last executing test programs: 21m32.184629964s ago: executing program 32 (id=274): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_clone(0xe8344400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000180)={@val={0x70, 0x88ca}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x55, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x2000, 0x86dd, 0x41, 0x0, @gue={{0x2, 0x0, 0x3, 0xa8, 0x100, @val=0x11040000}, "c1a3452d4902514ccef03e9a3fd17302ab00f80a8dbefb631982e8c9a11ef3d0fd503cf85d754468e11d58d984285bea92"}}}}}}}, 0x67) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) fsopen(&(0x7f0000000200)='openpromfs\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000f8ffffff000000000000000095ae6de11630e40da0e5c4aed68500000036000000950000000000000092bc973e26187a228a4e5a530781836182cc409a88b2776d00967603d49684931612aa506777dc0734b82c68ec434ba86210aff126ec33db94f02507f55ce0f204d8b5f92a9c54"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1000000000000012) ioctl$UI_DEV_CREATE(r0, 0x5501) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80000, &(0x7f0000000140)={[{@uuid_off}, {@redirect_dir_on}, {@nfs_export_off}, {@uuid_off}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@dont_measure}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) r7 = dup(r6) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000ac0)={&(0x7f0000000240)="73c9a904900344efb99a39768f1da51f42e384a38bf270c4b265551f612ce664eed83fab1cbba88c6fedbf88c2462e02880907df8a4cbcf7e15ee03ea82c86d6364fe070afe68e056db4c214eb37fcac35fbc1760e681c7c130478dc28fd79b656aff46ba03ddbba6de314b450b855dbcfcbc544a3d3e167bdc32b962a92860056fe", &(0x7f0000000300)=""/60, &(0x7f0000000340)="9a161d042a2834e2ef99014f40fec68e762370f5f55bc1f76a1bf9f4def0408ce8d879f5bc780d883bd62d1cb7bdfa8280dfa74953fa76b3f9b16a5817d547f4b7", &(0x7f0000000940)="abf10560f6932126fc8245f8528e5a70f4fee13a50072dd8aa2cbde65fad2ef1c7aa284d5bb44bc12eab3c207df15fe52274e147f48ec22f7c0a753a62c59696529cad7d40534f5310364919dd7e974164d0cfab15d605816636c2e96605ee2ca860c78b87928ad1871d1c31c9530c990db40d05b83cad4595c7936603a7200ab9fe94675ec2245d7d85e82931a649dd95476967901f0f4be059e54c7416ad60acfdb53dbd53d0486b3161714156515a181406159bd71c960bfe50c59d767b23559b2ef49ecf", 0x5, r8, 0x4}, 0x38) write$uinput_user_dev(r7, &(0x7f00000004c0)={'syz1\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x800002, 0x9, 0x0, 0x3, 0x1000, 0x3, 0x0, 0x2, 0xd6, 0x2, 0x6, 0x0, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0xa3a, 0xfffffffd, 0x22, 0xb, 0x0, 0xffff8001, 0x2, 0x4, 0x80000000, 0x80000000, 0xb, 0x7, 0x0, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x8000002, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0xe, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x4, 0x5, 0x8, 0x6, 0x5, 0x6, 0x5, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x0, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x1, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x9, 0x10, 0x80, 0x8001, 0x4, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x0, 0x4, 0x7, 0x3, 0x1, 0x2, 0x0, 0x9, 0x11, 0xa, 0x3fff80, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x0, 0x2, 0xf, 0x7, 0x47, 0x7, 0x0, 0x2000011, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x7ff, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x2, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0xffffffa1, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0xcaaf, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) 14m46.533786325s ago: executing program 33 (id=2549): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000000c0007800800020021000000"], 0x24}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f0000000100)="fbffffff", 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f0000000140), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4d) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r7, 0x0, 0x0}, 0x10) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e130100ca000100aaaaaaaaaa2218"], 0x16) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0xee01, &(0x7f0000000080)='./file0\x00') r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 11m5.788039445s ago: executing program 34 (id=3516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000940)=@ccm_128={{0x303}, "1c5fb99138a27435", "8b3b9abb67c065af5a475e66ff39b869", "40682199"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) 9m31.19241348s ago: executing program 35 (id=3888): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x7fff}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x18, r1, 0x1, 0x6, 0x6, @multicast}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0xa27}}], 0x18}}], 0x2, 0x40500f0) 9m25.29610916s ago: executing program 36 (id=3914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) 8m47.255048221s ago: executing program 9 (id=4090): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 8m46.738258758s ago: executing program 9 (id=4091): openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42382, 0x0) socket$kcm(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4e071, 0xffffffffffffffff, 0x80000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0), &(0x7f0000000100)='%\xff\xff2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\x10\xf7\xb2\xed\x8a\xdc\xa6\x8fO\xc8\xbay,\xae\xd3\xc5*\x15\xdf_\xb2_`\x92', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) dup(0xffffffffffffffff) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x6, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)=0x0) socket$inet6(0xa, 0x5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x801, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9ca, 0x800, 0x2, 0x23e}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94) 8m46.51457169s ago: executing program 9 (id=4095): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) socket(0x10, 0x3, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400401702020000052406000005240000000d240f010000000006000000200624070407000905810340000000000905820210000000000905030240"], 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x5, @loopback, 0x5}, {0xa, 0x4e24, 0x4, @mcast2, 0xec7a}, r9, 0x6}}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 8m44.895858081s ago: executing program 9 (id=4105): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x0, 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000180)) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r3, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80140, 0x10) pread64(r4, &(0x7f00000000c0)=""/23, 0x17, 0x1) write(r0, &(0x7f00000000c0)="0012a6d4de8ba268741e0200d3e2a864dac0c201374387ea2615c1c40000000006005a0100000002320900adfad6ef00"/60, 0x3c) 8m43.19391526s ago: executing program 9 (id=4118): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)="68000000020905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c6963793000080002eb000069cc629ae30000000000", 0x68}], 0x1}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000240)={0x22800000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8m42.282713867s ago: executing program 9 (id=4124): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f00000000c0)=""/222, 0xde) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000811) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x561401, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x304) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000080)=0xfffffffc, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x0, 0x0, 0x1, 0x0, 0x3, 0x50}]}, &(0x7f00000001c0)='syzkaller\x00', 0x9}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bc22, 0x25dfdbfd, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="14040000100001002cbd7000fedbdf25070000000200000008000000", @ANYRES32=r0, @ANYBLOB="f4031a80f003"], 0x414}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) rt_sigsuspend(0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/veth0/queues/tx-1/xps_cpus\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f00000003c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r6, 0x0, 0x3c, 0x7c, &(0x7f0000000300)="be7d6389f563e8a69b35710913f6a3bd5260202cbe162fba95488b34ceb68213dc6178b619f175fa7db9825544ab3ef056cbf65f2b225fb65965338d", &(0x7f0000000340)=""/124, 0x2, 0x0, 0x5b, 0x1000, &(0x7f0000000400)="674487764a80c62e9d7506484877eedacb21bd555c9eb9a76050d208ebabfadd747c3591ee36c5a32befba68ec59bfbd8cff984e3462bab122166b404c567e40f1e5cfd91d13bd3d7ba5f7048922865f78ae7c41c22bf5cc12972b", &(0x7f0000000b40)="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", 0x5, 0x0, 0x3}, 0x50) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 8m27.181991392s ago: executing program 37 (id=4124): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f00000000c0)=""/222, 0xde) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="04002abd7000fddbdf254a00000008000100150000000c009900ff03000009000000a00175800400060004000200800112800c002c8008000000079000000400ec000500f6007f00000008009e00000000005c012a003753180a4e57ee6530ffe06acbe8b781cb22c4e210a6e608dde45c4b7908c39aff6235ee99ddbf94da5b65bdfc3cb1d32f789f402a83f164305000cecdc012ea42b62e0dd9a9fedfd1e005b2c8e5efd245541dec0117ca6a0525abc515103bdede66060fcd45cd89827413ecd7041b9c0635702a2de57ddf16690b696b700037ec5ceb93d06f299c00970125a28c12153c2f551ee7770cc5a31c2460c567944c7f3e7dbaec4ead3337f8a0b8e04147f40604222ff7ccee754a13b3eb63375271dc5f0a4d1d7fcc3e90384289966a4a339478b8afb003159515eefa3a87b016507b3bd7a38867228df9a98e9a02268a987669c62650d6056f4f6785c5c37f44f17d656ab88453fbf381fcce592037599bd309110c03204c816019dd924e91f5ffc526c8d3be967e79745730bd4cc27852e296082f1d4b0214fc65a86615fe5bf9714d6c7721df3957c5a7d9f20201990204df4bf34303014004000200040006000400010004000200040003007d12a0fa32fb6595d9cc6db2d10ea63b835c7790da528e941dc1b1b15ffa475e374976cae7ebaacb1b5e8e1f5b5f0ea1a80df15ba5300892533ab956905088f87c850f39167c958d9e9bdf52dd96fa134469a8c576a6b2c2f4e12ae2d305c68734ed0fda4cd10bec8592abde30b6fed1cb5efaab7a46b13b90f5d725a7c5e2a55b55ab155fc7"], 0x1c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000811) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x561401, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x304) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000080)=0xfffffffc, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x0, 0x0, 0x1, 0x0, 0x3, 0x50}]}, &(0x7f00000001c0)='syzkaller\x00', 0x9}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bc22, 0x25dfdbfd, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="14040000100001002cbd7000fedbdf25070000000200000008000000", @ANYRES32=r0, @ANYBLOB="f4031a80f003"], 0x414}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) rt_sigsuspend(0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/veth0/queues/tx-1/xps_cpus\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f00000003c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r6, 0x0, 0x3c, 0x7c, &(0x7f0000000300)="be7d6389f563e8a69b35710913f6a3bd5260202cbe162fba95488b34ceb68213dc6178b619f175fa7db9825544ab3ef056cbf65f2b225fb65965338d", &(0x7f0000000340)=""/124, 0x2, 0x0, 0x5b, 0x1000, &(0x7f0000000400)="674487764a80c62e9d7506484877eedacb21bd555c9eb9a76050d208ebabfadd747c3591ee36c5a32befba68ec59bfbd8cff984e3462bab122166b404c567e40f1e5cfd91d13bd3d7ba5f7048922865f78ae7c41c22bf5cc12972b", &(0x7f0000000b40)="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", 0x5, 0x0, 0x3}, 0x50) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 7m18.541506477s ago: executing program 4 (id=4546): mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1ffb, 0x0, 0x0, 0x6}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000100)={0xf, 0x2}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x1f, 0x14, 0x16, 0x3}, 0x8, 0x800000, 0x4, 0x0, 0x3ff, 0x0, 0x0}) 7m18.153897548s ago: executing program 4 (id=4549): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x270bd26, 0xfffffffe, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x2000000, 0x0, 0x2000c044}, 0x20000114) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x400, 0x70bd2c, 0x25dfdbfd, {0xa, 0x80, 0x40, 0xe, 0xf5, 0x0, 0x0, 0x3, 0x6}, [@FRA_SRC={0x14, 0x2, @mcast1}]}, 0x30}}, 0x80) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r5, &(0x7f0000000240)=""/164, 0x131, 0x131) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000b00000005"], 0x50) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) splice(r7, 0x0, r8, 0x0, 0x8001, 0xd) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f00000005c0)={0x17, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f0000000440)=""/135, 0x87}, {&(0x7f0000000500)=""/42, 0x2a}], &(0x7f0000000580)=[0x6, 0x9, 0x2, 0x9, 0x200, 0x1], 0x4}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000700)="5d758bf3a8b56eb1bffa2fb9726be5a2bb058d69a6398fe12879467733c63dfd2966e61b2766e6c164b7870390950715059197d62ea7dcfb1aa9e15da0d0313802d90aaf5f81894a8cb5b01dffb9e6b7fea2271bb7677c2fc3040dfb59889d19e2e8c23554c3d5e60454f1f694c9372e2cd18b6ea33f5fb843208b82625cb79b2930dba12b489de529852f242ddf184fc19aac94334ef0c57829602a733f2b5aa7a287cefee4d3d0711a1a5d4081ebcdeef60e14bcd098044364cd9ae19f7670b91eabc1c7c6ae2daf2577e079c873eddd6e207cc5160a22409f8dace8292223aceed96f02f068be670b", 0xe1ce, r6, 0x0, 0xa0028000}, 0x38) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000080)) 7m17.213211127s ago: executing program 4 (id=4553): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7m17.045590331s ago: executing program 4 (id=4556): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {0x0, 0x2}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0xfc01000000000000) 7m16.864735365s ago: executing program 4 (id=4560): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='100000', 0x6) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) memfd_create(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000280)=""/7, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket(0xb, 0x4, 0x3) ptrace$poke(0x4, r1, &(0x7f00000011c0), 0xfffffffffffffffe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x80001) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f01"], 0x4) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000000000000400001f4b22", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) 7m10.887740407s ago: executing program 4 (id=4581): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101003, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101004, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, 0x0) r5 = geteuid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r6 = msgget$private(0x0, 0x7fc) msgrcv(r6, 0xffffffffffffffff, 0x0, 0x0, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000400), 0x1000) fstat(0xffffffffffffffff, &(0x7f0000000180)) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x4}, [{0x2, 0x7, 0xee00}, {0x2, 0x1, r3}, {0x2, 0x4}, {0x2, 0x4, r5}], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x6}}, 0x44, 0x3) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0xe8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 6m55.653999444s ago: executing program 38 (id=4581): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101003, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101004, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, 0x0) r5 = geteuid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r6 = msgget$private(0x0, 0x7fc) msgrcv(r6, 0xffffffffffffffff, 0x0, 0x0, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000400), 0x1000) fstat(0xffffffffffffffff, &(0x7f0000000180)) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x4}, [{0x2, 0x7, 0xee00}, {0x2, 0x1, r3}, {0x2, 0x4}, {0x2, 0x4, r5}], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x6}}, 0x44, 0x3) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0xe8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 5m27.839840661s ago: executing program 3 (id=5012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xc) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) readlinkat(r6, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000440)=""/171, 0xab) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) 5m26.602435178s ago: executing program 3 (id=5018): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x2, 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x80000001}) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(0xffffffffffffffff) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f046}) sendmsg$nl_route(r1, 0x0, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000080000000c00020001000000150000000c000c8006000100d43f00000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x30, r3, 0x2d3f7732086afff, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x50}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x880) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, 0x0) 5m26.357965329s ago: executing program 3 (id=5020): r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000600)='./file0\x00', 0x102) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdir(0x0, 0x40) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=0xee00, @ANYBLOB="02000700", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="45951b1c26951ffa1a0d88903cdc34b3b8a5492a7d382bd3309d477a25fd925c3db7012eaee96cee6e8763d24ede3e1a93dc1e7dabccdc91fe8613aa75334edf34e36df4a20686e928a1c104df98fa033f450a31825c9a7ff7a37041b4b69200bd90a9405c5e31b7cb5c9543ed29348fbfe800e5ffffffffff7c4f0000000000000008c47b8b0480b997d98e3ec2bbff72acd405f867fddfb717a4b4de6fe98345d17d0fb38bae7664b2c4d21742353786eb0a48cd23fb0ca30d00ead10ed360fc76f8c2678ee98f2f05dd", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="040000000000000010000100000000002000000000000000"], 0x64, 0x3) getxattr(&(0x7f00000006c0)='./file2\x00', &(0x7f00000005c0)=@random={'btrfs.', '(\x00'}, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000400)='./bus/file0\x00', 0x848400, 0x43) chdir(&(0x7f0000000580)='./file1\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r1, &(0x7f0000000340)='./file0\x00', 0xf3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x121) syz_usb_control_io(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x8, 0x4e, {0x4e, 0x3, "5c1d76469356819af2a6c3ebfa4309f5463c6ec8b9089efe4a7cffa21e0bb2854d03a18528f9c0fb4a6da57a8a695fb3529e9f3f97cf0b0cc9db4debfd9aaa2979b66733e2a4a7cce6d77d2f"}}, &(0x7f0000000640)=ANY=[@ANYBLOB="000304006d0e0000013450e63bb3e907e68b74d4185a13fb2caf49324f9f3642e5529cee900b73ad3a8177a70e549881d434f3c28f501f36694ccc929213717d59dc480df402ea"]}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0x14, 0xd1, "cffcb83d970a245cfae8a063a846fd43f0fec4647a5598686dece11cdfe5adf23d623e4dc2ce31eecb8bffb1f0e887b8d4bf889116e469f7356c35730bfd57a5defac7a75f5fa29a3e40aeac902dd4deae5897bf81b291ba00fce834bffac6a85132fe8c7688b3716b2b40d4602c13e1880887de17cc20707807cfb466d831c56e120a58717c6fcda63c71fbff68016e23e821c93727ddc6e1c98d2629e2b29b23ab8f7df170cdab55d1e492883cf1b9b119fae72efa1df90a06b613c2cabe7ec6382b3a57a6a5e40dc948a6910c31ecef"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x21, 0xf8}, &(0x7f0000000380)={0x20, 0x81, 0x3, 'sDd'}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "fd38"}, &(0x7f0000000780)=ANY=[], &(0x7f0000000540)=ANY=[@ANYBLOB="208424a2c6c24345000100000000303b4475f97008c2133798"], &(0x7f0000000480)={0x20, 0x85, 0x3, "c7f456"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="408f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 5m25.427205155s ago: executing program 3 (id=5024): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @multicast1}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000040)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "955f598869b806"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001040)={{r0, 0x2, 0x8000000, 0x2741, 0x1, 0x2, 0x565c, 0x5, 0xe, 0x81, 0x3, 0x7, 0xffffffffffffff0b, 0x4, 0x3}}) io_uring_setup(0x1b54, &(0x7f0000000100)={0x0, 0x1d49, 0x400, 0x4, 0x3d8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="7c0000001800051105000000000000000a430000fe0400010000000014000b0020010db800d000000000000000e0ff001c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef050ec700010000000500070002000000", 0x7c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000002070605000000000000000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x10, 0x1) userfaultfd(0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f00000003c0), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 5m24.115035332s ago: executing program 3 (id=5028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xc) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) readlinkat(r6, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000440)=""/171, 0xab) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) 5m23.111041053s ago: executing program 3 (id=5034): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000004000000020000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002696f9ef42c889a83c2976", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902590001000000000904000000ef040100052406"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000009800000080060000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x3, 0x6, 0x5090, 0xffffffffffffffff, 0x849, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000400)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000003c0)=r5, 0xfffffffffffffd97) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001"], 0x2c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r8 = dup(r2) write$FUSE_INIT(r8, &(0x7f0000004ec0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x80000000, 0xc000005, 0x101, 0x9, 0x4b6, 0x2, 0x0, 0x0, 0x8, 0x5}}, 0x50) getsockopt$inet_tcp_int(r8, 0x6, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400000000fcdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="1018000007500500200012800b0001006272696467650000100002bab40021000400000000000000fff31984aa03cda4f25bf0f5a633e909ef9d58f4b992ef305291c64dc1e673dfb078b563fe7d104bb9288914ee15adacd2cb088b73b4f0ec2aac9736353f03673f24cbba75cf41d09f483b033fa0baf617c075624a5a829f7aa560318d207421ca8e"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x200000, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=prefer:00\f=']) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="2c76657273696f0be38e663a37621c2c00"]) write$P9_RVERSION(r12, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r11, @ANYRES64=r11], 0x15) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2, 0x9}}, './file0\x00'}) 5m7.913825634s ago: executing program 39 (id=5034): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0100000004000000020000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002696f9ef42c889a83c2976", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902590001000000000904000000ef040100052406"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000009800000080060000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x9, 0x3, 0x6, 0x5090, 0xffffffffffffffff, 0x849, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000400)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000003c0)=r5, 0xfffffffffffffd97) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe00000100000000050001"], 0x2c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r8 = dup(r2) write$FUSE_INIT(r8, &(0x7f0000004ec0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x80000000, 0xc000005, 0x101, 0x9, 0x4b6, 0x2, 0x0, 0x0, 0x8, 0x5}}, 0x50) getsockopt$inet_tcp_int(r8, 0x6, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400000000fcdbdf2500007400", @ANYRES32=0x0, @ANYBLOB="1018000007500500200012800b0001006272696467650000100002bab40021000400000000000000fff31984aa03cda4f25bf0f5a633e909ef9d58f4b992ef305291c64dc1e673dfb078b563fe7d104bb9288914ee15adacd2cb088b73b4f0ec2aac9736353f03673f24cbba75cf41d09f483b033fa0baf617c075624a5a829f7aa560318d207421ca8e"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x200000, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=prefer:00\f=']) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="2c76657273696f0be38e663a37621c2c00"]) write$P9_RVERSION(r12, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r11, @ANYRES64=r11], 0x15) ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2, 0x9}}, './file0\x00'}) 3m46.467899947s ago: executing program 6 (id=5384): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @multicast1}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000040)={0x8, [], 0x4, "955f598869b806"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) socket$netlink(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="7c0000001800051105000000000000000a430000fe0400010000000014000b0020010db800d000000000000000e0ff001c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef050ec700010000000500070002000000", 0x7c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000002070605000000000000000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x10, 0x1) userfaultfd(0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f00000003c0), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 3m45.030894315s ago: executing program 6 (id=5390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xc) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) readlinkat(r5, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000440)=""/171, 0xab) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, 0x0) 3m43.721793018s ago: executing program 6 (id=5397): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x63, &(0x7f0000001800), &(0x7f0000000540)=0x8b) 3m43.485848715s ago: executing program 6 (id=5399): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x3a, 0x0, 0x0) 3m43.054737081s ago: executing program 6 (id=5400): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='100000', 0x6) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) memfd_create(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000280)=""/7, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket(0xb, 0x4, 0x3) ptrace$poke(0x4, r1, &(0x7f00000011c0), 0xfffffffffffffffe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x80001) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f01"], 0x4) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000000000000400001f4b22", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 3m39.205536684s ago: executing program 6 (id=5414): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @dev}, &(0x7f0000000200)=0xc) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x37}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xae}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40810}, 0x4008004) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000140)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x6, @local}, 0x3a30e3a1b28be0b9, {0x2, 0x4e21, @multicast1}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 3m23.803636757s ago: executing program 40 (id=5414): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @empty, @dev}, &(0x7f0000000200)=0xc) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x37}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xae}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40810}, 0x4008004) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000140)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x6, @local}, 0x3a30e3a1b28be0b9, {0x2, 0x4e21, @multicast1}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2m11.972862673s ago: executing program 0 (id=5751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r4, 0x1f, &(0x7f0000000280)={0x28, 0x2, 0x0, r4, &(0x7f00000003c0)="47971d02d3cc48153040886bdd065925376f684b95802bd1f10ede0f", 0x1, 0x8, 0x0, 0x0, {0x0, 0x0, r5, 0x3}}, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000100026bd70dd2d5e7fccc4fbc770c11029000000000000000000", @ANYRES32, @ANYBLOB="63000000000000002000128008000100736974001400028006000d000500000008000100", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x82b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) write$tcp_mem(r4, &(0x7f00000056c0)={0x6b8b, 0x20, 0x7, 0x20, 0xfffffffffffffffa}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) 2m10.906687719s ago: executing program 0 (id=5757): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x50}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x58, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x4c, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c000100626974776973650024"], 0x108}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) syz_open_dev$MSR(&(0x7f0000000600), 0x5, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) socket(0x1d, 0x5, 0xf) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'xfrm0\x00', @ifru_settings={0x9, 0x1ced, @fr=&(0x7f0000000000)={0x10, 0x8001, 0x8, 0x401, 0xffff, 0x3, 0x5}}}}) 2m10.789063553s ago: executing program 0 (id=5759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) ioctl$TUNGETVNETLE(r4, 0x4008744b, &(0x7f0000000180)) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a60000000030a010800000000000000000a0000070900010073797a31000000000c00024000000000000000020c0004800800014000000003"], 0x88}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 2m9.81677934s ago: executing program 0 (id=5767): connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) listen(0xffffffffffffffff, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0xe127, 0x2, 0xffffffff, 0x1002}, 0x10) write(r0, &(0x7f00000002c0)="04", 0x1) 2m9.768818239s ago: executing program 0 (id=5768): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='100000', 0x6) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) memfd_create(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000280)=""/7, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socket(0xb, 0x4, 0x3) ptrace$poke(0x4, r1, &(0x7f00000011c0), 0xfffffffffffffffe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x80001) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f01"], 0x4) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000000000000400001f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2m8.163127711s ago: executing program 0 (id=5784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8090) 1m52.587128699s ago: executing program 41 (id=5784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7f"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8090) 7.966776861s ago: executing program 1 (id=6262): setns(0xc9, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)="7f", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) listen(r0, 0xda90) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x400, 0x5) write(r1, &(0x7f0000000180)='enable_event:sched:sched_process_fork', 0x25) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x400, 0x2e47, 0xffff, 0x8, 0xfff, 0x1}) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'veth1_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}) (async) r4 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) socket$tipc(0x1e, 0x5, 0x0) (async) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x22301, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a13872b5a1154eb14797a310000100008000a40fffffffc0900010073797a3100000000080005400000000b2c0012800c000000090001006c6173740000000004000280140001800c000100636f756e74657200040002800800034000000130140000001100010000000000000000000100000a"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000000c0)=0x1000) 7.009312367s ago: executing program 7 (id=6268): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0a0300c900007040000104e3175222dc9a2d653e23b7d7b05e3e2941f7fcc400d81d3104016430f42197925173fc7b8c44751d10cdd2e00571aa74d17f0d513bdd706abca338fe41b7d140d5d273482eef86bcd2884f840eca24455dfeade338209c"], 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000440)='-B\xd5O4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\xb90a\xa9\xb2\x00\x00\x00\x00=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7V\x00@Ip]D\xd6\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xf6L\\\xa3O\x92\x90i\xed\xd36\xf3\xa5\xaf\x87\x90@k\xe2\x14/rn$x\x13/\xc5\\W\x04\br\x17\xd18\xd9L:\xc2\x11\xfb2\a\x99i\x90/\x19@\x1cq\xeb\xc8\xb9KvJ\x8c\xf2c\xfe\x8d]k\x01\xb7\x84H?\xc0z:\x913\xfa8\xac\xd3q\xe4vPGUQ\x93\xca1\xff\xf8\x13\x0fT\xa9\xc3\xcfozi_\x9a1\x97\xd4\xb1\x96\xc0\r\xdd\xe8\xe7P\x16\xbcT\xa5\t\xe2X\x1e\x19\xff\xfd\xa0\r\x94c\r\xb8\f\xed.M0[y\xfbz\xeb{\\j~\xf6\xca\xd9\xa5\xf13\t-\x00j\xf5\x88\x94p\x04\xe9\x93\xadcn~\xb9:\x0e+P\x97\x7f\xa3\xcd\xe8\xb8\x9c+\x9c|\x90\xdcg_t\x92l\x88UU\xf0\xdc\xd9\x00\xb4\xa5\xe3*\xb7\xba\x81\xbazT\xb8\xb7\xf8\xbb\xcew\xb3\x0e\xc47BR\x88B\xe4\xffQt\x96\xbd_\xaashy\xd3\x1d\xcc\xf9G\xc1wpAL\v\xf3|\x93\x00%+\xe4\xef\x97\xc9\xde\x98(\x01\x85\xe5;\xd6a\xb5\x14\x1f\xc9\x0e\xf0\x8a\xe4\x9a\xc2\x86\xb85\x8e\x85)\xaa\a1\x86\x82B|\xee\a\xca5\xb2\x06\xf4_\x86\x15z`\x8e\xd3\x81\aT\xd4}\xea\xc82\xbb\xfc\xc5\xad\x9dgf\xd6L\xcf\x17)\xc6v\x06\xe8O\xcdd\x91\x06|\xbe\xc1\xb8\n\x18+\x04\x81\xdc\xdf~Q\x85{\x10x\x18c#6\x96Bl\x00~\x7f\x16eQe{\xa2\xf9q\xb6\xc1t*S\\\xff:\x8b\xa3\x11\xb0\x86t\xac\xc4(8V&*B+[<\xde\xab\xc8X\xd6\x1d\x1b\xdf\xa8b\x82l\x94ecwrDb\x15\xc8r\xec\x91\x88\xc9\xf4\x81C\xee\x8c\x93\xbdr\x1d_\xd7\xc9\x90\xef\xf3n1\fy\xbe\x93\x060x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'vlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x1, 0x8, 0x9, 0x8, 0x9, 0x10, 0xb, 0xa, 0x4, [0x8, 0x1, 0x2, 0x1269, 0xc6, 0x400, 0x0, 0x3]}}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000bc0)={0x5c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9e56e74e1834057febcfd749bf39c680"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "92473238e7cbee42"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffe}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4babf7330cbc808d3228785da0a258af"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x800) r7 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$MEMREADOOB64(r7, 0x1269, &(0x7f00000000c0)={0x1}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x20, r4, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x4000834) 6.633886361s ago: executing program 1 (id=6269): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 6.360062248s ago: executing program 1 (id=6270): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0xe8202, 0x1c3) read$FUSE(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e20, @local}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000140), 0x4) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000180)=0x1e) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000400), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r6) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="35e42825170000000000000000ff"], 0x14}}, 0x4044800) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x8001) setns(0xc9, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) recvmmsg(r8, &(0x7f0000000340), 0x0, 0x45833af92e4b38ff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 6.204280386s ago: executing program 5 (id=6271): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r4, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0x8}, {0x0, 0x4}], 0x2, 0x0, 0x0) 5.950980869s ago: executing program 5 (id=6272): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 5.715400339s ago: executing program 8 (id=6273): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.695715186s ago: executing program 2 (id=6274): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="2401"], 0x124}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffff8, 0x4031, 0xffffffffffffffff, 0x68e83000) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffda7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9000}, 0x40c4051) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x420600, 0x8) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@mcast1, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x0, 0x1, 0x73b9, 0xc, {{0x23, 0x4, 0x0, 0x5, 0x8c, 0x66, 0x0, 0xf9, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x39}, {[@lsrr={0x83, 0x17, 0xd6, [@multicast1, @multicast2, @loopback, @local, @local]}, @noop, @end, @lsrr={0x83, 0x13, 0x69, [@dev={0xac, 0x14, 0x14, 0x17}, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0xa}]}, @rr={0x7, 0x23, 0x6c, [@private=0xa010101, @multicast2, @multicast1, @broadcast, @loopback, @multicast2, @multicast2, @multicast1]}, @ssrr={0x89, 0x7, 0xca, [@private=0xa010101]}, @ssrr={0x89, 0x13, 0x76, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010101]}, @noop, @cipso={0x86, 0xb, 0x2, [{0x5, 0x5, "ed68f3"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x20) fcntl$setstatus(r5, 0x4, 0x52600) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa4, r1, 0x1010, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1c014}, 0x4001) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x400000a, 0x13a}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e03003520"], 0x7) 5.622479678s ago: executing program 8 (id=6275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) ioctl$TUNGETVNETLE(r4, 0x4008744b, &(0x7f0000000180)) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, 0x0, 0x0) bind$tipc(r2, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r8 = dup(r7) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a60000000030a010800000000000000000a0000070900010073797a31000000000c00024000000000000000020c0004800800014000000003"], 0x88}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 5.617394214s ago: executing program 7 (id=6276): syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x104, 0x1}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r3) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4800) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r7, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x309c0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) prctl$PR_SET_DUMPABLE(0x4, 0x3) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800090400000000000000000a00000000000008020000"], 0x24}}, 0x44054) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) unshare(0x40000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) 5.560114368s ago: executing program 8 (id=6277): r0 = memfd_create(&(0x7f00000000c0)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x5) sendfile(r0, r0, &(0x7f0000001000), 0xffff) io_setup(0x3, &(0x7f0000000000)) eventfd(0x6) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(0x0, 0x80000) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42c00) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) write(r3, &(0x7f0000000040), 0xffffff4a) 5.162920585s ago: executing program 5 (id=6278): mmap(&(0x7f0000951000/0x2000)=nil, 0x2000, 0x2, 0x13, 0xffffffffffffffff, 0x2000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010080020102081305052f"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x100, 0xfff, 0x3fffc, 0x180, 0x1, 0x5, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x4000000b92, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x39979dd0be5a3d50}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x8, 0x0, 0x2e, 0x80, 0x3}, {0x5000, 0x4000, 0x0, 0x0, 0x6, 0x5, 0x5, 0x6, 0x5, 0x3, 0x2, 0x87}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x5, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x8000000, 0xeeee0000, 0xd, 0x6, 0x0, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0x1ff8, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x8, 0xf7, 0x83}, {0x9000, 0x3909e40c33606d9c, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x41, 0x27}, {0x3000, 0x3000, 0x4, 0xb9, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x3, 0x70}, {0x26000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x4, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x30}, {0x5000, 0x7}, 0x80000031, 0x0, 0xdddd0000, 0x2034, 0x0, 0x1500, 0x1, [0x6800000000000000, 0x204, 0xfffffffffffffffd, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.062250196s ago: executing program 2 (id=6279): r0 = socket$inet(0x2, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x24, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'bond0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}}) 4.999161306s ago: executing program 1 (id=6280): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xc0400, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x1a0}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r6, r7, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10, 0x1, 0x3c3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x56f, 0x200, 0x1}}], 0x1, 0x0, 0x0) 4.289464435s ago: executing program 1 (id=6281): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000006d80)={&(0x7f0000000240)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x3, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 4.198077958s ago: executing program 8 (id=6282): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r0}) bind$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000540)=""/165, 0xa5}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f0000000000)=0xd0, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) unshare(0x44040000) close(0xffffffffffffffff) ioctl$TCSETS2(r5, 0x402c542b, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e24, @local}}}, 0xa0) 4.097422553s ago: executing program 2 (id=6283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'vxcan0\x00', 0x0}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r4, 0x1f, &(0x7f0000000280)={0x28, 0x2, 0x0, r4, &(0x7f00000003c0)="47971d02d3cc48153040886bdd065925376f684b95802bd1f10ede0f", 0x1, 0x8, 0x0, 0x0, {0x0, 0x0, r5, 0x3}}, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000100026bd70dd2d5e7fccc4fbc770c11029000000000000000000", @ANYRES32=r3, @ANYBLOB="63000000000000002000128008000100736974001400028006000d000500000008000100", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$inet6(0xa, 0x80002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x82b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) write$tcp_mem(r4, &(0x7f00000056c0)={0x6b8b, 0x20, 0x7, 0x20, 0xfffffffffffffffa}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) 3.629824189s ago: executing program 2 (id=6284): timer_create(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r4], 0x2b) sendfile(r6, r4, 0x0, 0x4000000053d2) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 3.333998124s ago: executing program 7 (id=6285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.33347852s ago: executing program 1 (id=6286): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x12df00, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r3 = socket$inet6(0xa, 0x2, 0x2) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = io_uring_setup(0x2bd2, &(0x7f0000000140)={0x0, 0x661f, 0x0, 0x1, 0x2d1}) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9, 0xffffffffffff7fff, 0xa38, 0xdd43, 0x2, 0x800, 0x4a, 0x5}, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) 3.221461329s ago: executing program 7 (id=6287): r0 = memfd_create(&(0x7f00000000c0)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x5) sendfile(r0, r0, &(0x7f0000001000), 0xffff) io_setup(0x3, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() futex(&(0x7f0000000340), 0xd, 0x0, &(0x7f0000000380)={0x77359400}, 0x0, 0x1) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r5, 0x0, r7, 0x0, 0x38f9, 0x0) fcntl$setstatus(r6, 0x4, 0x42c00) fcntl$setstatus(r6, 0x4, 0x2400) write(r4, &(0x7f0000000040), 0xffffff4a) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r8, 0xc138fd03, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r9, &(0x7f0000000880)={0x0, 0x1, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0x129}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) 2.47570428s ago: executing program 5 (id=6288): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 2.17543304s ago: executing program 7 (id=6289): socket$inet(0x2, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)={{}, {0x1, 0x4}, [], {0x4, 0x3}, [], {0x10, 0x1}, {0x20, 0x6}}, 0x24, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.145076197s ago: executing program 8 (id=6290): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x88101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000004200)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (fail_nth: 4) 1.143108324s ago: executing program 2 (id=6291): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @private=0xa010100}, 0x10) listen(r0, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0082aca3867086817336aa35a30a1d7500001000010800"/35, @ANYRES32=0x0, @ANYBLOB="312000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1.017434673s ago: executing program 7 (id=6292): r0 = memfd_create(&(0x7f00000000c0)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x5) sendfile(r0, r0, &(0x7f0000001000), 0xffff) io_setup(0x3, &(0x7f0000000000)) eventfd(0x6) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x38f9, 0x0) fcntl$setstatus(r5, 0x4, 0x42c00) fcntl$setstatus(r5, 0x4, 0x2400) write(r3, 0x0, 0x0) 821.887589ms ago: executing program 8 (id=6293): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000040)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x1a0}}}, &(0x7f0000000140)=0x0) syz_ublk_setup_queues(r6, r7, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x10, 0x1, 0x3c3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x56f, 0x200, 0x1}}], 0x1, 0x0, 0x0) 340.754242ms ago: executing program 5 (id=6294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'vxcan0\x00', 0x0}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r4, 0x1f, &(0x7f0000000280)={0x28, 0x2, 0x0, r4, &(0x7f00000003c0)="47971d02d3cc48153040886bdd065925376f684b95802bd1f10ede0f", 0x1, 0x8, 0x0, 0x0, {0x0, 0x0, r5, 0x3}}, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000100026bd70dd2d5e7fccc4fbc770c11029000000000000000000", @ANYRES32=r3, @ANYBLOB="63000000000000002000128008000100736974001400028006000d000500000008000100", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$inet6(0xa, 0x80002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x82b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) write$tcp_mem(r4, &(0x7f00000056c0)={0x6b8b, 0x20, 0x7, 0x20, 0xfffffffffffffffa}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) 44.126797ms ago: executing program 2 (id=6295): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x40) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x5220, 0x0) (fail_nth: 2) 0s ago: executing program 5 (id=6296): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000006d80)={&(0x7f0000000240)={0x50, 0x0, 0x4, {0x7, 0x2d, 0xa75, 0x5d010640, 0xe0b, 0x7ff, 0x3, 0x7, 0x0, 0x0, 0x741d859d8bbba6ec, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): t=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1366.793486][T12419] hub 3-1:1.0: bad descriptor, ignoring hub [ 1366.793512][T12419] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1366.793915][T12419] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1367.410257][T12419] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1367.410263][T29174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1367.410343][T29174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1367.415814][ T5714] pl2303 2-1:1.0: pl2303 converter detected [ 1367.438646][T12419] usb 3-1: USB disconnect, device number 46 [ 1367.452455][ T5714] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 1367.525593][ T31] audit: type=1400 audit(1790259150.470:3755): avc: denied { write } for pid=29193 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1367.793793][T29174] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 1367.794090][T29174] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 1367.794351][T29174] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 1367.794623][T29174] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 1367.794973][T29174] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1368.014436][T29190] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5879'. [ 1368.016905][ T31] audit: type=1400 audit(1790259150.960:3756): avc: denied { read } for pid=29171 comm="syz.1.5875" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1368.051417][ T31] audit: type=1400 audit(1790259151.000:3757): avc: denied { open } for pid=29171 comm="syz.1.5875" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1368.076013][T29174] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1368.083959][T29174] pl2303 ttyUSB0: error sending break = -32 [ 1368.109713][ T31] audit: type=1400 audit(1790259151.050:3758): avc: denied { ioctl } for pid=29171 comm="syz.1.5875" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1368.197714][T29216] FAULT_INJECTION: forcing a failure. [ 1368.197714][T29216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.197742][T29216] CPU: 0 UID: 0 PID: 29216 Comm: syz.5.5882 Tainted: G L syzkaller #0 PREEMPT(full) [ 1368.197767][T29216] Tainted: [L]=SOFTLOCKUP [ 1368.197774][T29216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1368.197785][T29216] Call Trace: [ 1368.197792][T29216] [ 1368.197799][T29216] dump_stack_lvl+0x100/0x190 [ 1368.197831][T29216] should_fail_ex.cold+0x5/0xa [ 1368.197857][T29216] _copy_from_user+0x2e/0xd0 [ 1368.197878][T29216] __sys_bpf+0x2f5/0x4a30 [ 1368.197904][T29216] ? __pfx___sys_bpf+0x10/0x10 [ 1368.197922][T29216] ? find_held_lock+0x2b/0x80 [ 1368.197946][T29216] ? get_pid_task+0xfc/0x250 [ 1368.197969][T29216] ? get_pid_task+0xfc/0x250 [ 1368.198003][T29216] ? find_held_lock+0x2b/0x80 [ 1368.198033][T29216] ? rcu_read_lock_any_held+0x6a/0x90 [ 1368.198058][T29216] ? find_held_lock+0x2b/0x80 [ 1368.198090][T29216] ? ksys_write+0x190/0x250 [ 1368.198108][T29216] ? ksys_write+0x190/0x250 [ 1368.198125][T29216] ? lock_acquire+0x1d1/0x380 [ 1368.198160][T29216] ? fput+0x7c/0x100 [ 1368.198183][T29216] ? ksys_write+0x1ac/0x250 [ 1368.198205][T29216] ? __x64_sys_bpf+0xce/0x140 [ 1368.198222][T29216] __x64_sys_bpf+0xce/0x140 [ 1368.198241][T29216] ? do_syscall_64+0xae/0x790 [ 1368.198269][T29216] do_syscall_64+0x123/0x790 [ 1368.198297][T29216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.198315][T29216] RIP: 0033:0x7f247139e159 [ 1368.198331][T29216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1368.198348][T29216] RSP: 002b:00007f2472337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1368.198366][T29216] RAX: ffffffffffffffda RBX: 00007f2471625fa0 RCX: 00007f247139e159 [ 1368.198378][T29216] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 1368.198390][T29216] RBP: 00007f2472337090 R08: 0000000000000000 R09: 0000000000000000 [ 1368.198401][T29216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1368.198412][T29216] R13: 00007f2471626038 R14: 00007f2471625fa0 R15: 00007ffdc63d2178 [ 1368.198435][T29216] [ 1368.419451][ T31] audit: type=1400 audit(1790259151.370:3759): avc: denied { write } for pid=29199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1368.512156][ T31] audit: type=1400 audit(1790259151.460:3760): avc: denied { write } for pid=29224 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1368.722396][T29236] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5888'. [ 1368.722424][T29236] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5888'. [ 1368.898089][ T124] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1369.048028][ T124] usb 3-1: Using ep0 maxpacket: 8 [ 1369.048538][ T124] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1369.049536][ T124] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1369.049558][ T124] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1369.049576][ T124] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1369.049595][ T124] usb 3-1: config 250 has no interface number 0 [ 1369.049629][ T124] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1369.049653][ T124] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1369.049674][ T124] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1369.049694][ T124] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1369.049714][ T124] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1369.049738][ T124] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1369.051100][ T124] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1369.051122][ T124] usb 3-1: Product: syz [ 1369.051136][ T124] usb 3-1: SerialNumber: syz [ 1369.165806][ T124] hub 3-1:250.228: bad descriptor, ignoring hub [ 1369.165828][ T124] hub 3-1:250.228: probe with driver hub failed with error -5 [ 1369.283089][ T31] audit: type=1400 audit(1790259152.230:3761): avc: denied { create } for pid=29247 comm="syz.7.5890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1369.290567][ T31] audit: type=1400 audit(1790259152.240:3762): avc: denied { write } for pid=29247 comm="syz.7.5890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1369.344812][ T124] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 47 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1369.573442][T29259] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5891'. [ 1369.583290][T29259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29259 comm=syz.5.5891 [ 1369.583372][T29259] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5891'. [ 1369.638250][ T31] audit: type=1400 audit(1790259152.580:3763): avc: denied { write } for pid=29239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1369.656793][T29261] jffs2: notice: (29261) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1369.819657][ T31] audit: type=1400 audit(1790259152.760:3764): avc: denied { read write } for pid=29231 comm="syz.2.5887" name="lp0" dev="devtmpfs" ino=3894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1369.819827][ T31] audit: type=1400 audit(1790259152.760:3765): avc: denied { open } for pid=29231 comm="syz.2.5887" path="/dev/usb/lp0" dev="devtmpfs" ino=3894 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1370.947990][T12419] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1371.069025][ T9] usb 2-1: USB disconnect, device number 49 [ 1371.074180][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1371.075302][ T9] pl2303 2-1:1.0: device disconnected [ 1371.128671][T12419] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1371.129698][T12419] usb 6-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1371.129727][T12419] usb 6-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1371.129751][T12419] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1371.130619][T12419] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1371.130641][T12419] usb 6-1: SerialNumber: syz [ 1371.232628][ T31] audit: type=1400 audit(1790259154.180:3766): avc: denied { write } for pid=29267 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1371.237305][T12419] hub 6-1:1.0: bad descriptor, ignoring hub [ 1371.237324][T12419] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1371.237729][T12419] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1371.252314][ T31] audit: type=1400 audit(1790259154.200:3767): avc: denied { listen } for pid=29268 comm="syz.1.5893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1371.259407][ T31] audit: type=1400 audit(1790259154.210:3768): avc: denied { connect } for pid=29268 comm="syz.1.5893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1371.291041][ T31] audit: type=1400 audit(1790259154.240:3769): avc: denied { setopt } for pid=29268 comm="syz.1.5893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1371.300236][ T31] audit: type=1400 audit(1790259154.250:3770): avc: denied { write } for pid=29268 comm="syz.1.5893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1371.572378][T12419] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 1371.602641][T12419] usb 6-1: USB disconnect, device number 40 [ 1372.178015][T12418] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1372.228103][ T124] usb 3-1: USB disconnect, device number 47 [ 1372.237728][ T124] usblp0: removed [ 1372.327865][T12418] usb 2-1: Using ep0 maxpacket: 8 [ 1372.328354][T12418] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1372.329222][T12418] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1372.329246][T12418] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1372.329265][T12418] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1372.329285][T12418] usb 2-1: config 250 has no interface number 0 [ 1372.329318][T12418] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1372.329343][T12418] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1372.329367][T12418] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1372.329385][T12418] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1372.329405][T12418] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1372.329429][T12418] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1372.330696][T12418] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1372.330717][T12418] usb 2-1: Product: syz [ 1372.330731][T12418] usb 2-1: SerialNumber: syz [ 1372.930946][T12418] hub 2-1:250.228: bad descriptor, ignoring hub [ 1372.930968][T12418] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1373.143997][T12418] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 50 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1374.490901][T29322] jffs2: notice: (29322) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1375.867851][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 1375.867870][ T31] audit: type=1400 audit(1790259158.820:3784): avc: denied { append } for pid=29338 comm="syz.7.5907" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1375.878121][ T9] usb 2-1: USB disconnect, device number 50 [ 1375.885166][ T9] usblp0: removed [ 1376.196730][ T31] audit: type=1400 audit(1790259159.140:3785): avc: denied { write } for pid=29320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1376.317434][ T31] audit: type=1400 audit(1790259159.260:3786): avc: denied { write } for pid=29353 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1376.407848][T12419] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1376.558040][T12419] usb 2-1: Using ep0 maxpacket: 8 [ 1376.558638][T12419] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1376.559520][T12419] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1376.559542][T12419] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1376.559562][T12419] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1376.559582][T12419] usb 2-1: config 250 has no interface number 0 [ 1376.559615][T12419] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1376.559639][T12419] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1376.559660][T12419] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1376.559679][T12419] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1376.559699][T12419] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1376.559722][T12419] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1376.561003][T12419] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1376.561024][T12419] usb 2-1: Product: syz [ 1376.561038][T12419] usb 2-1: SerialNumber: syz [ 1376.565456][T12419] hub 2-1:250.228: bad descriptor, ignoring hub [ 1376.567163][T12419] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1376.780015][T12419] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 51 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1376.789172][ T31] audit: type=1400 audit(1790259159.730:3787): avc: denied { setopt } for pid=29364 comm="syz.8.5910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1376.820480][ T31] audit: type=1400 audit(1790259159.760:3788): avc: denied { write } for pid=29364 comm="syz.8.5910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1376.883735][ T31] audit: type=1400 audit(1790259159.830:3789): avc: denied { read } for pid=29364 comm="syz.8.5910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1376.949251][ T31] audit: type=1400 audit(1790259159.900:3790): avc: denied { setattr } for pid=29366 comm="syz.5.5903" name="PACKET" dev="sockfs" ino=101297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1377.057571][ T31] audit: type=1400 audit(1790259159.980:3791): avc: denied { append } for pid=29366 comm="syz.5.5903" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1377.057620][ T31] audit: type=1400 audit(1790259159.980:3792): avc: denied { open } for pid=29366 comm="syz.5.5903" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1377.167613][ T31] audit: type=1400 audit(1790259160.100:3793): avc: denied { write } for pid=29360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1377.778247][ T9] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1377.877608][T12419] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1377.929028][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1377.930404][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.930431][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1377.932364][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.932386][ T9] usb 6-1: Product: syz [ 1377.932399][ T9] usb 6-1: Manufacturer: syz [ 1377.932419][ T9] usb 6-1: SerialNumber: syz [ 1377.948651][ T9] usb 6-1: config 0 descriptor?? [ 1378.029292][T12419] usb 3-1: Using ep0 maxpacket: 16 [ 1378.029769][T12419] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1378.032318][T12419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.032342][T12419] usb 3-1: Product: syz [ 1378.032356][T12419] usb 3-1: Manufacturer: syz [ 1378.032370][T12419] usb 3-1: SerialNumber: syz [ 1378.039877][T12419] usb 3-1: config 0 descriptor?? [ 1378.043211][T12419] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1378.347700][ T5714] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1378.498327][ T5714] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1378.501736][ T5714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.501759][ T5714] usb 8-1: Product: syz [ 1378.501774][ T5714] usb 8-1: Manufacturer: syz [ 1378.501787][ T5714] usb 8-1: SerialNumber: syz [ 1378.850111][T12419] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 1378.860687][T12419] usb 3-1: USB disconnect, device number 48 [ 1378.925347][T29409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.925758][T29409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.932825][T29409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.933227][T29409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.140084][ T5714] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1379.140131][ T5714] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1379.145340][ T5714] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1379.153809][ T5714] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1379.375615][ T5714] usb 2-1: USB disconnect, device number 51 [ 1379.386540][ T5714] usblp0: removed [ 1379.668470][T29480] FAULT_INJECTION: forcing a failure. [ 1379.668470][T29480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1379.668501][T29480] CPU: 1 UID: 0 PID: 29480 Comm: syz.1.5925 Tainted: G L syzkaller #0 PREEMPT(full) [ 1379.668525][T29480] Tainted: [L]=SOFTLOCKUP [ 1379.668532][T29480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1379.668544][T29480] Call Trace: [ 1379.668550][T29480] [ 1379.668558][T29480] dump_stack_lvl+0x100/0x190 [ 1379.668592][T29480] should_fail_ex.cold+0x5/0xa [ 1379.668618][T29480] _copy_from_user+0x2e/0xd0 [ 1379.668640][T29480] __sys_bpf+0x2f5/0x4a30 [ 1379.668667][T29480] ? __pfx___sys_bpf+0x10/0x10 [ 1379.668685][T29480] ? find_held_lock+0x2b/0x80 [ 1379.668710][T29480] ? get_pid_task+0xfc/0x250 [ 1379.668734][T29480] ? get_pid_task+0xfc/0x250 [ 1379.668766][T29480] ? find_held_lock+0x2b/0x80 [ 1379.668796][T29480] ? rcu_read_lock_any_held+0x6a/0x90 [ 1379.668822][T29480] ? find_held_lock+0x2b/0x80 [ 1379.668846][T29480] ? ksys_write+0x190/0x250 [ 1379.668865][T29480] ? ksys_write+0x190/0x250 [ 1379.668883][T29480] ? lock_acquire+0x1d1/0x380 [ 1379.668925][T29480] ? fput+0x7c/0x100 [ 1379.668948][T29480] ? ksys_write+0x1ac/0x250 [ 1379.668970][T29480] ? __x64_sys_bpf+0xce/0x140 [ 1379.668988][T29480] __x64_sys_bpf+0xce/0x140 [ 1379.669007][T29480] ? do_syscall_64+0xae/0x790 [ 1379.669036][T29480] do_syscall_64+0x123/0x790 [ 1379.669064][T29480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.669083][T29480] RIP: 0033:0x7f12bf99e159 [ 1379.669099][T29480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.669116][T29480] RSP: 002b:00007f12c0942028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1379.669135][T29480] RAX: ffffffffffffffda RBX: 00007f12bfc25fa0 RCX: 00007f12bf99e159 [ 1379.669147][T29480] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 1379.669159][T29480] RBP: 00007f12c0942090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.669171][T29480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.669181][T29480] R13: 00007f12bfc26038 R14: 00007f12bfc25fa0 R15: 00007fff22df3bc8 [ 1379.669207][T29480] [ 1379.757742][T29485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1379.758949][T29485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5927'. [ 1379.758962][T29485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5927'. [ 1379.758981][T29485] netlink: 'syz.1.5927': attribute type 6 has an invalid length. [ 1379.789916][ T5714] usb 6-1: USB disconnect, device number 41 [ 1379.958041][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1380.026358][T29498] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5929'. [ 1380.026386][T29498] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5929'. [ 1380.117452][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1380.119201][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1380.120083][ T9] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1380.120106][ T9] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1380.120124][ T9] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1380.120143][ T9] usb 3-1: config 250 has no interface number 0 [ 1380.120176][ T9] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1380.120200][ T9] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1380.120221][ T9] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1380.120241][ T9] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1380.120262][ T9] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1380.120286][ T9] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1380.123183][ T9] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1380.123205][ T9] usb 3-1: Product: syz [ 1380.123219][ T9] usb 3-1: SerialNumber: syz [ 1380.156159][T29504] jffs2: notice: (29504) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1380.311867][ T9] hub 3-1:250.228: bad descriptor, ignoring hub [ 1380.312188][ T9] hub 3-1:250.228: probe with driver hub failed with error -5 [ 1380.836639][ T9] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 49 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1381.735551][ T124] usb 8-1: USB disconnect, device number 21 [ 1381.939154][T29526] 9pnet_fd: Insufficient options for proto=fd [ 1383.184478][ T31] kauditd_printk_skb: 43 callbacks suppressed [ 1383.184496][ T31] audit: type=1400 audit(1790259166.120:3837): avc: denied { recv } for pid=29550 comm="dhcpcd-run-hook" saddr=10.128.0.169 src=30006 daddr=10.128.1.21 dest=54168 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1383.198965][ T31] audit: type=1400 audit(1790259166.150:3838): avc: denied { search } for pid=29550 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1383.199172][ T31] audit: type=1400 audit(1790259166.150:3839): avc: denied { search } for pid=29550 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1383.199321][ T31] audit: type=1400 audit(1790259166.150:3840): avc: denied { search } for pid=29550 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1383.199473][ T31] audit: type=1400 audit(1790259166.150:3841): avc: denied { search } for pid=29550 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1383.206432][ T31] audit: type=1400 audit(1790259166.150:3842): avc: denied { read } for pid=29552 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1383.206717][ T31] audit: type=1400 audit(1790259166.150:3843): avc: denied { read open } for pid=29552 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1383.206951][ T31] audit: type=1400 audit(1790259166.150:3844): avc: denied { getattr } for pid=29552 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1383.212172][ T31] audit: type=1400 audit(1790259166.160:3845): avc: denied { getattr } for pid=29552 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1383.221535][ T31] audit: type=1400 audit(1790259166.170:3846): avc: denied { create } for pid=29551 comm="syz.1.5940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1383.365083][T29564] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5941'. [ 1383.365107][T29564] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5941'. [ 1383.797489][ T9] usb 3-1: USB disconnect, device number 49 [ 1383.803909][ T9] usblp0: removed [ 1385.280167][T29609] netlink: 'syz.7.5949': attribute type 1 has an invalid length. [ 1386.755074][ T5714] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1386.890141][T29634] jffs2: notice: (29634) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1386.897072][T12445] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1386.951547][T29634] binder: 29633:29634 ioctl c0306201 200000000040 returned -14 [ 1387.027826][ T5714] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1387.031411][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.031432][ T5714] usb 3-1: Product: syz [ 1387.031446][ T5714] usb 3-1: Manufacturer: syz [ 1387.031460][ T5714] usb 3-1: SerialNumber: syz [ 1387.073292][T12418] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1387.495347][T29619] xt_hashlimit: size too large, truncated to 1048576 [ 1387.847698][T20006] usb 3-1: USB disconnect, device number 50 [ 1388.289574][T12418] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1388.289752][T12418] ath9k_htc: Failed to initialize the device [ 1388.313613][T20006] usb 3-1: ath9k_htc: USB layer deinitialized [ 1388.323046][ T31] kauditd_printk_skb: 92 callbacks suppressed [ 1388.323059][ T31] audit: type=1400 audit(1790259171.271:3939): avc: denied { sys_module } for pid=29655 comm="syz.8.5965" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1388.383219][ T31] audit: type=1400 audit(1790259171.331:3940): avc: denied { write } for pid=29665 comm="syz.1.5966" name="dev_mcast" dev="proc" ino=4026532982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1388.434922][T29668] TCP: TCP_TX_DELAY enabled [ 1388.444619][ T31] audit: type=1400 audit(1790259171.391:3941): avc: denied { map } for pid=29667 comm="syz.2.5967" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1388.444895][ T31] audit: type=1400 audit(1790259171.391:3942): avc: denied { read write } for pid=29667 comm="syz.2.5967" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1388.501395][ T31] audit: type=1400 audit(1790259171.461:3943): avc: denied { map } for pid=29667 comm="syz.2.5967" path="socket:[101845]" dev="sockfs" ino=101845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1388.569498][ T31] audit: type=1400 audit(1790259171.491:3944): avc: denied { write } for pid=29670 comm="syz.1.5968" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1388.723650][T29676] jffs2: notice: (29676) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1388.727481][ T31] audit: type=1400 audit(1790259171.681:3945): avc: denied { create } for pid=29673 comm="syz.8.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1388.744356][ T31] audit: type=1400 audit(1790259171.701:3946): avc: denied { ioctl } for pid=29673 comm="syz.8.5969" path="socket:[101857]" dev="sockfs" ino=101857 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1388.764174][ T31] audit: type=1400 audit(1790259171.721:3947): avc: denied { bind } for pid=29673 comm="syz.8.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1388.764212][ T31] audit: type=1400 audit(1790259171.721:3948): avc: denied { connect } for pid=29673 comm="syz.8.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1388.799880][T20006] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1388.962826][T20006] usb 2-1: Using ep0 maxpacket: 16 [ 1388.963649][T20006] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1388.969253][T20006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.969280][T20006] usb 2-1: Product: syz [ 1388.969294][T20006] usb 2-1: Manufacturer: syz [ 1388.969309][T20006] usb 2-1: SerialNumber: syz [ 1388.972753][T20006] usb 2-1: config 0 descriptor?? [ 1388.974817][T20006] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1389.355362][T12445] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1389.355402][T12445] usb 6-1: New USB device found, idVendor=134c, idProduct=0003, bcdDevice=e5.c0 [ 1389.356143][T12445] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1389.356172][T12445] usb 6-1: can't read configurations, error -71 [ 1389.523453][T29688] vlan2: entered promiscuous mode [ 1389.523498][T29688] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1389.997926][T29696] wg2 speed is unknown, defaulting to 1000 [ 1390.645486][T20006] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 1390.715207][T20006] usb 2-1: USB disconnect, device number 52 [ 1392.251969][T29764] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5990'. [ 1392.361355][T29770] FAULT_INJECTION: forcing a failure. [ 1392.361355][T29770] name failslab, interval 1, probability 0, space 0, times 0 [ 1392.361386][T29770] CPU: 1 UID: 0 PID: 29770 Comm: syz.7.5994 Tainted: G L syzkaller #0 PREEMPT(full) [ 1392.361414][T29770] Tainted: [L]=SOFTLOCKUP [ 1392.361422][T29770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1392.361434][T29770] Call Trace: [ 1392.361441][T29770] [ 1392.361449][T29770] dump_stack_lvl+0x100/0x190 [ 1392.361483][T29770] should_fail_ex.cold+0x5/0xa [ 1392.361511][T29770] should_failslab+0xc2/0x120 [ 1392.361537][T29770] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1392.361561][T29770] ? ecryptfs_init_fs_context+0x6b/0x200 [ 1392.361591][T29770] ecryptfs_init_fs_context+0x6b/0x200 [ 1392.361622][T29770] alloc_fs_context+0x60c/0xf40 [ 1392.361659][T29770] path_mount+0xdbd/0x24c0 [ 1392.361694][T29770] ? __pfx_path_mount+0x10/0x10 [ 1392.361729][T29770] ? lockdep_hardirqs_on+0x7d/0x110 [ 1392.361762][T29770] ? putname+0xb1/0x110 [ 1392.361789][T29770] ? kmem_cache_free+0x127/0x6c0 [ 1392.361832][T29770] ? __x64_sys_mount+0x293/0x310 [ 1392.361862][T29770] __x64_sys_mount+0x293/0x310 [ 1392.361892][T29770] ? __pfx___x64_sys_mount+0x10/0x10 [ 1392.361930][T29770] do_syscall_64+0x123/0x790 [ 1392.361962][T29770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.361983][T29770] RIP: 0033:0x7ff1f939e159 [ 1392.362001][T29770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1392.362020][T29770] RSP: 002b:00007ff1f75f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1392.362040][T29770] RAX: ffffffffffffffda RBX: 00007ff1f9625fa0 RCX: 00007ff1f939e159 [ 1392.362054][T29770] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000200000000400 [ 1392.362066][T29770] RBP: 00007ff1f943506b R08: 0000200000000500 R09: 0000000000000000 [ 1392.362078][T29770] R10: 0000000000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1392.362089][T29770] R13: 00007ff1f9626038 R14: 00007ff1f9625fa0 R15: 00007ffda115bb08 [ 1392.362114][T29770] [ 1392.732648][T29778] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5996'. [ 1392.745485][T29778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29778 comm=syz.1.5996 [ 1392.745596][T29778] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5996'. [ 1392.986690][T12422] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1393.137246][T12422] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1393.140655][T12422] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1393.140687][T12422] usb 2-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1393.140718][T12422] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1393.144514][T12422] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1393.144537][T12422] usb 2-1: SerialNumber: syz [ 1393.195478][T12422] hub 2-1:1.0: bad descriptor, ignoring hub [ 1393.195498][T12422] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1393.195850][T12422] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1393.339609][ T31] kauditd_printk_skb: 87 callbacks suppressed [ 1393.339627][ T31] audit: type=1400 audit(1790259176.291:4036): avc: denied { bind } for pid=29792 comm="syz.5.5998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1393.366751][ T31] audit: type=1400 audit(1790259176.301:4037): avc: denied { write } for pid=29792 comm="syz.5.5998" path="socket:[102091]" dev="sockfs" ino=102091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1393.471107][ T31] audit: type=1400 audit(1790259176.421:4038): avc: denied { read write } for pid=29777 comm="syz.1.5996" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1393.471153][ T31] audit: type=1400 audit(1790259176.421:4039): avc: denied { open } for pid=29777 comm="syz.1.5996" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1393.531300][ T31] audit: type=1400 audit(1790259176.471:4040): avc: denied { write } for pid=29794 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1393.572115][ T31] audit: type=1400 audit(1790259176.521:4041): avc: denied { write } for pid=29796 comm="syz.2.5999" name="001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1393.626972][T12422] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1393.658737][T12422] usb 2-1: USB disconnect, device number 53 [ 1393.717770][ T31] audit: type=1400 audit(1790259176.671:4042): avc: denied { read write } for pid=29802 comm="syz.2.6002" name="video3" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1393.718799][ T31] audit: type=1400 audit(1790259176.671:4043): avc: denied { open } for pid=29802 comm="syz.2.6002" path="/dev/video3" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1393.720597][ T31] audit: type=1400 audit(1790259176.671:4044): avc: denied { ioctl } for pid=29802 comm="syz.2.6002" path="/dev/video3" dev="devtmpfs" ino=933 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1393.861402][ T31] audit: type=1400 audit(1790259176.811:4045): avc: denied { create } for pid=29806 comm="syz.7.6003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1393.864746][T29807] netlink: 4136 bytes leftover after parsing attributes in process `syz.7.6003'. [ 1394.166644][T12419] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1394.326944][T12419] usb 6-1: Using ep0 maxpacket: 32 [ 1394.330846][T12419] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1394.330885][T12419] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1394.331723][T12419] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1394.331743][T12419] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.331760][T12419] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1394.331778][T12419] usb 6-1: config 128 has no interface number 0 [ 1394.331810][T12419] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1394.331871][T12419] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1394.331892][T12419] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1394.430632][T12419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.430655][T12419] usb 6-1: Product: syz [ 1394.430670][T12419] usb 6-1: Manufacturer: syz [ 1394.430682][T12419] usb 6-1: SerialNumber: syz [ 1394.640683][T29801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.641089][T29801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.579270][T12419] usb 6-1: USB disconnect, device number 44 [ 1395.609900][T29848] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6009'. [ 1395.612623][T25224] udevd[25224]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1395.663706][T29851] fuse: fd is not a fuse device [ 1395.846789][T20006] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1396.006699][T20006] usb 2-1: Using ep0 maxpacket: 8 [ 1396.009807][T20006] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1396.010582][T20006] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1396.010596][T20006] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1396.010608][T20006] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1396.010619][T20006] usb 2-1: config 250 has no interface number 0 [ 1396.010638][T20006] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1396.010658][T20006] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1396.010671][T20006] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1396.010682][T20006] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1396.010693][T20006] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1396.010707][T20006] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1396.011823][T20006] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1396.011836][T20006] usb 2-1: Product: syz [ 1396.011844][T20006] usb 2-1: SerialNumber: syz [ 1396.021823][T20006] hub 2-1:250.228: bad descriptor, ignoring hub [ 1396.021845][T20006] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1396.223607][T20006] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 54 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1396.304744][T29858] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes»G [ 1396.304767][T29858] Error validating options; rc = [-22] [ 1396.371349][T29861] mac80211_hwsim hwsim127 »»»»»»: renamed from wlan0 [ 1396.384238][T12422] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1396.503658][T29864] FAULT_INJECTION: forcing a failure. [ 1396.503658][T29864] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.503688][T29864] CPU: 0 UID: 0 PID: 29864 Comm: syz.2.6016 Tainted: G L syzkaller #0 PREEMPT(full) [ 1396.503713][T29864] Tainted: [L]=SOFTLOCKUP [ 1396.503720][T29864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1396.503731][T29864] Call Trace: [ 1396.503737][T29864] [ 1396.503745][T29864] dump_stack_lvl+0x100/0x190 [ 1396.503777][T29864] should_fail_ex.cold+0x5/0xa [ 1396.503804][T29864] should_failslab+0xc2/0x120 [ 1396.503829][T29864] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 1396.503852][T29864] ? __alloc_skb+0x140/0x710 [ 1396.503879][T29864] __alloc_skb+0x140/0x710 [ 1396.503900][T29864] ? __alloc_skb+0x5b7/0x710 [ 1396.503921][T29864] ? __pfx___alloc_skb+0x10/0x10 [ 1396.503951][T29864] hci_sock_sendmsg+0x1b01/0x2620 [ 1396.503982][T29864] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1396.504008][T29864] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1396.504034][T29864] sock_write_iter+0x53a/0x5b0 [ 1396.504062][T29864] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1396.504087][T29864] ? __pfx_sock_write_iter+0x10/0x10 [ 1396.504122][T29864] ? bpf_lsm_file_permission+0x9/0x10 [ 1396.504146][T29864] ? security_file_permission+0x76/0x210 [ 1396.504169][T29864] ? rw_verify_area+0xce/0x6d0 [ 1396.504200][T29864] vfs_write+0x6af/0x1050 [ 1396.504220][T29864] ? __pfx_sock_write_iter+0x10/0x10 [ 1396.504251][T29864] ? __pfx_vfs_write+0x10/0x10 [ 1396.504269][T29864] ? find_held_lock+0x2b/0x80 [ 1396.504313][T29864] ksys_write+0x1f8/0x250 [ 1396.504332][T29864] ? __pfx_ksys_write+0x10/0x10 [ 1396.504359][T29864] do_syscall_64+0x123/0x790 [ 1396.504389][T29864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.504408][T29864] RIP: 0033:0x7f4cdfb9e159 [ 1396.504424][T29864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1396.504440][T29864] RSP: 002b:00007f4ce0a5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1396.504459][T29864] RAX: ffffffffffffffda RBX: 00007f4cdfe25fa0 RCX: 00007f4cdfb9e159 [ 1396.504471][T29864] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000011 [ 1396.504482][T29864] RBP: 00007f4ce0a5d090 R08: 0000000000000000 R09: 0000000000000000 [ 1396.504493][T29864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1396.504507][T29864] R13: 00007f4cdfe26038 R14: 00007f4cdfe25fa0 R15: 00007ffe880da038 [ 1396.504533][T29864] [ 1396.638932][T12422] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 1396.640220][T12422] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1396.640469][T12422] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1396.640499][T12422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.368820][T12422] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 1398.556395][ T31] kauditd_printk_skb: 228 callbacks suppressed [ 1398.556427][ T31] audit: type=1400 audit(1790259181.491:4274): avc: denied { read } for pid=29899 comm="syz.8.6025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1398.723638][ T31] audit: type=1400 audit(1790259181.671:4275): avc: denied { ioctl } for pid=29899 comm="syz.8.6025" path="socket:[103148]" dev="sockfs" ino=103148 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1398.727302][ T31] audit: type=1400 audit(1790259181.681:4276): avc: denied { connect } for pid=29899 comm="syz.8.6025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1398.727752][ T31] audit: type=1400 audit(1790259181.681:4277): avc: denied { write } for pid=29899 comm="syz.8.6025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1398.849882][T29903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6026'. [ 1398.886524][T29903] hsr_slave_1 (unregistering): left promiscuous mode [ 1398.936525][T12422] usb 2-1: USB disconnect, device number 54 [ 1398.941211][T12422] usblp0: removed [ 1399.072071][ T31] audit: type=1400 audit(1790259182.021:4278): avc: denied { audit_write } for pid=29906 comm="syz.2.6027" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1399.074369][ T31] audit: type=1400 audit(1790259182.021:4279): avc: denied { setopt } for pid=29906 comm="syz.2.6027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1399.103924][ T31] audit: type=1400 audit(1790259182.051:4280): avc: denied { name_bind } for pid=29910 comm="syz.7.6029" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1399.104162][ T31] audit: type=1400 audit(1790259182.051:4281): avc: denied { node_bind } for pid=29910 comm="syz.7.6029" saddr=10.1.1.0 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1399.748353][ T31] audit: type=1400 audit(1790259182.651:4282): avc: denied { connect } for pid=29910 comm="syz.7.6029" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1399.750419][ T31] audit: type=1400 audit(1790259182.651:4283): avc: denied { write } for pid=29910 comm="syz.7.6029" laddr=fe80::13 lport=60 faddr=fe80::bb fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1400.113221][T12422] usb 6-1: USB disconnect, device number 45 [ 1400.115872][T12422] idmouse 6-1:1.0: disconnected [ 1400.594738][T29930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6031'. [ 1400.594759][T29930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6031'. [ 1400.594872][T29930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6031'. [ 1400.594885][T29930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6031'. [ 1401.552875][T29971] bridge_slave_0: left allmulticast mode [ 1401.552898][T29971] bridge_slave_0: left promiscuous mode [ 1401.553065][T29971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.571663][T29971] bridge_slave_1: left allmulticast mode [ 1401.571681][T29971] bridge_slave_1: left promiscuous mode [ 1401.571840][T29971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.605403][T29971] bond0: (slave bond_slave_0): Releasing backup interface [ 1401.622313][T29971] bond0: (slave bond_slave_1): Releasing backup interface [ 1401.629648][T29971] team0: Port device team_slave_0 removed [ 1401.640690][T29971] team0: Port device team_slave_1 removed [ 1401.641038][T29971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.644366][T29971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1401.645804][T29971] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1401.656008][T29965] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6045'. [ 1402.028442][ T9] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1402.236759][T20599] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1402.236880][ T124] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1402.397212][T20599] usb 6-1: Using ep0 maxpacket: 32 [ 1402.425178][T20599] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1402.425887][T20599] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1402.429642][T29988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.470950][T29988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.499351][T20599] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1402.499488][T20599] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.499903][T20599] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1402.500226][T20599] usb 6-1: config 128 has no interface number 0 [ 1402.504180][T20599] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1402.504316][T20599] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1402.504628][T20599] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1402.584356][T20599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.585761][T20599] usb 6-1: Product: syz [ 1402.586209][T20599] usb 6-1: Manufacturer: syz [ 1402.586465][T20599] usb 6-1: SerialNumber: syz [ 1402.746395][T29989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.747687][T29989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.775318][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1402.785078][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1402.785127][ T9] usb 2-1: can't read configurations, error -71 [ 1402.933100][T29982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1402.933568][T29982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.064084][T20599] usb 6-1: USB disconnect, device number 46 [ 1403.083029][T25224] udevd[25224]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1403.588988][T29996] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1403.652570][T30002] jffs2: notice: (30002) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1403.653208][ T31] kauditd_printk_skb: 59 callbacks suppressed [ 1403.653223][ T31] audit: type=1400 audit(1790259186.602:4343): avc: denied { mount } for pid=30001 comm="syz.8.6055" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1403.767040][ T124] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1403.770994][ T124] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1403.771023][ T124] usb 3-1: can't read configurations, error -71 [ 1403.833033][T30005] sd 0:0:1:0: PR command failed: 1026 [ 1403.833057][T30005] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1403.833076][T30005] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1404.772749][T30023] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 1404.941464][T30027] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6059'. [ 1405.266214][ T31] audit: type=1400 audit(1790259188.212:4344): avc: denied { execute } for pid=30017 comm="syz.2.6060" path="/proc/zoneinfo" dev="proc" ino=4026531859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 1406.427753][ T31] audit: type=1400 audit(1790259189.382:4345): avc: denied { write } for pid=30060 comm="syz.1.6071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1406.575044][ T31] audit: type=1400 audit(1790259189.522:4346): avc: denied { mount } for pid=30065 comm="syz.7.6072" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1406.606060][ T31] audit: type=1400 audit(1790259189.532:4347): avc: denied { mac_admin } for pid=30065 comm="syz.7.6072" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1406.800884][T30066] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1407.128736][T30072] ip6erspan0: entered allmulticast mode [ 1407.407439][ T31] audit: type=1400 audit(1790259190.362:4348): avc: denied { create } for pid=30076 comm="syz.5.6074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1407.407484][ T31] audit: type=1400 audit(1790259190.362:4349): avc: denied { unmount } for pid=28877 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1408.105884][T30082] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6075'. [ 1408.241133][T20599] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1408.740143][T20599] usb 3-1: Using ep0 maxpacket: 8 [ 1408.742759][T20599] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1408.746672][T20599] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1408.746697][T20599] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1408.746716][T20599] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1408.746737][T20599] usb 3-1: config 250 has no interface number 0 [ 1408.746772][T20599] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1408.746794][T20599] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1408.746816][T20599] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1408.746836][T20599] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1408.746857][T20599] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1408.746880][T20599] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1408.751385][T20599] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1408.751405][T20599] usb 3-1: Product: syz [ 1408.751420][T20599] usb 3-1: SerialNumber: syz [ 1408.766006][T20599] hub 3-1:250.228: bad descriptor, ignoring hub [ 1408.766028][T20599] hub 3-1:250.228: probe with driver hub failed with error -5 [ 1408.914441][ T31] audit: type=1326 audit(1790259191.872:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30093 comm="syz.7.6080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1408.916260][ T31] audit: type=1326 audit(1790259191.872:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30093 comm="syz.7.6080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1408.925305][ T31] audit: type=1326 audit(1790259191.882:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30093 comm="syz.7.6080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1408.925480][ T31] audit: type=1326 audit(1790259191.882:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30093 comm="syz.7.6080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1408.933330][ T31] audit: type=1326 audit(1790259191.882:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30093 comm="syz.7.6080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1408.933389][ T31] audit: type=1326 audit(1790259191.892:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30093 comm="syz.7.6080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1408.933423][ T31] audit: type=1326 audit(1790259191.892:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30093 comm="syz.7.6080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1408.935794][ T31] audit: type=1326 audit(1790259191.892:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30093 comm="syz.7.6080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1408.938436][ T31] audit: type=1326 audit(1790259191.892:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30093 comm="syz.7.6080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1408.938985][ T31] audit: type=1326 audit(1790259191.892:4359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30093 comm="syz.7.6080" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1408.991980][T20599] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 53 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1410.029803][T30117] fuse: Bad value for 'fd' [ 1410.045799][ T124] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1410.645255][ T124] usb 6-1: Using ep0 maxpacket: 16 [ 1410.835624][ T124] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1411.217038][T12419] usb 3-1: USB disconnect, device number 53 [ 1411.301473][ T124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.301499][ T124] usb 6-1: Product: syz [ 1411.301513][ T124] usb 6-1: Manufacturer: syz [ 1411.301527][ T124] usb 6-1: SerialNumber: syz [ 1411.723287][ T124] usb 6-1: config 0 descriptor?? [ 1411.906797][T12419] usblp0: removed [ 1412.253368][ T124] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1412.324906][T30134] wg2 speed is unknown, defaulting to 1000 [ 1412.348629][T30128] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6091'. [ 1412.862000][ T124] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 1412.864166][ T124] usb 6-1: USB disconnect, device number 47 [ 1413.031713][T30162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6101'. [ 1413.385642][T30181] jffs2: notice: (30181) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1414.325051][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 1414.325069][ T31] audit: type=1400 audit(1790259197.272:4392): avc: denied { unmount } for pid=28877 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1414.947970][T30198] jffs2: notice: (30198) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1415.621293][ T31] audit: type=1400 audit(1790259198.132:4393): avc: denied { write } for pid=30189 comm="syz.5.6109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1415.621497][ T31] audit: type=1400 audit(1790259198.562:4394): avc: denied { execmem } for pid=30197 comm="syz.7.6111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1415.621657][ T31] audit: type=1400 audit(1790259198.562:4395): avc: denied { mmap_zero } for pid=30197 comm="syz.7.6111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1415.669869][ T31] audit: type=1400 audit(1790259198.602:4396): avc: denied { recv } for pid=30197 comm="syz.7.6111" saddr=10.128.0.169 src=30006 daddr=10.128.1.21 dest=54168 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1415.822591][ T31] audit: type=1400 audit(1790259198.772:4397): avc: denied { read write } for pid=27091 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1415.822639][ T31] audit: type=1400 audit(1790259198.772:4398): avc: denied { open } for pid=27091 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1415.822677][ T31] audit: type=1400 audit(1790259198.772:4399): avc: denied { ioctl } for pid=27091 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1415.910989][ T31] audit: type=1400 audit(1790259198.852:4400): avc: denied { allowed } for pid=30190 comm="syz.2.6110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1415.911026][ T31] audit: type=1400 audit(1790259198.862:4401): avc: denied { unmount } for pid=28877 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1416.245451][ T124] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1416.415491][ T1217] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1416.435343][ T124] usb 2-1: Using ep0 maxpacket: 8 [ 1416.435900][ T124] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1416.436781][ T124] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1416.436804][ T124] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1416.436824][ T124] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1416.436842][ T124] usb 2-1: config 250 has no interface number 0 [ 1416.436876][ T124] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1416.436900][ T124] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1416.436921][ T124] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1416.436941][ T124] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1416.436962][ T124] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1416.436985][ T124] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1416.438356][ T124] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1416.438377][ T124] usb 2-1: Product: syz [ 1416.438391][ T124] usb 2-1: SerialNumber: syz [ 1416.447406][ T124] hub 2-1:250.228: bad descriptor, ignoring hub [ 1416.448121][ T124] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1416.585992][ T1217] usb 8-1: Using ep0 maxpacket: 8 [ 1416.587645][ T1217] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1416.590796][ T1217] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 1416.590820][ T1217] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 1416.590838][ T1217] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1416.590877][ T1217] usb 8-1: config 250 has no interface number 0 [ 1416.590910][ T1217] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1416.590935][ T1217] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1416.590958][ T1217] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1416.590979][ T1217] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1416.591017][ T1217] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1416.591042][ T1217] usb 8-1: config 250 interface 228 has no altsetting 0 [ 1416.594630][ T1217] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1416.594649][ T1217] usb 8-1: Product: syz [ 1416.594661][ T1217] usb 8-1: SerialNumber: syz [ 1416.610331][ T1217] hub 8-1:250.228: bad descriptor, ignoring hub [ 1416.611289][ T1217] hub 8-1:250.228: probe with driver hub failed with error -5 [ 1416.689130][ T124] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 57 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1416.818541][ T1217] usblp 8-1:250.228: usblp1: USB Bidirectional printer dev 22 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1417.986023][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1418.341147][T30238] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1419.100428][T30253] syzkaller0: entered promiscuous mode [ 1419.100449][T30253] syzkaller0: entered allmulticast mode [ 1419.106703][T30253] tipc: Started in network mode [ 1419.106724][T30253] tipc: Node identity 42b112870f43, cluster identity 4711 [ 1419.106996][T30253] tipc: Enabled bearer , priority 0 [ 1419.128954][T30252] tipc: Resetting bearer [ 1419.173340][T30252] tipc: Disabling bearer [ 1419.467809][ T124] usb 2-1: USB disconnect, device number 57 [ 1419.471910][ T124] usblp0: removed [ 1419.554208][ T31] kauditd_printk_skb: 46 callbacks suppressed [ 1419.554225][ T31] audit: type=1400 audit(1790259202.502:4448): avc: denied { write } for pid=30255 comm="syz.1.6127" name="dev_mcast" dev="proc" ino=4026532982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1419.556282][T20599] usb 8-1: USB disconnect, device number 22 [ 1419.564876][T20599] usblp1: removed [ 1419.600317][T30258] jffs2: notice: (30258) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1419.601892][ T31] audit: type=1400 audit(1790259202.552:4449): avc: denied { mounton } for pid=30257 comm="syz.2.6125" path="/69/file0" dev="tmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1419.606734][ T31] audit: type=1400 audit(1790259202.562:4450): avc: denied { mount } for pid=30257 comm="syz.2.6125" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1419.608070][ T31] audit: type=1400 audit(1790259202.562:4451): avc: denied { setattr } for pid=30257 comm="syz.2.6125" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1419.617268][ T31] audit: type=1400 audit(1790259202.562:4452): avc: denied { allowed } for pid=30255 comm="syz.1.6127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1419.745239][ T31] audit: type=1400 audit(1790259202.682:4453): avc: denied { create } for pid=30255 comm="syz.1.6127" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1419.751457][ T31] audit: type=1400 audit(1790259202.702:4454): avc: denied { create } for pid=30255 comm="syz.1.6127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1419.755576][ T31] audit: type=1400 audit(1790259202.712:4455): avc: denied { getopt } for pid=30255 comm="syz.1.6127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1419.776091][T30261] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1419.776104][T30261] audit: out of memory in audit_log_start [ 1421.218071][T12419] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1421.281064][T30289] fuse: fd is not a fuse device [ 1421.455374][T12419] usb 3-1: Using ep0 maxpacket: 32 [ 1421.620964][T12419] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1421.622473][T12419] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1421.659482][T12419] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 1421.659831][T12419] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.660033][T12419] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1421.660427][T12419] usb 3-1: config 128 has no interface number 0 [ 1421.661236][T12419] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1421.661483][T12419] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1421.661643][T12419] usb 3-1: config 128 interface 127 has no altsetting 0 [ 1421.764089][T12419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.764113][T12419] usb 3-1: Product: syz [ 1421.764127][T12419] usb 3-1: Manufacturer: syz [ 1421.764142][T12419] usb 3-1: SerialNumber: syz [ 1421.886328][T30302] jffs2: notice: (30302) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1422.089430][T30277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.089817][T30277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.899074][T30320] jffs2: notice: (30320) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1424.074692][T30337] fuse: fd is not a fuse device [ 1424.124055][T12419] usb 3-1: USB disconnect, device number 54 [ 1424.261490][T25224] udevd[25224]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1424.554947][T13366] Bluetooth: hci6: command 0x0406 tx timeout [ 1424.851649][ T31] kauditd_printk_skb: 61 callbacks suppressed [ 1424.851680][ T31] audit: type=1400 audit(1790259207.793:4517): avc: denied { read write } for pid=30351 comm="syz.2.6153" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1424.853386][ T31] audit: type=1400 audit(1790259207.803:4518): avc: denied { open } for pid=30351 comm="syz.2.6153" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1425.155133][T20599] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1425.265448][ T5714] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1425.324888][ T31] audit: type=1400 audit(1790259208.273:4519): avc: denied { map_create } for pid=30353 comm="syz.1.6154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1425.324935][ T31] audit: type=1400 audit(1790259208.273:4520): avc: denied { bpf } for pid=30353 comm="syz.1.6154" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1425.324971][ T31] audit: type=1400 audit(1790259208.273:4521): avc: denied { map_read map_write } for pid=30353 comm="syz.1.6154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1425.359800][ T31] audit: type=1400 audit(1790259208.293:4522): avc: denied { ioctl } for pid=30351 comm="syz.2.6153" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1425.435252][T20599] usb 3-1: Using ep0 maxpacket: 16 [ 1425.436054][T20599] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1425.438905][T20599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.438919][T20599] usb 3-1: Product: syz [ 1425.438927][T20599] usb 3-1: Manufacturer: syz [ 1425.438935][T20599] usb 3-1: SerialNumber: syz [ 1425.441724][T20599] usb 3-1: config 0 descriptor?? [ 1425.444407][T20599] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1425.486707][ T31] audit: type=1400 audit(1790259208.443:4523): avc: denied { recv } for pid=5714 comm="kworker/1:6" saddr=10.128.0.169 src=30006 daddr=10.128.1.21 dest=54168 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1425.521548][ T5714] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1425.522357][ T5714] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.523958][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.523979][ T5714] usb 6-1: Product: syz [ 1425.523993][ T5714] usb 6-1: Manufacturer: syz [ 1425.524008][ T5714] usb 6-1: SerialNumber: syz [ 1425.690293][ T31] audit: type=1400 audit(1790259208.643:4524): avc: denied { read write } for pid=28877 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1425.690588][ T31] audit: type=1400 audit(1790259208.643:4525): avc: denied { open } for pid=28877 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1425.690834][ T31] audit: type=1400 audit(1790259208.643:4526): avc: denied { ioctl } for pid=28877 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1425.924620][ T5714] snd-usb-caiaq 6-1:1.0: invalid EPs [ 1425.924708][ T5714] usb 6-1: unable to init card! (ret=-22) [ 1425.944492][ T5714] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 1426.129122][T30362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.129349][T30362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.265686][T20599] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 1426.301881][T20599] usb 3-1: USB disconnect, device number 55 [ 1426.771826][T30364] jffs2: notice: (30364) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1427.578119][T12419] usb 6-1: USB disconnect, device number 48 [ 1427.673721][T30373] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6161'. [ 1427.675759][T30373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30373 comm=syz.1.6161 [ 1427.675805][T30373] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6161'. [ 1427.802494][T30381] jffs2: notice: (30381) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1427.944845][ T9] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1428.576656][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1428.577480][ T9] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1428.577510][ T9] usb 2-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 1428.577532][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1428.579529][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1428.579550][ T9] usb 2-1: SerialNumber: syz [ 1428.633866][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 1428.633886][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1428.634239][ T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 1428.660413][T20599] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 1428.836109][T20599] usb 8-1: not running at top speed; connect to a high speed hub [ 1428.836139][T20599] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1428.836214][T30390] jffs2: notice: (30390) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1428.837049][T20599] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1428.841314][T20599] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.841335][T20599] usb 8-1: Product: syz [ 1428.841361][T20599] usb 8-1: Manufacturer: syz [ 1428.841375][T20599] usb 8-1: SerialNumber: syz [ 1429.003532][T20599] oti6858 8-1:1.0: oti6858 converter detected [ 1429.019389][T20599] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 1429.244732][T12422] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1429.547052][ T9] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1429.576772][ T9] usb 2-1: USB disconnect, device number 58 [ 1429.713032][T30383] wg2 speed is unknown, defaulting to 1000 [ 1429.778593][T12422] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1429.780472][T12422] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.780512][T12422] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1429.780549][T12422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.797384][T12422] usb 6-1: config 0 descriptor?? [ 1429.820739][T12422] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1429.930405][T30400] jffs2: notice: (30400) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1429.997890][ T31] kauditd_printk_skb: 46 callbacks suppressed [ 1429.997906][ T31] audit: type=1400 audit(1790259212.953:4573): avc: denied { write } for pid=30399 comm="syz.2.6166" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1430.894487][ T31] audit: type=1400 audit(1790259213.843:4574): avc: denied { module_request } for pid=30398 comm="syz.8.6167" kmod="netdev-bond0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1430.920275][ T31] audit: type=1400 audit(1790259213.863:4575): avc: denied { sys_module } for pid=30398 comm="syz.8.6167" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1431.016896][T12422] usb 8-1: USB disconnect, device number 23 [ 1431.026358][ T31] audit: type=1400 audit(1790259213.973:4576): avc: denied { unmount } for pid=28877 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1431.038600][T12422] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1431.039217][T12422] oti6858 8-1:1.0: device disconnected [ 1431.167444][ T124] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1431.360511][T30414] nft_compat: unsupported protocol 15 [ 1431.482080][ T31] audit: type=1400 audit(1790259214.143:4577): avc: denied { read } for pid=30413 comm="syz.7.6169" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1431.482127][ T31] audit: type=1400 audit(1790259214.143:4578): avc: denied { open } for pid=30413 comm="syz.7.6169" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1431.482212][ T31] audit: type=1400 audit(1790259214.313:4579): avc: denied { ioctl } for pid=30413 comm="syz.7.6169" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=106131 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1431.536063][ T124] usb 2-1: Using ep0 maxpacket: 8 [ 1431.577953][ T124] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1431.583289][ T124] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1431.583312][ T124] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1431.583330][ T124] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1431.583349][ T124] usb 2-1: config 250 has no interface number 0 [ 1431.583383][ T124] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1431.583408][ T124] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1431.583430][ T124] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1431.583452][ T124] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1431.583473][ T124] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1431.583497][ T124] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1431.654702][ T124] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1431.654728][ T124] usb 2-1: Product: syz [ 1431.654743][ T124] usb 2-1: SerialNumber: syz [ 1431.750701][ T124] hub 2-1:250.228: bad descriptor, ignoring hub [ 1431.750727][ T124] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1431.802653][ T31] audit: type=1400 audit(1790259214.753:4580): avc: denied { read } for pid=30421 comm="syz.2.6171" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1431.803055][ T31] audit: type=1400 audit(1790259214.753:4581): avc: denied { open } for pid=30421 comm="syz.2.6171" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1431.829930][ T31] audit: type=1400 audit(1790259214.753:4582): avc: denied { create } for pid=30421 comm="syz.2.6171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1431.955796][ T124] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 59 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1432.132551][ T124] usb 6-1: USB disconnect, device number 49 [ 1432.157466][T30426] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1432.157503][T30426] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1432.157545][T30426] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1432.210179][T30426] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 1432.819137][ T124] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1433.394848][ T124] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1433.395651][ T124] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1433.395676][ T124] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1433.395696][ T124] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1433.395720][ T124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.402274][T30438] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1433.402410][T30438] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1433.444853][ T124] pl2303 3-1:1.0: pl2303 converter detected [ 1433.478557][ T124] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 1433.897470][T30438] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 1433.897768][T30438] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 1433.898038][T30438] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 1433.898314][T30438] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 1433.898648][T30438] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1434.035986][ T5714] usb 2-1: USB disconnect, device number 59 [ 1434.050593][ T5714] usblp0: removed [ 1434.237558][T30438] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1434.298503][T30438] pl2303 ttyUSB0: error sending break = -32 [ 1434.922886][T30484] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6188'. [ 1434.925135][T30484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.978572][T30485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.048420][T30485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.069522][ T31] kauditd_printk_skb: 59 callbacks suppressed [ 1435.069537][ T31] audit: type=1400 audit(1790259218.023:4642): avc: denied { sys_module } for pid=30483 comm="syz.8.6188" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1435.113976][ T31] audit: type=1400 audit(1790259218.063:4643): avc: denied { kexec_image_load } for pid=30488 comm="syz.5.6190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1435.134682][ T31] audit: type=1400 audit(1790259218.073:4644): avc: denied { create } for pid=30488 comm="syz.5.6190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1435.134721][ T31] audit: type=1400 audit(1790259218.073:4645): avc: denied { setopt } for pid=30488 comm="syz.5.6190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1435.134753][ T31] audit: type=1400 audit(1790259218.073:4646): avc: denied { bind } for pid=30488 comm="syz.5.6190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1435.184375][ T124] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1435.300033][ T31] audit: type=1400 audit(1790259218.253:4647): avc: denied { create } for pid=30488 comm="syz.5.6190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1435.344284][ T124] usb 2-1: Using ep0 maxpacket: 16 [ 1435.344836][ T124] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1435.345739][ T124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1435.347465][ T124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.347487][ T124] usb 2-1: Product: syz [ 1435.347501][ T124] usb 2-1: Manufacturer: syz [ 1435.347515][ T124] usb 2-1: SerialNumber: syz [ 1435.353996][ T124] usb 2-1: config 0 descriptor?? [ 1435.405372][ T124] hub 2-1:0.0: bad descriptor, ignoring hub [ 1435.405391][ T124] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1435.413424][ T124] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1435.591687][ T31] audit: type=1400 audit(1790259218.543:4648): avc: denied { create } for pid=30481 comm="syz.1.6189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1435.594887][T30482] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6189'. [ 1435.618612][ T31] audit: type=1400 audit(1790259218.553:4649): avc: denied { write } for pid=30481 comm="syz.1.6189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1435.618637][ T31] audit: type=1400 audit(1790259218.553:4650): avc: denied { nlmsg_write } for pid=30481 comm="syz.1.6189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1435.654308][ T31] audit: type=1400 audit(1790259218.613:4651): avc: denied { read } for pid=30481 comm="syz.1.6189" dev="nsfs" ino=4026532813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1435.712788][ T9] usb 2-1: USB disconnect, device number 60 [ 1436.422670][ T5714] usb 3-1: USB disconnect, device number 56 [ 1436.456358][ T5714] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1436.456944][ T5714] pl2303 3-1:1.0: device disconnected [ 1436.650508][T30520] jffs2: notice: (30520) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1438.256573][ T5714] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1438.724088][ T5714] usb 3-1: Using ep0 maxpacket: 8 [ 1438.725035][ T5714] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1438.725921][ T5714] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1438.725944][ T5714] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1438.725964][ T5714] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1438.725984][ T5714] usb 3-1: config 250 has no interface number 0 [ 1438.726022][ T5714] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1438.726047][ T5714] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1438.726071][ T5714] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1438.726091][ T5714] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1438.726114][ T5714] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1438.726137][ T5714] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1438.727446][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1438.727465][ T5714] usb 3-1: Product: syz [ 1438.727478][ T5714] usb 3-1: SerialNumber: syz [ 1438.733982][ T5714] hub 3-1:250.228: bad descriptor, ignoring hub [ 1438.734005][ T5714] hub 3-1:250.228: probe with driver hub failed with error -5 [ 1438.944346][T30559] binder: 30558:30559 unknown command 0 [ 1438.944361][T30559] binder: 30558:30559 ioctl c0306201 2000000001c0 returned -22 [ 1438.954075][T20599] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1438.975444][ T5714] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 57 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1439.104070][T20599] usb 8-1: Using ep0 maxpacket: 8 [ 1439.105640][T20599] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1439.106522][T20599] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 1439.106542][T20599] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 1439.106559][T20599] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1439.106570][T20599] usb 8-1: config 250 has no interface number 0 [ 1439.106593][T20599] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1439.106606][T20599] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1439.106618][T20599] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1439.106629][T20599] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1439.106640][T20599] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1439.106653][T20599] usb 8-1: config 250 interface 228 has no altsetting 0 [ 1439.107997][T20599] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1439.108011][T20599] usb 8-1: Product: syz [ 1439.108020][T20599] usb 8-1: SerialNumber: syz [ 1439.118439][T20599] hub 8-1:250.228: bad descriptor, ignoring hub [ 1439.118459][T20599] hub 8-1:250.228: probe with driver hub failed with error -5 [ 1439.333248][T20599] usblp 8-1:250.228: usblp1: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1439.689476][T30566] tmpfs: Unknown parameter 'grpquÄot’õIs"Ü4•hartlimit' [ 1440.778774][ T31] kauditd_printk_skb: 62 callbacks suppressed [ 1440.778791][ T31] audit: type=1400 audit(1790259223.734:4714): avc: denied { read } for pid=30577 comm="syz.8.6210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1440.813206][ T5714] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1440.964196][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 1440.964848][ T5714] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1440.965818][ T5714] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1440.965841][ T5714] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1440.965860][ T5714] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1440.965880][ T5714] usb 2-1: config 250 has no interface number 0 [ 1440.965915][ T5714] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1440.965940][ T5714] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1440.965962][ T5714] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1440.965980][ T5714] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1440.966000][ T5714] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1440.966026][ T5714] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1440.967541][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1440.967563][ T5714] usb 2-1: Product: syz [ 1440.967578][ T5714] usb 2-1: SerialNumber: syz [ 1440.976552][ T124] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1441.122666][ T5714] hub 2-1:250.228: bad descriptor, ignoring hub [ 1441.122690][ T5714] hub 2-1:250.228: probe with driver hub failed with error -5 [ 1441.124410][ T124] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1441.125217][ T124] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.127853][ T124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.127872][ T124] usb 6-1: Product: syz [ 1441.127885][ T124] usb 6-1: Manufacturer: syz [ 1441.127897][ T124] usb 6-1: SerialNumber: syz [ 1441.237730][ T5714] usblp 2-1:250.228: usblp2: USB Bidirectional printer dev 61 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1441.472001][T20006] usb 3-1: USB disconnect, device number 57 [ 1441.650488][ T31] audit: type=1400 audit(1790259224.564:4715): avc: denied { create } for pid=30573 comm="syz.5.6208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1441.650554][ T31] audit: type=1400 audit(1790259224.574:4716): avc: denied { write } for pid=30573 comm="syz.5.6208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1441.708375][T30584] binder: 30573:30584 ioctl 8008f513 200000000240 returned -22 [ 1442.375656][ T124] snd-usb-6fire 6-1:1.0: unable to receive device firmware state. [ 1442.375686][ T124] snd-usb-6fire 6-1:1.0: probe with driver snd-usb-6fire failed with error -110 [ 1443.043678][T20006] usblp0: removed [ 1443.104762][T12422] usb 2-1: USB disconnect, device number 61 [ 1443.408686][T12422] usblp2: removed [ 1443.478716][ T31] audit: type=1400 audit(1790259226.434:4717): avc: denied { write } for pid=30587 comm="syz.2.6212" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1443.517395][T12422] usb 6-1: USB disconnect, device number 50 [ 1443.568702][ T31] audit: type=1400 audit(1790259226.524:4718): avc: denied { read } for pid=30589 comm="syz.5.6213" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1443.568743][ T31] audit: type=1400 audit(1790259226.524:4719): avc: denied { open } for pid=30589 comm="syz.5.6213" path="/130/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1443.569700][T30590] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 1443.569738][ T31] audit: type=1400 audit(1790259226.524:4720): avc: denied { ioctl } for pid=30589 comm="syz.5.6213" path="/130/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1444.457857][ T31] audit: type=1400 audit(1790259226.834:4721): avc: denied { read } for pid=30589 comm="syz.5.6213" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1444.457898][ T31] audit: type=1400 audit(1790259226.834:4722): avc: denied { open } for pid=30589 comm="syz.5.6213" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1444.457936][ T31] audit: type=1400 audit(1790259227.134:4723): avc: denied { read write } for pid=30589 comm="syz.5.6213" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1444.757618][T20006] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1444.784573][T12422] usb 8-1: USB disconnect, device number 24 [ 1444.792905][T12422] usblp1: removed [ 1444.844889][T30598] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1444.903750][T20006] usb 3-1: Using ep0 maxpacket: 16 [ 1444.905651][T20006] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1444.909567][T20006] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.909590][T20006] usb 3-1: Product: syz [ 1444.909604][T20006] usb 3-1: Manufacturer: syz [ 1444.909617][T20006] usb 3-1: SerialNumber: syz [ 1444.913015][T20006] usb 3-1: config 0 descriptor?? [ 1444.956508][T20006] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1445.540579][T20006] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 1445.807925][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 1445.807949][ T31] audit: type=1400 audit(1790259228.764:4732): avc: denied { sys_module } for pid=30599 comm="syz.1.6217" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1446.045834][ T31] audit: type=1400 audit(1790259229.004:4733): avc: denied { create } for pid=30612 comm="syz.8.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1446.046746][ T31] audit: type=1400 audit(1790259229.004:4734): avc: denied { create } for pid=30612 comm="syz.8.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1446.047185][ T31] audit: type=1400 audit(1790259229.004:4735): avc: denied { write } for pid=30612 comm="syz.8.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1446.089648][ T31] audit: type=1400 audit(1790259229.044:4736): avc: denied { unmount } for pid=27091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1446.107690][ T31] audit: type=1400 audit(1790259229.064:4737): avc: denied { create } for pid=30612 comm="syz.8.6219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1446.160446][ T31] audit: type=1400 audit(1790259229.114:4738): avc: denied { ioctl } for pid=30617 comm="syz.5.6214" path="socket:[106796]" dev="sockfs" ino=106796 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1446.200721][ T31] audit: type=1400 audit(1790259229.154:4739): avc: denied { create } for pid=30619 comm="syz.8.6221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1446.247830][T30622] FAULT_INJECTION: forcing a failure. [ 1446.247830][T30622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1446.247859][T30622] CPU: 0 UID: 0 PID: 30622 Comm: syz.1.6222 Tainted: G L syzkaller #0 PREEMPT(full) [ 1446.247884][T30622] Tainted: [L]=SOFTLOCKUP [ 1446.247891][T30622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1446.247902][T30622] Call Trace: [ 1446.247909][T30622] [ 1446.247917][T30622] dump_stack_lvl+0x100/0x190 [ 1446.247947][T30622] should_fail_ex.cold+0x5/0xa [ 1446.247972][T30622] _copy_from_user+0x2e/0xd0 [ 1446.247995][T30622] iommufd_fops_ioctl+0x300/0x520 [ 1446.248021][T30622] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1446.248043][T30622] ? __fget_files+0x34/0x3d0 [ 1446.248076][T30622] ? selinux_file_ioctl+0x13b/0x290 [ 1446.248097][T30622] ? selinux_file_ioctl+0xb6/0x290 [ 1446.248118][T30622] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1446.248143][T30622] __x64_sys_ioctl+0x18e/0x210 [ 1446.248163][T30622] do_syscall_64+0x123/0x790 [ 1446.248191][T30622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.248209][T30622] RIP: 0033:0x7f12bf99e159 [ 1446.248225][T30622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.248241][T30622] RSP: 002b:00007f12c0942028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1446.248259][T30622] RAX: ffffffffffffffda RBX: 00007f12bfc25fa0 RCX: 00007f12bf99e159 [ 1446.248271][T30622] RDX: 00002000000006c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 1446.248282][T30622] RBP: 00007f12c0942090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.248293][T30622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1446.248305][T30622] R13: 00007f12bfc26038 R14: 00007f12bfc25fa0 R15: 00007fff22df3bc8 [ 1446.248330][T30622] [ 1446.252981][ T31] audit: type=1400 audit(1790259229.204:4740): avc: denied { map } for pid=30619 comm="syz.8.6221" path="socket:[106836]" dev="sockfs" ino=106836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1446.557117][ T31] audit: type=1400 audit(1790259229.514:4741): avc: denied { connect } for pid=30624 comm="syz.5.6223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1446.610628][T12422] usb 3-1: USB disconnect, device number 58 [ 1446.618726][T30630] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6224'. [ 1446.618752][T30630] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6224'. [ 1446.638411][T30631] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6224'. [ 1446.638439][T30631] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6224'. [ 1447.157832][T30642] ip_tables: iptables: counters copy to user failed while replacing table [ 1447.510408][T30651] macsec1: entered promiscuous mode [ 1447.510430][T30651] bridge0: entered promiscuous mode [ 1449.363164][T30676] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1450.058303][T30685] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 1450.580394][T30693] jffs2: notice: (30693) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1450.834315][ T31] kauditd_printk_skb: 78 callbacks suppressed [ 1450.834338][ T31] audit: type=1400 audit(1790259233.784:4820): avc: denied { write } for pid=27091 comm="syz-executor" name="136" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1450.834379][ T31] audit: type=1400 audit(1790259233.784:4821): avc: denied { remove_name } for pid=27091 comm="syz-executor" name="binderfs" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1450.835890][ T31] audit: type=1400 audit(1790259233.794:4822): avc: denied { write } for pid=27091 comm="syz-executor" name="136" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1450.835962][ T31] audit: type=1400 audit(1790259233.794:4823): avc: denied { write } for pid=27091 comm="syz-executor" name="136" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1450.836349][ T31] audit: type=1400 audit(1790259233.794:4824): avc: denied { write } for pid=27091 comm="syz-executor" name="136" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1450.838743][ T31] audit: type=1400 audit(1790259233.794:4825): avc: denied { rmdir } for pid=27091 comm="syz-executor" name="136" dev="tmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1451.006439][ T31] audit: type=1400 audit(1790259233.964:4826): avc: denied { module_request } for pid=30692 comm="syz.8.6246" kmod="netdev-bond0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1451.175585][ T31] audit: type=1400 audit(1790259234.134:4827): avc: denied { sys_module } for pid=30692 comm="syz.8.6246" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1451.273493][ T31] audit: type=1400 audit(1790259234.224:4828): avc: denied { write } for pid=30703 comm="syz.2.6249" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1451.467238][T12422] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1451.518451][ T31] audit: type=1400 audit(1790259234.474:4829): avc: denied { create } for pid=30707 comm="syz.1.6250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1451.616070][T12422] usb 6-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00 [ 1451.616956][T12422] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30 [ 1451.616993][T12422] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1451.617017][T12422] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66 [ 1451.617040][T12422] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1451.617067][T12422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.619465][T12422] usb 6-1: config 0 descriptor?? [ 1452.277090][T30719] netlink: 100 bytes leftover after parsing attributes in process `syz.8.6254'. [ 1452.311826][T30721] jffs2: notice: (30721) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1452.391670][T26656] IPVS: starting estimator thread 0... [ 1452.431803][T12422] usbhid 6-1:0.0: can't add hid device: -71 [ 1452.431878][T12422] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1452.466007][T12422] usb 6-1: USB disconnect, device number 51 [ 1453.084057][T30724] IPVS: using max 75 ests per chain, 180000 per kthread [ 1453.138421][T30730] jffs2: notice: (30730) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1453.270765][T30735] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1453.432916][T30750] veth1_virt_wifi: entered allmulticast mode [ 1453.439756][T30746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6262'. [ 1453.471561][T30746] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6262'. [ 1453.644272][T30754] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6261'. [ 1453.760818][ T4654] IPVS: starting estimator thread 0... [ 1453.843316][T30755] IPVS: using max 40 ests per chain, 96000 per kthread [ 1454.038878][T30762] jffs2: notice: (30762) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1454.091062][T30764] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1454.101415][T30760] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1454.514238][T30775] FAULT_INJECTION: forcing a failure. [ 1454.514238][T30775] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.514270][T30775] CPU: 0 UID: 0 PID: 30775 Comm: syz.7.6268 Tainted: G L syzkaller #0 PREEMPT(full) [ 1454.514297][T30775] Tainted: [L]=SOFTLOCKUP [ 1454.514304][T30775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1454.514316][T30775] Call Trace: [ 1454.514322][T30775] [ 1454.514331][T30775] dump_stack_lvl+0x100/0x190 [ 1454.514361][T30775] should_fail_ex.cold+0x5/0xa [ 1454.514387][T30775] should_failslab+0xc2/0x120 [ 1454.514411][T30775] __kmalloc_cache_noprof+0x91/0x6d0 [ 1454.514436][T30775] ? __kasan_kmalloc+0xaa/0xb0 [ 1454.514456][T30775] ? bpf_init_fs_context+0x49/0x340 [ 1454.514489][T30775] bpf_init_fs_context+0x49/0x340 [ 1454.514518][T30775] alloc_fs_context+0x60c/0xf40 [ 1454.514549][T30775] __x64_sys_fsopen+0xed/0x220 [ 1454.514570][T30775] do_syscall_64+0x123/0x790 [ 1454.514603][T30775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.514622][T30775] RIP: 0033:0x7ff1f939e159 [ 1454.514638][T30775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.514655][T30775] RSP: 002b:00007ff1f75f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1454.514674][T30775] RAX: ffffffffffffffda RBX: 00007ff1f9625fa0 RCX: 00007ff1f939e159 [ 1454.514686][T30775] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 1454.514698][T30775] RBP: 00007ff1f943506b R08: 0000000000000000 R09: 0000000000000000 [ 1454.514709][T30775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1454.514719][T30775] R13: 00007ff1f9626038 R14: 00007ff1f9625fa0 R15: 00007ffda115bb08 [ 1454.514744][T30775] [ 1454.732593][T30775] 0x000000000010-0x000000000014 : "" [ 1454.885937][T30775] ftl_cs: FTL header corrupt! [ 1455.193278][T30786] ip_tables: iptables: counters copy to user failed while replacing table [ 1455.705478][T30799] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6275'. [ 1455.872815][ T31] kauditd_printk_skb: 166 callbacks suppressed [ 1455.872832][ T31] audit: type=1326 audit(1790259238.824:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30802 comm="syz.7.6276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1455.872875][ T31] audit: type=1326 audit(1790259238.824:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30802 comm="syz.7.6276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1455.872915][ T31] audit: type=1326 audit(1790259238.824:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30802 comm="syz.7.6276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff1f939dec2 code=0x7ffc0000 [ 1455.906386][ T31] audit: type=1326 audit(1790259238.834:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30802 comm="syz.7.6276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1455.906431][ T31] audit: type=1326 audit(1790259238.834:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30802 comm="syz.7.6276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff1f939df57 code=0x7ffc0000 [ 1455.906470][ T31] audit: type=1326 audit(1790259238.834:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30802 comm="syz.7.6276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff1f935ae51 code=0x7ffc0000 [ 1455.906508][ T31] audit: type=1326 audit(1790259238.834:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30802 comm="syz.7.6276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff1f939ef49 code=0x7ffc0000 [ 1455.906545][ T31] audit: type=1326 audit(1790259238.834:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30802 comm="syz.7.6276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff1f935aebb code=0x7ffc0000 [ 1455.906582][ T31] audit: type=1326 audit(1790259238.834:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30802 comm="syz.7.6276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1455.906620][ T31] audit: type=1326 audit(1790259238.834:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30802 comm="syz.7.6276" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1f939e159 code=0x7ffc0000 [ 1455.923766][T30803] wg2 speed is unknown, defaulting to 1000 [ 1456.314189][T30813] jffs2: notice: (30813) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1456.981872][ T124] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1457.143181][ T124] usb 6-1: Using ep0 maxpacket: 32 [ 1457.145228][ T124] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1457.145271][ T124] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1457.146244][ T124] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1457.146264][ T124] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.146281][ T124] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1457.146299][ T124] usb 6-1: config 128 has no interface number 0 [ 1457.146330][ T124] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1457.146351][ T124] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1457.146370][ T124] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1457.241794][ T124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.241818][ T124] usb 6-1: Product: syz [ 1457.241832][ T124] usb 6-1: Manufacturer: syz [ 1457.241846][ T124] usb 6-1: SerialNumber: syz [ 1457.581566][T30827] wg2 speed is unknown, defaulting to 1000 [ 1458.133982][ T124] usb 6-1: USB disconnect, device number 52 [ 1458.207790][T25224] udevd[25224]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1458.493076][T12445] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1458.657046][T12445] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 1458.690927][T12445] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1458.690961][T12445] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1458.690981][T12445] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1458.691012][T12445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.698774][T30843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1458.698855][T30843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1458.705659][T12445] pl2303 2-1:1.0: pl2303 converter detected [ 1458.713532][T12445] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 1459.224378][T30843] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 1459.224667][T30843] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 1459.224925][T30843] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 1459.225211][T30843] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 1459.225543][T30843] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1459.335328][T30860] jffs2: notice: (30860) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1459.524287][T30843] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 1459.526424][T30843] pl2303 ttyUSB0: error sending break = -32 [ 1461.026065][ T31] kauditd_printk_skb: 136 callbacks suppressed [ 1461.026082][ T31] audit: type=1400 audit(1790259243.985:5142): avc: denied { create } for pid=30881 comm="syz.5.6294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1461.027615][ T31] audit: type=1400 audit(1790259243.985:5143): avc: denied { write } for pid=30881 comm="syz.5.6294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1461.027925][ T31] audit: type=1400 audit(1790259243.985:5144): avc: denied { read } for pid=30881 comm="syz.5.6294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1461.270018][ T31] audit: type=1400 audit(1790259244.205:5145): avc: denied { map_create } for pid=30881 comm="syz.5.6294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1461.270106][ T31] audit: type=1400 audit(1790259244.205:5146): avc: denied { bpf } for pid=30881 comm="syz.5.6294" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1461.270146][ T31] audit: type=1400 audit(1790259244.205:5147): avc: denied { map_read map_write } for pid=30881 comm="syz.5.6294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1461.282348][ T31] audit: type=1400 audit(1790259244.235:5148): avc: denied { read write } for pid=28632 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1461.282391][ T31] audit: type=1400 audit(1790259244.235:5149): avc: denied { open } for pid=28632 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1461.285147][ T31] audit: type=1400 audit(1790259244.235:5150): avc: denied { ioctl } for pid=28632 comm="syz-executor" p ** replaying previous printk message ** [ 1461.285147][ T31] audit: type=1400 audit(1790259244.235:5150): avc: denied { ioctl } for pid=28632 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1461.285735][ T31] audit: type=1400 audit(1790259244.245:5151): avc: denied { recv } for pid=30881 comm="syz.5.6294" saddr=10.128.0.169 src=30006 daddr=10.128.1.21 dest=54168 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1461.434643][T30889] FAULT_INJECTION: forcing a failure. [ 1461.434643][T30889] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.434675][T30889] CPU: 1 UID: 0 PID: 30889 Comm: syz.2.6295 Tainted: G L syzkaller #0 PREEMPT(full) [ 1461.434697][T30889] Tainted: [L]=SOFTLOCKUP [ 1461.434703][T30889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1461.434712][T30889] Call Trace: [ 1461.434718][T30889] [ 1461.434725][T30889] dump_stack_lvl+0x100/0x190 [ 1461.434751][T30889] should_fail_ex.cold+0x5/0xa [ 1461.434775][T30889] should_failslab+0xc2/0x120 [ 1461.434796][T30889] __kmalloc_noprof+0xfc/0x840 [ 1461.434813][T30889] ? rcu_is_watching+0x13/0xc0 [ 1461.434834][T30889] ? tomoyo_encode2+0xfb/0x3c0 [ 1461.434858][T30889] tomoyo_encode2+0xfb/0x3c0 [ 1461.434880][T30889] tomoyo_encode+0x29/0x50 [ 1461.434900][T30889] tomoyo_realpath_from_path+0x18c/0x690 [ 1461.434925][T30889] tomoyo_path_number_perm+0x23c/0x580 [ 1461.434941][T30889] ? tomoyo_path_number_perm+0x22e/0x580 [ 1461.434960][T30889] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1461.434986][T30889] ? __lock_acquire+0x5c0/0x1f40 [ 1461.435015][T30889] ? __fget_files+0x34/0x3d0 [ 1461.435035][T30889] ? find_held_lock+0x2b/0x80 [ 1461.435056][T30889] ? hook_file_ioctl_common+0x140/0x440 [ 1461.435083][T30889] ? __fget_files+0x21f/0x3d0 [ 1461.435109][T30889] security_file_ioctl+0xd3/0x230 [ 1461.435128][T30889] __x64_sys_ioctl+0xb7/0x210 [ 1461.435147][T30889] do_syscall_64+0x123/0x790 [ 1461.435173][T30889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.435190][T30889] RIP: 0033:0x7f4cdfb9e159 [ 1461.435203][T30889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1461.435217][T30889] RSP: 002b:00007f4ce0a5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1461.435234][T30889] RAX: ffffffffffffffda RBX: 00007f4cdfe25fa0 RCX: 00007f4cdfb9e159 [ 1461.435244][T30889] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000004 [ 1461.435254][T30889] RBP: 00007f4ce0a5d090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.435263][T30889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.435273][T30889] R13: 00007f4cdfe26038 R14: 00007f4cdfe25fa0 R15: 00007ffe880da038 [ 1461.435296][T30889] [ 1461.439012][T30889] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1461.439256][T30889] ------------[ cut here ]------------ [ 1461.439262][T30889] !reader [ 1461.439267][T30889] WARNING: kernel/trace/ring_buffer.c:8005 at ring_buffer_map_get_reader+0x5f3/0x930, CPU#1: syz.2.6295/30889 [ 1461.743567][T30889] Modules linked in: [ 1461.747462][T30889] CPU: 1 UID: 0 PID: 30889 Comm: syz.2.6295 Tainted: G L syzkaller #0 PREEMPT(full) [ 1461.758392][T30889] Tainted: [L]=SOFTLOCKUP [ 1461.762706][T30889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1461.772753][T30889] RIP: 0010:ring_buffer_map_get_reader+0x5f3/0x930 [ 1461.779250][T30889] Code: ff 48 89 df e8 be 20 fe ff 48 89 c5 e8 76 86 fb ff 48 85 ed 0f 85 9f fc ff ff 4c 8b 74 24 58 4c 8b 7c 24 60 e8 5e 86 fb ff 90 <0f> 0b 90 e8 55 86 fb ff 49 8d bf d0 01 00 00 48 b8 00 00 00 00 00 [ 1461.798839][T30889] RSP: 0018:ffffc90005207d98 EFLAGS: 00010093 [ 1461.804886][T30889] RAX: 0000000000000000 RBX: ffff88801c095000 RCX: 0000000000000001 [ 1461.812835][T30889] RDX: ffff88808c468000 RSI: ffffffff82109c32 RDI: ffff88808c468000 [ 1461.820784][T30889] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1461.828733][T30889] R10: 0000000000000e58 R11: ffff88801c0950b0 R12: ffff88801c0950b8 [ 1461.836685][T30889] R13: dffffc0000000000 R14: ffff88801c095198 R15: ffff88801c052000 [ 1461.844635][T30889] FS: 00007f4ce0a5d6c0(0000) GS:ffff888123c53000(0000) knlGS:0000000000000000 [ 1461.853562][T30889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1461.860126][T30889] CR2: 00007f0a8bb556c8 CR3: 0000000036a43000 CR4: 00000000003526f0 [ 1461.868077][T30889] Call Trace: [ 1461.871335][T30889] [ 1461.874255][T30889] ? __pfx_ring_buffer_map_get_reader+0x10/0x10 [ 1461.880488][T30889] tracing_buffers_ioctl+0x2e6/0x3d0 [ 1461.885759][T30889] ? __pfx_tracing_buffers_ioctl+0x10/0x10 [ 1461.891552][T30889] __x64_sys_ioctl+0x18e/0x210 [ 1461.896298][T30889] do_syscall_64+0x123/0x790 [ 1461.900879][T30889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.906755][T30889] RIP: 0033:0x7f4cdfb9e159 [ 1461.911149][T30889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1461.930739][T30889] RSP: 002b:00007f4ce0a5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1461.939131][T30889] RAX: ffffffffffffffda RBX: 00007f4cdfe25fa0 RCX: 00007f4cdfb9e159 [ 1461.947084][T30889] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000004 [ 1461.955033][T30889] RBP: 00007f4ce0a5d090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.962982][T30889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.970931][T30889] R13: 00007f4cdfe26038 R14: 00007f4cdfe25fa0 R15: 00007ffe880da038 [ 1461.978891][T30889] [ 1461.981894][T30889] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1461.989153][T30889] CPU: 1 UID: 0 PID: 30889 Comm: syz.2.6295 Tainted: G L syzkaller #0 PREEMPT(full) [ 1462.000070][T30889] Tainted: [L]=SOFTLOCKUP [ 1462.004382][T30889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1462.014416][T30889] Call Trace: [ 1462.017676][T30889] [ 1462.020587][T30889] dump_stack_lvl+0x100/0x190 [ 1462.025267][T30889] vpanic+0x553/0x970 [ 1462.029231][T30889] ? __pfx_vpanic+0x10/0x10 [ 1462.033719][T30889] panic+0xd1/0xe0 [ 1462.037425][T30889] ? __pfx_panic+0x10/0x10 [ 1462.041829][T30889] check_panic_on_warn.cold+0x19/0x34 [ 1462.047182][T30889] ? ring_buffer_map_get_reader+0x5f3/0x930 [ 1462.053073][T30889] __warn.cold+0x191/0x318 [ 1462.057472][T30889] __report_bug+0x30f/0x440 [ 1462.061963][T30889] ? ring_buffer_map_get_reader+0x5f3/0x930 [ 1462.067839][T30889] ? __pfx___report_bug+0x10/0x10 [ 1462.072850][T30889] ? rcu_is_watching+0x13/0xc0 [ 1462.077599][T30889] ? trace_contention_end+0x126/0x160 [ 1462.082955][T30889] ? rb_set_head_page+0x1e6/0x2f0 [ 1462.087967][T30889] ? ring_buffer_map_get_reader+0x5f3/0x930 [ 1462.093843][T30889] report_bug+0xb3/0x220 [ 1462.098073][T30889] ? ring_buffer_map_get_reader+0x5f3/0x930 [ 1462.103948][T30889] handle_bug+0x16a/0x2a0 [ 1462.108261][T30889] exc_invalid_op+0x17/0x50 [ 1462.112745][T30889] asm_exc_invalid_op+0x1a/0x20 [ 1462.117574][T30889] RIP: 0010:ring_buffer_map_get_reader+0x5f3/0x930 [ 1462.124058][T30889] Code: ff 48 89 df e8 be 20 fe ff 48 89 c5 e8 76 86 fb ff 48 85 ed 0f 85 9f fc ff ff 4c 8b 74 24 58 4c 8b 7c 24 60 e8 5e 86 fb ff 90 <0f> 0b 90 e8 55 86 fb ff 49 8d bf d0 01 00 00 48 b8 00 00 00 00 00 [ 1462.143643][T30889] RSP: 0018:ffffc90005207d98 EFLAGS: 00010093 [ 1462.149690][T30889] RAX: 0000000000000000 RBX: ffff88801c095000 RCX: 0000000000000001 [ 1462.157639][T30889] RDX: ffff88808c468000 RSI: ffffffff82109c32 RDI: ffff88808c468000 [ 1462.165592][T30889] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1462.173541][T30889] R10: 0000000000000e58 R11: ffff88801c0950b0 R12: ffff88801c0950b8 [ 1462.181496][T30889] R13: dffffc0000000000 R14: ffff88801c095198 R15: ffff88801c052000 [ 1462.189452][T30889] ? ring_buffer_map_get_reader+0x5f2/0x930 [ 1462.195333][T30889] ? ring_buffer_map_get_reader+0x5f2/0x930 [ 1462.201217][T30889] ? __pfx_ring_buffer_map_get_reader+0x10/0x10 [ 1462.207445][T30889] tracing_buffers_ioctl+0x2e6/0x3d0 [ 1462.212718][T30889] ? __pfx_tracing_buffers_ioctl+0x10/0x10 [ 1462.218512][T30889] __x64_sys_ioctl+0x18e/0x210 [ 1462.223258][T30889] do_syscall_64+0x123/0x790 [ 1462.227838][T30889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.233710][T30889] RIP: 0033:0x7f4cdfb9e159 [ 1462.238104][T30889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1462.257692][T30889] RSP: 002b:00007f4ce0a5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1462.266083][T30889] RAX: ffffffffffffffda RBX: 00007f4cdfe25fa0 RCX: 00007f4cdfb9e159 [ 1462.274033][T30889] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 0000000000000004 [ 1462.281999][T30889] RBP: 00007f4ce0a5d090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.289948][T30889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.297897][T30889] R13: 00007f4cdfe26038 R14: 00007f4cdfe25fa0 R15: 00007ffe880da038 [ 1462.305872][T30889] [ 1462.309062][T30889] Kernel Offset: disabled [ 1462.313370][T30889] Rebooting in 86400 seconds..