000003b80)=""/8, 0x8}, {&(0x7f0000003bc0)=""/56, 0x38}], 0x8) 2m13.819170369s ago: executing program 38 (id=4102): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a4, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1428}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x91ee}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6d4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40}, 0x4008001) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000002c0)) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) connect$l2tp6(r2, &(0x7f0000000340)={0xa, 0x0, 0x927, @mcast2, 0x2, 0x3}, 0x20) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x121000, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r3, 0x80045105, &(0x7f00000003c0)) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000004c0)={r4, &(0x7f0000000440)=""/91}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[r5, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) recvfrom(r6, &(0x7f0000000600)=""/93, 0x5d, 0x10000, &(0x7f0000000680)=@un=@file={0x0, './file0\x00'}, 0x80) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000700)={"4e206861364540a3749d32ef5902b6baa4e5d9eb81f74e2e47a418ca17d8", 0xff, 0x0, 0x1, 0xffffffa1, 0x5, 0x3, 0xff, 0x0, [0x9, 0x7, 0x5, 0x80, 0x6da, 0xe04b, 0x7, 0x269, 0x5314, 0x0, 0x4, 0x4, 0xd, 0x3, 0x8, 0xe, 0x5, 0xfffffff5, 0x7ff]}) r7 = syz_io_uring_setup(0x1bc1, &(0x7f00000007c0)={0x0, 0xb325, 0x1000, 0x2, 0x20, 0x0, r2}, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000900)) r8 = syz_open_dev$vcsa(&(0x7f0000000a80), 0x1, 0x101002) recvfrom$inet6(r8, &(0x7f0000000ac0)=""/4096, 0x1000, 0x22, &(0x7f0000001ac0)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x634}, 0x1c) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r8, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x38, r9, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xb}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x23}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x4) r10 = accept4$alg(r2, 0x0, 0x0, 0x0) read$alg(r10, &(0x7f0000001c40)=""/156, 0x9c) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001d00)={'vxcan0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000002180)={&(0x7f0000001d40)=@xdp={0x2c, 0x3, r11, 0x3e}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001dc0)="e5a5f1e4b932229cc9064a66e1e8f9c7db5cfa5469a001057f6a715de947c364fd5669b621c9ddc123981ef91a9d06f3f2ad4473512ddcce3da7f35b0ac9d9005856102f84d4b315484b24fd58cbbcc0a3cffc5e008d4ef443d1dcb78807611b197c9362ed0cfb010d6184652a", 0x6d}], 0x1, &(0x7f0000001e80)=[{0xe8, 0x0, 0x7445deaf, "32c8e10db08165904215d5f79220d6ba383cd96d18bd8019d8048c0b20a93275f706ce39de7e5828f16334c19928b6f5cac7a3d94a2e1d4321494920ca9a4e92963a79b649a9d3727abb813fa789c6e7f546cf559f39ac6276441a4844cc17da32d44b6c6c3c5973e1fe48ec3e703d49b97ab3f229a4b1672e77540b6ea9822ad1a012586bf0edd96c4b051cd0a0ba55016b76284f0f01f4e94bdf2f8159d7e9174bc17506a458994c292db9bda3635fefea6284873b0fdaac50fd621523bfe54623eb358e91bd20aea0cb20719ad331a22b7d17"}, {0x38, 0x1, 0x8000, "b2f592c38e00ab13c920aa3ca1ddc1befd1ecda6da8121f35a3508d81454278eca8f0b"}, {0xc8, 0x112, 0x1, "22fd10a350ed6fea250443c80deb02e7141aae3bbd7edc066e9f5fce48f9a9ac0210d7b8780efc85e5c28d1b29cde5c2810721dd94518d11c695405de6482588117a20461dd8c53d0475e4f0e8b7ba194fd111451610aa32539c8551421c98fa44e12a89d22e248c92feeae51ddcc7333c44f1899f4cbebcd4fb066142321dacf8cd4727ea2e6525ac8efafb08420ab8f9eefc9ea18d39b85f91ce79fabf7cf7358e1ce5adf5b04d0e9e41820c153323e8d1"}, {0xe8, 0x10a, 0x4, "3236d7d481828967aae5c9525b5f003d5eac6d1b0559239e88d16efbdc8c10de448f4293cd1db5eb8e528d17f7a0ad18498b1b9a8a248422fb75365cfc4bfeb47ecd26d12ef12e81bd3c50dd7c01342ec8737959bdecd711fca6fe9e6ff9b85910590f003fe0d66fdf8c7b3b06fbed531219d560350a71f3d2f5a25f73f1be8e298a524aed6b8033907a7c5724c3afb3f2696c3f3fe6ace9272b8847a394b7f9c6df49dbf00a0a4d1e832867b36c748ade4e3d422dbad930580c0ca3e4baf04e1adf75efea310fb92d7997ecda171c50aa63fcb8"}, {0x20, 0x0, 0x8, "f81e09b67d48ea937fe1e3436ef72d"}], 0x2f0}, 0xc090) syz_genetlink_get_family_id$tipc2(&(0x7f00000021c0), r6) r12 = openat$cgroup_subtree(r2, &(0x7f0000002200), 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000002780)={{r12, &(0x7f0000002240)='/selinux/status\x00', 0xa000, &(0x7f0000002280)={@_ha_fsid={[0x4ae0, 0x1]}, {0x1000, 0x5, 0x200, 0x3}}, 0x9, &(0x7f00000022c0), &(0x7f0000002300)}, 0x4, &(0x7f0000002700)=[{0x2, 0x1, &(0x7f0000002340)='\x00', &(0x7f0000002380)="2380664cf397029fa6727c360f3ffaa550af834f7c3af01c8e3c4f89fcd69715ae4ce75dc4e4c9c75ef59f46c7cbfb899607123abc8487fb3f520572513f5492f26671d61a1cffa2f7f70c0ea30aba8b5d821b750299d0eb0e321cd0815a66de7b84dc0ff26d38623a659027fa531829800fe9134a302c3d482b3999931e56a6f3eb92679d1c912c8fe752bb2a163eeb5d202ce2b65847ea9d4e9ed33d57e027fd483a30d48e4e3376fdd3f9fc1c4e68800fcc4a6f1b3a6c4629879be2f65c5168cfb213f9eb782731914db750ce05f4", 0xd0, 0x3a}, {0x1, 0x9, &(0x7f0000002480)='\x00', &(0x7f00000024c0)="d3fc0fa6e49c8fb9d093d11162714e211e8fba131c9332", 0x17, 0x20}, {0x1, 0x9, &(0x7f0000002500)='broadcast-link\x00', &(0x7f0000002540)="90d82252e3b218efb349d97b146086a3d53684a804406e1df4c9073ecc0e255447369092f4654dd55ae7304ac4f84447e1b405e42400ffa56f4a8f6277409e1e8711af2132ce686c050f2bf4", 0x4c}, {0x2, 0x2, &(0x7f00000025c0)='\x00', &(0x7f0000002600)="467d7c80dced8374f1986d6e6b02046af1a02bf98aaedbe0827c928117c0f70ce8a3ad2bc5753c7d8d1955ffe527b12074deceef201b52f0ae1c78e2b357e11667f34ac1cc4217dfddb21f837c56ea78ccfc5748f8ea4ff2def13f1b88631b17377e572a1a982b41d4672a0a0c112044f7e589f1855b0de71e8afd76db45c9dfa3c7f47b0c7759f94d2ee12e3dc79872fb2577c02aa4096a7712e2d9e730ec169b82026a41a366cdcdaba40865e3d0f46be7167273be03b8ac02d4c876c80a16ef996d2dc2351d4591ac6239856ad19810c870c31daa5702639c900d0a", 0xdd, 0xc}]}) readv(r8, &(0x7f0000003c00)=[{&(0x7f0000002800)=""/137, 0x89}, {&(0x7f00000028c0)=""/122, 0x7a}, {&(0x7f0000002940)=""/220, 0xdc}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/109, 0x6d}, {&(0x7f0000003ac0)=""/158, 0x9e}, {&(0x7f0000003b80)=""/8, 0x8}, {&(0x7f0000003bc0)=""/56, 0x38}], 0x8) 1m41.076137166s ago: executing program 5 (id=4226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd0}]}, 0x34}}, 0x0) 1m40.864272706s ago: executing program 5 (id=4228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0xf5ffffff, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m40.227640799s ago: executing program 5 (id=4230): openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x5, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, 0x0, 0x0, 0x20008000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xb80420, &(0x7f00000000c0)=ANY=[@ANYBLOB='rootcontext=']) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000580)}, 0x123) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x68c03, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TCSETS(r2, 0x404c4701, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, 0x0, 0x8004) ptrace$cont(0x18, r1, 0x5, 0x1) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa6002173600232b00fc020000000000000000000000000000000000000000010420880b00000000000008000000"], 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000001200)=0x8, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac2(r6, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="005200000000ca73"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m36.690807503s ago: executing program 5 (id=4244): sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES8, @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x7ff}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x10}, 0x200440d1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x4) getdents(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) timer_create(0x7, 0x0, &(0x7f0000000180)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, &(0x7f0000000280)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000d80000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000001c0), &(0x7f0000000000), 0x2}, 0x20) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040050bbe1a00000000000109022400010000e80b0904000001030002000921fd7f00012235f2e30109058103893605"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) 1m30.041344228s ago: executing program 5 (id=4264): socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe2(0x0, 0x80000) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x80000) accept4$unix(r0, 0x0, &(0x7f0000000300), 0x0) syz_emit_ethernet(0x334, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) mkdir(&(0x7f0000000240)='./bus\x00', 0x44) chdir(0x0) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa1f) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000440)=ANY=[]) 1m29.553288899s ago: executing program 5 (id=4265): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d97405000000000000040000000100", [0xfffffffffeff7ffc, 0x2]}}) fcntl$addseals(r1, 0x409, 0x7) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$l2tp6(0xa, 0x2, 0x73) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) mprotect(&(0x7f0000c03000/0xa000)=nil, 0xa000, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x4b9, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), 0x0, 0x0) close(r3) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000000c0)={0x45f, 0x4, 0x1, {0xd, @pix={0x4, 0x7fffffff, 0x32315241, 0x5, 0x1, 0x1, 0x5, 0x9, 0x0, 0x3, 0x1, 0x6}}, 0x80000001}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) 1m12.379331392s ago: executing program 39 (id=4265): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d97405000000000000040000000100", [0xfffffffffeff7ffc, 0x2]}}) fcntl$addseals(r1, 0x409, 0x7) socket$inet6(0xa, 0x80002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$l2tp6(0xa, 0x2, 0x73) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) mprotect(&(0x7f0000c03000/0xa000)=nil, 0xa000, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x4b9, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), 0x0, 0x0) close(r3) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000000c0)={0x45f, 0x4, 0x1, {0xd, @pix={0x4, 0x7fffffff, 0x32315241, 0x5, 0x1, 0x1, 0x5, 0x9, 0x0, 0x3, 0x1, 0x6}}, 0x80000001}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) 44.71369213s ago: executing program 2 (id=4400): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x3b29, &(0x7f0000000300)={0x0, 0xbcb5, 0x1000, 0x8, 0x80001e5, 0x0, r0}, &(0x7f00000002c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x1000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x102}}}, 0x0) 44.443400618s ago: executing program 2 (id=4401): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e23, @multicast2}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x0, @loopback}], 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="9a4f6922010fc72b6666660f3880990800f08172791b7d660f388033d666b8010000000f01d966b9430800000f320f32f33e0f0134", 0x35}], 0x1, 0x41, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 42.870698168s ago: executing program 2 (id=4407): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x4, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140), 0x16, 0x0) mount$overlay(0xfffff000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 42.641039097s ago: executing program 2 (id=4408): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x6, 0x7ff00003}]}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@private}}, &(0x7f0000000740)=0xe8) ioprio_set$uid(0x3, r1, 0x6003) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000200)='./bus\x00', 0x0, 0x384400, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@audit}, {@smackfsroot={'smackfsroot', 0x3d, '.*+{'}}, {@appraise}, {@fsname={'fsname', 0x3d, ','}}, {@euid_lt={'euid<', r1}}, {@subj_user}]}) (async) chdir(0x0) (async) r2 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) (async) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000100)={0xf0f002, 0x6, @value=0x2}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x401, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x8}) (async) r4 = syz_io_uring_setup(0xc3a, &(0x7f0000000080)={0x0, 0x85a4, 0x10, 0x3, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000002c0)=0x0) (async) r8 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x0, &(0x7f00000001c0)}) (async) fstatfs(0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000006c0)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, r4, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r4}}) (async) syz_io_uring_setup(0x29f, &(0x7f0000000500)={0x0, 0x8401, 0x400, 0x1, 0x16e, 0x0, r4}, 0x0, 0x0, &(0x7f0000000800)) (async) syz_ublk_add_dev(r4, r5, 0x0, r7, &(0x7f0000000840)={0x2e, 0xe4602b8079b059c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x3, 0x267, 0x0, 0x0, 0x1000, 0xffffffff, r8, 0x0, 0xc1}}}, &(0x7f0000000240)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 41.133490477s ago: executing program 2 (id=4411): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) listns(&(0x7f0000000040)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000004fe00000600"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0xf, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}, 0x1, 0x0, 0x20000000}, 0x8c0) 40.378423328s ago: executing program 2 (id=4413): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fanotify_init(0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={r0, 0x0, 0x40000, 0x0, 0x200, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_clone(0xd91a4c80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xfd) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000040)='`', 0x1}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000003370e399d5dc8383000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000001280)={0x1, @vbi={0x1000, 0x3, 0x83ba, 0x34324948, [0x100, 0x3], [0xb], 0x1}}) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f00000000c0)={0x2, @sdr={0x44495658, 0x4}}) 23.996676886s ago: executing program 40 (id=4413): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fanotify_init(0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={r0, 0x0, 0x40000, 0x0, 0x200, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_clone(0xd91a4c80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xfd) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000040)='`', 0x1}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000003370e399d5dc8383000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000001280)={0x1, @vbi={0x1000, 0x3, 0x83ba, 0x34324948, [0x100, 0x3], [0xb], 0x1}}) ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f00000000c0)={0x2, @sdr={0x44495658, 0x4}}) 16.398254237s ago: executing program 0 (id=4520): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x20010, r2, 0x2000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) 11.530356237s ago: executing program 0 (id=4534): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x20010, r2, 0x2000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) 10.744909356s ago: executing program 6 (id=4538): r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0xa0002f5}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.373043929s ago: executing program 6 (id=4539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r5, 0x1, 0x0, 0xa6ffffff, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x240080d1}, 0x40) 8.949726804s ago: executing program 6 (id=4540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(r2, 0x1, 0x24, &(0x7f0000000000), 0x4) socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) socket$kcm(0x10, 0x2, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x58, 0xff}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x25dfdbff}, 0x24}, 0x1, 0x0, 0x0, 0x40051}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) 7.900713891s ago: executing program 8 (id=4543): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001680)={{'\x00', 0x2}, {0x7}, 0x2, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)="62bd4d8d35094fff2e0c575262b1ebdac22e14ccddf7bb618323fc10a24b5297aa3b83d923f4b3618936bc287f153081a850d01881899666d386776325d2fb9623eff1936bba49809797f8c4083ba31b3c7e52ea7184f62d6ea5cda7900c435309c46d316b224427b8c46150eefecb79bcb7bfd97cc40220b51e3dd0c156532b4f192bffbd8839c34540e20f00ab1f4bb67444d3ec78842bbce805", 0x9b, 0x0, &(0x7f0000000600)={0x2, 0x1050, {0x1, 0xc, 0x1000, "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", 0x43, "ad0a7ce42ec5d0988b9f647b72427ec6c00b0d18eddfcad13a4108e2d454d045864802c579237f9b927fdeb392e9cd968983e8876622763e0170de3bf0fcff6cfcacef"}, 0x1e, "682a09d87c6a82024ebf81fcf8b6a6ca86b18598f361775dae619dc35465"}, 0x107a}) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340", 0x9}], 0x1) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4c25, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x491, 0x1, 0x6}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f0000001480)=@ublk_io_need_get_data_sqe={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x3, 0xc3a, 0xc86, 0x0}}) syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r2, 0x20, 0x20, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x40080) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001e00000020702440c0cf1ac1414aa00008001000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000098780000"], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.828365118s ago: executing program 0 (id=4544): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x20010, r2, 0x2000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) 6.38904921s ago: executing program 1 (id=4546): mount(0x0, &(0x7f0000003c40)='.\x00', 0x0, 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') 6.149288412s ago: executing program 7 (id=4547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) write$tun(r0, &(0x7f00000002c0)={@val={0xa, 0x88e5}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "001b00", 0x8, 0x32, 0x1, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x89}]}}}}}}, 0x42) 6.03148609s ago: executing program 1 (id=4548): socket$netlink(0x10, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0xc82) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.992700247s ago: executing program 8 (id=4549): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x3000, 0x2000003, 0x12, r0, 0x8000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000500"/28], 0x50) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000041000901fefffffffddbdf25017c00000b0042800c00018006000600800a00000400028008000900"], 0x30}, 0x1, 0x700, 0x0, 0x4048011}, 0x20000080) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5.840647202s ago: executing program 7 (id=4550): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) prlimit64(r5, 0xd, &(0x7f0000000280)={0x100000000, 0xf}, &(0x7f00000003c0)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r7, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x6, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x83f, 0x9, 0xfffffffffffffffd, 0x100000000000a, 0x80000006, 0x400}, 0x0, 0x0) r8 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r9 = fcntl$dupfd(r8, 0x0, r2) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r9}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r10, 0xffffffffffffffff, 0x0) 4.12681816s ago: executing program 8 (id=4551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000180)="b842f1ec7f87b9929128ba418085188f827317fbaa1e8580877093", 0x1b}], 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async) r4 = syz_io_uring_setup(0x34b5, &(0x7f0000000340)={0x0, 0xe3b1, 0x0, 0x5, 0x82}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r9, 0x3}, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 32) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r4}) (async, rerun: 32) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) (async, rerun: 32) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) 3.660082909s ago: executing program 0 (id=4552): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x9, 0x7ff}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xc0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in=@multicast2}}]}, 0xcc}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002017b3a203a0903262d6101020301090212000105072000090478c00039c2b507"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) getpid() r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000001000)=0x1, 0x4) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0ff000000000000f0ffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d980000000000004f080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r5 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r5, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x114, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xfffb}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xd}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xc5}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x20008010) 2.837702175s ago: executing program 6 (id=4553): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.791544439s ago: executing program 7 (id=4554): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capset(&(0x7f0000002100)={0x20071026, r0}, &(0x7f0000002140)={0x7c, 0x3, 0x3, 0xb99e, 0x9, 0xffffffff}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r1, 0x4b32, 0xe) 2.786303545s ago: executing program 8 (id=4555): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = fcntl$dupfd(r1, 0x406, r2) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x50048, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0xeea, 0x4) write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff03) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.638787458s ago: executing program 6 (id=4556): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e040203", @ANYRES64=r0], 0x7) 2.509367764s ago: executing program 7 (id=4557): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0xf111973a6f6ab58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x2}], 0x1}}], 0x3, 0x60cd894) 2.470155537s ago: executing program 6 (id=4558): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x20010, r2, 0x2000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) 1.786778119s ago: executing program 1 (id=4559): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x80000000}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.52860022s ago: executing program 8 (id=4560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x2, 0x10, 0x1}}]}]}}}]}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x30000000) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 1.493702005s ago: executing program 1 (id=4561): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x29}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x60}}]}, 0x1a0}}, 0x0) 1.39673841s ago: executing program 7 (id=4562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r7 = eventfd2(0x80000000, 0x80400) io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r5, &(0x7f00000009c0)='1', 0x1, 0xf, 0x0, 0x0, r7}]) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d) dup3(r5, r3, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000001c0)={0x0, 'virt_wifi0\x00', {0x3}, 0xf}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r8, &(0x7f0000002600)=""/4113, 0x1011) 486.394531ms ago: executing program 8 (id=4563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000080)="000a18000000090000eb55000000000100aa34745a1945da08e815b218b1752ad5eddec559244805bd238863fd069f79b57f04fcc20ed86b00", 0x39, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 344.755255ms ago: executing program 1 (id=4564): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000640)="000a18000000004000eb55000000000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, 0x0, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 205.750026ms ago: executing program 7 (id=4565): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) 163.671592ms ago: executing program 0 (id=4566): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x401870cb, &(0x7f0000000040)) 93.569527ms ago: executing program 1 (id=4567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000400)={0x50, 0x0, r3, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r4, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0xd, {0x0, 0x8, 0xfffffffffffffffd, 0x200, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x4, 0x2000, 0x101, r4, r5, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$set_reqkey_keyring(0xe, 0x1) r7 = inotify_init() readv(r7, &(0x7f0000000140), 0x0) r8 = syz_usb_connect(0x0, 0x48, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r8, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00030300000015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=4568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x3c, r3, 0x25, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf65a}}, 0x7, 0x0, 0x983, 0x7, 0x1}, &(0x7f0000000600)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000640)={r7, 0x3ff}, &(0x7f0000000780)=0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000000314000125bd7000fcdbdf250900020073797a320000000008004100736977001400330069705f767469300000000000000000000900020073797a3100000000080041007278650014003300626f6e645f736c61a2ae76655f30000000000900020073797a320000000008004100736977001400330070696d36726567310000000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x4040814}, 0x2) kernel console output (not intermixed with test programs): context=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1208.269627][T22124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.294785][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.301874][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.314716][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.321802][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.416831][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1208.839654][ T30] audit: type=1400 audit(1784031406.101:1720): avc: denied { append } for pid=22414 comm="syz.0.4169" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1209.151030][T17654] Bluetooth: hci1: unexpected subevent 0x18 length: 30 > 19 [ 1209.158418][T17654] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1209.565878][T22124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.617160][T22456] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4178'. [ 1209.912316][T22471] fuse: Bad value for 'fd' [ 1209.944890][T22469] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20004 [ 1210.041536][T22471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.063475][ T57] smbdirect: ib_dev[syz1] removed [ 1210.108847][T22471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.150063][T22471] bond0 (unregistering): Released all slaves [ 1210.241974][ T13] bond4: (slave veth0_to_bond): link status definitely down, disabling slave [ 1210.251450][ T5728] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1210.284751][ T13] bond4: now running without any active interface! [ 1210.342114][T22124] veth0_vlan: entered promiscuous mode [ 1210.378710][T22124] veth1_vlan: entered promiscuous mode [ 1210.459759][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 1210.466836][T22124] veth0_macvtap: entered promiscuous mode [ 1210.477877][ T5728] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.500115][T22124] veth1_macvtap: entered promiscuous mode [ 1210.508968][ T5728] usb 3-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=54.41 [ 1210.524521][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.547311][ T5728] usb 3-1: Product: syz [ 1210.551859][ T5728] usb 3-1: Manufacturer: syz [ 1210.559158][ T5728] usb 3-1: SerialNumber: syz [ 1210.594479][T22124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1210.627582][T22124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1210.664269][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.688281][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.727719][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.730708][T18691] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1210.766091][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.970076][ T5728] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 1210.976312][T18691] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1211.021977][T18691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.049435][T18691] usb 1-1: Product: syz [ 1211.069019][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.077061][T18691] usb 1-1: Manufacturer: syz [ 1211.096442][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.096573][T18691] usb 1-1: SerialNumber: syz [ 1211.155469][T18691] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1211.185015][ T5735] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1211.203911][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.265942][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.285865][ T5728] usb 3-1: USB disconnect, device number 103 [ 1211.650028][T22486] fuse: Bad value for 'fd' [ 1211.747592][ T30] audit: type=1400 audit(1784031408.777:1721): avc: denied { create } for pid=22482 comm="syz.8.4183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1212.123951][T16989] usb 1-1: USB disconnect, device number 124 [ 1212.702410][ T5735] usb 1-1: Service connection timeout for: 256 [ 1212.726857][ T5735] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1212.747681][ T5735] ath9k_htc: Failed to initialize the device [ 1212.754080][T16989] usb 1-1: ath9k_htc: USB layer deinitialized [ 1213.164462][ T30] audit: type=1400 audit(1784031410.087:1722): avc: denied { setopt } for pid=22506 comm="syz.5.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1213.239852][ T30] audit: type=1400 audit(1784031410.161:1723): avc: denied { ioctl } for pid=22502 comm="syz.8.4188" path="socket:[95968]" dev="sockfs" ino=95968 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1213.244015][T22518] netlink: 'syz.0.4192': attribute type 1 has an invalid length. [ 1213.274789][ T30] audit: type=1400 audit(1784031410.161:1724): avc: denied { ioctl } for pid=22502 comm="syz.8.4188" path="socket:[95969]" dev="sockfs" ino=95969 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 1213.374420][T22518] bond5: entered promiscuous mode [ 1213.407207][T22518] bond5: entered allmulticast mode [ 1213.441055][T22518] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1213.472854][ T5721] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1213.499150][T22521] erspan1: entered allmulticast mode [ 1213.514184][T22521] bond5: (slave erspan1): making interface the new active one [ 1213.557196][T22521] erspan1: entered promiscuous mode [ 1213.558429][ T30] audit: type=1400 audit(1784031410.447:1725): avc: denied { load_policy } for pid=22522 comm="syz.5.4193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1213.586580][T22523] SELinux: policydb magic number 0xf90ebe05 does not match expected magic number 0xf97cff8c [ 1213.597941][T22523] SELinux: failed to load policy [ 1213.623972][T22521] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 1213.678656][ T5721] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1213.712509][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.805734][ T5721] usb 2-1: Product: syz [ 1213.834866][ T5721] usb 2-1: Manufacturer: syz [ 1213.847046][ T5721] usb 2-1: SerialNumber: syz [ 1213.946423][ T5721] usb 2-1: config 0 descriptor?? [ 1213.954552][ T5721] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 016 [ 1214.086583][T22534] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4195'. [ 1214.437581][ T5728] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1214.690604][T22538] IPv6: NLM_F_CREATE should be specified when creating new route [ 1214.709435][T22538] netlink: 'syz.0.4197': attribute type 1 has an invalid length. [ 1214.734960][T22526] wlan0 speed is unknown, defaulting to 1000 [ 1214.783737][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 1214.802485][ T5728] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.852055][ T5721] (null): failure reading functionality [ 1214.865279][ T5728] usb 6-1: config 0 has no interfaces? [ 1214.883347][ T5728] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1214.905171][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.934563][ T5728] usb 6-1: config 0 descriptor?? [ 1214.976250][ T5721] i2c i2c-2: failure reading functionality [ 1215.024707][ T5721] i2c i2c-2: connected i2c-tiny-usb device [ 1215.092322][ T5721] usb 2-1: USB disconnect, device number 16 [ 1215.215932][ T804] usb 6-1: USB disconnect, device number 18 [ 1215.416831][T22548] FAULT_INJECTION: forcing a failure. [ 1215.416831][T22548] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.455723][T22548] CPU: 1 UID: 0 PID: 22548 Comm: syz.2.4200 Tainted: G L syzkaller #0 PREEMPT(full) [ 1215.455748][T22548] Tainted: [L]=SOFTLOCKUP [ 1215.455752][T22548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1215.455759][T22548] Call Trace: [ 1215.455763][T22548] [ 1215.455768][T22548] dump_stack_lvl+0x100/0x190 [ 1215.455785][T22548] should_fail_ex.cold+0x5/0xa [ 1215.455798][T22548] should_failslab+0xc2/0x120 [ 1215.455813][T22548] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1215.455829][T22548] ? sget_fc+0xef6/0x1d80 [ 1215.455843][T22548] ? mqueue_alloc_inode+0x25/0x50 [ 1215.455856][T22548] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1215.455867][T22548] mqueue_alloc_inode+0x25/0x50 [ 1215.455878][T22548] alloc_inode+0x68/0x250 [ 1215.455892][T22548] new_inode+0x22/0x1c0 [ 1215.455905][T22548] ? refcount_dec_not_one+0x136/0x1c0 [ 1215.455919][T22548] mqueue_get_inode+0x2e/0xe00 [ 1215.455930][T22548] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1215.455945][T22548] ? __kasan_kmalloc+0xaa/0xb0 [ 1215.455957][T22548] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1215.455967][T22548] mqueue_fill_super+0x14d/0x260 [ 1215.455978][T22548] get_tree_nodev+0xdd/0x190 [ 1215.455994][T22548] mqueue_get_tree+0xf1/0x130 [ 1215.456005][T22548] vfs_get_tree+0x92/0x320 [ 1215.456019][T22548] fc_mount_longterm+0x1a/0x270 [ 1215.456035][T22548] mq_init_ns+0x482/0x820 [ 1215.456050][T22548] copy_ipcs+0x3dd/0x7e0 [ 1215.456064][T22548] create_new_namespaces+0x20a/0xac0 [ 1215.456078][T22548] ? security_capable+0x80/0x260 [ 1215.456092][T22548] unshare_nsproxy_namespaces+0xf2/0x220 [ 1215.456107][T22548] ksys_unshare+0x438/0xab0 [ 1215.456123][T22548] ? __pfx_ksys_unshare+0x10/0x10 [ 1215.456138][T22548] ? ksys_write+0x1ac/0x250 [ 1215.456157][T22548] __x64_sys_unshare+0x31/0x40 [ 1215.456171][T22548] do_syscall_64+0x115/0x870 [ 1215.456188][T22548] ? clear_bhb_loop+0x40/0x90 [ 1215.456202][T22548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.456213][T22548] RIP: 0033:0x7f080499de59 [ 1215.456223][T22548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.456234][T22548] RSP: 002b:00007f080583a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1215.456245][T22548] RAX: ffffffffffffffda RBX: 00007f0804c26090 RCX: 00007f080499de59 [ 1215.456252][T22548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 1215.456259][T22548] RBP: 00007f080583a090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.456265][T22548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1215.456271][T22548] R13: 00007f0804c26128 R14: 00007f0804c26090 R15: 00007fff4afc8648 [ 1215.456285][T22548] [ 1215.738464][ T1041] wlan0: Trigger new scan to find an IBSS to join [ 1215.792554][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4203'. [ 1215.802256][T22556] netlink: 'syz.1.4203': attribute type 30 has an invalid length. [ 1216.034014][T22559] sg_write: process 729 (syz.0.4204) changed security contexts after opening file descriptor, this is not allowed. [ 1216.064312][T22556] vxlan0: entered promiscuous mode [ 1216.069495][T22556] vxlan0: entered allmulticast mode [ 1216.085302][ T6711] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.094360][ T6711] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.121756][ T6711] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.163893][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1216.252094][ T30] audit: type=1400 audit(1784031412.938:1726): avc: denied { read } for pid=22564 comm="syz.1.4206" dev="sockfs" ino=96690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1216.294753][T22565] 9p: Bad value for 'wfdno' [ 1216.311958][ T5728] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1216.485245][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 1216.494333][ T5728] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1216.512284][ T5728] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1216.522519][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1216.539788][ T5728] usb 6-1: Product: syz [ 1216.551663][ T5728] usb 6-1: Manufacturer: syz [ 1216.567323][ T5728] usb 6-1: SerialNumber: syz [ 1216.569639][T22568] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 1216.626983][ T5728] usb 6-1: config 0 descriptor?? [ 1216.642527][T22562] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1216.653976][ T5728] hub 6-1:0.0: bad descriptor, ignoring hub [ 1216.671565][ T5728] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1216.750210][T22568] bond5: option xmit_hash_policy: invalid value (6) [ 1216.797213][T22568] bond5 (unregistering): Released all slaves [ 1216.946346][ T30] audit: type=1400 audit(1784031413.584:1727): avc: denied { read } for pid=22561 comm="syz.5.4205" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1217.006926][ T30] audit: type=1400 audit(1784031413.584:1728): avc: denied { open } for pid=22561 comm="syz.5.4205" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1217.113408][T22579] syzkaller0: entered promiscuous mode [ 1217.123358][T22579] syzkaller0: entered allmulticast mode [ 1217.129196][ T5728] usb 6-1: USB disconnect, device number 19 [ 1217.136444][ T30] audit: type=1400 audit(1784031413.611:1729): avc: denied { ioctl } for pid=22561 comm="syz.5.4205" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1217.224487][ T30] audit: type=1400 audit(1784031413.630:1730): avc: denied { write } for pid=22561 comm="syz.5.4205" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1217.250330][T22571] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1217.289181][ T30] audit: type=1400 audit(1784031413.667:1731): avc: denied { getopt } for pid=22575 comm="syz.0.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1217.387413][T22581] fuse: Unknown parameter '00000000000000000010' [ 1217.481982][T22583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1217.528491][T22583] tipc: Started in network mode [ 1217.542479][T22583] tipc: Node identity 4e2232dbb38c, cluster identity 4711 [ 1217.564670][T22583] tipc: Enabled bearer , priority 0 [ 1218.902795][ T5721] tipc: Node number set to 4256051931 [ 1218.991968][T22605] IPv6: NLM_F_CREATE should be specified when creating new route [ 1219.012821][T22605] netlink: 'syz.2.4214': attribute type 1 has an invalid length. [ 1219.021941][ T6982] wlan0: Trigger new scan to find an IBSS to join [ 1219.281439][ T5735] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 1219.351421][T22610] IPv6: NLM_F_CREATE should be specified when creating new route [ 1219.361362][T22610] netlink: 'syz.5.4216': attribute type 1 has an invalid length. [ 1219.487559][ T5735] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 1219.517468][ T5735] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 1219.536514][ T5735] usb 9-1: config 0 has no interface number 0 [ 1219.557646][ T5735] usb 9-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1219.590664][ T5735] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1219.617487][ T5735] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1219.644698][ T5735] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1219.675416][ T5735] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.699546][ T5735] usb 9-1: config 0 descriptor?? [ 1219.720151][T22607] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1220.200527][ T5735] usb 9-1: USB disconnect, device number 40 [ 1220.297458][ T30] audit: type=1400 audit(1784031416.666:1732): avc: denied { append } for pid=22623 comm="syz.1.4219" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1220.375820][ T30] audit: type=1400 audit(1784031416.666:1733): avc: denied { map } for pid=22623 comm="syz.1.4219" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1220.518819][ T30] audit: type=1400 audit(1784031416.666:1734): avc: denied { write } for pid=22623 comm="syz.1.4219" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1220.689999][ T30] audit: type=1400 audit(1784031417.025:1735): avc: denied { write } for pid=22622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1220.928787][T16989] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1221.057362][ T30] audit: type=1400 audit(1784031417.367:1736): avc: denied { write } for pid=22641 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1221.216528][T16989] usb 1-1: Using ep0 maxpacket: 32 [ 1221.253697][T16989] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1221.750392][T16989] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1221.775514][T16989] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1221.788106][T16989] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1221.798350][T16989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.820385][T16989] usb 1-1: Product: syz [ 1221.839635][T16989] usb 1-1: Manufacturer: syz [ 1221.854775][T16989] usb 1-1: SerialNumber: syz [ 1221.879059][T16989] usb 1-1: config 0 descriptor?? [ 1221.905692][T22663] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22663 comm=syz.8.4229 [ 1221.934071][T22666] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1221.935937][ T30] audit: type=1400 audit(1784031418.179:1737): avc: denied { remount } for pid=22665 comm="syz.5.4230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1221.978320][T22667] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1222.230711][ T57] wlan0: Trigger new scan to find an IBSS to join [ 1222.281148][T22676] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4231'. [ 1222.345138][ T5721] IPVS: starting estimator thread 0... [ 1222.364775][T22634] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1222.580069][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1222.611172][ T5728] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1222.717013][T22685] IPVS: using max 45 ests per chain, 108000 per kthread [ 1222.868018][ T30] audit: type=1400 audit(1784031419.037:1738): avc: denied { write } for pid=22661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1222.928884][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 1222.961849][ T5728] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1222.988029][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.012597][ T5728] usb 6-1: Product: syz [ 1223.037911][ T5728] usb 6-1: Manufacturer: syz [ 1223.052755][ T30] audit: type=1400 audit(1784031419.212:1739): avc: denied { write } for pid=22698 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1223.121475][ T5728] usb 6-1: SerialNumber: syz [ 1223.157177][ T5728] usb 6-1: config 0 descriptor?? [ 1223.271473][T16989] gs_usb 1-1:0.0: Couldn't get device config: (err=-110) [ 1223.292892][T16989] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -110 [ 1223.588406][ T48] wlan0: Creating new IBSS network, BSSID 3a:f9:0f:db:47:9e [ 1223.620001][ T5728] airspy 6-1:0.0: Board ID: 00 [ 1223.649446][ T5728] airspy 6-1:0.0: Firmware version: [ 1224.106143][ T9] usb 1-1: USB disconnect, device number 125 [ 1224.253445][ T6982] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1224.452219][T22731] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22731 comm=syz.0.4240 [ 1224.840576][ T30] audit: type=1400 audit(1784031420.864:1740): avc: denied { write } for pid=22705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1225.054316][ T30] audit: type=1400 audit(1784031421.058:1741): avc: denied { write } for pid=22739 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1225.134725][T22740] FAULT_INJECTION: forcing a failure. [ 1225.134725][T22740] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.148637][T22740] CPU: 1 UID: 0 PID: 22740 Comm: syz.8.4241 Tainted: G L syzkaller #0 PREEMPT(full) [ 1225.148666][T22740] Tainted: [L]=SOFTLOCKUP [ 1225.148672][T22740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1225.148683][T22740] Call Trace: [ 1225.148689][T22740] [ 1225.148696][T22740] dump_stack_lvl+0x100/0x190 [ 1225.148723][T22740] should_fail_ex.cold+0x5/0xa [ 1225.148746][T22740] should_failslab+0xc2/0x120 [ 1225.148768][T22740] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1225.148789][T22740] ? proc_alloc_inode+0x25/0x200 [ 1225.148818][T22740] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1225.148846][T22740] proc_alloc_inode+0x25/0x200 [ 1225.148873][T22740] alloc_inode+0x68/0x250 [ 1225.148896][T22740] new_inode+0x22/0x1c0 [ 1225.148921][T22740] proc_pid_make_inode+0x22/0x160 [ 1225.148947][T22740] ? d_lookup+0xe7/0x190 [ 1225.148972][T22740] proc_fd_instantiate+0x57/0x230 [ 1225.148997][T22740] proc_fill_cache+0x2a3/0x3a0 [ 1225.149014][T22740] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 1225.149038][T22740] ? __pfx_proc_fill_cache+0x10/0x10 [ 1225.149053][T22740] ? _raw_spin_unlock+0x28/0x50 [ 1225.149083][T22740] proc_readfd_common+0x1ef/0x5f0 [ 1225.149107][T22740] ? __pfx_proc_fd_instantiate+0x10/0x10 [ 1225.149133][T22740] ? __pfx_proc_readfd_common+0x10/0x10 [ 1225.149156][T22740] ? down_read_killable+0x35e/0x520 [ 1225.149176][T22740] ? __pfx_down_read_killable+0x10/0x10 [ 1225.149193][T22740] ? avc_policy_seqno+0x9/0x20 [ 1225.149228][T22740] iterate_dir+0x296/0xae0 [ 1225.149257][T22740] __x64_sys_getdents64+0x13b/0x2c0 [ 1225.149284][T22740] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 1225.149309][T22740] ? fput+0x79/0x100 [ 1225.149328][T22740] ? __pfx_filldir64+0x10/0x10 [ 1225.149366][T22740] do_syscall_64+0x115/0x870 [ 1225.149391][T22740] ? clear_bhb_loop+0x40/0x90 [ 1225.149414][T22740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.149433][T22740] RIP: 0033:0x7f1e6d59de59 [ 1225.149449][T22740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.149466][T22740] RSP: 002b:00007f1e6b7d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1225.149484][T22740] RAX: ffffffffffffffda RBX: 00007f1e6d826180 RCX: 00007f1e6d59de59 [ 1225.149496][T22740] RDX: 000000000000100f RSI: 0000200000001f00 RDI: 0000000000000003 [ 1225.149507][T22740] RBP: 00007f1e6b7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.149518][T22740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.149529][T22740] R13: 00007f1e6d826218 R14: 00007f1e6d826180 R15: 00007ffc66f50878 [ 1225.149554][T22740] [ 1225.288614][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1225.362738][ T5728] airspy 6-1:0.0: usb_control_msg() failed -71 request 11 [ 1225.466902][ T5728] airspy 6-1:0.0: Registered as swradio24 [ 1225.473069][ T5728] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1225.490140][ T5728] usb 6-1: USB disconnect, device number 20 [ 1225.892532][ T8658] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 1225.957486][T22478] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1226.156288][T22478] usb 2-1: device descriptor read/64, error -71 [ 1226.586187][T22753] syzkaller0: entered promiscuous mode [ 1226.649173][T22753] syzkaller0: entered allmulticast mode [ 1226.689427][T22478] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1226.823831][ T8658] usb 3-1: Invalid ep0 maxpacket: 64 [ 1227.512772][T22478] usb 2-1: device descriptor read/64, error -71 [ 1227.639940][T22478] usb usb2-port1: attempt power cycle [ 1227.746089][ T5728] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1227.936473][ T8658] usb 3-1: new low-speed USB device number 105 using dummy_hcd [ 1227.973324][ T5728] usb 1-1: Using ep0 maxpacket: 8 [ 1227.981350][ T5728] usb 1-1: config index 0 descriptor too short (expected 26, got 18) [ 1227.994380][ T5728] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1228.004196][T18691] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1228.016247][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.040683][ T5728] usb 1-1: Product: syz [ 1228.048871][ T5728] usb 1-1: Manufacturer: syz [ 1228.053585][T22478] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1228.068541][ T5728] usb 1-1: SerialNumber: syz [ 1228.093561][T22478] usb 2-1: device descriptor read/8, error -71 [ 1228.114620][ T5728] usb 1-1: config 0 descriptor?? [ 1228.145632][ T5728] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1228.192663][ T8658] usb 3-1: Invalid ep0 maxpacket: 64 [ 1228.199152][T18691] usb 6-1: config 0 has an invalid descriptor of length 227, skipping remainder of the config [ 1228.227745][ T8658] usb usb3-port1: attempt power cycle [ 1228.238476][T18691] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1228.291401][T18691] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1228.307173][ T30] audit: type=1400 audit(1784031424.056:1742): avc: denied { write } for pid=22763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1228.360796][T18691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.404689][T18691] usb 6-1: config 0 descriptor?? [ 1228.411737][T22760] [U]  [ 1228.459666][T18691] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1228.474165][ T5728] gspca_sq930x: reg_r 001f failed -71 [ 1228.494147][ T5728] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 1228.533834][ T5728] usb 1-1: USB disconnect, device number 126 [ 1228.589500][ T30] audit: type=1400 audit(1784031424.324:1743): avc: denied { write } for pid=22774 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1228.626390][T22777] gfs2: not a GFS2 filesystem [ 1228.668816][ T8658] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 1228.710904][ T8658] usb 3-1: Invalid ep0 maxpacket: 64 [ 1228.883984][ T8658] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 1229.440079][ T8658] usb 3-1: device not accepting address 107, error -71 [ 1229.465569][ T8658] usb usb3-port1: unable to enumerate USB device [ 1229.507397][T22789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4250'. [ 1229.546668][ T30] audit: type=1400 audit(1784031425.210:1744): avc: denied { mount } for pid=22786 comm="syz.2.4252" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1229.569478][T22791] overlay: ./file0 is not a directory [ 1229.587880][T22791] overlay: ./file0 is not a directory [ 1229.861407][T22801] random: crng reseeded on system resumption [ 1229.863554][ T30] audit: type=1400 audit(1784031425.496:1745): avc: denied { write } for pid=22799 comm="syz.0.4256" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1230.324058][T22808] orangefs: client-core tried to read wrong size [ 1230.559169][ T30] audit: type=1400 audit(1784031426.049:1746): avc: denied { map } for pid=22810 comm="syz.2.4259" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1231.611958][ T8658] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1231.995364][T22478] usb 6-1: USB disconnect, device number 21 [ 1232.122756][ T8658] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1232.175914][ T8658] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.317563][T22824] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1232.339649][ T8658] usb 2-1: config 0 has no interface number 0 [ 1232.378379][ T8658] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1232.399461][ T8658] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1232.435874][ T8658] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1232.457733][T22824] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4262'. [ 1232.505925][ T8658] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1232.543317][ T8658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.578375][ T30] audit: type=1400 audit(1784031427.996:1747): avc: denied { create } for pid=22823 comm="syz.0.4262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1232.590187][ T8658] usb 2-1: Product: syz [ 1232.983458][T22838] loop4: detected capacity change from 0 to 524287964 [ 1233.127219][T22841] FAULT_INJECTION: forcing a failure. [ 1233.127219][T22841] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.239687][T22841] CPU: 1 UID: 0 PID: 22841 Comm: syz.8.4266 Tainted: G L syzkaller #0 PREEMPT(full) [ 1233.239718][T22841] Tainted: [L]=SOFTLOCKUP [ 1233.239725][T22841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1233.239735][T22841] Call Trace: [ 1233.239742][T22841] [ 1233.239750][T22841] dump_stack_lvl+0x100/0x190 [ 1233.239777][T22841] should_fail_ex.cold+0x5/0xa [ 1233.239801][T22841] should_failslab+0xc2/0x120 [ 1233.239824][T22841] __kmalloc_noprof+0xfc/0x820 [ 1233.239844][T22841] ? tomoyo_encode2+0xfb/0x3c0 [ 1233.239875][T22841] tomoyo_encode2+0xfb/0x3c0 [ 1233.239905][T22841] tomoyo_encode+0x29/0x50 [ 1233.239930][T22841] tomoyo_realpath_from_path+0x18c/0x690 [ 1233.239962][T22841] tomoyo_path_number_perm+0x23c/0x580 [ 1233.239984][T22841] ? tomoyo_path_number_perm+0x22e/0x580 [ 1233.240009][T22841] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1233.240031][T22841] ? preempt_schedule_thunk+0x16/0x40 [ 1233.240074][T22841] ? find_held_lock+0x2b/0x80 [ 1233.240101][T22841] ? __fget_files+0x215/0x3d0 [ 1233.240128][T22841] ? hook_file_ioctl_common+0x140/0x440 [ 1233.240145][T22841] ? __fget_files+0x215/0x3d0 [ 1233.240177][T22841] ? __fget_files+0x21f/0x3d0 [ 1233.240210][T22841] security_file_ioctl+0xd3/0x230 [ 1233.240235][T22841] __x64_sys_ioctl+0xb7/0x210 [ 1233.240265][T22841] do_syscall_64+0x115/0x870 [ 1233.240290][T22841] ? clear_bhb_loop+0x40/0x90 [ 1233.240313][T22841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.240329][T22841] RIP: 0033:0x7f1e6d59de59 [ 1233.240344][T22841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.240359][T22841] RSP: 002b:00007f1e6e393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1233.240381][T22841] RAX: ffffffffffffffda RBX: 00007f1e6d825fa0 RCX: 00007f1e6d59de59 [ 1233.240393][T22841] RDX: 0000200000000080 RSI: 00000000c05c6104 RDI: 0000000000000004 [ 1233.240403][T22841] RBP: 00007f1e6e393090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.240414][T22841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.240424][T22841] R13: 00007f1e6d826038 R14: 00007f1e6d825fa0 R15: 00007ffc66f50878 [ 1233.240446][T22841] [ 1233.818690][T22841] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1234.109699][ T8658] usb 2-1: Manufacturer: syz [ 1234.114370][ T8658] usb 2-1: SerialNumber: syz [ 1234.123470][ T8658] usb 2-1: config 0 descriptor?? [ 1234.128906][ T8658] usb 2-1: can't set config #0, error -71 [ 1234.140295][ T8658] usb 2-1: USB disconnect, device number 21 [ 1234.390135][T22847] binder: BINDER_SET_CONTEXT_MGR already set [ 1234.396259][T22847] binder: 22845:22847 ioctl 4018620d 200000000040 returned -16 [ 1234.968114][ T30] audit: type=1400 audit(1784031430.137:1748): avc: denied { setattr } for pid=22849 comm="syz.0.4270" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1235.103894][T22860] ALSA: mixer_oss: invalid OSS volume '' [ 1235.210697][T22861] qnx4: unable to read the superblock [ 1236.137196][T22863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4272'. [ 1236.247543][T22868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4273'. [ 1236.661103][T22478] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1236.975534][T22478] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.084663][T22478] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.146474][T22478] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1237.169750][T22478] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.222601][T22478] usb 9-1: config 0 descriptor?? [ 1237.257341][T22877] 9p: Bad value for 'rfdno' [ 1237.536509][ T6122] udevd[6122]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1237.740694][T22478] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 1237.748228][T22478] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 1237.771985][T22894] comedi comedi3: bad chanlist[0]=0x00000002 chan=2 range length=1 [ 1238.004393][T22871] trusted_key: encrypted_key: insufficient parameters specified [ 1238.040555][T22478] cm6533_jd 0003:0D8C:0022.001D: unknown main item tag 0x0 [ 1238.425695][T22478] cm6533_jd 0003:0D8C:0022.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 1238.494563][T22478] usb 9-1: USB disconnect, device number 41 [ 1238.837281][T22898] fido_id[22898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1239.608834][T22917] 9p: Bad value for 'rfdno' [ 1239.748700][T22920] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4291'. [ 1240.044226][T22909] overlayfs: statfs failed on './file0' [ 1240.088040][T22923] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1240.175117][T22926] fuse: Unknown parameter '0x0000000000000003' [ 1240.829117][ T30] audit: type=1400 audit(1784031435.609:1749): avc: denied { connect } for pid=22942 comm="syz.2.4299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1240.860298][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1240.949017][T22947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4299'. [ 1241.043731][ T9] usb 2-1: device descriptor read/64, error -71 [ 1241.336549][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1241.507405][ T9] usb 2-1: device descriptor read/64, error -71 [ 1241.640350][ T9] usb usb2-port1: attempt power cycle [ 1241.675405][ T5728] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1241.788537][T22478] bridge0: entered promiscuous mode [ 1241.871457][ T5728] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1241.887794][ T5728] usb 9-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1241.924697][ T5728] usb 9-1: string descriptor 0 read error: -22 [ 1241.939320][ T5728] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1241.980480][ T5728] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.049999][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1242.281765][ T9] usb 2-1: device descriptor read/8, error -71 [ 1242.550033][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1242.583274][ T9] usb 2-1: device descriptor read/8, error -71 [ 1242.713128][ T9] usb usb2-port1: unable to enumerate USB device [ 1242.714166][ T5728] usb 9-1: current rate 47976 is different from the runtime rate 48000 [ 1242.924371][ T5728] usb 9-1: USB disconnect, device number 42 [ 1243.035644][ T30] audit: type=1400 audit(1784031437.648:1750): avc: denied { bind } for pid=22979 comm="syz.8.4307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1243.122522][ T30] audit: type=1400 audit(1784031437.648:1751): avc: denied { name_bind } for pid=22979 comm="syz.8.4307" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1243.196098][ T30] audit: type=1400 audit(1784031437.648:1752): avc: denied { node_bind } for pid=22979 comm="syz.8.4307" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1243.220034][T22982] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1244.021984][T22992] 9p: Bad value for 'wfdno' [ 1244.059721][T22992] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!`lü1&›b¯Þ0xUÐÏ”ÎÜr$åG—•µu‡â' [ 1244.082587][T22992] CPU: 1 UID: 0 PID: 22992 Comm: syz.0.4312 Tainted: G L syzkaller #0 PREEMPT(full) [ 1244.082620][T22992] Tainted: [L]=SOFTLOCKUP [ 1244.082627][T22992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1244.082638][T22992] Call Trace: [ 1244.082646][T22992] [ 1244.082654][T22992] dump_stack_lvl+0x100/0x190 [ 1244.082684][T22992] sysfs_warn_dup.cold+0x1c/0x28 [ 1244.082714][T22992] sysfs_do_create_link_sd+0x113/0x140 [ 1244.082746][T22992] sysfs_create_link+0x61/0xc0 [ 1244.082773][T22992] device_add+0x675/0x1970 [ 1244.082801][T22992] ? __pfx_device_add+0x10/0x10 [ 1244.082825][T22992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1244.082849][T22992] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 1244.082872][T22992] wiphy_register+0x2151/0x3110 [ 1244.082904][T22992] ? __pfx_wiphy_register+0x10/0x10 [ 1244.082928][T22992] ? __asan_memset+0x23/0x50 [ 1244.082955][T22992] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 1244.082983][T22992] ieee80211_register_hw+0x3053/0x4580 [ 1244.083024][T22992] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1244.083054][T22992] ? __pfx___debug_object_init+0x10/0x10 [ 1244.083079][T22992] ? find_held_lock+0x2b/0x80 [ 1244.083104][T22992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1244.083124][T22992] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1244.083149][T22992] ? __hrtimer_setup+0x208/0x330 [ 1244.083177][T22992] mac80211_hwsim_new_radio+0x2acc/0x64c0 [ 1244.083214][T22992] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1244.083237][T22992] ? __asan_memcpy+0x3c/0x60 [ 1244.083269][T22992] hwsim_new_radio_nl+0xc6b/0x13f0 [ 1244.083292][T22992] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1244.083319][T22992] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1244.083351][T22992] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1244.083397][T22992] genl_family_rcv_msg_doit+0x214/0x300 [ 1244.083431][T22992] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1244.083471][T22992] ? bpf_lsm_capable+0x9/0x10 [ 1244.083490][T22992] ? security_capable+0x80/0x260 [ 1244.083513][T22992] ? ns_capable+0xd2/0xf0 [ 1244.083538][T22992] genl_rcv_msg+0x560/0x800 [ 1244.083570][T22992] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1244.083601][T22992] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1244.083630][T22992] netlink_rcv_skb+0x159/0x420 [ 1244.083657][T22992] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1244.083688][T22992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1244.083726][T22992] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1244.083756][T22992] genl_rcv+0x28/0x40 [ 1244.083783][T22992] netlink_unicast+0x585/0x850 [ 1244.083814][T22992] ? __pfx_netlink_unicast+0x10/0x10 [ 1244.083849][T22992] netlink_sendmsg+0x8b0/0xda0 [ 1244.083879][T22992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1244.083909][T22992] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1244.083940][T22992] ____sys_sendmsg+0xa4d/0xbe0 [ 1244.083964][T22992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1244.083993][T22992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1244.084016][T22992] ? futex_hash+0x311/0x400 [ 1244.084045][T22992] ? plist_del+0x308/0x510 [ 1244.084071][T22992] ___sys_sendmsg+0x190/0x1e0 [ 1244.084102][T22992] ? __pfx____sys_sendmsg+0x10/0x10 [ 1244.084127][T22992] ? __lock_acquire+0x49f/0x1a40 [ 1244.084148][T22992] ? futex_wake+0x220/0x5e0 [ 1244.084207][T22992] __sys_sendmsg+0x160/0x210 [ 1244.084227][T22992] ? __pfx___sys_sendmsg+0x10/0x10 [ 1244.084263][T22992] do_syscall_64+0x115/0x870 [ 1244.084290][T22992] ? clear_bhb_loop+0x40/0x90 [ 1244.084314][T22992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.084333][T22992] RIP: 0033:0x7f67f499de59 [ 1244.084351][T22992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.084376][T22992] RSP: 002b:00007f67f2bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1244.084397][T22992] RAX: ffffffffffffffda RBX: 00007f67f4c25fa0 RCX: 00007f67f499de59 [ 1244.084411][T22992] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000d [ 1244.084424][T22992] RBP: 00007f67f4a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1244.084436][T22992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.084448][T22992] R13: 00007f67f4c26038 R14: 00007f67f4c25fa0 R15: 00007ffcf9fc3f08 [ 1244.084476][T22992] [ 1245.734537][T23008] siw: device registration error -23 [ 1246.490486][ T30] audit: type=1400 audit(1784031440.840:1753): avc: denied { getopt } for pid=23011 comm="syz.2.4318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1246.843620][T23018] netlink: 'syz.0.4320': attribute type 14 has an invalid length. [ 1246.885026][T23018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4320'. [ 1246.955138][T23018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4320'. [ 1246.956766][ T36] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1246.994887][ T30] audit: type=1400 audit(1784031441.311:1754): avc: denied { connect } for pid=23019 comm="syz.1.4321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1247.012492][ T36] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1247.045880][T17654] Bluetooth: hci0: link tx timeout [ 1247.057247][T17654] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1247.063020][ T36] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1247.565608][T23036] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1247.664252][ T36] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1248.142677][ T9] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1248.161339][T23045] tmpfs: Bad value for 'mpol' [ 1248.315720][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1248.329264][ T9] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1248.340754][ T9] usb 1-1: config 0 has no interface number 0 [ 1248.353737][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1248.377500][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1248.401948][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1248.416197][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.441678][ T9] usb 1-1: Product: syz [ 1248.456117][ T9] usb 1-1: Manufacturer: syz [ 1248.474360][ T9] usb 1-1: SerialNumber: syz [ 1248.503598][ T9] usb 1-1: config 0 descriptor?? [ 1248.525350][T23042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1248.539606][T23042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1249.115885][T23064] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1249.129391][T23064] Error validating options; rc = [-22] [ 1249.616479][ T5617] Bluetooth: hci0: command 0x0405 tx timeout [ 1249.623440][ T5343] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1249.702957][T23042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1249.752788][T23042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1249.835525][ T5343] usb 2-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 1249.861491][ T5343] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1249.912118][ T5343] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1249.954025][ T5343] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1249.991814][ T5343] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1250.027104][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1250.027386][ T5343] usb 2-1: Product: syz [ 1250.087157][ T5343] usb 2-1: Manufacturer: syz [ 1250.107060][ T5343] usb 2-1: SerialNumber: syz [ 1250.136954][ T5343] usb 2-1: config 0 descriptor?? [ 1250.236856][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1250.250768][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1250.260829][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1250.271944][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1250.283201][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1250.396879][ T8658] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1250.582777][ T8658] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1250.607411][ T8658] usb 3-1: string descriptor 0 read error: -22 [ 1250.633725][ T8658] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 1250.668459][ T8658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.893898][T23083] 9pnet_fd: Insufficient options for proto=fd [ 1251.025436][ T8658] usbhid 3-1:1.0: can't add hid device: -71 [ 1251.047999][ T8658] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1251.098969][ T8658] usb 3-1: USB disconnect, device number 108 [ 1251.430651][T23076] wlan0 speed is unknown, defaulting to 1000 [ 1251.452152][ T5343] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1251.485505][T23093] fuse: Bad value for 'group_id' [ 1251.495016][ T5343] usb 2-1: USB disconnect, device number 26 [ 1251.504074][T23093] fuse: Bad value for 'group_id' [ 1251.586447][ T6122] udevd[6122]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1252.196296][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1252.299943][ T9] asix 1-1:0.34: probe with driver asix failed with error -71 [ 1252.426559][ T9] usb 1-1: USB disconnect, device number 127 [ 1252.575352][T17654] Bluetooth: hci5: command tx timeout [ 1252.628208][T23111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1252.635475][T23111] IPv6: NLM_F_CREATE should be set when creating new route [ 1252.700575][T23117] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1252.710280][T23117] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1252.785071][T17654] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1252.793831][T23120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1252.847456][T23121] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4342'. [ 1252.878508][T23076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.887071][T23076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.900236][T23076] bridge_slave_0: entered allmulticast mode [ 1252.917409][T23076] bridge_slave_0: entered promiscuous mode [ 1252.928649][T23076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.943501][T23076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.954426][ T5728] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1252.959004][T23076] bridge_slave_1: entered allmulticast mode [ 1252.977521][T23076] bridge_slave_1: entered promiscuous mode [ 1253.022347][ T30] audit: type=1400 audit(1784031446.856:1755): avc: denied { getopt } for pid=23116 comm="syz.0.4344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1253.114719][T23076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.145727][T23076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.149346][ T5728] usb 2-1: Using ep0 maxpacket: 8 [ 1253.215478][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1253.246513][T23076] team0: Port device team_slave_0 added [ 1253.258754][ T5728] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1253.282278][T23076] team0: Port device team_slave_1 added [ 1253.287602][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.312862][ T9] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1253.337806][ T5728] usb 2-1: config 0 descriptor?? [ 1253.415699][T23076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.438450][T23076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.511302][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 1253.536888][ T9] usb 3-1: config 159 has an invalid interface number: 137 but max is 0 [ 1253.554596][T23076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.577129][ T9] usb 3-1: config 159 has no interface number 0 [ 1253.598529][ T9] usb 3-1: config 159 interface 137 has no altsetting 0 [ 1253.609506][T23076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.626387][ T5728] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1253.635212][T23076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.664654][ T9] usb 3-1: string descriptor 0 read error: -22 [ 1253.682357][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=0800, bcdDevice=c3.a8 [ 1253.707530][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.751973][ T9] gspca_main: spca500-2.14.0 probing 06be:0800 [ 1253.765762][T23076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.959839][T23076] hsr_slave_0: entered promiscuous mode [ 1254.014117][T23076] hsr_slave_1: entered promiscuous mode [ 1254.044509][ T8658] usb 3-1: USB disconnect, device number 109 [ 1254.058350][T23076] debugfs: 'hsr0' already exists in 'hsr' [ 1254.102135][T23076] Cannot create hsr debugfs directory [ 1254.139870][ T9] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1254.361894][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1254.401632][ T9] usb 9-1: config 11 has an invalid interface number: 161 but max is 0 [ 1254.449502][ T9] usb 9-1: config 11 has no interface number 0 [ 1254.486724][ T9] usb 9-1: config 11 interface 161 has no altsetting 0 [ 1254.526136][ T9] usb 9-1: New USB device found, idVendor=10d2, idProduct=01d2, bcdDevice=11.e5 [ 1254.567058][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.606488][ T9] usb 9-1: Product: syz [ 1254.620748][ T9] usb 9-1: Manufacturer: syz [ 1254.644113][ T9] usb 9-1: SerialNumber: syz [ 1254.840291][T17654] Bluetooth: hci5: command tx timeout [ 1254.955290][T23130] openvswitch: netlink: Message has 12 unknown bytes. [ 1255.017340][T23130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1255.138110][ T5728] usb 2-1: USB disconnect, device number 27 [ 1255.743035][ T30] audit: type=1400 audit(1784031449.375:1756): avc: denied { create } for pid=23144 comm="syz.2.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1256.104875][ T6982] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1256.184917][ T9] usblcd 9-1:11.161: USBLCD model not supported. [ 1256.236136][ T9] usb 9-1: USB disconnect, device number 43 [ 1256.495269][T23154] trusted_key: encrypted_key: master key parameter 'c0‚:ØHû*N”Ê…™ÐfïeúÂ<‘5Ž•w€èê^n0&À–±š8çÉJÍ' is invalid [ 1257.098548][T17654] Bluetooth: hci5: command tx timeout [ 1257.238769][T23162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4352'. [ 1258.135108][ T5343] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1258.225456][ T6982] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1258.374144][ T5343] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1258.397480][ T5343] usb 3-1: config 1 has no interface number 0 [ 1258.417409][ T5343] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1258.474014][ T5343] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1258.507008][ T5343] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.555590][ T5343] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1258.672500][ T5343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.703622][ T5343] usb 3-1: Product: syz [ 1258.722609][ T5343] usb 3-1: Manufacturer: syz [ 1258.742481][ T5343] usb 3-1: SerialNumber: syz [ 1258.761504][T23166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1258.923332][ T30] audit: type=1400 audit(1784031452.310:1757): avc: denied { write } for pid=23163 comm="syz.0.4355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1259.338452][T17654] Bluetooth: hci5: command tx timeout [ 1259.803222][T23185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4359'. [ 1259.933963][T23166] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1260.338330][ T30] audit: type=1400 audit(1784031453.620:1758): avc: denied { write } for pid=23136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.391921][T23188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.435600][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1260.439955][T23188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.544518][T23185] netlink: 75 bytes leftover after parsing attributes in process `syz.1.4359'. [ 1260.556266][ T5343] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 1260.767229][ T30] audit: type=1400 audit(1784031454.007:1759): avc: denied { write } for pid=23197 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1260.840474][ T5343] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 1260.861972][ T5343] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 1260.913594][ T5343] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 1260.942161][ T5343] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 1261.000665][ T5343] usb 3-1: USB disconnect, device number 110 [ 1261.015784][T23076] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1261.035599][ T5343] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 1261.069984][T23076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1261.124711][T23076] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1261.418297][T23076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1261.505929][T23076] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1261.531796][T23076] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1261.560034][T23076] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1261.567178][ T5343] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1261.618776][T23076] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1261.927246][T22840] warn_alloc: 1 callbacks suppressed [ 1261.927263][T22840] syz.5.4265: vmalloc error: size 2147483648, failed to allocated page array size 4194304, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1262.069497][T22840] CPU: 0 UID: 0 PID: 22840 Comm: syz.5.4265 Tainted: G L syzkaller #0 PREEMPT(full) [ 1262.069526][T22840] Tainted: [L]=SOFTLOCKUP [ 1262.069533][T22840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1262.069542][T22840] Call Trace: [ 1262.069549][T22840] [ 1262.069556][T22840] dump_stack_lvl+0x100/0x190 [ 1262.069582][T22840] warn_alloc.cold+0x94/0xa8 [ 1262.069601][T22840] ? __pfx_warn_alloc+0x10/0x10 [ 1262.069628][T22840] ? __kasan_kmalloc+0xaa/0xb0 [ 1262.069650][T22840] ? kasan_save_stack+0x3f/0x50 [ 1262.069673][T22840] ? vb2_vmalloc_alloc+0x135/0x410 [ 1262.069698][T22840] ? __vmalloc_node_noprof+0xad/0xf0 [ 1262.069727][T22840] __vmalloc_node_range_noprof+0x1394/0x1630 [ 1262.069759][T22840] ? vb2_vmalloc_alloc+0x135/0x410 [ 1262.069790][T22840] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1262.069819][T22840] ? kasan_save_track+0x14/0x30 [ 1262.069838][T22840] ? __kasan_kmalloc+0xaa/0xb0 [ 1262.069857][T22840] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1262.069883][T22840] ? vb2_vmalloc_alloc+0x135/0x410 [ 1262.069906][T22840] vmalloc_user_noprof+0x9e/0xe0 [ 1262.069929][T22840] ? vb2_vmalloc_alloc+0x135/0x410 [ 1262.069956][T22840] vb2_vmalloc_alloc+0x135/0x410 [ 1262.069979][T22840] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1262.070005][T22840] __vb2_queue_alloc+0x8d5/0x1160 [ 1262.070042][T22840] vb2_core_create_bufs+0x5fa/0xa30 [ 1262.070068][T22840] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 1262.070099][T22840] ? irqentry_exit+0x24d/0xa00 [ 1262.070130][T22840] vb2_create_bufs+0x40c/0x830 [ 1262.070156][T22840] ? __pfx_vb2_create_bufs+0x10/0x10 [ 1262.070180][T22840] ? vb2_verify_memory_type+0x318/0x560 [ 1262.070203][T22840] ? vb2_verify_memory_type+0x33c/0x560 [ 1262.070229][T22840] vb2_ioctl_create_bufs+0x244/0x3e0 [ 1262.070252][T22840] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1262.070275][T22840] vidioc_create_bufs+0x7d/0xf0 [ 1262.070306][T22840] v4l_create_bufs+0x17d/0x270 [ 1262.070337][T22840] __video_do_ioctl+0xb2a/0xdf0 [ 1262.070361][T22840] ? __pfx___video_do_ioctl+0x10/0x10 [ 1262.070379][T22840] ? _copy_from_user+0x87/0xd0 [ 1262.070410][T22840] ? kasan_check_range+0x8e/0x1e0 [ 1262.070442][T22840] video_usercopy+0x47a/0x1730 [ 1262.070463][T22840] ? __pfx___video_do_ioctl+0x10/0x10 [ 1262.070484][T22840] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1262.070513][T22840] ? __pfx_video_usercopy+0x10/0x10 [ 1262.070550][T22840] v4l2_ioctl+0x1bd/0x250 [ 1262.070570][T22840] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1262.070593][T22840] __x64_sys_ioctl+0x18e/0x210 [ 1262.070621][T22840] do_syscall_64+0x115/0x870 [ 1262.070647][T22840] ? clear_bhb_loop+0x40/0x90 [ 1262.070670][T22840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.070688][T22840] RIP: 0033:0x7f4d6cf9de59 [ 1262.070704][T22840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.070721][T22840] RSP: 002b:00007f4d6b1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1262.070739][T22840] RAX: ffffffffffffffda RBX: 00007f4d6d226090 RCX: 00007f4d6cf9de59 [ 1262.070752][T22840] RDX: 00002000000000c0 RSI: 00000000c100565c RDI: 0000000000000006 [ 1262.070763][T22840] RBP: 00007f4d6d033e6f R08: 0000000000000000 R09: 0000000000000000 [ 1262.070774][T22840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1262.070785][T22840] R13: 00007f4d6d226128 R14: 00007f4d6d226090 R15: 00007ffcb79e8688 [ 1262.070810][T22840] [ 1262.071742][T23223] netlink: 'syz.2.4363': attribute type 1 has an invalid length. [ 1262.078689][T22840] Mem-Info: [ 1262.093210][T23076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.505628][T22840] active_anon:6150 inactive_anon:18084 isolated_anon:0 [ 1262.505628][T22840] active_file:10711 inactive_file:9674 isolated_file:0 [ 1262.505628][T22840] unevictable:768 dirty:135 writeback:0 [ 1262.505628][T22840] slab_reclaimable:10908 slab_unreclaimable:109583 [ 1262.505628][T22840] mapped:38880 shmem:8483 pagetables:4412 [ 1262.505628][T22840] sec_pagetables:0 bounce:0 [ 1262.505628][T22840] kernel_misc_reclaimable:0 [ 1262.505628][T22840] free:40776 free_pcp:828 free_cma:0 [ 1262.738459][T22840] Node 0 active_anon:24328kB inactive_anon:67752kB active_file:42784kB inactive_file:37652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135876kB dirty:540kB writeback:0kB shmem:27556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15364kB pagetables:15676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1262.857528][T22840] Node 1 active_anon:3672kB inactive_anon:2884kB active_file:60kB inactive_file:1044kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:22944kB dirty:0kB writeback:0kB shmem:8076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:1972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1263.006562][T22840] Node 0 DMA free:10100kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.066292][T23223] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1263.084144][T23076] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.201397][T22840] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 1263.220134][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.227285][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.228733][T22840] Node 0 DMA32 free:98176kB boost:61440kB min:95452kB low:103952kB high:112452kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21428kB inactive_anon:67048kB active_file:42784kB inactive_file:37652kB unevictable:1536kB writepending:540kB zspages:1496kB present:3129332kB managed:2532316kB mlocked:0kB bounce:0kB free_pcp:1556kB local_pcp:616kB free_cma:0kB [ 1263.301378][T23236] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4366'. [ 1263.332616][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.339775][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.432569][T22840] lowmem_reserve[]: 0 0 0 0 0 [ 1263.475928][T22840] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.547677][T23244] fuse: Bad value for 'group_id' [ 1263.552694][T23244] fuse: Bad value for 'group_id' [ 1263.575695][T16992] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1263.933829][T16992] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1264.081813][T16992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1264.115115][T22840] lowmem_reserve[]: 0 0 0 0 0 [ 1264.323132][T23247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4368'. [ 1264.507450][ T30] audit: type=1400 audit(1784031457.089:1760): avc: denied { write } for pid=23204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1264.544601][T22840] Node 1 Normal free:58688kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6556kB inactive_anon:2044kB active_file:60kB inactive_file:1044kB unevictable:1536kB writepending:0kB zspages:2224kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1536kB local_pcp:740kB free_cma:0kB [ 1264.586187][T16992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1264.608436][T16992] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1264.628590][T22840] lowmem_reserve[]: 0 0 0 0 0 [ 1264.639004][T16992] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1264.659726][T16992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.679334][T22840] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 1*4096kB (M) = 10100kB [ 1264.689632][T23076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1264.710898][T16992] usb 2-1: config 0 descriptor?? [ 1264.746310][T23076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1264.793454][T22840] Node 0 DMA32: 473*4kB (UME) 980*8kB (UME) 889*16kB (UME) 554*32kB (ME) 268*64kB (UME) 119*128kB (ME) 44*256kB (UME) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 85844kB [ 1264.840330][T22840] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1264.905969][T22840] Node 1 Normal: 0*4kB 0*8kB 3*16kB (UE) 6*32kB (UME) 93*64kB (UME) 55*128kB (UME) 36*256kB (UM) 22*512kB (UME) 11*1024kB (UME) 6*2048kB (ME) 0*4096kB = 57264kB [ 1264.998828][T22840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1265.041911][T22840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1265.168122][ T30] audit: type=1400 audit(1784031458.067:1761): avc: denied { write } for pid=23251 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1265.177579][T16992] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1265.199862][T22840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1265.239304][T22840] Node 1 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1265.267043][ T30] audit: type=1400 audit(1784031458.141:1762): avc: denied { module_load } for pid=23250 comm="syz.2.4369" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1265.312044][T16992] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1265.312208][T22840] 33718 total pagecache pages [ 1265.370062][T22840] 20 pages in swap cache [ 1265.399570][T22840] Free swap = 115792kB [ 1265.411026][T16992] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1265.415339][T22840] Total swap = 124996kB [ 1265.439186][T22840] 2097051 pages RAM [ 1265.459272][T16992] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1265.460280][T22840] 0 pages HighMem/MovableOnly [ 1265.512606][T16992] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1265.517901][T22840] 432261 pages reserved [ 1265.531716][T22840] 0 pages cma reserved [ 1265.557063][T16992] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1265.594926][T16992] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1265.633158][T16992] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1265.676893][T16992] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1265.708317][T16992] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 1265.764521][T22478] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1265.822643][T16992] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1265.949397][T22478] usb 9-1: Using ep0 maxpacket: 8 [ 1265.981576][T22478] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 1265.982043][T16992] usb 2-1: USB disconnect, device number 28 [ 1266.044691][T23266] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4372'. [ 1266.067401][T22478] usb 9-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1266.106086][T23059] syz.8.4328 (23059) used greatest stack depth: 17752 bytes left [ 1266.125223][T22478] usb 9-1: config 0 has an invalid descriptor of length 7, skipping remainder of the config [ 1266.311160][T23272] fuse: Bad value for 'group_id' [ 1266.316897][T23272] fuse: Bad value for 'group_id' [ 1267.326829][T22478] usb 9-1: config 0 has no interface number 0 [ 1267.348563][T22478] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1267.368459][T22478] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.376503][T22478] usb 9-1: Product: syz [ 1267.607747][T22478] usb 9-1: Manufacturer: syz [ 1267.643490][T22478] usb 9-1: SerialNumber: syz [ 1267.676458][T22478] usb 9-1: config 0 descriptor?? [ 1267.717615][T23267] fido_id[23267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1267.745323][T22478] uvcvideo 9-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1267.790623][T22478] uvcvideo 9-1:0.31: No valid video chain found. [ 1268.057852][T23292] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4378'. [ 1268.126104][ T30] audit: type=1400 audit(1784031460.798:1763): avc: denied { write } for pid=23259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1268.328017][T23301] fuse: Bad value for 'group_id' [ 1268.333175][T23301] fuse: Bad value for 'group_id' [ 1268.571508][T22478] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1269.016154][T23076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.135195][T22478] usb 2-1: Using ep0 maxpacket: 16 [ 1269.837276][T22478] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1269.900660][T22478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.910332][T16992] usb 9-1: USB disconnect, device number 44 [ 1269.960610][T22478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.013395][T22478] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1270.093252][T22478] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1270.154667][T22478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.188553][ T30] audit: type=1400 audit(1784031462.699:1764): avc: denied { write } for pid=23308 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1270.227693][T22478] usb 2-1: config 0 descriptor?? [ 1272.077316][ T30] audit: type=1400 audit(1784031464.452:1765): avc: denied { map } for pid=23321 comm="syz.1.4385" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1272.415319][T23340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4388'. [ 1272.442482][T23076] veth0_vlan: entered promiscuous mode [ 1272.459161][T22478] usbhid 2-1:0.0: can't add hid device: -71 [ 1272.479060][T22478] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1272.526109][T23076] veth1_vlan: entered promiscuous mode [ 1272.540052][T22478] usb 2-1: USB disconnect, device number 29 [ 1272.665884][T23076] veth0_macvtap: entered promiscuous mode [ 1272.717498][T23076] veth1_macvtap: entered promiscuous mode [ 1272.789276][T23076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.846129][T23076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1272.938964][ T1041] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.997177][ T1041] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.050007][ T1041] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.141027][ T1041] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.209013][T23359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4392'. [ 1273.260108][ T30] audit: type=1400 audit(1784031465.541:1766): avc: denied { write } for pid=23323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1273.452088][T23361] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1273.512772][T23366] fuse: Bad value for 'group_id' [ 1273.517897][T23366] fuse: Bad value for 'group_id' [ 1274.160835][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.215726][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.259272][ T30] audit: type=1326 audit(1784031466.381:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.8.4394" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e6d59de59 code=0x0 [ 1274.664775][ T30] audit: type=1400 audit(1784031466.814:1768): avc: denied { write } for pid=23370 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1274.903736][ T6711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.951255][ T6711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.160673][T23373] wlan0 speed is unknown, defaulting to 1000 [ 1277.226158][T23401] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4397'. [ 1277.282421][T23403] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4397'. [ 1277.512653][ T5343] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1277.560348][ T30] audit: type=1400 audit(1784031469.509:1769): avc: denied { write } for pid=23376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.686022][ T5343] usb 2-1: device descriptor read/64, error -71 [ 1277.837209][ T30] audit: type=1400 audit(1784031469.758:1770): avc: denied { write } for pid=23415 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1278.531548][ T5343] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1278.694987][ T5343] usb 2-1: device descriptor read/64, error -71 [ 1278.867484][ T5343] usb usb2-port1: attempt power cycle [ 1279.290833][ T5343] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1279.340723][ T5343] usb 2-1: device descriptor read/8, error -71 [ 1279.470274][T23440] vxfs: WRONG superblock magic 00000000 at 1 [ 1279.480266][T23440] vxfs: WRONG superblock magic 00000000 at 8 [ 1279.486941][T23440] vxfs: can't find superblock. [ 1279.626015][ T5343] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1279.757743][ T5343] usb 2-1: device descriptor read/8, error -71 [ 1279.787444][ T30] audit: type=1326 audit(1784031471.557:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.2.4408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080499de59 code=0x7ff00000 [ 1279.894135][ T30] audit: type=1326 audit(1784031471.557:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.2.4408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080499de59 code=0x7ff00000 [ 1279.953816][ T5343] usb usb2-port1: unable to enumerate USB device [ 1280.034997][ T30] audit: type=1326 audit(1784031471.594:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.2.4408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f080499de59 code=0x7ff00000 [ 1280.154275][ T30] audit: type=1326 audit(1784031471.594:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.2.4408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080499de59 code=0x7ff00000 [ 1280.290657][ T30] audit: type=1326 audit(1784031471.594:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.2.4408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080499de59 code=0x7ff00000 [ 1280.403684][ T30] audit: type=1326 audit(1784031471.594:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.2.4408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080499de59 code=0x7ff00000 [ 1280.581485][ T30] audit: type=1326 audit(1784031471.594:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.2.4408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080499de59 code=0x7ff00000 [ 1280.738563][ T30] audit: type=1326 audit(1784031471.594:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23442 comm="syz.2.4408" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080499de59 code=0x7ff00000 [ 1281.392857][T18691] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1281.853749][T18691] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 1281.880587][T18691] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1281.960342][T23473] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4412'. [ 1281.977838][T18691] usb 2-1: config 150 has no interface number 0 [ 1281.984252][T18691] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1282.296539][T18691] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1282.318744][T18691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.327063][T18691] usb 2-1: Product: syz [ 1282.331283][T18691] usb 2-1: Manufacturer: syz [ 1282.336178][T18691] usb 2-1: SerialNumber: syz [ 1282.589584][ T5343] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 1282.748218][ T5343] usb 9-1: device descriptor read/64, error -71 [ 1282.847458][T23486] trusted_key: encrypted_key: insufficient parameters specified [ 1283.061276][T23490] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4415'. [ 1283.286609][ T5343] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 1283.301324][T23490] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4415'. [ 1283.370776][T23492] ubi: mtd0 is already attached to ubi31 [ 1283.462576][ T5343] usb 9-1: device descriptor read/64, error -71 [ 1283.603973][ T5343] usb usb9-port1: attempt power cycle [ 1284.017189][T18691] xr_serial 2-1:150.204: skipping garbage [ 1284.047867][ T5343] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 1284.062968][T18691] xr_serial 2-1:150.204: skipping garbage [ 1284.113624][T18691] usb 2-1: USB disconnect, device number 34 [ 1284.137625][ T5343] usb 9-1: device descriptor read/8, error -71 [ 1284.242913][T22478] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1284.368820][T23512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.415708][T23512] batadv_slave_0: entered promiscuous mode [ 1284.448930][ T5343] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 1284.493076][T22478] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1284.537520][ T5343] usb 9-1: device descriptor read/8, error -71 [ 1284.551053][T22478] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1284.604842][T22478] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice= 0.40 [ 1284.645521][T22478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.677961][ T5343] usb usb9-port1: unable to enumerate USB device [ 1284.697746][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 1284.697763][ T30] audit: type=1400 audit(1784031476.087:1843): avc: denied { write } for pid=23493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1284.727413][T22478] usb 1-1: Product: syz [ 1284.748592][T22478] usb 1-1: Manufacturer: syz [ 1284.760007][T22478] usb 1-1: SerialNumber: syz [ 1284.986763][T23522] PKCS7: Unknown OID: [4] 0.0 [ 1285.055704][T23522] PKCS7: Only support pkcs7_signedData type [ 1285.141478][ T30] audit: type=1400 audit(1784031476.503:1844): avc: denied { write } for pid=23526 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1285.230071][ T8658] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1285.447098][T23534] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[17503] was attempted by " [ 1285.528202][ T8658] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.724994][T22478] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -22 [ 1285.746992][T23525] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 1285.762820][T22478] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -22 [ 1285.839992][T23525] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 1285.873047][T23525] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1286.005249][ T8658] usb 2-1: config 2 interface 1 has no altsetting 0 [ 1286.029678][ T8658] usb 2-1: New USB device found, idVendor=1410, idProduct=a012, bcdDevice=c4.5f [ 1286.060769][ T8658] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.089806][ T8658] usb 2-1: Product: syz [ 1286.102442][ T8658] usb 2-1: Manufacturer: syz [ 1286.113085][ T8658] usb 2-1: SerialNumber: syz [ 1286.301359][ T30] audit: type=1400 audit(1784031477.573:1845): avc: denied { write } for pid=23532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1286.561774][ T30] audit: type=1400 audit(1784031477.813:1846): avc: denied { write } for pid=23551 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1287.216882][T16992] usb 1-1: USB disconnect, device number 2 [ 1288.149580][ T8658] usb 2-1: unknown number of interfaces: 2 [ 1288.269550][ T8658] usb 2-1: USB disconnect, device number 35 [ 1288.384445][T16992] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1288.471212][ T30] audit: type=1400 audit(1784031479.566:1847): avc: denied { write } for pid=23555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1288.605060][T16992] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.636394][T16992] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1288.670488][T16992] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1288.686036][T16992] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1288.695802][T16992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.705222][T16992] usb 1-1: Product: syz [ 1288.708500][ T30] audit: type=1400 audit(1784031479.797:1848): avc: denied { write } for pid=23580 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1288.709746][T16992] usb 1-1: Manufacturer: syz [ 1288.751820][T16992] usb 1-1: SerialNumber: syz [ 1288.796248][T16992] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 1288.820781][T16992] cdc_ncm 1-1:1.0: bind() failure [ 1288.915003][ T8658] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1289.019412][T23561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.029394][T23561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.119917][ T8658] usb 9-1: Using ep0 maxpacket: 32 [ 1289.155472][ T8658] usb 9-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1289.165718][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1289.184908][ T5792] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1289.194500][ T8658] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.206858][ T8658] usb 9-1: Product: syz [ 1289.211263][ T8658] usb 9-1: Manufacturer: syz [ 1289.215873][ T8658] usb 9-1: SerialNumber: syz [ 1289.227859][ T8658] usb 9-1: config 0 descriptor?? [ 1289.254286][ T8658] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1289.366684][ T30] audit: type=1400 audit(1784031480.397:1849): avc: denied { write } for pid=23586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.413321][ T5792] usb 7-1: config 4 has an invalid interface number: 241 but max is 0 [ 1289.430156][ T5792] usb 7-1: config 4 has no interface number 0 [ 1289.443969][ T5792] usb 7-1: config 4 interface 241 has no altsetting 0 [ 1289.463665][ T5792] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 1289.482777][ T5792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.504129][ T5792] usb 7-1: Product: syz [ 1289.520506][ T5792] usb 7-1: Manufacturer: syz [ 1289.534602][ T5792] usb 7-1: SerialNumber: syz [ 1289.681472][ T8658] gspca_topro: reg_w err -71 [ 1289.727556][ T8658] gspca_topro: Sensor soi763a [ 1289.754164][ T30] audit: type=1400 audit(1784031480.756:1850): avc: denied { write } for pid=23600 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.755202][ T8658] usb 9-1: USB disconnect, device number 49 [ 1289.891372][ T30] audit: type=1400 audit(1784031480.876:1851): avc: denied { ioctl } for pid=23584 comm="syz.6.4428" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1289.953908][ T1041] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1290.609519][T22478] usb 1-1: USB disconnect, device number 3 [ 1290.882939][T23615] FAULT_INJECTION: forcing a failure. [ 1290.882939][T23615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1290.908868][T23615] CPU: 0 UID: 0 PID: 23615 Comm: syz.8.4431 Tainted: G L syzkaller #0 PREEMPT(full) [ 1290.908906][T23615] Tainted: [L]=SOFTLOCKUP [ 1290.908912][T23615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1290.908922][T23615] Call Trace: [ 1290.908928][T23615] [ 1290.908936][T23615] dump_stack_lvl+0x100/0x190 [ 1290.908963][T23615] should_fail_ex.cold+0x5/0xa [ 1290.908986][T23615] _copy_from_user+0x2e/0xd0 [ 1290.909008][T23615] copy_msghdr_from_user+0x9f/0x4c0 [ 1290.909035][T23615] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1290.909070][T23615] ___sys_sendmsg+0x106/0x1e0 [ 1290.909095][T23615] ? __pfx____sys_sendmsg+0x10/0x10 [ 1290.909118][T23615] ? __lock_acquire+0x49f/0x1a40 [ 1290.909139][T23615] ? get_pid_task+0x106/0x250 [ 1290.909188][T23615] __sys_sendmsg+0x160/0x210 [ 1290.909208][T23615] ? __pfx___sys_sendmsg+0x10/0x10 [ 1290.909239][T23615] do_syscall_64+0x115/0x870 [ 1290.909264][T23615] ? clear_bhb_loop+0x40/0x90 [ 1290.909286][T23615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.909304][T23615] RIP: 0033:0x7f1e6d59de59 [ 1290.909319][T23615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.909336][T23615] RSP: 002b:00007f1e6e393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1290.909354][T23615] RAX: ffffffffffffffda RBX: 00007f1e6d825fa0 RCX: 00007f1e6d59de59 [ 1290.909368][T23615] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1290.909378][T23615] RBP: 00007f1e6e393090 R08: 0000000000000000 R09: 0000000000000000 [ 1290.909389][T23615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1290.909399][T23615] R13: 00007f1e6d826038 R14: 00007f1e6d825fa0 R15: 00007ffc66f50878 [ 1290.909422][T23615] [ 1291.361159][ T30] audit: type=1400 audit(1784031482.223:1852): avc: denied { write } for pid=23604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.103571][ T30] audit: type=1400 audit(1784031482.915:1853): avc: denied { write } for pid=23623 comm="syz.8.4433" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1292.336458][ T30] audit: type=1400 audit(1784031483.137:1854): avc: denied { write } for pid=23631 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.338576][ T5792] go7007 7-1:4.241: probe with driver go7007 failed with error -12 [ 1292.422114][T17654] Bluetooth: hci1: unexpected event for opcode 0x200d [ 1292.520099][ T5792] usb 7-1: USB disconnect, device number 31 [ 1293.044397][ T30] audit: type=1400 audit(1784031483.792:1855): avc: denied { setopt } for pid=23663 comm="syz.0.4443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1293.126206][ T30] audit: type=1400 audit(1784031483.838:1856): avc: denied { write } for pid=23640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.215642][ T30] audit: type=1326 audit(1784031483.866:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23665 comm="syz.8.4444" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6d59de59 code=0x7fc00000 [ 1293.318506][T23678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4446'. [ 1293.320092][ T30] audit: type=1400 audit(1784031483.986:1858): avc: denied { read } for pid=23665 comm="syz.8.4444" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1293.412195][ T30] audit: type=1400 audit(1784031483.986:1859): avc: denied { open } for pid=23665 comm="syz.8.4444" path="/284/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1293.466597][ T30] audit: type=1326 audit(1784031484.013:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23665 comm="syz.8.4444" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e6d59de59 code=0x7fc00000 [ 1293.686835][ T30] audit: type=1400 audit(1784031484.097:1861): avc: denied { write } for pid=23676 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.759065][ T36] wlan0: Trigger new scan to find an IBSS to join [ 1293.800372][ T5720] IPVS: starting estimator thread 0... [ 1293.921664][T23682] IPVS: using max 42 ests per chain, 100800 per kthread [ 1293.956102][T23673] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1294.049072][T23673] block device autoloading is deprecated and will be removed. [ 1294.404833][T23689] syzkaller0: entered promiscuous mode [ 1294.428829][T23689] syzkaller0: entered allmulticast mode [ 1294.571352][ T5720] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1294.771595][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 1294.810265][ T5720] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1294.849089][ T5720] usb 2-1: config 179 has no interface number 0 [ 1294.888351][ T5720] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1294.938709][ T5720] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1295.003515][ T5720] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1295.054798][ T5720] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1295.118658][ T5720] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1295.194945][ T5720] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1295.259403][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.304403][T23684] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1296.088238][ T5720] usb 2-1: USB disconnect, device number 36 [ 1296.094682][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1296.094729][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1296.203168][ T8658] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input63 [ 1296.498006][T23708] Bluetooth: MGMT ver 1.23 [ 1296.633433][T18047] Bluetooth: hci3: unexpected event for opcode 0x040e [ 1296.706622][T18047] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1296.725115][T18047] Bluetooth: hci4: Injecting HCI hardware error event [ 1296.741660][T18047] Bluetooth: hci4: hardware error 0x00 [ 1296.847262][T23714] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1296.861742][T23714] Bluetooth: hci1: Injecting HCI hardware error event [ 1296.872615][T23714] Bluetooth: hci1: hardware error 0x00 [ 1296.918572][T23712] syz_tun: entered promiscuous mode [ 1296.931847][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1296.931863][ T30] audit: type=1400 audit(1784031487.381:1865): avc: denied { map } for pid=23713 comm="syz.6.4459" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1297.053900][ T48] wlan0: Trigger new scan to find an IBSS to join [ 1297.138183][ T30] audit: type=1400 audit(1784031487.381:1866): avc: denied { execute } for pid=23713 comm="syz.6.4459" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1297.763923][T23734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1297.885018][T23737] binder_alloc: 23736: pid 23736 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1297.915014][T23734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1297.977111][T23737] binder_alloc: 23736: pid 23736 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1298.020657][T23734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1298.133217][T23734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4465'. [ 1298.201506][ T48] wlan0: Creating new IBSS network, BSSID 76:a4:15:3e:ec:0f [ 1298.331674][ T30] audit: type=1400 audit(1784031488.673:1867): avc: denied { ioctl } for pid=23745 comm="syz.6.4468" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1298.357471][T23723] could not allocate digest TFM handle hmac(sha256-avx2) [ 1298.376383][T23747] input: syz0 as /devices/virtual/input/input64 [ 1298.489324][T23749] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4469'. [ 1298.585772][T23717] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1298.597269][T23717] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1298.610242][T23717] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1298.622733][T23717] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1298.635076][T23717] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1298.782892][T23757] bridge0: port 3(syz_tun) entered blocking state [ 1298.787284][ T5617] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1298.798469][ T5617] Bluetooth: hci0: command 0x0405 tx timeout [ 1298.838724][T23757] bridge0: port 3(syz_tun) entered disabled state [ 1298.875870][T23757] syz_tun: entered allmulticast mode [ 1298.919274][ T30] audit: type=1400 audit(1784031489.218:1868): avc: denied { ioctl } for pid=23756 comm="syz.1.4470" path="socket:[101589]" dev="sockfs" ino=101589 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1298.951961][T23757] syz_tun: entered promiscuous mode [ 1298.989868][T23757] bridge0: port 3(syz_tun) entered blocking state [ 1298.997668][T23757] bridge0: port 3(syz_tun) entered forwarding state [ 1299.050873][T18047] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1299.135585][T23714] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1299.146660][T23770] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4472'. [ 1299.198535][T23768] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4472'. [ 1299.412754][T23750] wlan0 speed is unknown, defaulting to 1000 [ 1299.958245][T23798] bridge0: port 3(syz_tun) entered blocking state [ 1299.970222][T23798] bridge0: port 3(syz_tun) entered disabled state [ 1299.984928][T23798] syz_tun: entered allmulticast mode [ 1300.030224][T23798] syz_tun: entered promiscuous mode [ 1300.045313][T23798] bridge0: port 3(syz_tun) entered blocking state [ 1300.051986][T23798] bridge0: port 3(syz_tun) entered forwarding state [ 1300.382847][T23813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1300.404129][T23810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.411552][T23810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.498016][T23810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1300.517843][T23810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.753695][T23811] vxcan1: entered allmulticast mode [ 1300.819183][ T36] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.828711][ T36] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1300.838824][ T12] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.869252][T23714] Bluetooth: hci6: command tx timeout [ 1300.894576][ T12] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1301.023671][ T12] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.054966][ T12] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1301.075969][ T12] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.095866][ T12] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1301.118720][T23750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.135259][T23750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.151985][T23831] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1301.163544][ T30] audit: type=1400 audit(1784031491.294:1869): avc: denied { create } for pid=23817 comm="syz.6.4488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1301.185490][T23750] bridge_slave_0: entered allmulticast mode [ 1301.205775][T23750] bridge_slave_0: entered promiscuous mode [ 1301.217444][T23750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.239412][ T30] audit: type=1400 audit(1784031491.294:1870): avc: denied { write } for pid=23817 comm="syz.6.4488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1301.261317][T23750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.269618][T23750] bridge_slave_1: entered allmulticast mode [ 1301.287515][T23750] bridge_slave_1: entered promiscuous mode [ 1301.320467][ T30] audit: type=1400 audit(1784031491.432:1871): avc: denied { mount } for pid=23823 comm="syz.8.4490" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1301.378508][T23834] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4492'. [ 1301.417671][T23750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.471027][T23750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1301.569266][T23750] team0: Port device team_slave_0 added [ 1301.587238][T23750] team0: Port device team_slave_1 added [ 1301.619976][ T30] audit: type=1400 audit(1784031491.709:1872): avc: denied { unmount } for pid=17653 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1301.701038][T23750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1301.740114][T23750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.810927][T23750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.842912][ T30] audit: type=1400 audit(1784031491.903:1873): avc: denied { append } for pid=23846 comm="syz.8.4497" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1301.877250][T23750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.884251][T23750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1301.911207][T23750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1301.983534][T23750] hsr_slave_0: entered promiscuous mode [ 1301.990080][T23750] hsr_slave_1: entered promiscuous mode [ 1301.997573][T23750] debugfs: 'hsr0' already exists in 'hsr' [ 1302.003491][T23750] Cannot create hsr debugfs directory [ 1302.056634][T23849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.064211][T23849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.082338][T18691] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1302.093107][ T5720] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1302.255324][ T5720] usb 9-1: Using ep0 maxpacket: 32 [ 1302.269842][ T5720] usb 9-1: config 0 has no interfaces? [ 1302.277126][T18691] usb 7-1: Using ep0 maxpacket: 32 [ 1302.278627][ T5720] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1302.293995][T18691] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 1302.296175][ T5720] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1302.314912][T18691] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1302.317809][ T5720] usb 9-1: Product: syz [ 1302.334461][T18691] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1302.342139][ T5720] usb 9-1: Manufacturer: syz [ 1302.355582][ T5720] usb 9-1: SerialNumber: syz [ 1302.362796][ T48] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 1302.365578][ T5720] usb 9-1: config 0 descriptor?? [ 1302.373443][T18691] usb 7-1: config 1 has no interface number 0 [ 1302.407155][ T48] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1302.418044][T18691] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1302.421081][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.448660][T18691] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1302.455929][ T48] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 1302.471678][ T48] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1302.482872][T18691] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1302.495535][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.504968][T18691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.537387][T18691] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1302.543473][ T48] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 1302.564805][ T48] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1302.575306][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.623151][ T1041] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 1302.643221][ T1041] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 1302.665358][ T1041] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.727449][ T5720] usb 9-1: USB disconnect, device number 50 [ 1302.840904][T23845] hub 1-0:1.0: USB hub found [ 1302.856503][T23845] hub 1-0:1.0: 1 port detected [ 1302.926619][T18691] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 1303.122533][T23714] Bluetooth: hci6: command tx timeout [ 1303.248891][ T9] usb 7-1: USB disconnect, device number 32 [ 1303.257310][ T9] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1303.322195][ T30] audit: type=1400 audit(1784031493.277:1874): avc: denied { write } for pid=23856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.466564][ T30] audit: type=1400 audit(1784031493.407:1875): avc: denied { mount } for pid=23874 comm="syz.0.4503" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1303.548142][ T30] audit: type=1400 audit(1784031493.490:1876): avc: denied { unmount } for pid=17503 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1303.578821][ T30] audit: type=1400 audit(1784031493.490:1877): avc: denied { write } for pid=23873 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1303.584861][T23877] batman_adv: batadv0: Adding interface: dummy0 [ 1303.667600][T23877] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1303.700753][ T30] audit: type=1400 audit(1784031493.628:1878): avc: denied { ioctl } for pid=23876 comm="syz.8.4504" path="socket:[101957]" dev="sockfs" ino=101957 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1303.734498][T23877] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1304.067194][T23892] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4506'. [ 1304.091028][T23892] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4506'. [ 1304.135264][T23892] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4506'. [ 1304.547802][ T30] audit: type=1400 audit(1784031494.412:1879): avc: denied { write } for pid=23883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1304.798859][T23750] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1304.821406][ T30] audit: type=1400 audit(1784031494.661:1880): avc: denied { write } for pid=23914 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1304.854815][T23750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1304.871818][T23750] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1304.893082][T23750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1304.905178][T23750] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1304.932238][T16992] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1304.949940][T23750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1304.975315][T23750] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1305.003465][T23750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1305.109225][T16992] usb 7-1: Using ep0 maxpacket: 32 [ 1305.132036][T16992] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1305.177618][T16992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1305.224984][T16992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1305.272099][T16992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1305.300405][T23750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.315812][T16992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1305.362876][T16992] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1305.376954][T23714] Bluetooth: hci6: command tx timeout [ 1305.389717][T23750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.407441][T16992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.428064][T16992] usb 7-1: Product: syz [ 1305.436003][ T6711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.436904][T16992] usb 7-1: Manufacturer: syz [ 1305.443241][ T6711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.452517][T16992] usb 7-1: SerialNumber: syz [ 1305.473811][T16992] usb 7-1: config 0 descriptor?? [ 1305.556145][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.563368][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.813448][ T8658] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1306.005161][ T8658] usb 2-1: Using ep0 maxpacket: 16 [ 1306.017687][ T30] audit: type=1400 audit(1784031495.769:1881): avc: denied { write } for pid=23920 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.069567][ T8658] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.102844][ T8658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1306.139016][ T8658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1306.173075][ T8658] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1306.207038][ T8658] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1306.270357][ T8658] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1306.304063][ T8658] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1306.343592][ T8658] usb 2-1: Manufacturer: syz [ 1306.355130][ T30] audit: type=1400 audit(1784031496.082:1882): avc: denied { write } for pid=23958 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.395440][ T8658] usb 2-1: config 0 descriptor?? [ 1306.807509][ T8658] rc_core: IR keymap rc-hauppauge not found [ 1306.826136][ T8658] Registered IR keymap rc-empty [ 1306.849810][ T8658] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1306.860352][T16992] iforce 7-1:0.0: usb_submit_urb failed: -110 [ 1306.894373][T16992] input input65: Device does not respond to id packet M [ 1306.917308][ T8658] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1306.928720][T16992] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1306.953834][T16992] input input65: Device does not respond to id packet P [ 1306.975887][ T8658] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1307.002427][T16992] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1307.014615][T16992] input input65: Device does not respond to id packet B [ 1307.027460][ T8658] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input66 [ 1307.060876][T16992] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1307.079376][T16992] input input65: Device does not respond to id packet N [ 1307.097489][ T8658] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.117721][T16992] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1307.139126][T16992] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1307.149162][ T8658] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.167996][T16992] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1307.190341][T16992] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1307.202238][ T8658] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.241481][T16992] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input65 [ 1307.261021][ T8658] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.277901][T23750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.309172][ T8658] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.331860][T16992] usb 7-1: USB disconnect, device number 33 [ 1307.359916][ T8658] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.404951][ T8658] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.481082][ T8658] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.533665][ T8658] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.599918][ T8658] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1307.633192][T23714] Bluetooth: hci6: command tx timeout [ 1307.662894][ T8658] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1307.693064][ T8658] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1307.724069][ T8658] usb 2-1: USB disconnect, device number 37 [ 1308.038085][ T30] audit: type=1400 audit(1784031497.633:1883): avc: denied { write } for pid=23960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1308.289591][T23995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4525'. [ 1308.468093][T24006] 9p: Bad value for 'wfdno' [ 1309.077362][ T30] audit: type=1400 audit(1784031498.592:1884): avc: denied { write } for pid=24001 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1309.121579][T23750] veth0_vlan: entered promiscuous mode [ 1309.308547][T23750] veth1_vlan: entered promiscuous mode [ 1309.419859][T23750] veth0_macvtap: entered promiscuous mode [ 1309.502328][T24016] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4531'. [ 1310.565979][T23750] veth1_macvtap: entered promiscuous mode [ 1310.583070][T23750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1310.593473][T23750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.603089][T24023] sd 0:0:1:0: PR command failed: 1026 [ 1310.640031][T24023] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1310.659600][ T30] audit: type=1400 audit(1784031500.004:1885): avc: denied { ioctl } for pid=24021 comm="syz.1.4533" path="/121/file0/file0" dev="fuse" ino=36028797018963968 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1310.752248][T24023] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1310.762201][T10269] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.782167][T10269] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.835997][T10269] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.917412][ T8998] udevd[8998]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1310.936014][ T6122] udevd[6122]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1310.964743][T10269] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.064538][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.089520][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.261130][T24041] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1311.291593][T24041] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1311.590465][T24041] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1311.597751][T24041] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1311.707143][T24041] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1311.727460][T24041] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1312.740216][ T30] audit: type=1400 audit(1784031501.969:1886): avc: denied { write } for pid=24031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.919113][ T30] audit: type=1400 audit(1784031502.126:1887): avc: denied { write } for pid=24058 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.944386][T24041] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1312.966596][T24041] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1313.154800][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.206115][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.353229][ T147] Bluetooth: hci7: Frame reassembly failed (-84) [ 1313.899305][ T30] audit: type=1400 audit(1784031503.040:1888): avc: denied { write } for pid=24061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.193788][ T30] audit: type=1400 audit(1784031503.307:1889): avc: denied { write } for pid=24079 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1315.455073][ T30] audit: type=1400 audit(1784031504.470:1890): avc: denied { connect } for pid=24091 comm="syz.6.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1315.521401][T23714] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1315.530428][T18047] Bluetooth: hci7: command 0x1003 tx timeout [ 1315.702813][ T30] audit: type=1400 audit(1784031504.700:1891): avc: denied { write } for pid=24085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1315.937119][ T30] audit: type=1400 audit(1784031504.922:1892): avc: denied { write } for pid=24110 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1316.419973][ T5720] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1318.028105][ T5720] usb 2-1: Using ep0 maxpacket: 32 [ 1318.202067][ T5720] usb 2-1: config 0 has no interfaces? [ 1318.344234][ T5720] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1318.444539][T24124] misc userio: Invalid payload size [ 1318.477886][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1318.579522][ T5720] usb 2-1: Product: syz [ 1318.641091][ T5720] usb 2-1: Manufacturer: syz [ 1318.729160][ T5720] usb 2-1: SerialNumber: syz [ 1318.892382][ T5720] usb 2-1: config 0 descriptor?? [ 1318.959109][T24137] tipc: Started in network mode [ 1318.976134][T24137] tipc: Node identity 1e1f709cd10a, cluster identity 4711 [ 1318.989463][T24137] tipc: Enabled bearer , priority 0 [ 1319.169176][T24135] tipc: Disabling bearer [ 1319.316080][T18691] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1319.359984][T16989] usb 2-1: USB disconnect, device number 38 [ 1319.363825][ T30] audit: type=1400 audit(1784031508.078:1893): avc: denied { write } for pid=24117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1319.511323][T18691] usb 1-1: Using ep0 maxpacket: 32 [ 1319.523220][T18691] usb 1-1: config 5 has an invalid interface number: 120 but max is 0 [ 1319.542852][T18691] usb 1-1: config 5 has no interface number 0 [ 1319.569305][ T30] audit: type=1400 audit(1784031508.271:1894): avc: denied { write } for pid=24151 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1319.592811][T18691] usb 1-1: config 5 interface 120 has no altsetting 0 [ 1319.630630][T18691] usb 1-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=61.2d [ 1319.652317][T18691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.670899][T18691] usb 1-1: Product: syz [ 1319.675330][T18691] usb 1-1: Manufacturer: syz [ 1319.682898][T18691] usb 1-1: SerialNumber: syz [ 1320.664450][T18691] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 1320.698484][T18691] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 1320.754838][T18691] pac7311 1-1:5.120: probe with driver pac7311 failed with error -71 [ 1320.797756][T24178] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4560'. [ 1320.820159][T18691] usb 1-1: USB disconnect, device number 4 [ 1321.106717][T24185] overlay: ./file0 is not a directory [ 1321.755790][ T30] audit: type=1400 audit(1784031510.292:1895): avc: denied { write } for pid=24161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1322.067468][T24200] ------------[ cut here ]------------ [ 1322.074684][T24200] hwsim_get_chanwidth(bw) > hwsim_get_chanwidth(confbw) [ 1322.074700][T24200] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:2248 at mac80211_hwsim_tx+0x16fe/0x26d0, CPU#1: syz.8.4563/24200 [ 1322.094841][T24200] Modules linked in: [ 1322.101459][T24200] CPU: 1 UID: 0 PID: 24200 Comm: syz.8.4563 Tainted: G L syzkaller #0 PREEMPT(full) [ 1322.112444][T24200] Tainted: [L]=SOFTLOCKUP [ 1322.116819][T24200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1322.126302][ T30] audit: type=1400 audit(1784031510.596:1896): avc: denied { write } for pid=24205 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1322.126934][T24200] RIP: 0010:mac80211_hwsim_tx+0x16fe/0x26d0 [ 1322.154841][T24200] Code: 03 80 3c 02 00 0f 85 cc 0d 00 00 49 8b 86 08 38 00 00 c7 44 24 18 00 00 00 00 48 89 44 24 38 e9 d6 eb ff ff e8 23 b7 b4 fa 90 <0f> 0b 90 e9 dd f0 ff ff e8 15 b7 b4 fa 90 0f 0b 90 48 8b 3c 24 4c [ 1322.174486][T24200] RSP: 0018:ffffc900036ef2d0 EFLAGS: 00010287 [ 1322.180590][T24200] RAX: 0000000000000418 RBX: ffff8880586e52b0 RCX: ffffc90003ea1000 [ 1322.188585][T24200] RDX: 0000000000080000 RSI: ffffffff8755257d RDI: ffff888054900000 [ 1322.196582][T24200] RBP: 0000000000000014 R08: 0000000000000004 R09: 0000000000000014 [ 1322.204590][T24200] R10: 0000000000000028 R11: 0000000000000000 R12: 0000000000000000 [ 1322.212618][T24200] R13: dffffc0000000000 R14: 0000000000000028 R15: 0000000000000000 [ 1322.220624][T24200] FS: 00007f1e6e3936c0(0000) GS:ffff888123ee8000(0000) knlGS:0000000000000000 [ 1322.229632][T24200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1322.236233][T24200] CR2: 0000001b34106ff8 CR3: 0000000036bc4000 CR4: 00000000003526f0 [ 1322.244248][T24200] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1322.252271][T24200] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1322.260252][T24200] Call Trace: [ 1322.263585][T24200] [ 1322.266528][T24200] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 1322.271999][T24200] ? do_raw_spin_lock+0x128/0x260 [ 1322.277088][T24200] ? mark_held_locks+0x40/0x70 [ 1322.281880][T24200] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1322.287731][T24200] ieee80211_tx_frags+0x5c9/0xa70 [ 1322.292745][T24200] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 1322.298294][T24200] __ieee80211_tx+0x145/0x5b0 [ 1322.302985][T24200] ieee80211_tx+0x336/0x460 [ 1322.307490][T24200] ? __pfx_ieee80211_tx+0x10/0x10 [ 1322.312497][T24200] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 1322.318836][T24200] ? ieee80211_skb_resize+0x119/0x670 [ 1322.324202][T24200] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 1322.329657][T24200] ieee80211_xmit+0x30f/0x3e0 [ 1322.334318][T24200] ieee80211_monitor_start_xmit+0xf09/0x12b0 [ 1322.340322][T24200] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 1322.346717][T24200] dev_hard_start_xmit+0x121/0x760 [ 1322.351827][T24200] __dev_queue_xmit+0x1b9d/0x4940 [ 1322.356879][T24200] ? find_held_lock+0x2b/0x80 [ 1322.361556][T24200] ? __might_fault+0xc5/0x140 [ 1322.366239][T24200] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1322.371635][T24200] ? _copy_from_iter+0x270/0x1690 [ 1322.376685][T24200] ? __pfx__copy_from_iter+0x10/0x10 [ 1322.381983][T24200] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1322.387446][T24200] ? packet_parse_headers+0x205/0x800 [ 1322.392845][T24200] ? __pfx_packet_parse_headers+0x10/0x10 [ 1322.398553][T24200] packet_xmit+0x243/0x310 [ 1322.402983][T24200] packet_sendmsg+0x319a/0x5100 [ 1322.407821][T24200] ? avc_has_perm_noaudit+0x350/0x3b0 [ 1322.413189][T24200] ? sock_has_perm+0x25a/0x2f0 [ 1322.417948][T24200] ? __pfx_sock_has_perm+0x10/0x10 [ 1322.423049][T24200] ? __pfx_packet_sendmsg+0x10/0x10 [ 1322.428254][T24200] ? __might_fault+0xc5/0x140 [ 1322.432915][T24200] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1322.438463][T24200] __sys_sendto+0x48b/0x4e0 [ 1322.442947][T24200] ? __pfx_packet_sendmsg+0x10/0x10 [ 1322.448160][T24200] ? __pfx___sys_sendto+0x10/0x10 [ 1322.453187][T24200] ? fd_install+0x223/0x580 [ 1322.457729][T24200] ? xfd_validate_state+0x129/0x190 [ 1322.462938][T24200] __x64_sys_sendto+0xe0/0x1c0 [ 1322.467714][T24200] ? do_syscall_64+0x90/0x870 [ 1322.472388][T24200] ? lockdep_hardirqs_on+0x78/0x100 [ 1322.477584][T24200] do_syscall_64+0x115/0x870 [ 1322.482208][T24200] ? clear_bhb_loop+0x40/0x90 [ 1322.486881][T24200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.492774][T24200] RIP: 0033:0x7f1e6d59de59 [ 1322.497168][T24200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.516798][T24200] RSP: 002b:00007f1e6e393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1322.525202][T24200] RAX: ffffffffffffffda RBX: 00007f1e6d825fa0 RCX: 00007f1e6d59de59 [ 1322.533173][T24200] RDX: 0000000000000039 RSI: 0000200000000080 RDI: 0000000000000007 [ 1322.541142][T24200] RBP: 00007f1e6d633e6f R08: 0000200000000380 R09: 0000000000000014 [ 1322.549100][T24200] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 1322.557066][T24200] R13: 00007f1e6d826038 R14: 00007f1e6d825fa0 R15: 00007ffc66f50878 [ 1322.565050][T24200] [ 1322.568091][T24200] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1322.575357][T24200] CPU: 1 UID: 0 PID: 24200 Comm: syz.8.4563 Tainted: G L syzkaller #0 PREEMPT(full) [ 1322.586279][T24200] Tainted: [L]=SOFTLOCKUP [ 1322.590579][T24200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1322.600614][T24200] Call Trace: [ 1322.603881][T24200] [ 1322.606801][T24200] dump_stack_lvl+0x100/0x190 [ 1322.611460][T24200] vpanic+0x552/0x970 [ 1322.615432][T24200] ? __pfx_vpanic+0x10/0x10 [ 1322.619928][T24200] panic+0xd1/0xe0 [ 1322.623634][T24200] ? __pfx_panic+0x10/0x10 [ 1322.628041][T24200] check_panic_on_warn.cold+0x19/0x34 [ 1322.633400][T24200] ? mac80211_hwsim_tx+0x16fe/0x26d0 [ 1322.638687][T24200] __warn.cold+0x191/0x318 [ 1322.643082][T24200] __report_bug+0x30f/0x440 [ 1322.647566][T24200] ? mac80211_hwsim_tx+0x16fe/0x26d0 [ 1322.652832][T24200] ? __pfx___report_bug+0x10/0x10 [ 1322.657834][T24200] ? __skb_flow_dissect+0x3d6/0x6c30 [ 1322.663104][T24200] ? __bfs+0x150/0x2a0 [ 1322.667177][T24200] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1322.673070][T24200] ? check_irq_usage+0x19d/0x810 [ 1322.677999][T24200] ? is_bpf_text_address+0x8a/0x1a0 [ 1322.683174][T24200] ? ieee80211_encrypt_tx_skb+0x2df/0x430 [ 1322.688873][T24200] ? mac80211_hwsim_tx+0x16fe/0x26d0 [ 1322.694134][T24200] report_bug+0xb2/0x220 [ 1322.698373][T24200] ? mac80211_hwsim_tx+0x16fe/0x26d0 [ 1322.703630][T24200] handle_bug+0x16a/0x2a0 [ 1322.707945][T24200] exc_invalid_op+0x17/0x50 [ 1322.712428][T24200] asm_exc_invalid_op+0x1a/0x20 [ 1322.717252][T24200] RIP: 0010:mac80211_hwsim_tx+0x16fe/0x26d0 [ 1322.723128][T24200] Code: 03 80 3c 02 00 0f 85 cc 0d 00 00 49 8b 86 08 38 00 00 c7 44 24 18 00 00 00 00 48 89 44 24 38 e9 d6 eb ff ff e8 23 b7 b4 fa 90 <0f> 0b 90 e9 dd f0 ff ff e8 15 b7 b4 fa 90 0f 0b 90 48 8b 3c 24 4c [ 1322.742719][T24200] RSP: 0018:ffffc900036ef2d0 EFLAGS: 00010287 [ 1322.748759][T24200] RAX: 0000000000000418 RBX: ffff8880586e52b0 RCX: ffffc90003ea1000 [ 1322.756712][T24200] RDX: 0000000000080000 RSI: ffffffff8755257d RDI: ffff888054900000 [ 1322.764657][T24200] RBP: 0000000000000014 R08: 0000000000000004 R09: 0000000000000014 [ 1322.772611][T24200] R10: 0000000000000028 R11: 0000000000000000 R12: 0000000000000000 [ 1322.780564][T24200] R13: dffffc0000000000 R14: 0000000000000028 R15: 0000000000000000 [ 1322.788524][T24200] ? mac80211_hwsim_tx+0x16fd/0x26d0 [ 1322.793796][T24200] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 1322.799226][T24200] ? do_raw_spin_lock+0x128/0x260 [ 1322.804230][T24200] ? mark_held_locks+0x40/0x70 [ 1322.808975][T24200] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1322.814760][T24200] ieee80211_tx_frags+0x5c9/0xa70 [ 1322.819765][T24200] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 1322.825294][T24200] __ieee80211_tx+0x145/0x5b0 [ 1322.829951][T24200] ieee80211_tx+0x336/0x460 [ 1322.834432][T24200] ? __pfx_ieee80211_tx+0x10/0x10 [ 1322.839432][T24200] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 1322.845740][T24200] ? ieee80211_skb_resize+0x119/0x670 [ 1322.851089][T24200] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 1322.856522][T24200] ieee80211_xmit+0x30f/0x3e0 [ 1322.861172][T24200] ieee80211_monitor_start_xmit+0xf09/0x12b0 [ 1322.867125][T24200] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 1322.873516][T24200] dev_hard_start_xmit+0x121/0x760 [ 1322.878618][T24200] __dev_queue_xmit+0x1b9d/0x4940 [ 1322.883633][T24200] ? find_held_lock+0x2b/0x80 [ 1322.888298][T24200] ? __might_fault+0xc5/0x140 [ 1322.892970][T24200] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1322.898328][T24200] ? _copy_from_iter+0x270/0x1690 [ 1322.903329][T24200] ? __pfx__copy_from_iter+0x10/0x10 [ 1322.908587][T24200] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1322.914026][T24200] ? packet_parse_headers+0x205/0x800 [ 1322.919376][T24200] ? __pfx_packet_parse_headers+0x10/0x10 [ 1322.925082][T24200] packet_xmit+0x243/0x310 [ 1322.929487][T24200] packet_sendmsg+0x319a/0x5100 [ 1322.934314][T24200] ? avc_has_perm_noaudit+0x350/0x3b0 [ 1322.939669][T24200] ? sock_has_perm+0x25a/0x2f0 [ 1322.944421][T24200] ? __pfx_sock_has_perm+0x10/0x10 [ 1322.949534][T24200] ? __pfx_packet_sendmsg+0x10/0x10 [ 1322.954720][T24200] ? __might_fault+0xc5/0x140 [ 1322.959387][T24200] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1322.964910][T24200] __sys_sendto+0x48b/0x4e0 [ 1322.969390][T24200] ? __pfx_packet_sendmsg+0x10/0x10 [ 1322.974566][T24200] ? __pfx___sys_sendto+0x10/0x10 [ 1322.979571][T24200] ? fd_install+0x223/0x580 [ 1322.984057][T24200] ? xfd_validate_state+0x129/0x190 [ 1322.989233][T24200] __x64_sys_sendto+0xe0/0x1c0 [ 1322.993986][T24200] ? do_syscall_64+0x90/0x870 [ 1322.998653][T24200] ? lockdep_hardirqs_on+0x78/0x100 [ 1323.003853][T24200] do_syscall_64+0x115/0x870 [ 1323.008430][T24200] ? clear_bhb_loop+0x40/0x90 [ 1323.013080][T24200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.018945][T24200] RIP: 0033:0x7f1e6d59de59 [ 1323.023342][T24200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1323.042948][T24200] RSP: 002b:00007f1e6e393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1323.051351][T24200] RAX: ffffffffffffffda RBX: 00007f1e6d825fa0 RCX: 00007f1e6d59de59 [ 1323.059293][T24200] RDX: 0000000000000039 RSI: 0000200000000080 RDI: 0000000000000007 [ 1323.067239][T24200] RBP: 00007f1e6d633e6f R08: 0000200000000380 R09: 0000000000000014 [ 1323.075181][T24200] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 1323.083124][T24200] R13: 00007f1e6d826038 R14: 00007f1e6d825fa0 R15: 00007ffc66f50878 [ 1323.091077][T24200] [ 1323.094269][T24200] Kernel Offset: disabled [ 1323.098581][T24200] Rebooting in 86400 seconds..