last executing test programs: 10m53.558975532s ago: executing program 1 (id=20): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r5 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000640)={0x203, 0x16, 0x12}, 0x18) writev(r5, &(0x7f00000003c0)=[{0x0}], 0x1) sendto$inet(r1, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) io_uring_setup(0x650d, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x25, 0xab}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff67756172640000000400028008001b000300"/40], 0x40}}, 0x0) socket(0x28, 0x5, 0x0) 10m52.626727002s ago: executing program 1 (id=22): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@private0, @dev={0xfe, 0x80, '\x00', 0x2f}, @empty, 0x8, 0x0, 0x0, 0x500, 0x0, 0x4d30356, r3}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', r3, 0x29, 0x86, 0x0, 0x2, 0x2e, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x80, 0x5, 0x9}}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) rseq(&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x8, 0xb, 0x4}, 0x2}, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) wait4(0x0, 0x0, 0x1000000, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x2) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000040)={{r6}, 0x9, 0xfffffffffffffffd}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000001c0)={{0x91, 0x9, 0xf403, 0x5}, 'syz1\x00', 0x1b}) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r7, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, &(0x7f0000000000)=ANY=[], 0xff2e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000005c0)={r4, @in6={{0xa, 0x4e22, 0x3, @mcast2, 0x4}}}, &(0x7f0000000680)=0x84) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000240)=0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7a}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x20000010) 10m50.165395572s ago: executing program 1 (id=27): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000002180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x2, 0x270bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x24000048) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x79d3292484da1f21, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000f97000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r4}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) rmdir(&(0x7f0000001180)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 10m48.706574188s ago: executing program 1 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffffb888f5d4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 10m47.745236499s ago: executing program 1 (id=31): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaa6dde655713786dd60ff00f500130600fe8000000000000000000000000000aafe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c200009078fffd1e1220d6e0000001000500"/28], 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000180012800800010073"], 0x38}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x2, 0x5) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0xfffffffffffffffe) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r8, @ANYBLOB="110028bd7000fbdbdf2503"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x200100c0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r7, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f00000001c0)={0x20, r9, 0x0}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000d060103000000000200000212000300680873623a6e65742c706f72740000000000"], 0x28}, 0x1, 0x0, 0x0, 0x6000090}, 0x84) r10 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002000000204f0451b600000000000109022400013653a0d2a3fb00004020090400020203000300092101000101222800090581034000044579"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000140)={0x2c, &(0x7f0000000240)=ANY=[@ANYRES8=r7], 0x0, 0x0, 0x0, 0x0}, 0x0) 10m47.490890704s ago: executing program 1 (id=33): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x40000}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x20040800) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000180)='\x00', 0x700, 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="67650f005a34440f0666460f71e0450f01b2000000000f0f9648000000b7c403f942f40e670f01c30f01cf366566470f01df0f005b5c", 0xf}], 0x1, 0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000080)={r8, 0x8}, 0x8) r9 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x12a980) ioctl$VIDIOC_S_FMT(r9, 0xc0d05640, &(0x7f0000000180)={0x2, @pix={0x5, 0x4982, 0x56595559, 0x0, 0xffff, 0x3, 0x3, 0xfeedcafe, 0x0, 0x0, 0x0, 0x5}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) write$cgroup_int(r10, &(0x7f0000000100), 0x12) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 10m47.312076452s ago: executing program 32 (id=33): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, 0x2, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x40000}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x20040800) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x0, 0x39d}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000180)='\x00', 0x700, 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="67650f005a34440f0666460f71e0450f01b2000000000f0f9648000000b7c403f942f40e670f01c30f01cf366566470f01df0f005b5c", 0xf}], 0x1, 0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000080)={r8, 0x8}, 0x8) r9 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x12a980) ioctl$VIDIOC_S_FMT(r9, 0xc0d05640, &(0x7f0000000180)={0x2, @pix={0x5, 0x4982, 0x56595559, 0x0, 0xffff, 0x3, 0x3, 0xfeedcafe, 0x0, 0x0, 0x0, 0x5}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) write$cgroup_int(r10, &(0x7f0000000100), 0x12) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 9m55.975944608s ago: executing program 0 (id=158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x10, 0x2, 0x7, 0xfe00, 0x8e7, 0x3ffffd, 0x7, 0x0, 0x2, 0x7ffffffffffffffe, 0x5, 0x601, 0x6, 0x3, 0x20000001, 0x4], 0xd5d5c004, 0x115694}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0x3, 0x4, 0xd, 0x0, 0x8, 0x4f, 0xd0, 0xe, 0x6, 0x9, 0x7, 0x8, 0x0, 0x7, 0x8, 0x6, 0x70, 0x5, 0x0, '\x00', 0x7, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m54.189447498s ago: executing program 0 (id=164): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x27, 0x4) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x40000fb, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001380)={0x0, 0x0, "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", "7dabecfe536c6e2b78f1a944ace9ce39da751c1ce0bb4a83990ffac0c3f3bc46c7f2c9ea9f868e319e49eea14eb427b3463f4077108891b4bb53a1c1079d7f6f23d3c11aa52d87c0a688dbb3879eea7e69584ac9542136324ae437a9e5079e295bc29bdb88115875a5909435ea0e407e83c1c258914b9ae17cd47dd5864b238de3ecaadd3acb0477804b53cd3178f3819020d22176feee75afea9de6cffc6548f17a80c4a11509dc44c4e70722cf75314bada8a642bf9c1c777b639d5798617ce0762cdacae5f0cfc2a771098c828bda02ab22b7729c35251d6804c4d8f59caf92b7735eaf233ff43bb9e4476f73b79f82184f0db8265c59d66c63acd384f50db6ca2200dc20c909d7657cc253dd4a16a0fb5c5c27a61cd9d715c0655082487cd49195f5b8fb1408c43f7769d98d100cf82e2a7f9c195d6229b15701b9296df0c4fdc1835dadac44b467a967d6eb55b979c60f06906dbae092b23c0ba220fb74365214c987b7ff0a5610c0b72e9b3398a2f6f9986299e817dd70d23f65eaf3682c15a7069f0ecd942b13f03009132700261f3dda59520000be3baacacd7b4044142c576c28122e9f07fec4569b582e7ea3827c467a889c055b07dd629590762f8beee57a6800d76ee913c2b73d93b56b290cc6881be85f7db2beb6ec133ff58a6cf8f80917ab9aaf60cdaa803ef3999d2de1fae4f2c487ea9e9239176fb2a4e26752af4c675a62ae203df5a08dd96f3556282d74e0998365f83820921145d89e45679792c155ccde544b9a6474a66b2a131042f99f544db464eaefc817cf8692325628b5f30ac416eda95a72c12c08766df30b7f94c223df2a977717612ca9d26565c46372fe9933d23cf7e8f47159d6ea536ff485d13a981a50d083aaeae1fa8b6ce0991ff0ca8760cc1120f48d9e3aa76c8cb78e31c389e8cdd5f7cd89834bd3e83ae207e113a68899ee3269b8f9a99d5ff6ab8d5e4479833fa8a95e39828a413e5d0558d3fd4296ef3dc771d60ff9f14e4776c602e1534366e8490361219857d4ea01531f60dfc9058be86406c186ab3f1a6f0806214a9afeb3797da33c8b17ada69bf9fba1cbae86995be6e4e3ef8f0ff9f10c0377d92a84db4d38ee5650ab8203f759d169460d6941ad149c1fda49671e0a2ef67be947580f735a1055fde2866ff11dde49886e49315f3cce6e08ab8264e1dc4f639a8251562df7b73abe4190f4e7a05dccfb44a65acbf4ab424acec1c2ec098ed8704992a1476b3ced2d68804828ef9ad9ffd892b9aa11bbf7d929b5ec7db37c53f338b8cdcb4a617d623768f0ea653a7678f19134abe32242fc12e3eeca50c2c2a559c5a59152652c30fcb1297d628c699b8944f6d64591d225803bd7c09e41eadbb2682fa3b2643e3b0e9954e78593970d673396f25d2a6147b894ae445353201f1b74d05863a54ad5b202ab428237a628485e544ed2ab22df0e94f420249600fcd38be82eec5c146fde758962f1e47260ecec3b19e0ee597f5c720b1ee0b94f1b04c45555ed0a268cd3427136b6c9a6dbb6f2d94e66f4ae82dfdc6b61b6a4c9e81aa760a111e0b1d55b5bcfcb3b3efe83d878f1e30766ec91e76e05d58124c2c43465386c11cd4988b166538341d56d2cbce3f716eed667013eaa7ae77d3d4f3ee9c75bd179974e2930516bdf887893419d932b8ff852d8eb5643e885ad891aa00f68a895d78df5a761d74660c8eaf595e150ae9902ab3b16836ba5ae4f9d2584eb59c8a1c1268c5d9161d4f6b169c84ba7c4882330509fe5a89b51e219491d7fda3c2a647be076342ff277b62567faa8b90aa63a105c4ee835a9ae39a1c7b02968f007b3875536631e6c994df422d996eb10535905fc5606be25eb4f65d337b5c7d5363e7a0287b15446735f3e419918208facba5bae90d2ccedb17a3dd71440d96a6c56f1a380c5308577655d5770776eb4034786f5d040e4554cdbcfb2172808b3c52ad15db79813ea665fa6ea6ad02d76134d0831a893f0d071827abcbfb484cc56522744d44988ad9c97c6c6c5bd871b26979fe7a0f9ab9432472eec121692f3c122463311197c4b2a89e279855f476a349d411ad7c46923c34fefa05b3f27839819d6f0d9a396cb949549299dfd16a503d95cb800b6137ddf8873045d01047490d285aeb3d64e9986b61d8fc10e110fe80e87bddc88181ebcc779e80c546e5e9cf99f3c8d4b995e2610c60b62396e5ec64c45597ab69ff52c388edffd8cff1bb306be4338659f130d71e3fce09fe85dc79369dc493f45038bc7b25e61b48df1e7105fa68443d4773034b1e3005c9e2eb83e0214838f5a24a69cfc5d53440356e3efa39a65aeb56eb73ec04213041543cca6192bdd130a1f094718f5066e9483cb01582fbe7bd56206274c209875a65e1abd46d5c7b426f30e523c8faee065e8bd387751bcfb547a606e852d70ea8e84d6c88933c4f8888120acada53db9c47fd6466a8ba3892bbda705255ccd17221f9987f03ef1174e11b311d2986787c571767d70abe230077e5d67000645fa942f0388255e9a0a1a361e33403830d177baa5c09b7d653e5f5e7f85b16f7deea51cf89ea5db5310b73e0c76aeec8f4e9336008873d1b70c1874ecdda2572ba450873ee4565d29e001f0f626ba007cbbdb13c24373df117932bcb9b02ead071abf332bf86dae8eb9ec82b0d1fb610d684ca6e23f933878a1fbf4719bbed5f43f5457b0e8ecfaa023d4a1be1c12f7f7dbda4b8247a8a0dc325a7d7e4789b10e27fd403d27b0e8018a6986dc43fe606072df12b40c60c79bf73a9e586ca9ac071d94682f432d4791a151a1562f209c55789e54afa82640cbd8e2efe0c69717756a30d8cdde77121e935a9c3f21c2e41152e47871c0cbc58879c4eaa879d89855efa2eb08166410a48dc53ac58c54131cd7ee55524abb3677165544bf01acc597773bab57e6db7342cf6222ae6f260daea5723d35cf8f7e7eeadb4bd4559f4be9a6f3970f5c407487ca8af7fc5fe200582f19e15ac4920a34777a87a714b67c0f8ecbc421490050672998ee8433993b0276785c2dca34faf92717139377dd5e9b7bc713f327990eef1797282c007abb61f35a085d6e2b245f3f37e112a219f397e038a1deec23f2e02235e54431a6ea669b18e5509dcd342cd60199bb8d26febcffa09851b720e456f51ce03a55c9fdf10a737758d3dd93f6471008e0167134a16bbc6afbc8d30354d5f7eb37f9bc9d8509eefbd9250e368ef3f560c38b415a5ab8b0ff36b8959279ae6dd33de4088779bad860248067210cf90825a84bb9c4fdab5cc51edb7e802f009876f16ca6e97f5cf711f1c2717efd6d8c0a28d3ccf325d0c50bc4250d8095ccfb8f5da7ed07d3af176a14800822a48f49e75ffd6527faec5e1d6980222d144ead99bbe74ce64e86497084bdc7668fc787187436a2172aa79271fad2a5880ab066248942636cac2fb1c79b66f9501a078b8306cf57a65fb27b99ecb3cb540461302e08cda296ae72f4fbe452cc346c12dfef9673dfae0526cf44ddbd4b5cee1859b26bb6ef336709a683d8e5ef998551e98e7cf82abe3c4562235f44cd7eb7cae9cf25f20e690f7bb63fb2a469b035af537633c0aacac5834a2b22890e10c0f77ad2a4c2eba2cc3aca650b967f3189b34dc63fe79110a40e2307a351c8f9c35e9b5f54c9e80e3d9b000b6d441c495811f0793d88841c54b034c4f069d490125709cb2beab7dd45094937cc8feb95fa5ab7a408353f43f7769b20807991acb069c90f73b31082ffe942b16725b79a436a936d9a67ade35e8931a1565f310935f1ea35879a4350bc9ce5c7408a502473e6fc3a7a288e4d129fc6c124dcda811ba4ff88e2e8cfb0d57993d65d7fbeffcb7fe8d742be4ab1247a361644e5a2345d0500642230aee1247e82fc0e12b84583062bed2948148baf2e1c99aa71f3dfb01d7a168ef7b38cb1964ebf928b682dbdeeacfc713ee5a54a481d952bd59749d36b9498a7daab1066dd689bc8f0be3ae6c2913560cbc1a8a26dd21c1c2c7ad626a694871b09e4821a17867bda81e4be41d3677c76c6fd897af906fbd44148701f4ffd2772f926092642ab0eeafe9f638308b8cd576d441195f6097fef62226444672ef58811bdb9fecfd6bfa1e89a9ea6b98e715a2c770d2e5bae608ce5a5e69bdce184da41512c3f559b2363c8de2e76c1fb1208538e682182a8a9ed4d0ae6f16f7559e1683061fc2a0adb422cff7f10648c5e85480fca9d3496fd5680acd24e7918a3bf8ea598386deabbd30b4c32fbe51d759ac447d888b7ef7dceb49ac2f6ea2bb52f8db5c0ba61f6b800a3c20de73ca080e5e69d133f2d2f3b735ddf6d8eee1cb4ca14d594183e4302e7f70a035bb25a2b0b8688b03635214559144cad533f75fcec4fff28b148f0aa010bc500271034108046c720c87d3be5bfa7ff9b892aa28c6e85300d043038b89f3df27e1f72c630e81cc4eb8d716ece98f80e605afeda5c90430f114b605b14166f93ab18912d6ddc1a2161c721d6791169e15efc4219e33a423bb4a92e671ca5a82ffef88b551e0d5e5ea6dd741a8b8d3859f085808d27fcc030d3726ab97439d9e30540a9137e8f21ac27d7974b8a54d3d9b0e9da73ff1195cb0fb3dfe5fe230d1af03de1e7b20b6c720322690f411a04158123e51aa40fdd1404746d7f2f071fd90ea9f225a6ddbedac86080221b94da24deb2e6c48268b496728cd3038cbb315dabec76c55e7315c5f90e4f5488e78a2c68095c167c5bba68ad2eb8323058115ad0b47f2d9f4500dbae57cee19a1cf4eb761da126c30734d279b7173ccd7128d4bd8a362714cb542b7a5522c5648e3687c5e9b40a6d0a942d2bc9f50d37bf5633f522ec333a2751ebb27e1e7c77419145ba51ac194877c19d3c794d9cb0faf527223263be90aa38ccb5aeb0293c5ded194e4ef5b2c718336884e8888204892d9bdcf83d4ee49441d1c6c97beaa9d75b3d286c6e9e9c8f4cdaaaf6ad56ec72ef718069784cce2c89a3f96a624072e4c8f4b5cc1e65c1f45c99b259bd8d720af8338b431ff723f89d4636861d176d7d1205ca7d1e4b070e0e1fd6f36a5c6447935a35423e4449cb777f34a723d0590d6804ab25051a85ed18adfe67f80a289434bc274d27d1b140a292f0641e3501e5f3d450bbdf345c2cfac1950f4e86e13ede02d2b2be220caaa44712a7e652b02b509662aba6ebf128a0e843b99924ad5c983ae27743df16f493446460ea3b664c0c04863598e81f8a267a9dfa6fc87d8306926dca86bd998f3fe165b9b5335c58fa91b14dd5f02c15da45d1e6e769c8794f6b38c014269ae4dd1ff5f657571afd988df6dad39ade28a4521d26259001186a0756ba9adc7bb6b0aea2cbcc276856544e6ec283"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000043c0)={r1, 0x0, "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", "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"}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r2, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) bpf$MAP_CREATE(0x100000000000018, &(0x7f0000000380)=@base={0xa, 0x16, 0xeb5, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1, 0xa, 0x203) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000000)) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r10, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r10}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}}, 0x440b0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000100)="6b486c05aad670b24b0d1c578527", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9m51.661559263s ago: executing program 0 (id=168): syz_open_dev$dri(0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffe38}, 0x10) 9m50.120698739s ago: executing program 0 (id=170): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x3f, @in6={0xa, 0x4e23, 0x9, @local, 0x2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x118) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000140)='./file0\x00'}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) truncate(0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x180, 0xa42, 0xb}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 9m49.102582767s ago: executing program 0 (id=174): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETALL(r2, 0x0, 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) r7 = semget(0x1, 0x4, 0x69c) semop(r7, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r10, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000000c0)={[0x10, 0x2, 0x7, 0xfe00, 0x8e7, 0x3ffffd, 0x7, 0x0, 0x2, 0x7ffffffffffffffe, 0x5, 0x601, 0x6, 0x3, 0x20000001, 0x4], 0xd5d5c004, 0x115694}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 9m47.745631631s ago: executing program 0 (id=177): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"], 0x310) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fbdbdf2500000000", @ANYRES32=r4, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20044800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000015}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 9m32.514191583s ago: executing program 33 (id=177): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"], 0x310) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00010028bd7000fbdbdf2500000000", @ANYRES32=r4, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20044800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000015}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 2m39.523264494s ago: executing program 6 (id=1433): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000eef05b30054ebe41e3e3b66954b9c900", @ANYRES16, @ANYBLOB="200000000000fbdbdf250600000008000300", @ANYRES32=r1, @ANYBLOB="0000990002000000650000002200050008000000"], 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/71, 0x47}, {&(0x7f0000000280)=""/43, 0x2b}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f0000000840)=""/213, 0xd5}, {&(0x7f0000000540)=""/22, 0x16}], 0x6, 0x202, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0xffffffffffffff9c, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x19) ioctl$TIOCSSOFTCAR(r7, 0x40085500, &(0x7f0000000080)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2m38.331285387s ago: executing program 6 (id=1438): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000180)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) syz_clone3(&(0x7f0000000380)={0x800100, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m36.207046415s ago: executing program 6 (id=1443): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x8001, 0x20}, 0x18) renameat2(r7, &(0x7f0000000480)='./file1/file2\x00', r7, &(0x7f00000004c0)='./file1\x00', 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000040)=0x9, 0x8) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000002a82, 0x0) fadvise64(r8, 0x2, 0x5, 0x4) keyctl$set_reqkey_keyring(0xe, 0x4) 2m35.138698363s ago: executing program 6 (id=1444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="61023300c0300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m34.234283934s ago: executing program 6 (id=1447): socket(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d40)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2m32.069622618s ago: executing program 6 (id=1451): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r1, &(0x7f0000001500)=""/4075, 0xfeb, 0x7fff) read$FUSE(r0, 0x0, 0x0) getresuid(&(0x7f0000000500), &(0x7f0000000540), 0xfffffffffffffffe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000340)=0x80000000, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 2m17.046305415s ago: executing program 34 (id=1451): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r1, &(0x7f0000001500)=""/4075, 0xfeb, 0x7fff) read$FUSE(r0, 0x0, 0x0) getresuid(&(0x7f0000000500), &(0x7f0000000540), 0xfffffffffffffffe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000340)=0x80000000, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 13.238523832s ago: executing program 2 (id=1894): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000180)=0x3, 0x9e) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0xfffe, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000340)={r6, 0x2}, &(0x7f0000000400)=0x8) pipe(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xa0, 0x0, &(0x7f0000000200)="ef615ac5a02e42067bf6d61741bbc5adf3e45acae3a188e2181730e24f7aae1ca9adeeb37f551ba7de9ca3ef00bd8b11c2eae7f38105429426f1b8819297188ff66dffd1ca0c72166e3c859d02a6ef48b7e8a45e284c45ca0bcb51c88afd5f4e439668f9a9dc419c189cab18a34338b1a6f029296c3f75f50cd6c3e1009a7f0d7ba98c8efa3e70c61e9eb36b95273c571eba8455dd0bbdb8eb5d9d9900000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x3ff}, 0x50) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r7) fanotify_init(0x12, 0x1000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2c7766646e6f3db2443537cb0bbcfb6ada", @ANYBLOB="7a8a22de5ab7f6244daa30371eb9f7ff3094c38be94a78db2bcb2aa514487d627d354cfb380204331f43bc99fe907a997bf8be00e358e4d5974de53e0bd871b6d6085baf9ec510353356e719840afa60e0247c29567dc6d476964961a09a5058332411163464db3c2a1da70b181a8ec21043558beb1132e3a56deba34a6c6f13de912e33922a9f7ca22d72066f13252c7470e1081182583870d87ac3b17e4ba09f2dadba37c8ca403c5d503bf31c199ee08611cbce828ba6cefcff6a2b12", @ANYBLOB=',\x00']) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, 0x0, 0x0) 11.445350057s ago: executing program 2 (id=1902): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x61625af483e56367, &(0x7f0000000240)=0xfffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x26e1, 0x80) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x9bf1, 0x4, 0xc, 0x614a, 0x56}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x50}}, 0x20000820) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x8620, 0x2, 0x7}, 0x18, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) syz_open_dev$amidi(0x0, 0x2, 0x20000) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000001a40)=[{{&(0x7f0000000440)=@rc={0x1f, @none}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1, &(0x7f0000000680)=""/68, 0x44}, 0x8}, {{&(0x7f0000000700)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/82, 0x52}, {&(0x7f0000000800)=""/196, 0xc4}, {&(0x7f0000000900)=""/188, 0xbc}, {&(0x7f00000009c0)=""/211, 0xd3}, {&(0x7f0000000ac0)=""/211, 0x100}, {&(0x7f0000000bc0)=""/66, 0x42}, {&(0x7f0000000c40)=""/119, 0x77}], 0x7, &(0x7f0000000d80)}, 0xfffffffa}, {{&(0x7f0000000dc0)=@nfc, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e40)=""/15, 0xf}, {&(0x7f0000000e80)=""/16, 0x10}], 0x2, &(0x7f0000000f00)=""/147, 0x93}, 0x2}, {{&(0x7f0000000fc0)=@rc={0x1f, @none}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001040)=""/52, 0x34}, {&(0x7f0000000780)=""/76, 0x3f}], 0x2, &(0x7f00000015c0)=""/174, 0xae}, 0x3}, {{&(0x7f0000001680)=@phonet, 0x80, &(0x7f0000001940)=[{&(0x7f0000001700)=""/227, 0xe3}, {&(0x7f0000001800)=""/57, 0x39}, {&(0x7f0000001840)=""/111, 0x6f}, {&(0x7f00000018c0)=""/113, 0x71}], 0x4, &(0x7f0000001980)=""/152, 0x98}, 0xa2}], 0x5, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000c54a4530bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b706000008ffffffcf6400000000000045040400010000001704000001000a00b70400000001fffe6a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a1a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2dff0f000000000000bf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f2cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880b9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, r1}, 0xfffffd4a) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) sched_setaffinity(r7, 0x8, &(0x7f00000002c0)=0x2) 10.685651822s ago: executing program 5 (id=1905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r6, 0x2285, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @time={0x6, 0x9}, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0x7f, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x54) read$FUSE(r7, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2008040) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x0, 0x1a}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYRES8=r0], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000f800800020010000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 9.729524811s ago: executing program 5 (id=1908): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d000000020000010902"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000580)={0x490, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x16c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x318a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa83}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7e7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44fccc71}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15bceacf}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d39}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe11b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6eace221}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e78}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdcd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cd9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57eb2787}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7005}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf57f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72eb}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x925e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb193}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a8ba97a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5280a686}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5459759e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58003e58}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbcc0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72a3668c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1924691b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54814b53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bb8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8344b8d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6897}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x510d2fbb}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x61c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31ab7891}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8df4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b341eab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6245}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x340f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ebf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e58b88f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ab7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c35f4d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4674c461}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x599ad87f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa4ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e3d362}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a9f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44918e8d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x654a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4495a70f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4105}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x19fa}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ba6cf96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2865c3d3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15ac2f83}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cab5ab2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f738ae0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x572ff749}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x764c1f1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x164, 0xc, 0x0, 0x1, [{0x4}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6080}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9eb9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x129ce70f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x985e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49d1681b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b285a91}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfb53e77}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x26aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68d16914}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3df}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8fbc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46c39222}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4db0872c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f3e2dd4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa03a1bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xedf9c9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x778a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x280e}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71642af2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2696f38}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x576752bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb96a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4216}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe67b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17ccf625}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x790d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b5f}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d6b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9ec9c4d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x55da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf266}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5eb5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cd1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5169}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e4d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fe6f2fa}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x490}, 0x1, 0x0, 0x0, 0x4004840}, 0x44) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000140)={@mcast1, 0xfffffffd, r6}) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x2, 0xfd, 0xfffff020}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r9) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448cb, 0x0) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000042c0)=ANY=[@ANYBLOB="ec050000", @ANYRES16=0x0, @ANYBLOB="200027bd7000ffdbdf254a00000008000100670000000800", @ANYRES32=0x0, @ANYBLOB="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"], 0x5ec}, 0x1, 0x0, 0x0, 0x20020080}, 0x20004004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014007c00ff01000000000000000000000000000108003d00", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) 8.530973922s ago: executing program 7 (id=1910): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000000)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000040)={0xfff, 0x7fff, 0x2000003, 0x80000000, 0xffffffff, 0x4f}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket(0x40000000015, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1, 0x0, 0x33}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mremap(&(0x7f000045d000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4", 0x18}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x40, 0x0, 0xffff, 0x2, 0xe000, '\x00', 0x654}) ioctl$KVM_RUN(r5, 0xae80, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 8.47228316s ago: executing program 4 (id=1911): socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) r0 = epoll_create1(0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x8}]) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 32) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r5) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) (async, rerun: 64) write(r6, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="b7aa6d34ed682800000010000100020000000000", @ANYRES32=0x0, @ANYBLOB="000000000101040008001b0000000000"], 0x28}}, 0x0) (async) recvmmsg$unix(r6, &(0x7f0000000240)=[{{0x0, 0xd00, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) (rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000340)={0x200, 0x8209, 0x1ff, 0x3ff}, &(0x7f0000000380)=0x10) 8.275652088s ago: executing program 3 (id=1913): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, 0x0, 0x0) 8.16160356s ago: executing program 3 (id=1914): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x280000, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000100101040000003331b21aaa8478ec00", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x4c}}, 0x0) r6 = socket(0x10, 0x803, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f00000001c0), {[{{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x36}, 0xff, 0xffffff00, 0x8, 0x3, {@mac, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xd, 0xca, 0x3, 0x0, 0x6, 0x100, 'ip6erspan0\x00', 'macsec0\x00', {}, {}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @local, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x3}}}, {{@arp={@local, @empty, 0xff000000, 0xffffffff, 0xb, 0x0, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x7, 0xaa, 0x5, 0x0, 0x3ff, 0x4, 'veth0_to_bond\x00', 'team0\x00', {}, {0xff}, 0x0, 0x280}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @rand_addr=0x64010101, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x44000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 8.074883599s ago: executing program 4 (id=1915): socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) msync(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b010203010902120001000000000904"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r1, 0x0, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1, 0x0, 0xfff0}, 0x23) 7.999445624s ago: executing program 2 (id=1916): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x9, r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x8001, 0x20}, 0x18) renameat2(r7, &(0x7f0000000480)='./file1/file2\x00', r7, &(0x7f00000004c0)='./file1\x00', 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000040)=0x9, 0x8) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000002a82, 0x0) fadvise64(r8, 0x2, 0x5, 0x4) keyctl$set_reqkey_keyring(0xe, 0x4) 7.101955693s ago: executing program 2 (id=1917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x3) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1e4, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4004000}, 0x200080d1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001009d2743af1ad9d86b629f4567", @ANYRES32=r2, @ANYBLOB="240404000300000034001280110001006272696467655f736c617665000000001c000580080022"], 0x54}, 0x1, 0x0, 0x0, 0x200444c1}, 0x2404c884) 7.025572264s ago: executing program 3 (id=1918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r6, 0x2285, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @time={0x6, 0x9}, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x3, 0x5, 0x7f, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x54) read$FUSE(r7, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2008040) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x0, 0x1a}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYRES8=r0], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000f800800020010000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 6.301619672s ago: executing program 2 (id=1919): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000300)=0x1c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semctl$GETALL(r4, 0x0, 0xd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="f8ff00400400"}) r9 = semget(0x1, 0x4, 0x69c) semop(r9, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) semget(0x2, 0x0, 0x440) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) 6.296124985s ago: executing program 5 (id=1920): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/72, 0x48}], 0x1) 6.083392086s ago: executing program 3 (id=1921): r0 = syz_usb_connect(0x1, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="210f00000004000000000000000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc010000050a05000000000000000000030000040900010073797a310000000014000480080001400000000208000240298e329d15000c00d529402e69d9983036be660ba08a135af30000000c00024000000000000000050b00070066696c7465720000100008800c00024000000000000000094c0008800c00014000000000000000080c000140000000000000007f0c00024000000000000007b50c00014000000000000000040c00014000000000000000070c000240000000000000000500010c00fde4975a14ee5b8d7fec780685780d6fa19b97dcd7203aa8c00f1b783db6b37905e1877fa13d2c81db693b5cf8c6aec29a6bc099c86a0fd4334aeb643162ad30ea3bf825a94b679a8893e3c3f0c709c6b348aab2506016872e0ab8561155333ad293145151d014e6b106477cb31f4896750f166b5ffd9829397eb25ccaa3da0de9329e8d633c7c8ea8c306a687766a56971caeb832d7835c1be957cee6cecd9e27a889a6042d65642a09ba203b8d47fd9c1b969d667bbe1046e21cc5d953109c85bffbf5c444aa176240db299d0634f600000000a4cb5780d10a513de5e60bc4b4ac2bb825fba04fe4f6c0244b70f1d9982f49c32d67cd5a6023be980900010073797a3000000000140000001100010000000000000000000100000a"], 0x1f4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007150000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0x965, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x7, 0x80, 0x60000, 0x0, 0x2000000001}, {0x0, 0x4, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@empty}]}, 0x104}}, 0x20000884) r11 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r11) write$P9_RVERSION(r11, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.L'}, 0x15) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6eb71d2b4e2e8a5a}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x54}, 0x1, 0x0, 0x0, 0x40880}, 0x24004814) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 4.799160681s ago: executing program 4 (id=1922): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6, 0x1, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000002}, 0x20004004) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x2eb0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) ioctl$LOOP_CONFIGURE(r2, 0xc030128a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r4 = syz_open_dev$loop(0x0, 0x8, 0x101002) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYRES16=r8, @ANYRES64=r7, @ANYRES16=r4], 0x60}, 0x1, 0x0, 0x0, 0x1301cf837a4e9e3d}, 0x4843) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) 4.214928705s ago: executing program 2 (id=1923): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r3, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'wlan1\x00', {0x4}, 0x3}) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) 4.123157997s ago: executing program 4 (id=1924): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507"], 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x104d02, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000300)={0x0, 0x8, 0x0, 'queue0\x00', 0x2}) 3.875382518s ago: executing program 7 (id=1925): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x104d02, 0x0) ioctl$CEC_ADAP_G_CAPS(r1, 0xc04c6100, &(0x7f0000000080)) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 3.287349763s ago: executing program 7 (id=1926): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 3.162548253s ago: executing program 7 (id=1927): r0 = socket(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r6 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r1, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000d40)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x1a8, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@nested={0x48, 0x73, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @pid}, @typed={0x8, 0x146, 0x0, 0x0, @fd}, @typed={0xc, 0xa1, 0x0, 0x0, @u64=0x5}, @nested={0x28, 0x2b, 0x0, 0x1, [@nested={0x4, 0xc9}, @typed={0x1d, 0x17, 0x0, 0x0, @binary="4cb42ee3a03b5668ab4b3911ae4e379e45f284e4d167041a22"}]}]}]}]}, @nested={0x144, 0x6, 0x0, 0x1, [@nested={0x140, 0xf0, 0x0, 0x1, [@nested={0x13c, 0x13a, 0x0, 0x1, [@nested={0x138, 0xa0, 0x0, 0x1, [@nested={0x134, 0x61, 0x0, 0x1, [@nested={0x130, 0x9d, 0x0, 0x1, [@nested={0x129, 0x63, 0x0, 0x1, [@generic="693b4c9c07f25c91a1b8b2a228d6f46f987a04a751bb6c0d2e283d1263066d3e706c5662cc06a62cbd0dd273933297dca9cf23bf16f0b4ebfc2490f811e5682004f44066b9b71f3ad7055f76fc97a54f07a14e8d5273a02d74e7b07ab6a9da408fae59f8c5036ae07c94d1d69d5e0c3a97db7cdb9909dd18ca51d57188fce9baa4", @typed={0xa1, 0xa5, 0x0, 0x0, @str='\n\x9aM\x93\xf4\x13\xe3m\xf3\xf0+.\x01C\xdd#\xd1\xcd\x97av\xf5}\x82\xb9P\xc8\xe8\n\x1fd\xc0\x17\x8bS\x1e]2\xd7\xafIs)UC\x90i\x83\\\x86k\xd7\xc0B\x1b\x13\x8c\a{(\xf2\xf1 p&=\x9d\xdf\a\xec\x84~\x93\xdc\x12\xa9*\x1c\xdc\x05:\x1f\xa9\xdeD-\xda3n\xb2\xc8\xb5b\x14\x16\xfd\xef\x15\x00\x89\xa4S\xd2k\xc8\x19\x03\b\x19zae\xd3\x8b\x90\\\x19FS\xad\xf88}:\xb0\xca\n\xc6t\xb9\xa1\x96\xeb\x82|\xd1\xbe\xd0\xbf\xa8[\x87d\x10I\xa4\xa5\x1d\x1b\xe1w\x1eF\x06Wi\xa6'}]}]}]}]}]}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.867784815s ago: executing program 5 (id=1928): syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x20, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@lsrr={0x83, 0x7, 0xe3, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x6}, @ssrr={0x89, 0xf, 0xc, [@loopback, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x17}]}]}}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff}}}}}}, 0x0) 1.842988039s ago: executing program 3 (id=1929): socketpair$unix(0x1, 0x2, 0x0, 0x0) setuid(0xee00) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/125, 0x7d, 0x0, 0x3d}, @fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x0, 0x2, 0x5}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xb, 0x21, 0x200, &(0x7f0000000880)="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"}) ftruncate(r2, 0xffffffff00000000) vmsplice(r2, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000007c0)='numa_maps\x00') read$FUSE(r7, &(0x7f0000002840)={0x2020}, 0x2020) 1.817862004s ago: executing program 5 (id=1930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(0x0, 0x0) fadvise64(r0, 0x3400000, 0xb, 0x4) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r3, &(0x7f00000025c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110005"], 0x68}, 0x1, 0x0, 0x0, 0x4008010}, 0x40) 1.754889562s ago: executing program 3 (id=1931): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xd) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) r3 = getpid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x7}, [{0x2, 0x3, 0xee01}], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) capset(&(0x7f0000000000)={0x20071026, r3}, &(0x7f0000000040)={0x6, 0x6, 0x1000, 0x4, 0x61}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.173984489s ago: executing program 7 (id=1932): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xd) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) r3 = getpid() openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee01) capset(&(0x7f0000000000)={0x20071026, r3}, &(0x7f0000000040)={0x6, 0x6, 0x1000, 0x4, 0x61}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 676.514017ms ago: executing program 5 (id=1933): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c008", 0x35}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000580)=@ethtool_per_queue_op={0x4b, 0xe, [0xa5, 0x5, 0x9a9, 0x8, 0x800, 0x9, 0xdf21, 0x4ec5, 0xf3, 0x7b, 0x10001, 0x0, 0xe89, 0x5, 0xfffffffd, 0x3, 0x7, 0x7fffffff, 0xc45b, 0x6d4, 0x8, 0x2, 0x2, 0x3, 0xd, 0x10, 0x40, 0x3ff, 0x4, 0x0, 0x9, 0xeb, 0x1ff, 0x0, 0x1, 0x4, 0x8, 0x8, 0x4, 0x8, 0x7, 0x64, 0xfffffff8, 0x9, 0x23d2, 0x1000, 0x5, 0xffffff9c, 0x380000, 0x7f, 0xffffff7f, 0x80, 0x5, 0x1ff, 0x2, 0x4, 0x0, 0x6, 0xe5, 0x200, 0x9d, 0x5, 0x0, 0x400, 0x57c8, 0x6, 0x4, 0x4, 0x0, 0x1, 0x4, 0x73c, 0x6, 0x9, 0x7, 0xe04, 0x5, 0x9, 0x0, 0xfffffff8, 0x4eea, 0x43, 0xfcb, 0x2, 0x2, 0x7, 0x1, 0x2, 0xf, 0x4f002bb1, 0x6, 0x5, 0x3ff, 0x8, 0x3, 0x2, 0x0, 0x4, 0x7, 0xfffffffc, 0x1, 0x8, 0x9, 0x80000000, 0x4, 0x1000, 0x10000, 0x6, 0x8, 0x3ce, 0x6, 0x7f, 0x3, 0x5, 0x7, 0x81, 0x3, 0x9, 0x9, 0x3, 0x2, 0x4, 0x0, 0x3ff, 0x1180, 0x7, 0x81, 0x7fffffff], "c5be42e72ff136de5a30019d1ae83957ec566c48b5ffaae7513120d2c59e1a72a3f07d9b4d9cafd0aae25a8ea9c2ac983e524f21280244286e1727d01ace69a77da1f694161dfeb3e509c8066023abd1bf965b8ffe649f2cd7c4e6141f815e7edc906ed153d872083ec2ab39d63d8951dd72e3fb00710de6f1143f509afc2ab488332ce3cdee95994e"}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000580)=@ethtool_per_queue_op={0x4b, 0xe, [0xa5, 0x5, 0x9a9, 0x8, 0x800, 0x9, 0xdf21, 0x4ec5, 0xf3, 0x7b, 0x10001, 0x0, 0xe89, 0x5, 0xfffffffd, 0x3, 0x7, 0x7fffffff, 0xc45b, 0x6d4, 0x8, 0x2, 0x2, 0x3, 0xd, 0x10, 0x40, 0x3ff, 0x4, 0x0, 0x9, 0xeb, 0x1ff, 0x0, 0x1, 0x4, 0x8, 0x8, 0x4, 0x8, 0x7, 0x64, 0xfffffff8, 0x9, 0x23d2, 0x1000, 0x5, 0xffffff9c, 0x380000, 0x7f, 0xffffff7f, 0x80, 0x5, 0x1ff, 0x2, 0x4, 0x0, 0x6, 0xe5, 0x200, 0x9d, 0x5, 0x0, 0x400, 0x57c8, 0x6, 0x4, 0x4, 0x0, 0x1, 0x4, 0x73c, 0x6, 0x9, 0x7, 0xe04, 0x5, 0x9, 0x0, 0xfffffff8, 0x4eea, 0x43, 0xfcb, 0x2, 0x2, 0x7, 0x1, 0x2, 0xf, 0x4f002bb1, 0x6, 0x5, 0x3ff, 0x8, 0x3, 0x2, 0x0, 0x4, 0x7, 0xfffffffc, 0x1, 0x8, 0x9, 0x80000000, 0x4, 0x1000, 0x10000, 0x6, 0x8, 0x3ce, 0x6, 0x7f, 0x3, 0x5, 0x7, 0x81, 0x3, 0x9, 0x9, 0x3, 0x2, 0x4, 0x0, 0x3ff, 0x1180, 0x7, 0x81, 0x7fffffff], "c5be42e72ff136de5a30019d1ae83957ec566c48b5ffaae7513120d2c59e1a72a3f07d9b4d9cafd0aae25a8ea9c2ac983e524f21280244286e1727d01ace69a77da1f694161dfeb3e509c8066023abd1bf965b8ffe649f2cd7c4e6141f815e7edc906ed153d872083ec2ab39d63d8951dd72e3fb00710de6f1143f509afc2ab488332ce3cdee95994e"}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r1, 0x2f, 0x0, @val=@iter={&(0x7f0000000180)=@cgroup={0x4, 0xffffffffffffffff, 0x7}, 0x10}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1, 0x4}, {0x4, 0xe}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000002c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)) linkat(r5, &(0x7f0000000100)='./cgroup\x00', r5, &(0x7f0000000040)='./file0\x00', 0x1000) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000004c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x1000, 0x747, {}, 0x5, 0x19e01}}}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 674.22281ms ago: executing program 4 (id=1934): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x100000000000000) 1.18506ms ago: executing program 4 (id=1935): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) socket$pppoe(0x18, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002e00090027ff0f0000000000040000002400118031f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5"], 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2d}}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x3, @local, 0x27b5367a, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x40) 0s ago: executing program 7 (id=1936): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x104d02, 0x0) ioctl$CEC_ADAP_G_CAPS(r1, 0xc04c6100, &(0x7f0000000080)) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): 9f/0x4f0 [ 562.193010][T11521] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 562.193038][T11521] ? __pfx__kstrtoull+0x10/0x10 [ 562.193069][T11521] ___sys_sendmsg+0x106/0x1e0 [ 562.193092][T11521] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.193124][T11521] ? find_held_lock+0x2b/0x80 [ 562.193156][T11521] __sys_sendmmsg+0x205/0x430 [ 562.193186][T11521] ? __pfx___sys_sendmmsg+0x10/0x10 [ 562.193220][T11521] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 562.193255][T11521] ? fput+0x79/0x100 [ 562.193279][T11521] ? ksys_write+0x1ac/0x250 [ 562.193298][T11521] ? __pfx_ksys_write+0x10/0x10 [ 562.193321][T11521] __x64_sys_sendmmsg+0x9c/0x100 [ 562.193347][T11521] ? lockdep_hardirqs_on+0x78/0x100 [ 562.193369][T11521] do_syscall_64+0x115/0x870 [ 562.193391][T11521] ? clear_bhb_loop+0x40/0x90 [ 562.193412][T11521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.193430][T11521] RIP: 0033:0x7f759019ce59 [ 562.193444][T11521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.193460][T11521] RSP: 002b:00007f7591052028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 562.193477][T11521] RAX: ffffffffffffffda RBX: 00007f7590415fa0 RCX: 00007f759019ce59 [ 562.193488][T11521] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000004 [ 562.193499][T11521] RBP: 00007f7591052090 R08: 0000000000000000 R09: 0000000000000000 [ 562.193509][T11521] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 562.193519][T11521] R13: 00007f7590416038 R14: 00007f7590415fa0 R15: 00007ffe12591b08 [ 562.193542][T11521] [ 562.699165][ T30] audit: type=1400 audit(1780562232.501:777): avc: denied { read write } for pid=11527 comm="syz.4.1379" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 562.932959][ T8385] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 562.999842][T11538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1379'. [ 563.041641][ T5741] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 563.142948][ T8385] usb 3-1: Using ep0 maxpacket: 16 [ 563.158162][ T8385] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 563.166688][ T8385] usb 3-1: config 1 has no interface number 0 [ 563.173254][ T8385] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 563.590524][ T8385] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 563.601715][ T8385] usb 3-1: config 1 interface 105 has no altsetting 0 [ 563.616182][ T8385] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 563.625351][ T8385] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 563.664532][ T30] audit: type=1400 audit(1780562232.581:778): avc: denied { open } for pid=11527 comm="syz.4.1379" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 563.722882][ T8385] usb 3-1: Product: syz [ 563.735268][ T8385] usb 3-1: Manufacturer: syz [ 563.740029][ T8385] usb 3-1: SerialNumber: syz [ 563.745538][ T30] audit: type=1326 audit(1780562232.851:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.4.1379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759019ce59 code=0x7ffc0000 [ 563.782990][ T30] audit: type=1326 audit(1780562232.851:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.4.1379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759019ce59 code=0x7ffc0000 [ 563.810579][ T30] audit: type=1326 audit(1780562232.941:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.4.1379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f759019ce59 code=0x7ffc0000 [ 563.854387][T11526] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 563.927085][T11526] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 563.975836][ T30] audit: type=1326 audit(1780562232.941:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.4.1379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759019ce59 code=0x7ffc0000 [ 564.074017][ T30] audit: type=1326 audit(1780562232.941:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.4.1379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759019ce59 code=0x7ffc0000 [ 564.161047][ T30] audit: type=1326 audit(1780562232.941:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.4.1379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f759019ce59 code=0x7ffc0000 [ 564.222716][ T30] audit: type=1326 audit(1780562232.941:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.4.1379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759019ce59 code=0x7ffc0000 [ 564.813985][T11552] openvswitch: netlink: IP tunnel TTL not specified. [ 565.155422][ T30] audit: type=1326 audit(1780562232.941:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11527 comm="syz.4.1379" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f759019ce59 code=0x7ffc0000 [ 565.190647][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.233332][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.246671][ T5741] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 566.104951][T11555] fido_id[11555]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 566.428713][T11565] openvswitch: netlink: IP tunnel TTL not specified. [ 566.958144][T11570] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1389'. [ 566.996963][ T8385] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 567.070654][ T8385] usb 3-1: USB disconnect, device number 42 [ 570.048468][T11610] sctp: [Deprecated]: syz.2.1400 (pid 11610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 570.048468][T11610] Use struct sctp_sack_info instead [ 570.111784][T11613] sctp: [Deprecated]: syz.2.1400 (pid 11613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 570.111784][T11613] Use struct sctp_sack_info instead [ 571.052750][ T8385] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 571.062782][ T805] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 571.203260][ T8385] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 571.222850][ T5741] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 571.225959][ T8385] usb 4-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 571.246112][ T805] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 571.268751][ T8385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 571.282877][ T8385] usb 4-1: Product: syz [ 571.288413][ T8385] usb 4-1: Manufacturer: syz [ 571.293667][ T8385] usb 4-1: SerialNumber: syz [ 571.299641][ T805] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 571.311017][ T805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 571.321530][ T8385] usb 4-1: config 0 descriptor?? [ 571.326948][ T805] usb 7-1: Product: syz [ 571.337002][ T8385] gspca_main: 045e:02bf too many config [ 571.347170][ T805] usb 7-1: Manufacturer: syz [ 571.351802][ T805] usb 7-1: SerialNumber: syz [ 571.393040][ T5741] usb 6-1: Using ep0 maxpacket: 32 [ 571.404038][ T5741] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.416740][ T5741] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 571.426332][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.434449][ T5741] usb 6-1: Product: syz [ 571.438629][ T5741] usb 6-1: Manufacturer: syz [ 571.443611][ T5741] usb 6-1: SerialNumber: syz [ 571.450127][ T5741] usb 6-1: config 0 descriptor?? [ 571.589362][ T805] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 571.589874][T11627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.613922][ T8385] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 571.626124][T11627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.658890][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1405'. [ 571.670873][ T5741] ljca 6-1:0.0: bulk endpoints not found [ 571.687855][ T5741] usb 6-1: USB disconnect, device number 38 [ 571.709141][ T5712] usb 7-1: USB disconnect, device number 36 [ 571.730719][ T5712] usblp0: removed [ 572.197327][ T8385] usb 3-1: Using ep0 maxpacket: 32 [ 572.207480][ T8385] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 572.235210][ T8385] usb 3-1: config 2 has no interface number 0 [ 572.244387][ T8385] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 572.262657][ T8385] usb 3-1: config 2 interface 88 has no altsetting 0 [ 572.273810][ T8385] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 572.283071][ T8385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.291094][ T8385] usb 3-1: Product: syz [ 572.296019][ T8385] usb 3-1: Manufacturer: syz [ 572.300642][ T8385] usb 3-1: SerialNumber: syz [ 572.309027][T11634] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 572.521660][T11634] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 572.734267][ T8385] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 572.748048][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 572.748060][ T30] audit: type=1400 audit(1780562242.541:813): avc: denied { unmount } for pid=6774 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 572.778024][ T8385] asix 3-1:2.88: probe with driver asix failed with error -71 [ 572.788611][ T8385] usb 3-1: USB disconnect, device number 43 [ 572.870305][T11651] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1411'. [ 572.913597][T11651] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1411'. [ 573.156486][T11654] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 573.163653][T11654] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 573.308488][T11659] openvswitch: netlink: IP tunnel TTL not specified. [ 573.821540][ T30] audit: type=1400 audit(1780562243.621:814): avc: denied { create } for pid=11661 comm="syz.2.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 573.986721][ T5712] usb 4-1: USB disconnect, device number 49 [ 574.596004][T11691] netlink: 'syz.6.1423': attribute type 4 has an invalid length. [ 574.604534][ T8385] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 574.694298][T11692] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1423'. [ 575.101312][ T13] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 575.110505][T11699] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1424'. [ 575.145741][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 575.155043][ T8385] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 575.164499][ T8385] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 575.173373][ T8385] usb 5-1: Product: syz [ 575.184146][ T8385] usb 5-1: Manufacturer: syz [ 575.191101][ T8385] usb 5-1: SerialNumber: syz [ 575.209223][ T8385] usb 5-1: config 0 descriptor?? [ 575.234827][T11701] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11701 comm=syz.5.1424 [ 575.257763][ T30] audit: type=1400 audit(1780562245.061:815): avc: denied { connect } for pid=11695 comm="syz.5.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 575.498733][ T8385] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 575.967738][ T8385] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 575.976111][ T8385] peak_usb 5-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 576.046460][ T8385] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 576.080607][ T8385] usb 5-1: USB disconnect, device number 43 [ 576.322742][ T5712] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 576.443975][T11716] Falling back ldisc for ttyS3. [ 576.486315][ T5712] usb 6-1: Using ep0 maxpacket: 32 [ 576.508631][ T5712] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 577.152920][ T5623] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 577.296039][T11721] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 577.341322][T11721] overlayfs: missing 'lowerdir' [ 577.464547][ T5712] usb 6-1: config 0 has no interface number 0 [ 577.480860][ T5712] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 577.489999][ T5712] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.498082][ T5712] usb 6-1: Product: syz [ 577.502245][ T5712] usb 6-1: Manufacturer: syz [ 577.506912][ T5712] usb 6-1: SerialNumber: syz [ 577.520667][ T5712] usb 6-1: config 0 descriptor?? [ 577.631126][T11715] block nbd3: shutting down sockets [ 577.836018][ T5712] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 577.859973][ T5712] usb 6-1: selecting invalid altsetting 1 [ 577.872211][ T5712] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 577.896128][ T5712] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 577.924402][ T5712] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 577.940929][T11728] netlink: 'syz.2.1434': attribute type 1 has an invalid length. [ 577.952928][ T5712] usb 6-1: media controller created [ 577.971610][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.000519][T11728] bond8: entered promiscuous mode [ 578.006393][T11728] 8021q: adding VLAN 0 to HW filter on device bond8 [ 578.218146][T11731] 8021q: adding VLAN 0 to HW filter on device bond8 [ 578.218592][T11731] bond8: (slave gre6): The slave device specified does not support setting the MAC address [ 578.219870][T11731] bond8: (slave gre6): Error -95 calling set_mac_address [ 579.984549][ T5712] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 579.999849][ T5712] zl10353_read_register: readreg error (reg=127, ret==-110) [ 580.083559][T11708] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 580.175848][ T5712] usb 6-1: USB disconnect, device number 39 [ 580.281759][T11754] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1441'. [ 580.377143][ T24] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 580.417021][T11759] autofs: Bad value for 'fd' [ 580.624525][ T24] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 580.706175][ T24] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 580.742224][ T24] usb 5-1: Product: syz [ 580.761643][ T24] usb 5-1: Manufacturer: syz [ 580.775686][ T24] usb 5-1: SerialNumber: syz [ 580.807827][ T24] usb 5-1: config 0 descriptor?? [ 582.113779][ T24] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 582.316586][ T24] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 582.353292][ T24] peak_usb 5-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 582.399548][T11773] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 582.434546][ T24] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 582.467679][ T24] usb 5-1: USB disconnect, device number 44 [ 582.652704][ T804] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 582.832717][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 582.854173][ T804] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 582.884074][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 582.930707][T11768] 9p: Bad value for 'wfdno' [ 582.976950][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 583.069127][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 583.197565][ T804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 583.316652][ T804] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 583.406467][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.493719][ T804] usb 3-1: Product: syz [ 583.536572][ T804] usb 3-1: Manufacturer: syz [ 583.589907][ T804] usb 3-1: SerialNumber: syz [ 583.682202][ T804] usb 3-1: config 0 descriptor?? [ 584.690594][ T30] audit: type=1400 audit(1780562254.321:816): avc: denied { mount } for pid=11782 comm="syz.4.1448" name="/" dev="hugetlbfs" ino=41999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 584.992717][ T804] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 584.998905][ T804] input input42: Device does not respond to id packet M [ 585.006805][ T804] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 585.027844][ T804] input input42: Device does not respond to id packet P [ 585.052065][ T804] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 585.077485][ T804] input input42: Device does not respond to id packet B [ 585.097801][ T804] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 585.109308][ T804] input input42: Device does not respond to id packet N [ 585.131141][ T804] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 585.150823][ T804] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 585.160902][ T804] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 585.170730][ T804] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 585.188667][ T804] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input42 [ 585.225091][ T805] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 585.242866][ T804] usb 3-1: USB disconnect, device number 44 [ 585.357653][ T30] audit: type=1400 audit(1780562255.161:817): avc: denied { write } for pid=11795 comm="syz.5.1452" path="socket:[41970]" dev="sockfs" ino=41970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 585.405888][ T805] usb 7-1: Using ep0 maxpacket: 32 [ 585.414031][ T805] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 585.466869][ T805] usb 7-1: config 0 has no interface number 0 [ 585.478720][ T805] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 585.492943][ T805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.501260][ T805] usb 7-1: Product: syz [ 585.505504][ T805] usb 7-1: Manufacturer: syz [ 585.511210][ T805] usb 7-1: SerialNumber: syz [ 585.533348][ T805] usb 7-1: config 0 descriptor?? [ 585.556026][ T805] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 585.566221][ T805] usb 7-1: selecting invalid altsetting 1 [ 585.585738][ T805] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 585.663679][ T805] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 585.709729][ T805] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 585.723426][ T805] usb 7-1: media controller created [ 585.746616][ T805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 585.768435][T11802] input: syz1 as /devices/virtual/input/input43 [ 585.775960][T11801] .`: entered promiscuous mode [ 585.799106][T11801] bond_slave_0: entered promiscuous mode [ 585.812997][T11801] bond_slave_1: entered promiscuous mode [ 586.221090][T11811] autofs: Unknown parameter '0x0000000000000000' [ 586.746262][T11797] 9p: Bad value for 'wfdno' [ 586.870927][T11804] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 586.884537][T11817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1459'. [ 586.893517][T11817] netlink: 'syz.2.1459': attribute type 7 has an invalid length. [ 586.901255][T11817] netlink: 'syz.2.1459': attribute type 8 has an invalid length. [ 586.908996][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 586.943145][ T805] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 586.950238][ T805] zl10353_read_register: readreg error (reg=127, ret==-32) [ 587.594646][T11831] binder: 11830:11831 ioctl c0306201 0 returned -14 [ 587.603998][T11831] binder: 11830:11831 ioctl c018937a 200000000040 returned -22 [ 587.951964][T11838] NILFS (nullb0): couldn't find nilfs on the device [ 589.181245][T11856] autofs: Unknown parameter '0x0000000000000000' [ 591.662229][T11867] NILFS (nullb0): couldn't find nilfs on the device [ 593.362688][ T8385] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 593.534385][ T8385] usb 5-1: Using ep0 maxpacket: 16 [ 593.560031][ T8385] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 593.958823][ T8385] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 593.997355][ T8385] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 594.011604][ T8385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.021325][ T8385] usb 5-1: Product: syz [ 594.026121][ T8385] usb 5-1: Manufacturer: syz [ 594.030732][ T8385] usb 5-1: SerialNumber: syz [ 594.060689][ T8385] usb 5-1: config 0 descriptor?? [ 594.074904][ T8385] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 594.092402][ T8385] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 595.438843][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1486'. [ 595.452346][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1486'. [ 595.461907][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1486'. [ 595.472071][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1486'. [ 595.481902][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1486'. [ 595.494458][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1486'. [ 595.504108][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1486'. [ 595.513926][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1486'. [ 595.523302][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1486'. [ 595.561862][T11908] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1486'. [ 595.740837][T11908] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 595.747433][T11908] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 595.755136][T11908] vhci_hcd vhci_hcd.0: Device attached [ 595.993121][ T24] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 596.074686][T11910] vhci_hcd: connection reset by peer [ 596.088481][ T1230] vhci_hcd vhci_hcd.5: stop threads [ 596.182823][ T1230] vhci_hcd vhci_hcd.5: release socket [ 596.200345][ T1230] vhci_hcd vhci_hcd.5: disconnect device [ 596.212465][ T8385] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 596.218925][ T8385] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 596.229012][ T8385] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 596.239061][ T8385] em28xx 5-1:0.0: No AC97 audio processor [ 596.275906][ T8385] usb 5-1: USB disconnect, device number 45 [ 596.301135][ T8385] em28xx 5-1:0.0: Disconnecting em28xx [ 596.319525][ T8385] em28xx 5-1:0.0: Freeing device [ 596.970010][T11913] 9p: Bad value for 'wfdno' [ 598.363918][ T8385] libceph: connect (1)[c::]:6789 error -101 [ 598.636769][ T30] audit: type=1400 audit(1780562268.231:818): avc: denied { write } for pid=11921 comm="syz.5.1490" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 598.672136][ T8385] libceph: mon0 (1)[c::]:6789 connect error [ 598.708153][T11922] ceph: No mds server is up or the cluster is laggy [ 598.714278][ T8385] libceph: connect (1)[c::]:6789 error -101 [ 598.717240][ T30] audit: type=1400 audit(1780562268.251:819): avc: denied { setopt } for pid=11921 comm="syz.5.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 598.735812][ T8385] libceph: mon0 (1)[c::]:6789 connect error [ 599.637168][T11939] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 599.886937][T11944] gretap0: entered promiscuous mode [ 599.907451][T11944] gretap0: left promiscuous mode [ 600.234635][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 600.248576][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 600.258733][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 600.271246][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 600.279547][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 601.456219][T11952] wg1 speed is unknown, defaulting to 1000 [ 601.463718][ T24] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 601.556197][T11960] kvm: Disabled LAPIC found during irq injection [ 602.342999][ T4932] Bluetooth: hci2: command tx timeout [ 602.400746][T11974] befs: (nbd4): No write support. Marking filesystem read-only [ 604.422842][ T4932] Bluetooth: hci2: command tx timeout [ 604.844955][T11948] wg1 speed is unknown, defaulting to 1000 [ 605.010965][T11989] binder: BINDER_SET_CONTEXT_MGR already set [ 605.017140][T11989] binder: 11987:11989 ioctl 4018620d 200000000040 returned -16 [ 605.222871][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 605.408595][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 605.441021][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.502191][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 605.565523][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.649840][ T24] usb 4-1: config 0 descriptor?? [ 605.736230][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 605.887350][ T24] gspca_vc032x: reg_r err -32 [ 605.912191][ T24] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 605.963096][ T5749] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 606.071935][ T30] audit: type=1400 audit(1780562275.871:820): avc: denied { create } for pid=11995 comm="syz.4.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 606.192995][ T5749] usb 6-1: device descriptor read/64, error -71 [ 606.284007][T11999] afs: Unknown parameter 'dyn00000000000000000006' [ 606.371054][T12006] __nla_validate_parse: 12 callbacks suppressed [ 606.371066][T12006] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1508'. [ 606.409966][T12006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1508'. [ 606.509071][ T4932] Bluetooth: hci2: command tx timeout [ 606.634010][ T5749] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 607.406639][T11948] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.413850][T11948] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.436248][T11948] bridge_slave_0: entered allmulticast mode [ 607.445372][T11948] bridge_slave_0: entered promiscuous mode [ 607.466476][T11948] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.502695][ T5749] usb 6-1: device descriptor read/64, error -71 [ 607.644323][ T5749] usb usb6-port1: attempt power cycle [ 607.854361][ T30] audit: type=1804 audit(1780562277.651:821): pid=12015 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1510" name="/newroot/299/file0" dev="tmpfs" ino=1647 res=1 errno=0 [ 608.043124][ T5749] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 608.105406][ T5749] usb 6-1: device descriptor read/8, error -71 [ 608.125476][T11948] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.170324][T11948] bridge_slave_1: entered allmulticast mode [ 608.261820][T11948] bridge_slave_1: entered promiscuous mode [ 608.451829][ T5749] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 608.485606][ T30] audit: type=1804 audit(1780562277.661:822): pid=12020 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1510" name="/newroot/299/file0" dev="tmpfs" ino=1647 res=1 errno=0 [ 608.535195][ T5749] usb 6-1: device descriptor read/8, error -71 [ 608.544128][T11948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.577447][T11948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.584191][ T4932] Bluetooth: hci2: command tx timeout [ 608.667050][ T5734] usb 4-1: USB disconnect, device number 50 [ 608.673417][ T5749] usb usb6-port1: unable to enumerate USB device [ 609.303325][T11948] team0: Port device team_slave_0 added [ 609.340854][T11948] team0: Port device team_slave_1 added [ 609.775657][T11948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.801686][T11948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.857198][T11948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.890310][T11948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.913407][T11948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.957026][T11948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.967844][ T5749] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 610.124328][ T5749] usb 5-1: Using ep0 maxpacket: 16 [ 610.182337][ T5749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.279179][ T5749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.379697][ T5749] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 610.519635][ T5749] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 610.639899][ T5749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.774555][T11948] hsr_slave_0: entered promiscuous mode [ 610.850491][ T5749] usb 5-1: config 0 descriptor?? [ 610.864365][T11948] hsr_slave_1: entered promiscuous mode [ 610.967565][T11948] debugfs: 'hsr0' already exists in 'hsr' [ 610.995663][T11948] Cannot create hsr debugfs directory [ 611.288496][T12039] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 611.549779][T12030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.607343][T12030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.779669][T12048] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 611.779669][T12048] The task syz.4.1514 (12048) triggered the difference, watch for misbehavior. [ 611.902740][ T5734] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 611.925923][T12048] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 612.078748][ T5734] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.105668][ T5734] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 612.131001][ T5734] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 612.142779][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.215509][T12046] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 612.236847][ T5734] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 612.470697][ T5734] usb 6-1: USB disconnect, device number 44 [ 612.598292][T12052] binder: BINDER_SET_CONTEXT_MGR already set [ 612.604528][T12052] binder: 12050:12052 ioctl 4018620d 200000000040 returned -16 [ 613.323427][T12046] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.1515'. [ 613.378227][T12056] xt_hashlimit: size too large, truncated to 1048576 [ 613.449090][T11948] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 613.480939][ T30] audit: type=1400 audit(1780562283.281:823): avc: denied { create } for pid=12054 comm="syz.3.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 613.510893][T11948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 613.525680][T11948] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 613.540792][ T5749] usbhid 5-1:0.0: can't add hid device: -71 [ 613.559362][ T5749] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 613.596600][T11948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.612070][ T5749] usb 5-1: USB disconnect, device number 46 [ 613.743766][T11948] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 613.843373][T12055] netlink: 'syz.3.1521': attribute type 27 has an invalid length. [ 613.854826][T11948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 613.871843][T11948] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 614.073074][T11948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 614.200584][T12055] bond0: (slave bond_slave_1): Releasing backup interface [ 614.505321][T12082] openvswitch: netlink: IP tunnel TTL not specified. [ 616.111288][T11948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.287956][T11948] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.044184][T12096] binder: BINDER_SET_CONTEXT_MGR already set [ 617.050548][T12096] binder: 12091:12096 ioctl 4018620d 200000000040 returned -16 [ 617.336978][T11948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.395427][T11948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.437741][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.445023][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.495283][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.502456][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.753521][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.759834][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.018421][T12129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1530'. [ 620.027696][T12129] netlink: 'syz.3.1530': attribute type 7 has an invalid length. [ 620.035453][T12129] netlink: 'syz.3.1530': attribute type 8 has an invalid length. [ 620.043258][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 620.730225][T12141] openvswitch: netlink: IP tunnel TTL not specified. [ 622.125782][ T30] audit: type=1400 audit(1780562291.921:824): avc: denied { name_bind } for pid=12144 comm="syz.5.1540" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 623.339576][T11948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.370508][T12156] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 623.378553][T12156] ALSA: mixer_oss: invalid index 1374389 [ 624.259296][T12159] 9p: Bad value for 'wfdno' [ 624.523040][T11948] veth0_vlan: entered promiscuous mode [ 625.075092][T11948] veth1_vlan: entered promiscuous mode [ 625.446638][T11948] veth0_macvtap: entered promiscuous mode [ 625.507573][T11948] veth1_macvtap: entered promiscuous mode [ 625.582162][T11948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.925164][T12178] netlink: 'syz.5.1544': attribute type 1 has an invalid length. [ 626.200400][T11948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.564459][ T78] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.573427][ T30] audit: type=1400 audit(1780562296.301:825): avc: denied { create } for pid=12181 comm="syz.4.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 626.630322][ T78] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.658822][ T30] audit: type=1400 audit(1780562296.311:826): avc: denied { map } for pid=12181 comm="syz.4.1547" path="socket:[44015]" dev="sockfs" ino=44015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 627.832126][ T78] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.851765][ T30] audit: type=1400 audit(1780562296.311:827): avc: denied { read accept } for pid=12181 comm="syz.4.1547" path="socket:[44015]" dev="sockfs" ino=44015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 627.876854][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 627.891020][ T78] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.032883][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 628.039332][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.056769][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.092092][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.140668][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.152680][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.161610][ T24] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 628.192158][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.223437][ T24] usb 5-1: config 0 descriptor?? [ 628.228511][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.249078][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.352712][ T804] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 628.522915][ T804] usb 6-1: Using ep0 maxpacket: 32 [ 628.628605][ T804] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 628.628718][ T804] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 628.628915][ T804] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.629171][ T804] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 628.629192][ T804] usb 6-1: config 1 has no interface number 0 [ 628.629919][ T804] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 628.630056][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.734272][ T804] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 628.879597][ T30] audit: type=1400 audit(1780562298.671:828): avc: denied { write } for pid=12181 comm="syz.4.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 629.019761][ T24] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0007/input/input45 [ 629.339851][ T24] sony 0003:054C:03D5.0007: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 629.444106][ T24] usb 5-1: USB disconnect, device number 47 [ 629.598656][T12199] xt_hashlimit: max too large, truncated to 1048576 [ 629.613169][T12196] fido_id[12196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 630.163705][ T804] snd_usb_pod 6-1:1.1: set_interface failed [ 630.207730][ T804] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 630.246576][ T804] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 630.306892][ T804] usb 6-1: USB disconnect, device number 45 [ 630.634605][T12213] openvswitch: netlink: IP tunnel TTL not specified. [ 631.034482][ T30] audit: type=1326 audit(1780562300.841:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12210 comm="syz.7.1553" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf8f39ce59 code=0x0 [ 631.986671][ T30] audit: type=1400 audit(1780562301.791:830): avc: denied { listen } for pid=12238 comm="syz.4.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 632.111880][ T30] audit: type=1400 audit(1780562301.911:831): avc: denied { accept } for pid=12238 comm="syz.4.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 632.257189][T12242] netlink: 507 bytes leftover after parsing attributes in process `syz.4.1560'. [ 632.282141][T12242] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1560'. [ 632.301379][ T30] audit: type=1400 audit(1780562302.101:832): avc: denied { create } for pid=12244 comm="syz.3.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 632.415049][ T5874] nci: nci_rx_work: unknown MT 0x1 [ 632.415261][ T30] audit: type=1400 audit(1780562302.221:833): avc: denied { write } for pid=12244 comm="syz.3.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 632.460859][T12249] batman_adv: batadv0: Adding interface: dummy0 [ 632.471532][T12249] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.500959][ T30] audit: type=1400 audit(1780562302.291:834): avc: denied { ioctl } for pid=12244 comm="syz.3.1561" path="socket:[44234]" dev="sockfs" ino=44234 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 632.500988][T12249] batman_adv: batadv0: Interface activated: dummy0 [ 632.651766][T12250] batadv0: mtu less than device minimum [ 632.665064][T12250] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 632.679108][T12250] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 632.690052][T12250] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 632.701057][T12250] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 632.712351][T12250] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 632.724910][T12250] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 632.735812][T12250] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 632.746824][T12250] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 633.018892][T12259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1563'. [ 633.027891][T12259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1563'. [ 633.069707][T12252] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1562'. [ 633.161597][T12252] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1562'. [ 633.290213][T12252] netlink: 'syz.5.1562': attribute type 5 has an invalid length. [ 633.332816][T12252] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1562'. [ 633.939316][T11998] IPVS: starting estimator thread 0... [ 634.122842][T12277] IPVS: using max 45 ests per chain, 108000 per kthread [ 634.295278][T12279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 635.301553][T12245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 636.475386][ T30] audit: type=1400 audit(1780562306.281:835): avc: denied { transfer } for pid=12296 comm="syz.5.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 636.674351][ T5742] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 636.842679][ T5742] usb 3-1: Using ep0 maxpacket: 32 [ 636.887398][ T5742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.925116][ T5742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.945810][ T5742] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 637.020939][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.041002][ T5742] usb 3-1: config 0 descriptor?? [ 637.131227][T12314] FAULT_INJECTION: forcing a failure. [ 637.131227][T12314] name failslab, interval 1, probability 0, space 0, times 0 [ 637.147938][T12314] CPU: 1 UID: 0 PID: 12314 Comm: syz.5.1582 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.147966][T12314] Tainted: [L]=SOFTLOCKUP [ 637.147972][T12314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 637.147982][T12314] Call Trace: [ 637.147988][T12314] [ 637.148002][T12314] dump_stack_lvl+0x100/0x190 [ 637.148029][T12314] should_fail_ex.cold+0x5/0xa [ 637.148051][T12314] ? __pfx_sel_write_create+0x10/0x10 [ 637.148073][T12314] ? sel_write_create+0x289/0x680 [ 637.148094][T12314] should_failslab+0xc2/0x120 [ 637.148112][T12314] ? __pfx_sel_write_create+0x10/0x10 [ 637.148131][T12314] __kmalloc_noprof+0xe0/0x850 [ 637.148160][T12314] ? __pfx_sel_write_create+0x10/0x10 [ 637.148182][T12314] sel_write_create+0x289/0x680 [ 637.148207][T12314] ? __pfx_sel_write_create+0x10/0x10 [ 637.148228][T12314] ? __might_fault+0xc5/0x140 [ 637.148261][T12314] ? _copy_from_user+0x59/0xd0 [ 637.148286][T12314] ? __pfx_sel_write_create+0x10/0x10 [ 637.148308][T12314] selinux_transaction_write+0x106/0x1a0 [ 637.148331][T12314] vfs_write+0x2aa/0x1070 [ 637.148349][T12314] ? __pfx_selinux_transaction_write+0x10/0x10 [ 637.148371][T12314] ? __pfx_vfs_write+0x10/0x10 [ 637.148388][T12314] ? __fget_files+0x215/0x3d0 [ 637.148413][T12314] ? __fget_files+0x21f/0x3d0 [ 637.148440][T12314] ksys_write+0x12a/0x250 [ 637.148457][T12314] ? __pfx_ksys_write+0x10/0x10 [ 637.148477][T12314] ? rcu_is_watching+0x12/0xc0 [ 637.148503][T12314] do_syscall_64+0x115/0x870 [ 637.148523][T12314] ? clear_bhb_loop+0x40/0x90 [ 637.148543][T12314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.148560][T12314] RIP: 0033:0x7fd4e799ce59 [ 637.148575][T12314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.148592][T12314] RSP: 002b:00007fd4e886b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 637.148609][T12314] RAX: ffffffffffffffda RBX: 00007fd4e7c15fa0 RCX: 00007fd4e799ce59 [ 637.148620][T12314] RDX: 0000000000000069 RSI: 00002000000001c0 RDI: 0000000000000004 [ 637.148630][T12314] RBP: 00007fd4e886b090 R08: 0000000000000000 R09: 0000000000000000 [ 637.148640][T12314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.148649][T12314] R13: 00007fd4e7c16038 R14: 00007fd4e7c15fa0 R15: 00007fff349d5208 [ 637.148673][T12314] [ 637.459025][T12317] input: syz1 as /devices/virtual/input/input46 [ 637.473329][ T4932] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 637.661125][ T5742] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 637.821671][ T5742] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 637.909517][ T5742] ft260 0003:0403:6030.0008: failed to retrieve chip version [ 637.943113][ T5742] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -5 [ 638.018689][ T30] audit: type=1326 audit(1780562307.821:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12321 comm="syz.4.1583" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f759019ce59 code=0x0 [ 638.223175][ T5742] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 638.264725][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 638.330185][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1576'. [ 638.606192][T11998] usb 3-1: USB disconnect, device number 45 [ 638.657843][ T5742] usb 4-1: config 43 interface 0 has no altsetting 0 [ 638.670237][ T5742] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=db.82 [ 638.696394][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.710921][ T5742] usb 4-1: Product: syz [ 638.718589][ T5742] usb 4-1: Manufacturer: syz [ 638.730257][ T5742] usb 4-1: SerialNumber: syz [ 638.820963][T12350] block nbd4: not configured, cannot reconfigure [ 638.898776][T12352] xt_connbytes: Forcing CT accounting to be enabled [ 638.909454][T12352] set match dimension is over the limit! [ 638.919365][ T30] audit: type=1400 audit(1780562308.721:837): avc: denied { write } for pid=12338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.989265][T12358] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 639.039769][T12328] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1586'. [ 639.057054][ T30] audit: type=1400 audit(1780562308.851:838): avc: denied { write } for pid=12356 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.094666][ T5742] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state [ 639.135346][ T5742] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 639.155191][ T5742] dvb_usb_anysee 4-1:43.0: probe with driver dvb_usb_anysee failed with error -22 [ 639.199623][ T5742] usb 4-1: USB disconnect, device number 51 [ 639.228992][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 639.254213][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 640.562804][T11998] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 640.762998][T11998] usb 5-1: Using ep0 maxpacket: 32 [ 641.863260][T11998] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 641.924655][T11998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 641.991116][T11998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 642.055365][T11998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 642.151773][T11998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 642.235111][ T30] audit: type=1400 audit(1780562312.031:839): avc: denied { write } for pid=12368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.283227][T11998] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 642.328613][T11998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.362159][T11998] usb 5-1: Product: syz [ 642.381953][T11998] usb 5-1: Manufacturer: syz [ 642.398595][T11998] usb 5-1: SerialNumber: syz [ 642.420933][T11998] usb 5-1: config 0 descriptor?? [ 642.487315][T11998] usb 5-1: can't set config #0, error -71 [ 642.529572][T11998] usb 5-1: USB disconnect, device number 48 [ 642.571971][ T30] audit: type=1400 audit(1780562312.371:840): avc: denied { write } for pid=12405 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.610480][T12411] netlink: 'syz.5.1604': attribute type 2 has an invalid length. [ 642.809613][T12417] sch_fq: defrate 0 ignored. [ 643.097353][T12422] befs: (nbd5): No write support. Marking filesystem read-only [ 644.211591][T12424] CUSE: unknown device info "" [ 644.251910][T12424] CUSE: unknown device info "" [ 644.307313][T12424] CUSE: unknown device info "" [ 644.431993][T12424] CUSE: unknown device info "" [ 644.545218][T12424] CUSE: unknown device info "ÿ" [ 644.651137][T12424] CUSE: unknown device info "" [ 644.692054][T12424] CUSE: unknown device info "" [ 644.755904][T12424] CUSE: unknown device info "ÿ" [ 644.831146][ T30] audit: type=1400 audit(1780562314.631:841): avc: denied { getopt } for pid=12423 comm="syz.4.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 644.867881][T12424] CUSE: DEVNAME unspecified [ 645.807037][T12433] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1598'. [ 646.139545][ T30] audit: type=1400 audit(1780562315.941:842): avc: denied { setopt } for pid=12442 comm="syz.2.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 646.432912][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 646.689488][T12457] net_ratelimit: 12 callbacks suppressed [ 646.689505][T12457] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 646.774010][T12462] wg1 speed is unknown, defaulting to 1000 [ 646.791103][T12463] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1620'. [ 647.122661][ T5742] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 647.148233][T12453] 9p: Bad value for 'wfdno' [ 647.294985][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.313896][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.325620][ T5742] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 648.345740][ T5742] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 648.361945][ T5742] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.382036][ T5742] usb 4-1: config 0 descriptor?? [ 649.659714][ T5742] plantronics 0003:047F:FFFF.0009: collection stack underflow [ 649.701388][ T5742] plantronics 0003:047F:FFFF.0009: item 0 2 0 12 parsing failed [ 649.728669][ T5742] plantronics 0003:047F:FFFF.0009: parse failed [ 649.746972][ T5742] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22 [ 649.892351][T12467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.924051][T12467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.959821][T11998] usb 4-1: USB disconnect, device number 52 [ 650.002952][ T24] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 650.174821][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 650.195995][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 650.222949][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 650.253242][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 650.292829][ T24] usb 6-1: string descriptor 0 read error: -22 [ 650.301409][ T24] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 650.328257][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.392444][ T24] usb 6-1: low speed audio streaming not supported [ 650.419628][ T24] usb 6-1: low speed audio streaming not supported [ 650.819110][T12493] 9p: Bad value for 'wfdno' [ 650.915407][T11998] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 650.972539][ T24] usb 6-1: USB disconnect, device number 46 [ 651.092845][T11998] usb 4-1: Using ep0 maxpacket: 32 [ 651.185715][T11998] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 651.208809][T11998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 651.477420][T12504] SELinux: policydb magic number 0xe does not match expected magic number 0xf97cff8c [ 651.487090][T12504] SELinux: failed to load policy [ 651.495688][T11998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 651.528930][T11998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 651.734796][ T30] audit: type=1400 audit(1780562321.521:843): avc: denied { execute } for pid=12507 comm="syz.2.1632" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 652.431461][T11998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 652.445934][T11998] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 652.456713][T11998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.465597][T11998] usb 4-1: Product: syz [ 652.469895][T11998] usb 4-1: Manufacturer: syz [ 652.475300][T11998] usb 4-1: SerialNumber: syz [ 652.485943][T11998] usb 4-1: config 0 descriptor?? [ 653.507716][T12521] binder: 12520:12521 ioctl c0306201 200000000080 returned -14 [ 653.787799][T11998] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 653.806148][T11998] input input48: Device does not respond to id packet M [ 653.814818][ T8810] Bluetooth: hci6: Frame reassembly failed (-84) [ 653.860270][T11998] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 653.870567][T11998] input input48: Device does not respond to id packet P [ 653.881102][T11998] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 653.891341][T11998] input input48: Device does not respond to id packet B [ 653.903368][T11998] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 653.909698][T11998] input input48: Device does not respond to id packet N [ 653.924438][T11998] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 653.948913][T11998] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 653.972078][T11998] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 653.987913][T11998] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 654.004868][T11998] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input48 [ 654.029817][T12524] No such timeout policy "syz0" [ 654.086424][T11998] usb 4-1: USB disconnect, device number 53 [ 654.532946][ T5742] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 654.694068][ T5742] usb 6-1: not running at top speed; connect to a high speed hub [ 654.707366][ T5742] usb 6-1: no configurations [ 654.715395][ T5742] usb 6-1: can't read configurations, error -22 [ 654.852990][ T5742] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 655.023606][ T5742] usb 6-1: not running at top speed; connect to a high speed hub [ 655.031593][ T5742] usb 6-1: no configurations [ 655.039616][ T5742] usb 6-1: can't read configurations, error -22 [ 655.085952][ T5742] usb usb6-port1: attempt power cycle [ 655.432837][ T5742] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 655.470047][ T5742] usb 6-1: not running at top speed; connect to a high speed hub [ 655.479814][ T5742] usb 6-1: no configurations [ 655.491680][ T5742] usb 6-1: can't read configurations, error -22 [ 655.643465][ T5742] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 655.677426][ T5742] usb 6-1: not running at top speed; connect to a high speed hub [ 655.686405][ T5742] usb 6-1: no configurations [ 655.702110][ T5742] usb 6-1: can't read configurations, error -22 [ 655.721992][ T5742] usb usb6-port1: unable to enumerate USB device [ 655.864217][ T4932] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 655.866774][ T50] Bluetooth: hci6: command 0x1003 tx timeout [ 655.904003][T12559] netlink: 'syz.4.1644': attribute type 21 has an invalid length. [ 655.936760][T12559] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1644'. [ 656.103980][T12563] netlink: 'syz.2.1645': attribute type 21 has an invalid length. [ 656.120975][T12563] ISOFS: Unable to identify CD-ROM format. [ 656.193208][ T30] audit: type=1400 audit(1780562325.991:844): avc: denied { create } for pid=12564 comm="syz.4.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 656.239696][ T30] audit: type=1400 audit(1780562326.021:845): avc: denied { write } for pid=12564 comm="syz.4.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 659.093804][ T5749] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 659.197976][T12610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1660'. [ 659.275033][ T5749] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 659.319906][ T5749] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 659.334917][T12610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1660'. [ 659.336157][T12614] netlink: 4244 bytes leftover after parsing attributes in process `syz.2.1663'. [ 659.372393][T12610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1660'. [ 659.374531][ T5749] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 659.397647][ T30] audit: type=1400 audit(1780562329.201:846): avc: denied { ioctl } for pid=12613 comm="syz.2.1663" path="socket:[46401]" dev="sockfs" ino=46401 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 659.401683][ T5749] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 659.442806][T12616] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1662'. [ 659.465235][ T5749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.473706][T12616] x_tables: duplicate underflow at hook 2 [ 659.492751][T12603] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 659.877081][T12623] ISOFS: Unable to identify CD-ROM format. [ 660.819100][T12629] FAULT_INJECTION: forcing a failure. [ 660.819100][T12629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.877933][T12629] CPU: 0 UID: 0 PID: 12629 Comm: syz.3.1667 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.877952][T12629] Tainted: [L]=SOFTLOCKUP [ 660.877956][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 660.877962][T12629] Call Trace: [ 660.877966][T12629] [ 660.877970][T12629] dump_stack_lvl+0x100/0x190 [ 660.877987][T12629] should_fail_ex.cold+0x5/0xa [ 660.878002][T12629] _copy_from_user+0x2e/0xd0 [ 660.878016][T12629] memdup_user+0x6b/0xe0 [ 660.878028][T12629] strndup_user+0x78/0xe0 [ 660.878039][T12629] bpf_uprobe_multi_link_attach+0x3e2/0x13d0 [ 660.878057][T12629] ? find_held_lock+0x2b/0x80 [ 660.878067][T12629] ? __fget_files+0x215/0x3d0 [ 660.878083][T12629] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 660.878098][T12629] ? __fget_files+0x21f/0x3d0 [ 660.878114][T12629] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 660.878129][T12629] __sys_bpf+0x3faf/0x4b90 [ 660.878147][T12629] ? __pfx___sys_bpf+0x10/0x10 [ 660.878162][T12629] ? proc_fail_nth_write+0x9f/0x220 [ 660.878174][T12629] ? find_held_lock+0x2b/0x80 [ 660.878188][T12629] ? find_held_lock+0x2b/0x80 [ 660.878197][T12629] ? ksys_write+0x190/0x250 [ 660.878208][T12629] ? ksys_write+0x190/0x250 [ 660.878221][T12629] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 660.878236][T12629] ? kernel_write+0x5f3/0x6c0 [ 660.878247][T12629] ? __fget_files+0x215/0x3d0 [ 660.878266][T12629] ? fput+0x79/0x100 [ 660.878280][T12629] ? ksys_write+0x1ac/0x250 [ 660.878293][T12629] ? __pfx_ksys_write+0x10/0x10 [ 660.878307][T12629] __x64_sys_bpf+0x7b/0xc0 [ 660.878321][T12629] ? lockdep_hardirqs_on+0x78/0x100 [ 660.878335][T12629] do_syscall_64+0x115/0x870 [ 660.878349][T12629] ? clear_bhb_loop+0x40/0x90 [ 660.878362][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.878374][T12629] RIP: 0033:0x7fb40059ce59 [ 660.878384][T12629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.878394][T12629] RSP: 002b:00007fb4013c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 660.878405][T12629] RAX: ffffffffffffffda RBX: 00007fb400815fa0 RCX: 00007fb40059ce59 [ 660.878412][T12629] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 660.878418][T12629] RBP: 00007fb4013c4090 R08: 0000000000000000 R09: 0000000000000000 [ 660.878424][T12629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.878430][T12629] R13: 00007fb400816038 R14: 00007fb400815fa0 R15: 00007ffc0f3d1568 [ 660.878444][T12629] [ 661.235770][ T5749] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 661.450242][ T5749] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input49 [ 661.464708][T12631] netlink: 'syz.5.1666': attribute type 62 has an invalid length. [ 661.895355][T12640] openvswitch: netlink: IP tunnel TTL not specified. [ 663.651885][T11998] usb 5-1: USB disconnect, device number 49 [ 663.657880][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 665.891043][T12686] openvswitch: netlink: IP tunnel TTL not specified. [ 668.322736][T12708] tipc: New replicast peer: 255.255.255.255 [ 668.341225][T12708] tipc: Enabled bearer , priority 10 [ 668.355229][ T30] audit: type=1400 audit(1780562338.161:847): avc: denied { open } for pid=12701 comm="syz.3.1686" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 668.421307][ T30] audit: type=1400 audit(1780562338.161:848): avc: denied { ioctl } for pid=12701 comm="syz.3.1686" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 668.618998][T11998] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 668.634370][T12712] openvswitch: netlink: IP tunnel TTL not specified. [ 668.716822][T12715] pim6reg9: entered allmulticast mode [ 668.732162][T12720] input: syz0 as /devices/virtual/input/input50 [ 668.772733][T11998] usb 3-1: Using ep0 maxpacket: 16 [ 668.791893][T11998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 668.847195][T11998] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 668.945359][T11998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.473817][T11998] usb 3-1: Product: syz [ 669.478028][T11998] usb 3-1: Manufacturer: syz [ 669.483054][T11998] usb 3-1: SerialNumber: syz [ 669.495552][T11998] usb 3-1: config 0 descriptor?? [ 669.525098][T11998] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 669.715028][ T30] audit: type=1400 audit(1780562339.521:849): avc: denied { ioctl } for pid=12703 comm="syz.2.1688" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 669.802256][ T30] audit: type=1400 audit(1780562339.601:850): avc: denied { write } for pid=12703 comm="syz.2.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 669.879749][ T5741] usb 3-1: USB disconnect, device number 46 [ 669.885881][ T6175] usb 3-1: Failed to submit usb control message: -71 [ 669.907463][ T6175] usb 3-1: unable to send the bmi data to the device: -71 [ 669.949934][ T6175] usb 3-1: unable to get target info from device [ 669.972639][ T6175] usb 3-1: could not get target info (-71) [ 670.003846][ T6175] usb 3-1: could not probe fw (-71) [ 670.227875][T12734] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 670.307214][T12734] netlink: 'syz.5.1684': attribute type 1 has an invalid length. [ 670.338617][ T30] audit: type=1400 audit(1780562340.141:851): avc: denied { write } for pid=12733 comm="syz.5.1684" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 670.426957][T12734] bond3 (unregistering): Released all slaves [ 670.456275][ T30] audit: type=1400 audit(1780562340.141:852): avc: denied { ioctl } for pid=12733 comm="syz.5.1684" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 670.524321][T12735] 9p: Bad value for 'wfdno' [ 670.802727][ T5749] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 670.823047][T11998] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 670.884954][ T30] audit: type=1400 audit(1780562340.691:853): avc: denied { setopt } for pid=12747 comm="syz.7.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 670.962945][ T5749] usb 5-1: Using ep0 maxpacket: 16 [ 670.965196][T12748] IPVS: dh: FWM 3 0x00000003 - no destination available [ 670.979600][ T5749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 671.012908][ T5749] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 671.024803][T11998] usb 3-1: Using ep0 maxpacket: 32 [ 671.039098][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.047637][ T5749] usb 5-1: Product: syz [ 671.053861][ T5749] usb 5-1: Manufacturer: syz [ 671.058768][T11998] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 671.072343][ T5749] usb 5-1: SerialNumber: syz [ 671.077163][T11998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 671.089901][ T5749] usb 5-1: config 0 descriptor?? [ 671.096848][T11998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 671.117238][T11998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 671.129855][ T5749] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 671.142630][T11998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 671.185554][T11998] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 671.225489][T11998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.254950][T11998] usb 3-1: Product: syz [ 671.267456][T11998] usb 3-1: Manufacturer: syz [ 671.273736][ T5734] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 671.285123][T11998] usb 3-1: SerialNumber: syz [ 671.321417][T11998] usb 3-1: config 0 descriptor?? [ 671.330915][T12755] Dead loop on virtual device ip6_vti0 (net 191), fix it urgently! [ 671.348237][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.372520][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.406580][ T6175] usb 5-1: Failed to submit usb control message: -71 [ 671.406848][ T5749] usb 5-1: USB disconnect, device number 50 [ 671.444247][ T6175] usb 5-1: unable to send the bmi data to the device: -71 [ 671.463135][ T5734] usb 6-1: Using ep0 maxpacket: 16 [ 671.470004][ T5734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 671.470769][ T6175] usb 5-1: unable to get target info from device [ 671.501291][ T5734] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 671.515407][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.524270][ T6175] usb 5-1: could not get target info (-71) [ 671.525799][ T5734] usb 6-1: Product: syz [ 671.531720][ T5734] usb 6-1: Manufacturer: syz [ 671.546300][ T5734] usb 6-1: SerialNumber: syz [ 671.562550][ T5734] usb 6-1: config 0 descriptor?? [ 671.571713][ T6175] usb 5-1: could not probe fw (-71) [ 671.577991][ T5734] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 671.679610][ T5734] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 671.693100][T12757] openvswitch: netlink: IP tunnel TTL not specified. [ 671.790350][T11998] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 671.798178][T11998] input input51: Device does not respond to id packet M [ 671.812430][T11998] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 672.157848][T11998] input input51: Device does not respond to id packet P [ 672.167018][T11998] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 672.175114][T11998] input input51: Device does not respond to id packet B [ 672.184466][T11998] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 672.191692][T11998] input input51: Device does not respond to id packet N [ 672.228525][T11998] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 672.379582][ T5734] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 672.484542][T11998] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 672.492522][T11998] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 672.517298][T11998] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 672.536496][T11998] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input51 [ 672.577506][T11998] usb 3-1: USB disconnect, device number 47 [ 672.803220][ T5742] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 672.986264][ T5742] usb 5-1: unable to get BOS descriptor or descriptor too short [ 673.009990][ T5734] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 673.025555][ T5734] em28xx 6-1:0.0: board has no eeprom [ 673.027919][ T5742] usb 5-1: not running at top speed; connect to a high speed hub [ 673.379317][ T5742] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 673.407399][ T5742] usb 5-1: config 0 has no interface number 0 [ 673.430066][ T5742] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 673.470658][ T5742] usb 5-1: config 0 interface 88 has no altsetting 0 [ 673.496081][ T5742] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 673.522664][ T5742] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 673.549271][ T5742] usb 5-1: Product: syz [ 673.563760][ T5742] usb 5-1: SerialNumber: Љ [ 673.604339][ T5742] usb 5-1: config 0 descriptor?? [ 673.628571][T12769] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 673.633215][ T5734] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 673.662699][ T5734] em28xx 6-1:0.0: dvb set to bulk mode. [ 673.672157][ T5749] em28xx 6-1:0.0: Binding DVB extension [ 673.703020][ T5734] usb 6-1: USB disconnect, device number 51 [ 673.727467][ T5734] em28xx 6-1:0.0: Disconnecting em28xx [ 673.792472][ T5749] em28xx 6-1:0.0: Registering input extension [ 673.811049][ T5734] em28xx 6-1:0.0: Closing input extension [ 673.881859][ T30] audit: type=1400 audit(1780562343.681:854): avc: denied { read } for pid=12782 comm="syz.7.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 673.885857][ T5734] em28xx 6-1:0.0: Freeing device [ 673.948412][ T5742] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input53 [ 674.095464][ T5742] usb 5-1: USB disconnect, device number 51 [ 674.613546][ T7368] udevd[7368]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 674.666251][ T7368] udevd[7368]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 674.687438][ T5614] udevd[5614]: Error opening device "/dev/input/event4": No such device [ 674.715551][ T5614] udevd[5614]: Unable to EVIOCGABS device "/dev/input/event4" [ 674.738348][ T5614] udevd[5614]: Unable to EVIOCGABS device "/dev/input/event4" [ 674.851717][ T30] audit: type=1400 audit(1780562344.621:855): avc: denied { setopt } for pid=12795 comm="syz.2.1714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 674.952790][ T5749] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 675.108707][T12799] openvswitch: netlink: IP tunnel TTL not specified. [ 675.184093][ T5749] usb 6-1: Using ep0 maxpacket: 32 [ 675.194354][ T5749] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 675.212200][ T5749] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 675.226874][ T5749] usb 6-1: config 0 interface 0 has no altsetting 0 [ 675.248158][ T5749] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 675.277571][ T5749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.301482][ T5749] usb 6-1: Product: syz [ 675.318963][ T5749] usb 6-1: Manufacturer: syz [ 675.335555][ T5749] usb 6-1: SerialNumber: syz [ 675.364482][ T5749] usb 6-1: config 0 descriptor?? [ 675.461014][T12808] FAULT_INJECTION: forcing a failure. [ 675.461014][T12808] name failslab, interval 1, probability 0, space 0, times 0 [ 675.474011][T12808] CPU: 0 UID: 0 PID: 12808 Comm: syz.4.1718 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.474039][T12808] Tainted: [L]=SOFTLOCKUP [ 675.474046][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 675.474056][T12808] Call Trace: [ 675.474061][T12808] [ 675.474067][T12808] dump_stack_lvl+0x100/0x190 [ 675.474092][T12808] should_fail_ex.cold+0x5/0xa [ 675.474112][T12808] should_failslab+0xc2/0x120 [ 675.474125][T12808] __kmalloc_cache_node_noprof+0x7d/0x770 [ 675.474137][T12808] ? __get_vm_area_node+0x101/0x330 [ 675.474152][T12808] __get_vm_area_node+0x101/0x330 [ 675.474167][T12808] __vmalloc_node_range_noprof+0x228/0x1630 [ 675.474189][T12808] ? vhost_task_create+0x1db/0x370 [ 675.474213][T12808] ? rcu_is_watching+0x12/0xc0 [ 675.474243][T12808] ? vhost_task_create+0x1db/0x370 [ 675.474268][T12808] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 675.474289][T12808] ? rcu_is_watching+0x12/0xc0 [ 675.474304][T12808] ? trace_kmem_cache_alloc+0xd5/0x100 [ 675.474318][T12808] ? vhost_task_create+0x1db/0x370 [ 675.474338][T12808] __vmalloc_node_noprof+0xad/0xf0 [ 675.474359][T12808] ? vhost_task_create+0x1db/0x370 [ 675.474382][T12808] copy_process+0x7fb/0x7ed0 [ 675.474414][T12808] ? __pfx_copy_process+0x10/0x10 [ 675.474432][T12808] ? lockdep_init_map_type+0x5c/0x250 [ 675.474447][T12808] ? lockdep_init_map_type+0x5c/0x250 [ 675.474461][T12808] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 675.474480][T12808] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 675.474506][T12808] vhost_task_create+0x1db/0x370 [ 675.474528][T12808] ? __pfx_vhost_task_create+0x10/0x10 [ 675.474553][T12808] ? __pfx_vhost_task_fn+0x10/0x10 [ 675.474569][T12808] ? __pfx___schedule+0x10/0x10 [ 675.474585][T12808] kvm_mmu_post_init_vm+0x1b3/0x370 [ 675.474602][T12808] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 675.474620][T12808] ? preempt_schedule_thunk+0x16/0x30 [ 675.474652][T12808] kvm_vcpu_ioctl+0x730/0x1720 [ 675.474672][T12808] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 675.474690][T12808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.474705][T12808] ? do_vfs_ioctl+0x226/0x13e0 [ 675.474718][T12808] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 675.474729][T12808] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 675.474751][T12808] ? __fget_files+0x215/0x3d0 [ 675.474768][T12808] ? hook_file_ioctl_common+0x149/0x410 [ 675.474794][T12808] ? selinux_file_ioctl+0x13b/0x290 [ 675.474817][T12808] ? selinux_file_ioctl+0xb6/0x290 [ 675.474840][T12808] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 675.474852][T12808] __x64_sys_ioctl+0x18e/0x210 [ 675.474865][T12808] do_syscall_64+0x115/0x870 [ 675.474879][T12808] ? clear_bhb_loop+0x40/0x90 [ 675.474892][T12808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.474906][T12808] RIP: 0033:0x7f759019ce59 [ 675.474921][T12808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.474936][T12808] RSP: 002b:00007f7591031028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.474953][T12808] RAX: ffffffffffffffda RBX: 00007f7590416090 RCX: 00007f759019ce59 [ 675.474969][T12808] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 675.474979][T12808] RBP: 00007f7591031090 R08: 0000000000000000 R09: 0000000000000000 [ 675.474987][T12808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.474993][T12808] R13: 00007f7590416128 R14: 00007f7590416090 R15: 00007ffe12591b08 [ 675.475008][T12808] [ 675.475261][T12808] syz.4.1718: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 675.843932][T12808] CPU: 0 UID: 0 PID: 12808 Comm: syz.4.1718 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.843958][T12808] Tainted: [L]=SOFTLOCKUP [ 675.843964][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 675.843974][T12808] Call Trace: [ 675.843981][T12808] [ 675.843989][T12808] dump_stack_lvl+0x100/0x190 [ 675.844014][T12808] warn_alloc.cold+0x95/0x1c1 [ 675.844035][T12808] ? __pfx_warn_alloc+0x10/0x10 [ 675.844064][T12808] ? trace_kmalloc+0xe3/0x110 [ 675.844085][T12808] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 675.844099][T12808] ? __kasan_kmalloc+0x8a/0xb0 [ 675.844110][T12808] ? __get_vm_area_node+0x208/0x330 [ 675.844127][T12808] __vmalloc_node_range_noprof+0xccd/0x1630 [ 675.844141][T12808] ? rcu_is_watching+0x12/0xc0 [ 675.844170][T12808] ? vhost_task_create+0x1db/0x370 [ 675.844200][T12808] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 675.844226][T12808] ? rcu_is_watching+0x12/0xc0 [ 675.844244][T12808] ? trace_kmem_cache_alloc+0xd5/0x100 [ 675.844257][T12808] ? vhost_task_create+0x1db/0x370 [ 675.844271][T12808] __vmalloc_node_noprof+0xad/0xf0 [ 675.844288][T12808] ? vhost_task_create+0x1db/0x370 [ 675.844331][T12808] copy_process+0x7fb/0x7ed0 [ 675.844370][T12808] ? __pfx_copy_process+0x10/0x10 [ 675.844391][T12808] ? lockdep_init_map_type+0x5c/0x250 [ 675.844405][T12808] ? lockdep_init_map_type+0x5c/0x250 [ 675.844420][T12808] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 675.844433][T12808] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 675.844459][T12808] vhost_task_create+0x1db/0x370 [ 675.844481][T12808] ? __pfx_vhost_task_create+0x10/0x10 [ 675.844509][T12808] ? __pfx_vhost_task_fn+0x10/0x10 [ 675.844528][T12808] ? __pfx___schedule+0x10/0x10 [ 675.844545][T12808] kvm_mmu_post_init_vm+0x1b3/0x370 [ 675.844563][T12808] kvm_arch_vcpu_ioctl_run+0x66/0x1890 [ 675.844579][T12808] ? preempt_schedule_thunk+0x16/0x30 [ 675.844609][T12808] kvm_vcpu_ioctl+0x730/0x1720 [ 675.844629][T12808] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 675.844647][T12808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 675.844666][T12808] ? do_vfs_ioctl+0x226/0x13e0 [ 675.844678][T12808] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 675.844690][T12808] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 675.844712][T12808] ? __fget_files+0x215/0x3d0 [ 675.844725][T12808] ? hook_file_ioctl_common+0x149/0x410 [ 675.844751][T12808] ? selinux_file_ioctl+0x13b/0x290 [ 675.844774][T12808] ? selinux_file_ioctl+0xb6/0x290 [ 675.844799][T12808] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 675.844815][T12808] __x64_sys_ioctl+0x18e/0x210 [ 675.844827][T12808] do_syscall_64+0x115/0x870 [ 675.844842][T12808] ? clear_bhb_loop+0x40/0x90 [ 675.844855][T12808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.844867][T12808] RIP: 0033:0x7f759019ce59 [ 675.844881][T12808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.844897][T12808] RSP: 002b:00007f7591031028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.844913][T12808] RAX: ffffffffffffffda RBX: 00007f7590416090 RCX: 00007f759019ce59 [ 675.844923][T12808] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 675.844933][T12808] RBP: 00007f7591031090 R08: 0000000000000000 R09: 0000000000000000 [ 675.844943][T12808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.844952][T12808] R13: 00007f7590416128 R14: 00007f7590416090 R15: 00007ffe12591b08 [ 675.844967][T12808] [ 675.845001][T12808] Mem-Info: [ 676.201222][T12808] active_anon:38817 inactive_anon:0 isolated_anon:1505 [ 676.201222][T12808] active_file:24264 inactive_file:40950 isolated_file:0 [ 676.201222][T12808] unevictable:1347 dirty:408 writeback:0 [ 676.201222][T12808] slab_reclaimable:9001 slab_unreclaimable:108769 [ 676.201222][T12808] mapped:49321 shmem:27352 pagetables:1716 [ 676.201222][T12808] sec_pagetables:3 bounce:0 [ 676.201222][T12808] kernel_misc_reclaimable:0 [ 676.201222][T12808] free:1236305 free_pcp:13209 free_cma:0 [ 676.247479][T12808] Node 0 active_anon:155268kB inactive_anon:0kB active_file:97028kB inactive_file:163600kB unevictable:1536kB isolated(anon):6020kB isolated(file):0kB mapped:197256kB dirty:1628kB writeback:0kB shmem:107872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14064kB pagetables:6716kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 676.285008][T12808] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:200kB unevictable:3852kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 676.318110][T12808] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.348563][T12808] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 676.354622][T12808] Node 0 DMA32 free:985300kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:155268kB inactive_anon:0kB active_file:97028kB inactive_file:163600kB unevictable:1536kB writepending:1628kB zspages:4kB present:3129332kB managed:2537296kB mlocked:4196kB bounce:0kB free_pcp:52124kB local_pcp:27856kB free_cma:0kB [ 676.390330][T12808] lowmem_reserve[]: 0 0 1 1 1 [ 676.395335][T12808] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1100kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 676.425462][T12808] lowmem_reserve[]: 0 0 0 0 0 [ 676.430341][T12808] Node 1 Normal free:3944560kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:200kB unevictable:3852kB writepending:4kB zspages:4kB present:4194300kB managed:4111100kB mlocked:2316kB bounce:0kB free_pcp:688kB local_pcp:0kB free_cma:0kB [ 676.462805][T12808] lowmem_reserve[]: 0 0 0 0 0 [ 676.467731][T12808] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 676.482547][T12808] Node 0 DMA32: 2919*4kB (U) 2577*8kB (U) 1267*16kB (UME) 1144*32kB (ME) 672*64kB (ME) 341*128kB (UME) 156*256kB (UME) 111*512kB (UME) 68*1024kB (UME) 36*2048kB (UM) 139*4096kB (UM) = 985300kB [ 676.502314][T12808] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 676.514207][T12808] Node 1 Normal: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 7*64kB (UM) 3*128kB (U) 3*256kB (UM) 1*512kB (U) 0*1024kB 3*2048kB (UM) 961*4096kB (M) = 3944548kB [ 676.530075][T12808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.539791][T12808] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 676.549374][T12808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.559089][T12808] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 676.568527][T12808] 92562 total pagecache pages [ 676.573363][T12808] 0 pages in swap cache [ 676.577594][T12808] Free swap = 124988kB [ 676.582713][T12808] Total swap = 124996kB [ 676.590163][T12808] 2097051 pages RAM [ 676.594138][T12808] 0 pages HighMem/MovableOnly [ 676.598887][T12808] 430837 pages reserved [ 676.603110][T12808] 0 pages cma reserved [ 676.839305][ T5749] gs_usb 6-1:0.0: Couldn't send data format (err=-110) [ 676.856351][ T5749] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 677.733112][T12824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.773337][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1712'. [ 677.880599][T12826] comedi comedi0: Minor 73 is invalid! [ 678.239055][ T30] audit: type=1400 audit(1780562348.041:856): avc: denied { map } for pid=12822 comm="syz.2.1721" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 678.325867][ T30] audit: type=1400 audit(1780562348.131:857): avc: denied { append } for pid=12822 comm="syz.2.1721" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 678.510580][T12826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.814469][ T9] libceph: connect (1)[c::]:6789 error -101 [ 678.822358][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 678.826138][T12826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.085155][ T5742] libceph: connect (1)[c::]:6789 error -101 [ 679.091649][ T5742] libceph: mon0 (1)[c::]:6789 connect error [ 679.161796][T12831] ceph: No mds server is up or the cluster is laggy [ 679.666191][T12853] netlink: 'syz.3.1728': attribute type 4 has an invalid length. [ 679.742689][T11998] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 679.767967][ T5749] usb 6-1: USB disconnect, device number 52 [ 679.902933][T11998] usb 5-1: device descriptor read/64, error -71 [ 680.049729][T12857] netlink: 'syz.5.1729': attribute type 2 has an invalid length. [ 680.152682][T11998] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 680.186829][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.196963][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.332661][T11998] usb 5-1: device descriptor read/64, error -71 [ 680.544135][T11998] usb usb5-port1: attempt power cycle [ 680.893163][T11998] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 680.943109][T11998] usb 5-1: device descriptor read/8, error -71 [ 681.105354][ T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 681.203846][T11998] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 681.253162][T11998] usb 5-1: device descriptor read/8, error -71 [ 681.304170][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 681.373637][T11998] usb usb5-port1: unable to enumerate USB device [ 681.387566][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 681.557193][T12882] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 681.566959][T12882] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 681.654303][ T30] audit: type=1400 audit(1780562351.421:858): avc: denied { mounton } for pid=12879 comm="syz.2.1737" path="/344/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 681.783753][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 681.819116][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 681.856247][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 681.891317][T12875] 9p: Bad value for 'rfdno' [ 681.904914][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 681.936279][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.144044][ T30] audit: type=1400 audit(1780562351.941:859): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 682.207227][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 682.240037][ T9] usbtmc 6-1:16.0: can't read capabilities [ 682.522834][T11998] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 682.631702][T12888] No such timeout policy "syz0" [ 682.669436][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 682.933968][T11998] usb 3-1: unable to get BOS descriptor or descriptor too short [ 682.962444][T11998] usb 3-1: not running at top speed; connect to a high speed hub [ 682.974047][T12890] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=6166 sclass=netlink_xfrm_socket pid=12890 comm=syz.7.1739 [ 683.013917][T11998] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 683.045414][T11998] usb 3-1: config 0 has no interface number 0 [ 683.068014][T11998] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 683.100661][T11998] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 683.112947][T11998] usb 3-1: config 0 interface 88 has no altsetting 0 [ 683.124460][T11998] usb 3-1: string descriptor 0 read error: -22 [ 683.133186][T11998] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 683.142355][T11998] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 683.148313][ T5734] usb 6-1: USB disconnect, device number 53 [ 683.167997][T11998] usb 3-1: config 0 descriptor?? [ 683.188177][T11998] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input54 [ 683.387766][ T5614] udevd[5614]: Error opening device "/dev/input/event4": Input/output error [ 683.406812][ T30] audit: type=1400 audit(1780562353.211:860): avc: denied { write } for pid=12895 comm="syz.7.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 683.521541][ T5614] udevd[5614]: Unable to EVIOCGABS device "/dev/input/event4" [ 683.546630][ T5614] udevd[5614]: Unable to EVIOCGABS device "/dev/input/event4" [ 683.563227][T12887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.580166][ T5614] udevd[5614]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 683.610559][T12887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.700935][ T4982] udevd[4982]: worker [5614] terminated by signal 6 (Aborted) [ 683.720440][T12899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.726544][ T4982] udevd[4982]: worker [5614] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input54/event4' [ 683.801809][T12899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.042865][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 685.216206][ T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 685.243885][T12913] [U]  [ 685.250112][ T9] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 685.272197][ T9] usb 6-1: Product: syz [ 685.301451][ T9] usb 6-1: config 0 descriptor?? [ 685.330145][ T5734] usb 3-1: USB disconnect, device number 48 [ 685.356535][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 685.413993][ T9] usb 6-1: Detected FT232H [ 685.775281][T12919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.800877][T12919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.849517][T12919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.866040][T12919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.897960][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 685.925592][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 685.941811][ T9] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 685.993780][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 686.047081][ T9] usb 6-1: USB disconnect, device number 54 [ 686.095629][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 686.127162][ T9] ftdi_sio 6-1:0.0: device disconnected [ 686.462962][ T5742] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 686.672978][ T5742] usb 4-1: Using ep0 maxpacket: 32 [ 686.684643][ T5742] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 686.709592][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 686.737639][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 686.762676][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 686.782628][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 686.804427][ T5742] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 686.819885][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.844333][ T5742] usb 4-1: Product: syz [ 686.852630][ T5742] usb 4-1: Manufacturer: syz [ 686.862690][ T5742] usb 4-1: SerialNumber: syz [ 686.879016][ T5742] usb 4-1: config 0 descriptor?? [ 687.307260][ T5742] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 687.321994][ T5742] input input55: Device does not respond to id packet M [ 687.342795][ T5742] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 687.370544][ T5742] input input55: Device does not respond to id packet P [ 687.388180][ T5742] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 687.405906][ T5742] input input55: Device does not respond to id packet B [ 687.426737][ T5742] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 687.444806][ T5742] input input55: Device does not respond to id packet N [ 687.467435][ T5742] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 687.485620][ T5742] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 687.502683][ T5742] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 687.519691][ T5742] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 687.545366][ T5742] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input55 [ 688.347552][ T5742] usb 4-1: USB disconnect, device number 54 [ 689.037973][T12975] netlink: 'syz.7.1764': attribute type 1 has an invalid length. [ 689.150820][T12975] bond2: option mode: invalid value (7) [ 689.179295][T12978] netlink: 'syz.7.1764': attribute type 10 has an invalid length. [ 689.207715][T12978] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1764'. [ 689.230552][T12975] bond2 (unregistering): Released all slaves [ 689.268112][T12985] input: syz1 as /devices/virtual/input/input56 [ 689.406928][ T30] audit: type=1400 audit(1780562359.211:861): avc: denied { mounton } for pid=12979 comm="syz.5.1767" path="/file0" dev="ramfs" ino=48590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 689.439429][T12978] dummy0: entered promiscuous mode [ 689.446907][T12992] netlink: 'syz.4.1770': attribute type 12 has an invalid length. [ 689.458959][T12992] netlink: 'syz.4.1770': attribute type 29 has an invalid length. [ 689.483959][T12992] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1770'. [ 689.511565][T12992] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1770'. [ 689.738453][T12998] binder: BINDER_SET_CONTEXT_MGR already set [ 689.744580][T12998] binder: 12996:12998 ioctl 4018620d 200000000040 returned -16 [ 690.536020][T13005] netlink: 'syz.4.1775': attribute type 2 has an invalid length. [ 691.012699][ T5734] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 691.252893][ T5734] usb 6-1: Using ep0 maxpacket: 32 [ 691.278276][ T5734] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.308072][ T5734] usb 6-1: config 0 has no interfaces? [ 691.335927][ T5734] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 691.365124][ T5734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.447847][ T5734] usb 6-1: Product: syz [ 691.465560][ T5734] usb 6-1: Manufacturer: syz [ 691.482168][ T5734] usb 6-1: SerialNumber: syz [ 691.507146][ T5734] usb 6-1: config 0 descriptor?? [ 691.629436][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1781'. [ 691.751110][ T9] usb 6-1: USB disconnect, device number 55 [ 691.884446][T13035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1783'. [ 693.093815][T13043] 9p: Bad value for 'port' [ 693.449852][T13052] binder: BINDER_SET_CONTEXT_MGR already set [ 693.456145][T13052] binder: 13045:13052 ioctl 4018620d 200000000040 returned -16 [ 694.116428][ T30] audit: type=1400 audit(1780562363.921:862): avc: denied { read append } for pid=13057 comm="syz.3.1790" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 694.142826][ T30] audit: type=1400 audit(1780562363.921:863): avc: denied { ioctl } for pid=13057 comm="syz.3.1790" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x582d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 694.532702][T11998] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 694.708423][T13084] binder: BINDER_SET_CONTEXT_MGR already set [ 694.714729][T13084] binder: 13082:13084 ioctl 4018620d 200000000040 returned -16 [ 694.732664][T11998] usb 6-1: Using ep0 maxpacket: 32 [ 695.486895][T11998] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 695.495183][T11998] usb 6-1: config 0 has no interface number 0 [ 695.503401][T11998] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 695.512801][T11998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.528325][T11998] usb 6-1: Product: syz [ 695.532517][T11998] usb 6-1: Manufacturer: syz [ 695.537282][T11998] usb 6-1: SerialNumber: syz [ 695.548571][T11998] usb 6-1: config 0 descriptor?? [ 695.597457][ T30] audit: type=1400 audit(1780562365.401:864): avc: denied { execute } for pid=13093 comm="syz.7.1802" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=47843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 695.628473][T13088] ±ÿÿÿòÿÿÿòÿÿ: renamed from lo [ 695.662155][ T30] audit: type=1400 audit(1780562365.451:865): avc: denied { setopt } for pid=13087 comm="syz.2.1800" lport=53425 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 696.200122][T13102] wg1 speed is unknown, defaulting to 1000 [ 696.340875][T13100] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 696.384295][T11998] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 696.411649][T11998] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 696.743370][T13070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.763986][ T5742] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 696.794181][T13070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 696.881162][ T30] audit: type=1400 audit(1780562366.681:866): avc: denied { create } for pid=13107 comm="syz.4.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 697.793694][T13119] wg1 speed is unknown, defaulting to 1000 [ 700.808801][T11998] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 700.837417][T11998] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 700.839314][ T30] audit: type=1400 audit(1780562370.641:867): avc: denied { map_create } for pid=13124 comm="syz.3.1809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 700.888560][ T30] audit: type=1400 audit(1780562370.641:868): avc: denied { bpf } for pid=13124 comm="syz.3.1809" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 700.911072][ T30] audit: type=1400 audit(1780562370.691:869): avc: denied { prog_load } for pid=13122 comm="syz.4.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 700.943258][T11998] usb 6-1: USB disconnect, device number 56 [ 700.994080][ T30] audit: type=1400 audit(1780562370.691:870): avc: denied { perfmon } for pid=13122 comm="syz.4.1808" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 701.152016][ T30] audit: type=1400 audit(1780562370.951:871): avc: denied { write } for pid=13128 comm="syz.4.1810" name="cgroup.subtree_control" dev="cgroup2" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 701.263863][ T30] audit: type=1400 audit(1780562370.951:872): avc: denied { open } for pid=13128 comm="syz.4.1810" path="" dev="cgroup2" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 701.314870][ T30] audit: type=1400 audit(1780562371.121:873): avc: denied { map_read map_write } for pid=13133 comm="syz.7.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 702.464183][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'. [ 704.430654][ T30] audit: type=1400 audit(1780562374.231:874): avc: denied { getopt } for pid=13163 comm="syz.2.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 705.022911][ T30] audit: type=1400 audit(1780562374.801:875): avc: denied { append } for pid=13167 comm="syz.7.1822" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 705.048762][ T30] audit: type=1400 audit(1780562374.801:876): avc: denied { prog_run } for pid=13167 comm="syz.7.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 706.397549][T13183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 706.489594][T13188] netlink: 'syz.4.1824': attribute type 4 has an invalid length. [ 706.521097][T13188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1824'. [ 707.430803][T13194] netlink: 'syz.4.1828': attribute type 1 has an invalid length. [ 707.487305][T13194] bond10: entered promiscuous mode [ 707.518384][T13194] 8021q: adding VLAN 0 to HW filter on device bond10 [ 707.652829][T13199] 8021q: adding VLAN 0 to HW filter on device bond10 [ 707.660106][T13199] bond10: (slave gre9): The slave device specified does not support setting the MAC address [ 708.089828][T13199] bond10: (slave gre9): Setting fail_over_mac to active for active-backup mode [ 708.183729][T13199] bond10: (slave gre9): making interface the new active one [ 708.200177][T13199] gre9: entered promiscuous mode [ 708.316835][T13199] bond10: (slave gre9): Enslaving as an active interface with an up link [ 708.410330][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1831'. [ 708.420723][T13213] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 709.521605][ T30] audit: type=1400 audit(1780562379.241:877): avc: denied { block_suspend } for pid=13228 comm="syz.7.1837" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 710.308698][T13241] binder: BINDER_SET_CONTEXT_MGR already set [ 710.314972][T13241] binder: 13237:13241 ioctl 4018620d 200000000040 returned -16 [ 711.426368][T13248] wg1 speed is unknown, defaulting to 1000 [ 712.516568][T11998] libceph: connect (1)[c::]:6789 error -101 [ 712.530827][T11998] libceph: mon0 (1)[c::]:6789 connect error [ 712.545724][T11998] libceph: connect (1)[c::]:6789 error -101 [ 712.561117][T11998] libceph: mon0 (1)[c::]:6789 connect error [ 712.660148][T13253] 9p: Bad value for 'wfdno' [ 712.755146][T13264] dummy0: entered promiscuous mode [ 712.793041][T13264] macvlan3: entered promiscuous mode [ 712.819290][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1846'. [ 712.833554][T13264] dummy0: left promiscuous mode [ 712.838965][T11998] libceph: connect (1)[c::]:6789 error -101 [ 712.853455][T11998] libceph: mon0 (1)[c::]:6789 connect error [ 713.253369][T13269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1848'. [ 713.262392][T13269] netlink: 'syz.3.1848': attribute type 7 has an invalid length. [ 713.270194][T13269] netlink: 'syz.3.1848': attribute type 8 has an invalid length. [ 713.277979][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 713.383590][T11998] libceph: connect (1)[c::]:6789 error -101 [ 713.402330][T11998] libceph: mon0 (1)[c::]:6789 connect error [ 713.644796][T13274] openvswitch: netlink: IP tunnel TTL not specified. [ 714.422279][T11998] libceph: connect (1)[c::]:6789 error -101 [ 714.479981][T13261] ceph: No mds server is up or the cluster is laggy [ 714.513997][T11998] libceph: mon0 (1)[c::]:6789 connect error [ 715.416918][T13293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28721 sclass=netlink_route_socket pid=13293 comm=syz.4.1854 [ 715.492634][ T5742] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 715.580210][T13293] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 715.588700][T13293] UDF-fs: Scanning with blocksize 512 failed [ 715.616068][T13293] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 715.624491][T13293] UDF-fs: Scanning with blocksize 1024 failed [ 715.632928][T13293] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 715.640495][T13293] UDF-fs: Scanning with blocksize 2048 failed [ 715.648525][T13293] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 715.656238][T13293] UDF-fs: Scanning with blocksize 4096 failed [ 716.012166][ T5742] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 716.032186][ T5742] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 716.071822][ T5742] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 716.413172][ T5742] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 716.481584][ T5742] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 716.526634][ T5742] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 716.564354][ T5742] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 716.622158][ T5742] usb 6-1: config 168 interface 0 has no altsetting 0 [ 716.765940][T13305] netlink: 'syz.7.1859': attribute type 10 has an invalid length. [ 716.778369][T13305] dummy0: left promiscuous mode [ 716.872370][ T5742] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 716.905599][ T5742] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 716.932666][ T5742] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 716.985812][T13309] netlink: 'syz.7.1859': attribute type 10 has an invalid length. [ 717.061217][T13305] team0: Port device dummy0 added [ 717.075980][T13310] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1860'. [ 717.216287][T13309] team0: Port device dummy0 removed [ 717.265345][T13309] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 717.867595][T13311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1861'. [ 717.888153][T13311] netlink: 'syz.3.1861': attribute type 7 has an invalid length. [ 717.898266][T13311] netlink: 'syz.3.1861': attribute type 8 has an invalid length. [ 717.908983][T13311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1861'. [ 717.953408][ T5742] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 718.057578][ T5742] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 718.134965][ T5742] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 718.162856][ T5742] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 718.202314][ T5742] usb 6-1: config 168 interface 0 has no altsetting 0 [ 718.214888][T13323] bridge0: port 3(vlan2) entered blocking state [ 718.229853][T13323] bridge0: port 3(vlan2) entered disabled state [ 718.242380][ T5742] usb 6-1: unable to read config index 2 descriptor/start: -71 [ 718.254072][T13323] vlan2: entered allmulticast mode [ 718.266762][ T5742] usb 6-1: can't read configurations, error -71 [ 718.321725][T13321] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 718.355763][T13323] geneve0: entered allmulticast mode [ 718.439734][T13323] vlan2: entered promiscuous mode [ 718.480524][T13323] geneve0: entered promiscuous mode [ 718.807284][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1871'. [ 718.817982][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1871'. [ 718.864734][T13343] openvswitch: netlink: IP tunnel TTL not specified. [ 718.881099][T13340] program syz.5.1865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 718.892414][T13340] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 718.905548][ T78] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.905644][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1871'. [ 718.928288][ T6176] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.941878][ T6176] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.951230][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1871'. [ 718.961870][ T6176] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 719.020447][ T30] audit: type=1400 audit(1780562388.821:878): avc: denied { accept } for pid=13331 comm="syz.5.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 719.720481][T13365] netlink: 'syz.2.1877': attribute type 4 has an invalid length. [ 719.789951][T13365] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1877'. [ 720.112926][ T24] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 720.298159][ T24] usb 4-1: config 0 has no interfaces? [ 720.307188][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 720.317606][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.330429][ T24] usb 4-1: config 0 descriptor?? [ 720.740492][T13360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.749121][T13360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.758249][ T24] usb 4-1: USB disconnect, device number 55 [ 721.132637][T11998] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 721.312703][T11998] usb 3-1: Using ep0 maxpacket: 32 [ 721.320516][T11998] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 721.329241][ T5749] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 721.338918][T11998] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 721.357671][T11998] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 721.369506][T11998] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 721.384558][T11998] usb 3-1: config 0 interface 0 has no altsetting 0 [ 721.394923][T11998] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 721.408105][T11998] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 721.422570][ T30] audit: type=1400 audit(1780562391.221:879): avc: denied { append } for pid=13391 comm="syz.4.1885" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 721.446562][T11998] usb 3-1: Product: syz [ 721.450906][T11998] usb 3-1: Manufacturer: syz [ 721.456943][T11998] usb 3-1: SerialNumber: syz [ 721.484829][ T5749] usb 4-1: device descriptor read/64, error -71 [ 721.504419][T11998] usb 3-1: config 0 descriptor?? [ 721.524574][T11998] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 721.558650][T11998] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 721.730469][ T5741] usb 3-1: USB disconnect, device number 49 [ 721.736635][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 721.742663][ T5749] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 721.770859][ T5741] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 721.882794][ T5749] usb 4-1: device descriptor read/64, error -71 [ 722.003092][ T5749] usb usb4-port1: attempt power cycle [ 722.373121][ T5749] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 722.505575][ T5749] usb 4-1: device descriptor read/8, error -71 [ 722.555105][ T30] audit: type=1400 audit(1780562392.361:880): avc: denied { append } for pid=13406 comm="syz.4.1889" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 722.832651][ T5741] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 722.851647][T13413] xt_CT: No such helper "snmp_trap" [ 723.112468][T13420] openvswitch: netlink: IP tunnel TTL not specified. [ 723.241471][ T4932] Bluetooth: hci2: command 0x0406 tx timeout [ 723.445732][ T5741] usb 5-1: device descriptor read/64, error -71 [ 723.713600][ T5741] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 723.922867][ T5741] usb 5-1: device descriptor read/64, error -71 [ 724.053099][ T5741] usb usb5-port1: attempt power cycle [ 724.402701][ T5742] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 724.420582][ T5741] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 724.463452][ T5741] usb 5-1: device descriptor read/8, error -71 [ 724.592657][ T5742] usb 4-1: Using ep0 maxpacket: 32 [ 724.610940][ T5742] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 724.650517][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 724.661976][T13431] 9p: Bad value for 'wfdno' [ 724.679186][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 724.709455][ T5742] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 724.722829][ T5741] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 724.749487][ T5742] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 724.763085][ T5741] usb 5-1: device descriptor read/8, error -71 [ 724.771095][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.796688][ T5742] usb 4-1: Product: syz [ 724.810619][ T5742] usb 4-1: Manufacturer: syz [ 724.829859][ T5742] usb 4-1: SerialNumber: syz [ 724.866765][ T5742] usb 4-1: config 0 descriptor?? [ 724.893333][ T5741] usb usb5-port1: unable to enumerate USB device [ 726.036599][T13454] wg1 speed is unknown, defaulting to 1000 [ 726.145234][T13455] 9pnet_virtio: no channels available for device syz [ 726.625686][T13462] openvswitch: netlink: IP tunnel TTL not specified. [ 727.183030][T11998] usb 4-1: USB disconnect, device number 60 [ 727.882895][ T5749] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 728.065761][ T5749] usb 6-1: config 0 has no interfaces? [ 728.081190][ T5749] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 728.109131][ T5749] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 728.132263][ T5749] usb 6-1: Manufacturer: syz [ 728.143718][ T5749] usb 6-1: config 0 descriptor?? [ 728.284105][T13466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1907'. [ 728.299725][T13466] netlink: 'syz.3.1907': attribute type 7 has an invalid length. [ 728.314483][T13466] netlink: 'syz.3.1907': attribute type 8 has an invalid length. [ 728.339231][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1907'. [ 728.554437][T13478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13478 comm=syz.5.1908 [ 728.612497][T13478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13478 comm=syz.5.1908 [ 728.673674][T13478] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1908'. [ 728.949575][T13493] netlink: 'syz.3.1914': attribute type 1 has an invalid length. [ 729.022244][T13498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=13498 comm=syz.3.1914 [ 729.083596][T13493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 729.102085][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1914'. [ 729.282749][ T5749] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 729.554599][T13498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=13498 comm=syz.3.1914 [ 729.581477][ T5749] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 729.606362][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.634402][T13501] bond1: (slave bridge1): making interface the new active one [ 729.649357][ T5749] usb 5-1: Product: syz [ 729.660821][ T5749] usb 5-1: Manufacturer: syz [ 729.675450][ T5749] usb 5-1: SerialNumber: syz [ 729.699328][T13501] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 729.718055][ T5749] usb 5-1: config 0 descriptor?? [ 730.267309][T13514] openvswitch: netlink: IP tunnel TTL not specified. [ 730.612199][T13476] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 730.651710][T13512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1917'. [ 730.712275][ T5749] usb 6-1: USB disconnect, device number 59 [ 732.170055][ T5741] usb 5-1: USB disconnect, device number 60 [ 732.242694][ T5749] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 732.659926][ T5749] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 732.682909][ T5749] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 732.708407][ T5749] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 732.730787][ T5749] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.827372][ T5749] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 732.842838][ T5749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.923191][ T5749] usbtmc 4-1:16.0: bulk endpoints not found [ 733.223030][ T5749] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 733.372808][ T5749] usb 5-1: Using ep0 maxpacket: 32 [ 733.388331][ T5749] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 733.418291][ T5749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 733.453110][ T5749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 733.491364][ T5749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 733.510232][ T5749] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 733.524532][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.537775][ T5749] usb 5-1: Product: syz [ 733.542704][ T5749] usb 5-1: Manufacturer: syz [ 733.552851][ T5749] usb 5-1: SerialNumber: syz [ 733.581776][ T5749] usb 5-1: config 0 descriptor?? [ 735.114741][ T5742] usb 4-1: USB disconnect, device number 61 [ 736.280121][ T5742] usb 5-1: USB disconnect, device number 61 [ 737.143020][ T31] INFO: task kworker/1:2:805 blocked for more than 143 seconds. [ 737.151083][ T31] Tainted: G L syzkaller #0 [ 737.160304][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 737.170330][ T31] task:kworker/1:2 state:D stack:22104 pid:805 tgid:805 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 737.183433][ T31] Workqueue: usb_hub_wq hub_event [ 737.193746][ T31] Call Trace: [ 737.410104][ T31] [ 737.413641][ T31] __schedule+0x1295/0x67a0 [ 737.418216][ T31] ? __pfx___schedule+0x10/0x10 [ 737.423630][ T31] ? find_held_lock+0x2b/0x80 [ 737.428370][ T31] ? schedule+0x2bf/0x390 [ 737.433172][ T31] schedule+0xdd/0x390 [ 737.437481][ T31] schedule_timeout+0x1b2/0x280 [ 737.442451][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 737.466135][ T31] ? mark_held_locks+0x40/0x70 [ 737.477949][ T31] __wait_for_common+0x2e7/0x4c0 [ 737.487742][T13564] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.1933'. [ 737.603289][T13567] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.1933'. [ 737.653642][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 737.660587][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 737.666132][ T31] ? __pfx_device_del+0x10/0x10 [ 737.673231][ T31] ? kobject_put+0xb9/0x640 [ 737.679133][ T31] i2c_del_adapter+0x62d/0x820 [ 737.687848][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 737.697257][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 737.703561][ T31] ? dvb_usbv2_exit.isra.0+0x400/0xb70 [ 737.703597][ T31] ? dvb_usbv2_exit.isra.0+0x40c/0xb70 [ 737.703622][ T31] ? kfree+0x223/0x6c0 [ 737.703651][ T31] dvb_usbv2_exit.isra.0+0x4aa/0xb70 [ 737.703678][ T31] dvb_usbv2_probe+0x669/0x970 [ 737.703714][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 737.703738][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 737.703762][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 737.703785][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 737.703807][ T31] ? __pm_runtime_set_status+0x13c/0x970 [ 737.703841][ T31] usb_probe_interface+0x303/0x8f0 [ 737.703865][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 737.703886][ T31] really_probe+0x241/0xa60 [ 737.703926][ T31] __driver_probe_device+0x22e/0x480 [ 737.703955][ T31] driver_probe_device+0x4c/0x1b0 [ 737.783532][ T31] __device_attach_driver+0x1df/0x340 [ 737.789133][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 737.795877][ T31] bus_for_each_drv+0x159/0x1e0 [ 737.800871][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 737.806855][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 737.812181][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 737.822625][ T31] __device_attach+0x1e4/0x4d0 [ 737.828087][ T31] ? __pfx___device_attach+0x10/0x10 [ 737.834604][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 737.840685][ T31] device_initial_probe+0xaf/0xd0 [ 737.846590][ T31] bus_probe_device+0x64/0x160 [ 737.858416][ T31] device_add+0x1210/0x1950 [ 737.864333][ T31] ? __pfx_device_add+0x10/0x10 [ 737.870831][ T31] usb_set_configuration+0xd97/0x1c60 [ 737.886632][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 737.893035][ T31] usb_generic_driver_probe+0xa1/0xe0 [ 737.898501][ T31] usb_probe_device+0xef/0x400 [ 737.904043][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 737.911680][ T31] really_probe+0x241/0xa60 [ 737.917815][ T31] __driver_probe_device+0x22e/0x480 [ 737.923300][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 737.929441][ T31] driver_probe_device+0x4c/0x1b0 [ 737.934733][ T31] __device_attach_driver+0x1df/0x340 [ 737.940173][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 737.946458][ T31] bus_for_each_drv+0x159/0x1e0 [ 737.951417][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 737.957364][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 737.965013][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 737.971979][ T31] __device_attach+0x1e4/0x4d0 [ 737.977017][ T31] ? __pfx___device_attach+0x10/0x10 [ 737.982849][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 737.988152][ T31] device_initial_probe+0xaf/0xd0 [ 737.993435][ T31] bus_probe_device+0x64/0x160 [ 737.998252][ T31] device_add+0x1210/0x1950 [ 738.011202][ T31] ? __pfx_device_add+0x10/0x10 [ 738.018055][ T31] ? add_device_randomness+0xb7/0xf0 [ 738.025579][ T31] usb_new_device.cold+0x685/0x115c [ 738.032792][ T31] ? do_raw_spin_lock+0x128/0x260 [ 738.038277][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 738.044430][ T31] ? mark_held_locks+0x40/0x70 [ 738.049249][ T31] hub_event+0x314d/0x4af0 [ 738.053911][ T31] ? __pfx_hub_event+0x10/0x10 [ 738.058689][ T31] ? assoc_array_insert+0x1130/0x32c0 [ 738.067487][ T31] ? rcu_is_watching+0x12/0xc0 [ 738.072308][ T31] process_one_work+0xa0e/0x1980 [ 738.077551][ T31] ? __pfx_process_one_work+0x10/0x10 [ 738.083084][ T31] ? __pfx_hub_event+0x10/0x10 [ 738.088802][ T31] worker_thread+0x5ef/0xe50 [ 738.093797][ T31] ? kthread+0x13a/0x450 [ 738.098893][ T31] ? __pfx_worker_thread+0x10/0x10 [ 738.107901][ T31] kthread+0x370/0x450 [ 738.112052][ T31] ? __pfx_kthread+0x10/0x10 [ 738.117130][ T31] ret_from_fork+0x72b/0xd50 [ 738.129237][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 738.139318][ T31] ? __switch_to+0x800/0x1100 [ 738.146937][ T31] ? __pfx_kthread+0x10/0x10 [ 738.151578][ T31] ret_from_fork_asm+0x1a/0x30 [ 738.156631][ T31] [ 738.167108][ T31] INFO: task syz.6.1451:11794 blocked for more than 144 seconds. [ 738.174938][ T31] Tainted: G L syzkaller #0 [ 738.181484][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.192691][ T31] task:syz.6.1451 state:D stack:28808 pid:11794 tgid:11793 ppid:6774 task_flags:0x400040 flags:0x00080002 [ 738.205860][ T31] Call Trace: [ 738.210647][ T31] [ 738.213833][ T31] __schedule+0x1295/0x67a0 [ 738.220762][ T31] ? __pfx___schedule+0x10/0x10 [ 738.230884][ T31] ? find_held_lock+0x2b/0x80 [ 738.240966][ T31] ? schedule+0x2bf/0x390 [ 738.251071][ T31] schedule+0xdd/0x390 [ 738.256171][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.261698][ T31] __mutex_lock+0xced/0x1b10 [ 738.270657][ T31] ? usbdev_open+0x1b6/0x870 [ 738.277680][ T31] ? klist_put+0xcb/0x1d0 [ 738.282066][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.287407][ T31] ? _raw_spin_unlock+0x28/0x50 [ 738.292297][ T31] ? kobject_put+0xb9/0x640 [ 738.297067][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 738.302403][ T31] ? usbdev_open+0x1b6/0x870 [ 738.311321][ T31] usbdev_open+0x1b6/0x870 [ 738.318026][ T31] ? kobject_get_unless_zero+0x156/0x200 [ 738.323863][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 738.331957][ T31] ? chrdev_open+0x10b/0x6a0 [ 738.355688][ T31] ? chrdev_open+0x10b/0x6a0 [ 738.360425][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 738.366601][ T31] chrdev_open+0x234/0x6a0 [ 738.371129][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 738.386494][ T31] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 738.393154][ T31] do_dentry_open+0x6ab/0x14d0 [ 738.400176][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 738.412689][ T31] vfs_open+0x82/0x3f0 [ 738.426646][ T31] path_openat+0x208c/0x31a0 [ 738.433163][ T31] ? __pfx_path_openat+0x10/0x10 [ 738.441582][ T31] do_file_open+0x20e/0x430 [ 738.453377][ T31] ? __pfx_do_file_open+0x10/0x10 [ 738.462104][ T31] ? alloc_fd+0x476/0x790 [ 738.469826][ T31] ? do_getname+0x191/0x390 [ 738.474543][ T31] do_sys_openat2+0x10d/0x1e0 [ 738.482739][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 738.492252][ T31] ? __pfx_get_timespec64+0x10/0x10 [ 738.508198][ T31] __x64_sys_openat+0x12d/0x210 [ 738.513254][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 738.518701][ T31] ? rcu_is_watching+0x12/0xc0 [ 738.523686][ T31] do_syscall_64+0x115/0x870 [ 738.528338][ T31] ? clear_bhb_loop+0x40/0x90 [ 738.534213][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.544310][ T31] RIP: 0033:0x7fe6a055d68e [ 738.551087][ T31] RSP: 002b:00007fe6a14d5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 738.562665][ T31] RAX: ffffffffffffffda RBX: 00007fe6a14d66c0 RCX: 00007fe6a055d68e [ 738.573633][ T31] RDX: 0000000000000000 RSI: 00007fe6a14d5c00 RDI: ffffffffffffff9c [ 738.584710][ T31] RBP: 00007fe6a14d5c00 R08: 0000000000000000 R09: 0000000000000000 [ 738.593123][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 738.602713][ T31] R13: 00007fe6a0816038 R14: 00007fe6a0815fa0 R15: 00007ffcdc4014d8 [ 738.612722][ T31] [ 738.615804][ T31] [ 738.615804][ T31] Showing all locks held in the system: [ 738.669829][ T31] 1 lock held by khungtaskd/31: [ 738.679044][ T31] #0: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 738.689289][ T31] 5 locks held by kworker/1:2/805: [ 738.695753][ T31] #0: ffff88801eabdd40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 738.706824][ T31] #1: ffffc900045d7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 738.727118][ T31] #2: ffff88802b8361d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 738.736955][ T31] #3: ffff8880289721d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 738.747527][ T31] #4: ffff88807b1b41a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 738.760195][ T31] 2 locks held by getty/5371: [ 738.765057][ T31] #0: ffff888038f260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 738.775076][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 738.785379][ T31] 1 lock held by syz.6.1451/11794: [ 738.792794][ T31] #0: ffff88802b8361d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 738.802734][ T31] 2 locks held by syz.5.1920/13531: [ 738.810128][ T31] [ 738.812486][ T31] ============================================= [ 738.812486][ T31] [ 738.827416][ T31] NMI backtrace for cpu 1 [ 738.827433][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 738.827449][ T31] Tainted: [L]=SOFTLOCKUP [ 738.827452][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 738.827459][ T31] Call Trace: [ 738.827464][ T31] [ 738.827469][ T31] dump_stack_lvl+0x100/0x190 [ 738.827486][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 738.827500][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 738.827514][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 738.827535][ T31] sys_info+0x141/0x190 [ 738.827550][ T31] watchdog+0xcb1/0x1030 [ 738.827565][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 738.827579][ T31] ? __pfx_watchdog+0x10/0x10 [ 738.827591][ T31] ? __kthread_parkme+0x18c/0x230 [ 738.827610][ T31] ? kthread+0x13a/0x450 [ 738.827621][ T31] ? __pfx_watchdog+0x10/0x10 [ 738.827632][ T31] kthread+0x370/0x450 [ 738.827644][ T31] ? __pfx_kthread+0x10/0x10 [ 738.827656][ T31] ret_from_fork+0x72b/0xd50 [ 738.827670][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 738.827684][ T31] ? __switch_to+0x800/0x1100 [ 738.827701][ T31] ? __pfx_kthread+0x10/0x10 [ 738.827713][ T31] ret_from_fork_asm+0x1a/0x30 [ 738.827734][ T31] [ 738.827739][ T31] Sending NMI from CPU 1 to CPUs 0: [ 738.962303][ C0] NMI backtrace for cpu 0 [ 738.962321][ C0] CPU: 0 UID: 0 PID: 5600 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 738.962341][ C0] Tainted: [L]=SOFTLOCKUP [ 738.962347][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 738.962355][ C0] RIP: 0010:security_file_permission+0x81/0x210 [ 738.962382][ C0] Code: 1f 44 00 00 e8 a0 37 5b fd 0f 1f 44 00 00 e8 96 37 5b fd 0f 1f 44 00 00 31 db e8 8a 37 5b fd 89 d8 5b 5d 41 5c e9 bf 33 df 06 7a 37 5b fd 44 89 e6 48 89 ef e8 af 5e 03 00 31 ff 89 c3 89 c6 [ 738.962396][ C0] RSP: 0018:ffffc900036efcc0 EFLAGS: 00000293 [ 738.962408][ C0] RAX: 0000000000000000 RBX: 0000000000000004 RCX: ffffffff82887535 [ 738.962417][ C0] RDX: ffff888035f70000 RSI: ffffffff84ad7873 RDI: ffff888036326380 [ 738.962427][ C0] RBP: ffff888036326380 R08: 0000000000000007 R09: 0000000000000000 [ 738.962435][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000004 [ 738.962444][ C0] R13: ffff888036326380 R14: 0000000000000000 R15: 00007ffcc37b80cc [ 738.962453][ C0] FS: 00005555652e0540(0000) GS:ffff888124383000(0000) knlGS:0000000000000000 [ 738.962467][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 738.962477][ C0] CR2: 00007f75903ea2f8 CR3: 0000000075a1e000 CR4: 00000000003526f0 [ 738.962486][ C0] Call Trace: [ 738.962491][ C0] [ 738.962498][ C0] rw_verify_area+0xb8/0x6d0 [ 738.962513][ C0] vfs_read+0x150/0xb30 [ 738.962529][ C0] ? __pfx_vfs_read+0x10/0x10 [ 738.962545][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 738.962567][ C0] ? get_timespec64+0x147/0x240 [ 738.962582][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 738.962597][ C0] ? common_nsleep+0xa1/0xd0 [ 738.962616][ C0] ksys_read+0x1f8/0x250 [ 738.962631][ C0] ? __pfx_ksys_read+0x10/0x10 [ 738.962646][ C0] ? rcu_is_watching+0x12/0xc0 [ 738.962666][ C0] do_syscall_64+0x115/0x870 [ 738.962684][ C0] ? clear_bhb_loop+0x40/0x90 [ 738.962700][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.962713][ C0] RIP: 0033:0x7f9489b57fd7 [ 738.962725][ C0] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 738.962738][ C0] RSP: 002b:00007ffcc37b8070 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 738.962750][ C0] RAX: ffffffffffffffda RBX: 00005555652e0540 RCX: 00007f9489b57fd7 [ 738.962759][ C0] RDX: 0000000000000004 RSI: 00007ffcc37b80cc RDI: 0000000000000003 [ 738.962767][ C0] RBP: 00007ffcc37b8570 R08: 0000000000000000 R09: 0000000000000000 [ 738.962776][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 738.962784][ C0] R13: 00007ffcc37b80cc R14: 00007ffcc37b8160 R15: 0000000000000000 [ 738.962798][ C0] [ 738.963470][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 738.963483][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 738.963504][ T31] Tainted: [L]=SOFTLOCKUP [ 738.963510][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 738.963519][ T31] Call Trace: [ 738.963525][ T31] [ 738.963532][ T31] dump_stack_lvl+0x100/0x190 [ 738.963553][ T31] vpanic+0x552/0x970 [ 738.963569][ T31] ? __pfx_vpanic+0x10/0x10 [ 738.963584][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 738.963610][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 738.963637][ T31] panic+0xd1/0xe0 [ 738.963652][ T31] ? __pfx_panic+0x10/0x10 [ 738.963670][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 738.963694][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 738.963718][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 738.963741][ T31] ? watchdog.cold+0x1ec/0x234 [ 738.963759][ T31] ? watchdog+0xcc1/0x1030 [ 738.963778][ T31] watchdog.cold+0x1fd/0x234 [ 738.963799][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 738.963819][ T31] ? __pfx_watchdog+0x10/0x10 [ 738.963837][ T31] ? __kthread_parkme+0x18c/0x230 [ 738.963864][ T31] ? kthread+0x13a/0x450 [ 738.963880][ T31] ? __pfx_watchdog+0x10/0x10 [ 738.963896][ T31] kthread+0x370/0x450 [ 738.963913][ T31] ? __pfx_kthread+0x10/0x10 [ 738.963932][ T31] ret_from_fork+0x72b/0xd50 [ 738.963953][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 738.963973][ T31] ? __switch_to+0x800/0x1100 [ 738.963996][ T31] ? __pfx_kthread+0x10/0x10 [ 738.964015][ T31] ret_from_fork_asm+0x1a/0x30 [ 738.964047][ T31] [ 739.393157][ T31] Kernel Offset: disabled [ 739.397458][ T31] Rebooting in 86400 seconds..