last executing test programs: 15m2.608593147s ago: executing program 2 (id=1172): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002540)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a0000cdfe0000010200010008000600fe7f00000c0014002f8b41571831688466f7259638dfff16a273c972b1186b0eb15a1b44c2aa583ca53a"], 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x10888) r2 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x93a, 0x0, 0x3}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0x8, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdf], 0x25000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_create(r6, &(0x7f0000000180)=@access={'system_u:object_r:dhcpc_state_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4}, 0x47) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x41d, 0x2040000, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x6024b}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 14m59.716028706s ago: executing program 2 (id=1178): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202000200"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) nanosleep(0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x4c6481, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xfbf) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x1a8, 0x0, 0x400, 0xd0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @local}, [0xff, 0xff000000, 0xffffff00], [0xff000000, 0xffffff00, 0xffffffff, 0xffffff00], 'veth1_virt_wifi\x00', 'batadv0\x00', {0xff}, {}, 0x89, 0x4, 0x1, 0x4}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x6, 0x1}, {0x1, 0x6, 0x6}, 0x3, 0x9}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010100, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x87, 0x5e, 0x7, 0x10, 0x0, 0x15c8, 0x10}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a10700"/94, 0x5e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x17, 0x0, &(0x7f0000000000)) r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000002040), 0x1, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001180), 0xc00, 0x0) pipe(&(0x7f00000012c0)) r6 = open(&(0x7f00000011c0)='./bus\x00', 0x181800, 0x38) fcntl$notify(r6, 0x402, 0x8000001b) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000200)) getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000001100), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB="1c00000036000100fcff070001c25900020000000800018004002780631cebbffc5fc4da5a9d1ec90e2b8ee0b1ad9bc2d38b03035c13fa2e8f663e785791fc1b86c5c9763b2e977b702ac954c3d6014a07e574b70d6b09ce38a8c8e834ed389c4187e8f40e97b7f528ab3818ccdbefd7a099d0835633a35747cac91131b70636debaf83939d51ba9fbaf95"], 0x1c}, 0x1, 0x0, 0x0, 0x4004811}, 0x4008094) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001040)={0x803, {{0x2, 0x0, @empty}}}, 0x88) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000001c0)={0x0, 0xb, 0x17078950851d57a6, "c331ca36c188000000000002b61d000000000000070200", 0x30383653}) ioctl(r4, 0x8914, &(0x7f0000000200)="63616e300000000000000000000000000100"/40) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 14m55.514813619s ago: executing program 2 (id=1193): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 14m51.033516522s ago: executing program 2 (id=1199): r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1fd}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@empty, 0x1, 0x714, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a, r6}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast2, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x25}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4000f, 0x3ff, 0x0, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e21, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x6, 0xfffffffffffffbff, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) r9 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r10 = dup2(r9, r9) ioctl$VIDIOC_LOG_STATUS(r10, 0x5646, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r11, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x12021, 0x0) read$char_usb(r10, &(0x7f00000000c0)=""/192, 0xc0) r12 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r13 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x25, &(0x7f00000000c0)=0x4192, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r13, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r14}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) recvmmsg(r13, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0xeb}], 0x1, 0x2001, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x40000002, 0x0, 0x6}, {0x40000002, 0x0, 0x100000000}]}) 14m47.911108169s ago: executing program 2 (id=1206): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="92e43b1959ae019bf1c22675b1489a32b4c4bd350ad996c6895ac9022c42720e05f4bb22b4793ec0", 0x28, 0x20000090, 0x0, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f0000000100)='logfs\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r6, 0x0, 0x0}, 0x10) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) 14m46.203925862s ago: executing program 2 (id=1209): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x2a0, 0x2a0, 0xffff, 0x3, 0x0, 0x3, 0xa}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1001}, 0xe) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000000002000a050000000000000000000100fffc0900010073797a30000000002c595300030a01010000000000000000010000000900030073797a31000000000900010073797a30000000002c000000060a01040000000000000000010000001c00048008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 14m30.275061447s ago: executing program 32 (id=1209): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x2a0, 0x2a0, 0xffff, 0x3, 0x0, 0x3, 0xa}, 0xc) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1001}, 0xe) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000000002000a050000000000000000000100fffc0900010073797a30000000002c595300030a01010000000000000000010000000900030073797a31000000000900010073797a30000000002c000000060a01040000000000000000010000001c00048008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 12m29.959894948s ago: executing program 0 (id=1493): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$packet(0x11, 0x3, 0x300) r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xc8Ng\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r0, 0x409, 0x8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000006, 0x11, r0, 0x392fc000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r1, 0x0, 0x0, 0x100004) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x1, 0x1ff) write(r2, &(0x7f0000001200)="05010906a101", 0x6) 12m27.708006404s ago: executing program 0 (id=1497): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x4, 0x0, 0x3}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) 12m19.387103787s ago: executing program 0 (id=1508): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4, r4}, 0x0, &(0x7f0000000640)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000300)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 12m14.913084162s ago: executing program 0 (id=1513): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x0, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 12m13.056463912s ago: executing program 0 (id=1515): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="92e43b1959ae019bf1c22675b1489a32b4c4bd350ad996c6895ac9022c42720e05f4bb22b4793ec0", 0x28, 0x20000090, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) 12m10.857321308s ago: executing program 0 (id=1518): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x8, 0x100, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) r11 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) read$FUSE(r0, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ptrace$getenv(0x4201, r12, 0x1, &(0x7f0000004080)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r10, r9, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r3}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20, 0x1, 0x2db, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r10, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r8, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, 0x0) 11m53.640450135s ago: executing program 33 (id=1518): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x8, 0x100, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) r11 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) read$FUSE(r0, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ptrace$getenv(0x4201, r12, 0x1, &(0x7f0000004080)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r10, r9, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r3}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20, 0x1, 0x2db, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r10, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r8, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, 0x0) 11m33.051820255s ago: executing program 4 (id=1602): syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff0000408c1059010100010203010902200001010080fa0904000002ff0000000705810200020007050202000200"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001140), 0x4c6481, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xfbf) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x1a8, 0x0, 0x400, 0xd0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @local}, [0xff, 0xff000000, 0xffffff00], [0xff000000, 0xffffff00, 0xffffffff, 0xffffff00], 'veth1_virt_wifi\x00', 'batadv0\x00', {0xff}, {}, 0x89, 0x4, 0x1, 0x4}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x6, 0x1}, {0x1, 0x6, 0x6}, 0x3, 0x9}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010100, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x87, 0x5e, 0x7, 0x10, 0x0, 0x15c8, 0x10}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100), 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x17, 0x0, &(0x7f0000000000)) r4 = socket$inet(0x2, 0x1, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000002040), 0x1, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001180), 0xc00, 0x0) pipe(&(0x7f00000012c0)) r6 = open(&(0x7f00000011c0)='./bus\x00', 0x181800, 0x38) fcntl$notify(r6, 0x402, 0x8000001b) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000200)) getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000001100), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=ANY=[@ANYBLOB="1c00000036000100fcff070001c25900020000000800018004002780631cebbffc5fc4da5a9d1ec90e2b8ee0b1ad9bc2d38b03035c13fa2e8f663e785791fc1b86c5c9763b2e977b702ac954c3d6014a07e574b70d6b09ce38a8c8e834ed389c4187e8f40e97b7f528ab3818ccdbefd7a099d0835633a35747cac91131b70636debaf83939d51ba9fbaf95"], 0x1c}, 0x1, 0x0, 0x0, 0x4004811}, 0x4008094) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000001040)={0x803, {{0x2, 0x0, @empty}}}, 0x88) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000001c0)={0x0, 0xb, 0x17078950851d57a6, "c331ca36c188000000000002b61d000000000000070200", 0x30383653}) ioctl(r4, 0x8914, &(0x7f0000000200)="63616e300000000000000000000000000100"/40) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 11m27.860903627s ago: executing program 4 (id=1614): setns(0xc9, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0xab7, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = getpid() r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6) sched_setscheduler(r2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, &(0x7f0000000080)) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2}}, 0x14) sendmmsg(r1, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001640)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x7f, 0x8b, "05fa2ebfefe917ed991457e7228c63bfd219777ed5e82870aa4ca73e5689d4a3c28094fdc0a2a995687f548ed0f705d8664894d97cdbb59c168514d70db14f", 0x3b}, 0x80, 0x0}}], 0x2, 0x400c850) 11m27.647608068s ago: executing program 4 (id=1615): socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) gettid() syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="95ea05e4aa5b930d"], 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000100)="05000000010001", 0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x9c}}, 0x0) 11m26.140532584s ago: executing program 4 (id=1620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000000)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x48c0) 11m25.248843743s ago: executing program 4 (id=1623): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff) rmdir(0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x54, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x1, 0x0) preadv2(r2, 0x0, 0x0, 0x3, 0x8000000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$binfmt_script(r2, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x8b, 0xffffffff, 0x2}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000cc0)={'syztnl2\x00', 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000002400010000000000000000000100000a340000003000010000008786b982000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x35) syz_open_dev$swradio(0x0, 0x1, 0x2) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x81800) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 11m22.530503119s ago: executing program 4 (id=1630): socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) gettid() syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="95ea05e4aa5b930d"], 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000100)="05000000010001", 0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="010000004200000006000000080000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x9c}}, 0x0) 11m16.511732581s ago: executing program 6 (id=1640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) 11m15.348009609s ago: executing program 6 (id=1644): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18250090e49318dfe08cf77f00ea008010000000000000040000c17ccb5927285ee0014e95"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="50eb4e74a7e7ce51f1f8e0fd3ea87aed18dca98616a12740afe4f6353600b62c3e434bcb9a57f11939ae6e3f0b923b84e971cfcec82a8241a608d5e9fc1dd62f40221a3e8c11d5f90a7caec9088a0d465d24b8c300e0a860f63db00fcad5cd86c713b27a17ca6fe7623e7b6d461de9eaf67fa3e110e7a7e90b4065e8f5d36b9c3b16836de65baa27e80c260a44bd723982e09397184c024f6af2477d4b2fb10f8c8eaa5d4195d70e3cad7bff997edf22128a94c03dca60578d67a9ca24dc64e9"], 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000540)=0xc2, 0x4) r9 = fcntl$dupfd(r8, 0x0, r8) getsockopt$bt_l2cap_L2CAP_CONNINFO(r9, 0x6, 0x2, 0x0, &(0x7f00000001c0)) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2002}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) 11m10.442219404s ago: executing program 6 (id=1658): socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="040000000400000004000000050001000008", @ANYRES32, @ANYBLOB="00000800000000000056c64c537800"/25, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) dup2(r2, r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES16=r1], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x4, 0x0, 0x3}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) 11m7.080383771s ago: executing program 6 (id=1665): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$tipc(0x1e, 0x2, 0x0) chdir(&(0x7f0000000280)='./bus/file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000010a80)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x10}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) syz_usb_connect(0x0, 0x32, 0x0, 0x0) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) io_setup(0x6, &(0x7f0000000540)) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$pptp(0x18, 0x1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) 11m6.913509181s ago: executing program 34 (id=1630): socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) gettid() syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="95ea05e4aa5b930d"], 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000100)="05000000010001", 0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="010000004200000006000000080000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x9c}}, 0x0) 11m1.724234738s ago: executing program 6 (id=1680): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x82, 0x3fd]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x10001, 0x0) write(r1, &(0x7f0000000d00)='1\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f0000000080)={@host, 0x2}) close(r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x44444444444M4444,r\x00les=320x11311111111L]VG1,lpwwpn=0x2222222222222222\x00', 0x65) close(r5) write(0xffffffffffffffff, &(0x7f0000000800)='101:0:1\x00', 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb70300850000001e0000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r6, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discover', 0x9f) close(r6) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000e00)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYBLOB="000000185500f40f0000000000000000000000b50000000000000000000000004c382362c262e1c2731e1de26d5f38c2a44c9ba6a139f347ddfb1c702435bbbc00f695c388693759d89e3f6c63a2591f17ec3d0f5d06de99e0d3d87f171253d2c31e52faaf51fcd212ef8c91a4d93e2931b9c4d16720d1f28fdaf7ca0f2cc3fcce2135472108bf5d6c8a1beca7a65eceffc7256778773536ad20a0700b9cb06ef7accf"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x8, 0x8001, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000240)=[r5, r5, 0xffffffffffffffff, r5, r4, 0xffffffffffffffff, r6], &(0x7f0000000340)=[{0x2, 0x1, 0x3, 0x9}, {0x0, 0x3, 0x7, 0x3}, {0x0, 0x4, 0xb, 0x7}, {0x2, 0x4, 0xc, 0x6}, {0x3, 0x3, 0x10, 0x1}, {0x0, 0x2, 0x9, 0x9}, {0x1, 0x4, 0x3, 0xb}, {0x3, 0x3, 0x1, 0x3}, {0x4, 0x2, 0xb, 0x3}], 0x10, 0x4}, 0x94) 10m59.823590695s ago: executing program 6 (id=1685): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89b0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x2, 0x7ffe}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r4, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x21c01, 0x3c) syz_fuse_handle_req(r2, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000200)=[{&(0x7f00000003c0)}], 0x1) dup3(r2, r5, 0x6700000000000000) close_range(r1, 0xffffffffffffffff, 0x0) 10m58.638443989s ago: executing program 35 (id=1685): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89b0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x2, 0x7ffe}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r4, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x21c01, 0x3c) syz_fuse_handle_req(r2, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000200)=[{&(0x7f00000003c0)}], 0x1) dup3(r2, r5, 0x6700000000000000) close_range(r1, 0xffffffffffffffff, 0x0) 26.225830465s ago: executing program 5 (id=4207): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x3a, 0x46, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup(r3) write$FUSE_INIT(r4, 0x0, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, 0x0) 7.291615976s ago: executing program 7 (id=4282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48}) 6.382557284s ago: executing program 7 (id=4283): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x19, 0x0, &(0x7f0000000280)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="16000000000000000200000004"], 0x50) r5 = socket$kcm(0x29, 0x7, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x29, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffedb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xdc0}, @alu={0x4, 0x1, 0x0, 0xb, 0xb, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000000540)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x81, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r1, r4, r4, r4], &(0x7f0000000600)=[{0x1, 0x1, 0x10, 0xa}, {0x2, 0x3, 0xb, 0x3}], 0x10, 0xd50}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000700)={r0, r6}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r7, 0x3000000}, 0x27) 6.258256485s ago: executing program 1 (id=4285): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x69}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) write$FUSE_ATTR(r2, 0x0, 0xfc92) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x400000000) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000002c0)=@arm64={0x8, 0x2, 0x2, '\x00', 0x7}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x200, 0x168, 0x2a}, 0x18) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r7, 0x4, 0x42000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0xf3a, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000070c0)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f00000071c0)=0xe8) getresgid(&(0x7f0000007200), &(0x7f0000007240), &(0x7f0000007280)=0x0) statx(r8, &(0x7f00000073c0)='./file0\x00', 0x100, 0x8, &(0x7f0000007400)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000007540)=0xc) syz_fuse_handle_req(r9, &(0x7f0000000540)="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", 0x2000, &(0x7f00000076c0)={&(0x7f0000002540)={0x50, 0xffffffffffffffda, 0xb, {0x7, 0x2d, 0x7, 0xa480000, 0x2, 0x7fff, 0x2, 0xa, 0x0, 0x0, 0x20, 0x6}}, &(0x7f00000025c0)={0x18, 0xffffffffffffffda, 0x8}, &(0x7f0000002600)={0x18, 0x0, 0x6, {0xfffffffffffffffa}}, &(0x7f0000002640)={0x18, 0x0, 0x3ff, {0xfb}}, &(0x7f0000002680)={0x18, 0x0, 0xd4, {0x80000000}}, &(0x7f00000026c0)={0x28, 0x0, 0x6, {{0x714, 0x42aa, 0x1}}}, &(0x7f0000002700)={0x60, 0x0, 0x7, {{0x2, 0x0, 0x8, 0x6, 0x0, 0x4, 0x401, 0x8}}}, &(0x7f0000002780)={0x18, 0x0, 0x8000, {0x1}}, &(0x7f00000027c0)={0x14, 0x0, 0x7fffffff, {'GPL\x00'}}, &(0x7f0000002800)={0x20, 0xfffffffffffffffe, 0x9, {0x0, 0x8}}, &(0x7f00000028c0)={0x78, 0x0, 0x6, {0x2, 0x2, 0x0, {0x1, 0x1, 0x6, 0xe19, 0x8, 0xb47, 0x0, 0xfffffff6, 0x80000000, 0xf800, 0x7, 0x0, 0x0, 0xfffffc01, 0x9}}}, &(0x7f0000002a00)={0x90, 0x0, 0x9, {0x6, 0x0, 0x8000000000000001, 0x8, 0x6, 0x4, {0x5, 0xfffffffffffff939, 0x85d9, 0x97f, 0x0, 0x8, 0xbb0b, 0x7, 0x800, 0xa000, 0x38c, 0xee00, 0x0, 0xfffffff8, 0x4}}}, &(0x7f0000002ac0)={0x120, 0x0, 0x0, [{0x6, 0x7fff, 0x6, 0xb63, '&\']@\xb2,'}, {0x3, 0xe, 0x6, 0x6, '!\xcf&&-&'}, {0x3, 0x9, 0x9, 0x2, '/dev/kvm\x00'}, {0x0, 0xb, 0x9, 0x756, '/dev/kvm\x00'}, {0x6, 0x9, 0x9, 0x8, '/dev/kvm\x00'}, {0x0, 0x5, 0x0, 0x2}, {0x4, 0x8, 0x4, 0x7fff, '#/L#'}, {0x5, 0x0, 0x1, 0x2, '-'}]}, &(0x7f0000006ec0)={0x1f8, 0x0, 0x6, [{{0x2, 0x1, 0xff, 0x64, 0x6, 0x7f, {0x5, 0x0, 0x7fffffff, 0x8, 0x4, 0x5, 0x7, 0x7, 0x2, 0x1000, 0x7ff, r10, 0x0, 0x7, 0x2}}, {0x5, 0x72, 0x1, 0x0, '\x00'}}, {{0x1, 0x3, 0x0, 0x9, 0x400, 0x87ae, {0x5, 0x1, 0x8000, 0x35fca512, 0x2d93, 0xe5, 0x9, 0x4, 0x2, 0x1000, 0x3, 0x0, 0x0, 0x3, 0x4}}, {0x5, 0x9, 0x9, 0x0, '/dev/kvm\x00'}}, {{0x1, 0x1, 0xf, 0x3, 0x200, 0xbb, {0x4, 0xc, 0x6, 0x9, 0x2, 0x2f, 0x4000, 0x8, 0x8554, 0x4000, 0x1ff, 0x0, 0x0, 0x8, 0x400}}, {0x4, 0x5, 0x1, 0xb3, '*'}}]}, &(0x7f00000072c0)={0xa0, 0xfffffffffffffffe, 0x3, {{0x3, 0x2, 0x100000000, 0x9000000000000, 0xc, 0x3ff, {0x5, 0x2, 0xdd, 0x7ff, 0x7, 0x7c3, 0x8, 0x9, 0x6, 0x1000, 0x0, r10, r11, 0x7, 0x3}}, {0x0, 0x2}}}, &(0x7f0000007380)={0x20, 0x0, 0x10001, {0xac7, 0x0, 0x6, 0xb}}, &(0x7f0000007580)={0x130, 0x0, 0x7, {0x0, 0x43b, 0x0, '\x00', {0x80, 0x1, 0x624, 0x3, r12, r13, 0x1000, '\x00', 0x5, 0x0, 0x6, 0x7, {0x1a, 0x9}, {0x5eb18f8d, 0x6}, {0x74fe, 0x1}, {0x1, 0x7f}, 0x0, 0xdabd, 0xf2f, 0x9}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="001f0000000000000080000085100000000000009500000000000000000000df"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 6.098657839s ago: executing program 1 (id=4286): memfd_create(0x0, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 5.095678353s ago: executing program 1 (id=4287): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) ioctl$KVM_TDX_INIT_MEM_REGION(r0, 0xc008aeba, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000762000/0x1000)=nil, 0xf000, 0x6}}) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) ptrace$peekuser(0x3, r6, 0xffffffffffff0000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x4d2, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@algo_aead={0x4c, 0x12, {{'morus1280-sse2\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0xc0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x70, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) writev(r0, &(0x7f0000001a40)=[{&(0x7f0000000180)="fa4049aae9", 0x5}], 0x1) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd86) 3.505244079s ago: executing program 5 (id=4214): fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) geteuid() r0 = getpgrp(0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000002c0)={r0, 0x0, 0xffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) waitid(0x2, r3, 0x0, 0x8, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.464662929s ago: executing program 5 (id=4291): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b6a, 0x0) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd00, &(0x7f0000000600)="04") bind$alg(r1, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.362678602s ago: executing program 3 (id=4293): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x2d5d, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000400)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x6a, 0x1, 0x0, 0x0) 2.139627083s ago: executing program 3 (id=4295): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) (fail_nth: 1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 2.096372907s ago: executing program 1 (id=4296): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x10000, @loopback, 0x29}, 0x1c) keyctl$set_reqkey_keyring(0xe, 0x7) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b0102030109021200"], 0x0) shutdown(r0, 0x1) 2.053990854s ago: executing program 3 (id=4297): landlock_create_ruleset(0x0, 0x0, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r2, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x200005, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x200000000622c, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd08, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x2000c010) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80001, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x8000) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.815408704s ago: executing program 8 (id=4299): r0 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, 0x0) gettid() syz_io_uring_setup(0x5b0f, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="95ea05e4aa5b930d"], 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000100)="05000000010001", 0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x9c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) 1.748079503s ago: executing program 7 (id=4300): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x0, 0x12}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x70411, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x101}) (fail_nth: 1) 1.633064451s ago: executing program 7 (id=4301): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00f9ff000902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, &(0x7f0000000b40)) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180)) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r2 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000040)={0x0, 0x30b5, 0x40, 0x2, 0x3e4}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt(r6, 0x8, 0x1, &(0x7f00000002c0)=""/119, &(0x7f0000000340)=0x77) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x0) 1.419811904s ago: executing program 1 (id=4302): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) unshare(0x26020480) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = mq_open(&(0x7f00000000c0)='\x00', 0x2, 0x80, &(0x7f00000002c0)={0xfffffffffffffff7, 0x5, 0x2, 0x9}) mq_notify(r6, &(0x7f0000000380)={0x0, 0x1, 0x1, @thr={&(0x7f0000000300)="850ccfc0fd002690fd09f908e4", &(0x7f0000000340)}}) r7 = dup(r5) syz_ublk_setup_queues(r7, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x287, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) syz_emit_vhci(0x0, 0x0) 1.352081442s ago: executing program 5 (id=4303): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) close_range(r0, 0xffffffffffffffff, 0x200000000000000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@delqdisc={0x54, 0x26, 0x1f, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xf, 0xa}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3ff}, @TCA_RATE={0x6, 0x5, {0xb, 0x12}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.107372265s ago: executing program 3 (id=4304): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x40, 0x1}}, 0x50) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_auth_payload_to={{0xf7}, {0x0, 0xc8, 0xf801}}}}, 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x48000) write(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r3, 0x0, &(0x7f0000605000/0x3000)=nil, 0x3000, 0x100}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r3}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.035533654s ago: executing program 5 (id=4305): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x900) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (fail_nth: 1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x4000010, r3, 0x78426000) sendto$inet6(r3, 0x0, 0xffffffffffffffc5, 0x14, &(0x7f0000000380)={0xa, 0x4e20, 0x8, @loopback, 0x49}, 0x1c) sendmsg$NFT_BATCH(r2, 0x0, 0x200400c0) sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x8000) listen(0xffffffffffffffff, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x480c5}, 0x24048041) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000891}, 0x811) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000340)=0x1) pwrite64(r5, &(0x7f0000000040)="ad372d6e52a7", 0x6, 0xd) 1.016245352s ago: executing program 7 (id=4306): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x2d5d, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000400)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x6a, 0x1, 0x0, 0x0) 969.085071ms ago: executing program 3 (id=4307): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="200e0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="200e0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400d280000001b010105b6eb58000000bd1edcbf0687468142552b0854b324"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0x69}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) splice(r4, &(0x7f0000000180)=0x5, r0, &(0x7f0000000280)=0x8, 0x25, 0x1f) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x8001, 0x1005, 0x4, 0x5, 0x40, 0xfffffdfffffffffd], 0x2, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 935.807973ms ago: executing program 8 (id=4308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 871.558247ms ago: executing program 7 (id=4309): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000000280)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="16000000000000000200000004"], 0x50) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x29, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffedb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xdc0}, @alu={0x4, 0x1, 0x0, 0xb, 0xb, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000000540)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x81, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r0, r3, r3, r3], &(0x7f0000000600)=[{0x1, 0x1, 0x10, 0xa}, {0x2, 0x3, 0xb, 0x3}], 0x10, 0xd50}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r3, r3]}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r4, 0x3000000}, 0x27) 547.243135ms ago: executing program 8 (id=4310): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x458, 0x1acc02, 0x148, 0x0, 0x10, 0x4f0, 0x2a8, 0x2a8, 0x4f0, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xffffff00, 0xffffff00, 'veth0_virt_wifi\x00', 'netdevsim0\x00', {0xff}, {}, 0x1}, 0x40000, 0x3f8, 0x458, 0x0, {0x0, 0x5803}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@rand_addr=0x64010102, [0xffffffff, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff000000, 0x0, 0xffffff00], 0x4d6, 0x0, 0x1, 0x1, 0x4, 0xc}, {@ipv4=@empty, [0xff, 0xffffffff, 0xff000000, 0xffffffff], @ipv4=@broadcast, [0xffffffff, 0xffffffff, 0x0, 0xff000000], 0x4d6, 0x3506, 0x0, 0x1, 0x2, 0xd}, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xffffff00, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], 0x4d2, 0x0, 0x8c, 0x1, 0xa, 0x2}, {@ipv6=@mcast1, [0xff, 0xff, 0xffff00, 0xffffff00], @ipv6=@private2, [0x0, 0xff, 0xff, 0xffffff00], 0x4d2, 0x0, 0x67, 0x1, 0x18, 0x10}], 0x1, 0x84}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @fd}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, 0xff47, 0x4, [0x2a, 0x10, 0x6, 0x37, 0x10, 0x3e, 0x7, 0x12, 0x32, 0x1, 0x21, 0xb, 0x3b, 0x1e, 0x2e, 0x1e], 0x1, 0x8000, 0x68ce}}}, {{@ip={@remote, @multicast2, 0xffffff00, 0x0, 'virt_wifi0\x00', 'caif0\x00', {}, {0xff}, 0xd1b6c305b1e83769, 0x3, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x6, 0xc, 0x10}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5e8) 443.179608ms ago: executing program 1 (id=4311): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff000705030200020007058402000200070588058003010705070580030107058a030800010904000105ffffff000705030200020007058402000200070588058003010705070580030107058a030800010904000805ffffff000705030200020007058402000200070588058003010705070580030107058a03080001"], 0x0) syz_usb_ep_read(r1, 0x3, 0x800, &(0x7f0000000880)=""/2048) syz_usb_ep_write(r1, 0x84, 0x40, &(0x7f0000000700)="aa00080c0000000100070009017700"/64) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/ttusb-dec/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='5-1:1.0\x00', 0x8) close(r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_read(r1, 0x3, 0x800, &(0x7f0000001080)=""/2048) (async) syz_usb_ep_write(r1, 0x84, 0x40, &(0x7f0000000700)="aa00080c0000000100070009017700"/64) (async) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./sys/bus/usb/drivers/ttusb-dec/bind\x00', 0x14d402, 0x0) write(r3, &(0x7f0000000840)='5-1:1.0\x00', 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000880), 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x4, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 381.156136ms ago: executing program 8 (id=4312): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141a42, 0x15) (fail_nth: 4) 251.637829ms ago: executing program 8 (id=4313): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x30, 0x0, &(0x7f0000000080)) 232.0432ms ago: executing program 3 (id=4314): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000600)={0xa}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f00001f1000/0x2000)=nil, 0x2000, 0x200000a, 0x80010, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000027000103ffffffff000000000b00000043542475ea7363de04c9ec2355b0e64661f1531da5c4f8d3c9ef74c9"], 0x14}}, 0x40088c0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000200)=0x3, 0x2, 0x0, 0x0, &(0x7f0000000000)=0x100000, 0x20000002) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000003c0)={0x0, 0x0, {0xffffffffffffffff}}) dup3(r2, r3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r4) 171.906418ms ago: executing program 8 (id=4315): landlock_create_ruleset(0x0, 0x0, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x30, r2, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x200005, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) splice(r3, 0x0, r4, 0x0, 0x200000000622c, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x70bd08, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x2000c010) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x321}}}, 0x108) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x8000) sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 0s ago: executing program 5 (id=4316): ptrace$getregset(0x4204, 0x0, 0x202, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x17, &(0x7f0000000640)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8}) kernel console output (not intermixed with test programs): 21q: adding VLAN 0 to HW filter on device netdevsim3 [ 1231.197323][ T30] audit: type=1400 audit(1786995754.038:1055): avc: denied { write } for pid=16538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1231.893541][T16329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.942612][T16329] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.968566][ T30] audit: type=1400 audit(1786995754.808:1056): avc: denied { write } for pid=16572 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1232.028876][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.036041][ T6436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.083459][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.090621][ T6436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.860042][ T30] audit: type=1400 audit(1786995755.708:1057): avc: denied { write } for pid=16578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1232.955329][T16606] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2690'. [ 1233.862801][ T30] audit: type=1400 audit(1786995756.708:1058): avc: denied { write } for pid=16610 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.870087][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.899151][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1234.053241][T16329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.135537][T16329] veth0_vlan: entered promiscuous mode [ 1234.149276][T16329] veth1_vlan: entered promiscuous mode [ 1234.196857][T16329] veth0_macvtap: entered promiscuous mode [ 1234.241031][T16329] veth1_macvtap: entered promiscuous mode [ 1234.297431][T16329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.339609][T16329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.391877][ T6216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.433671][ T6216] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.583698][ T6436] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.638414][ T6436] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.799230][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2695'. [ 1234.829345][ T30] audit: type=1400 audit(1786995757.668:1059): avc: denied { write } for pid=16618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1234.829402][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2695'. [ 1234.894512][ T9469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.914946][ T30] audit: type=1400 audit(1786995757.758:1060): avc: denied { bind } for pid=16616 comm="syz.7.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1234.931767][ T9469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.956401][T16647] fuse: Bad value for 'fd' [ 1234.966488][ T5840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.993089][ T5840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.018100][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2695'. [ 1235.051065][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2695'. [ 1235.090101][ T30] audit: type=1400 audit(1786995757.928:1061): avc: denied { write } for pid=16649 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1236.838245][T16657] syz.3.2692 (16657): drop_caches: 2 [ 1236.846674][ T30] audit: type=1400 audit(1786995759.698:1062): avc: denied { write } for pid=16676 comm="syz.1.2703" name="configs" dev="configfs" ino=23869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1238.124891][ T24] IPVS: starting estimator thread 0... [ 1238.350876][T16700] IPVS: using max 42 ests per chain, 100800 per kthread [ 1239.603704][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2702'. [ 1239.619318][ T30] audit: type=1400 audit(1786995762.468:1063): avc: denied { write } for pid=16697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1239.783325][ T30] audit: type=1400 audit(1786995762.628:1064): avc: denied { write } for pid=16727 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1239.792179][T16732] lo speed is unknown, defaulting to 1000 [ 1240.241398][T16753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2721'. [ 1240.520657][ T30] audit: type=1400 audit(1786995763.358:1065): avc: denied { write } for pid=16741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1240.634806][ T30] audit: type=1400 audit(1786995763.478:1066): avc: denied { write } for pid=16766 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1240.693706][T10511] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 1240.700879][T10511] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 1240.744658][ T30] audit: type=1400 audit(1786995763.588:1067): avc: denied { setopt } for pid=16725 comm="syz.7.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1240.927584][ T30] audit: type=1400 audit(1786995763.768:1068): avc: denied { read } for pid=16725 comm="syz.7.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1241.018991][T10511] Bluetooth: hci5: unexpected event for opcode 0x0c56 [ 1242.086162][T16796] netlink: 'syz.1.2732': attribute type 1 has an invalid length. [ 1242.143586][T16800] fuse: fd is not a fuse device [ 1242.229707][T16804] netlink: 'syz.7.2733': attribute type 21 has an invalid length. [ 1242.417918][T16805] fuse: Bad value for 'fd' [ 1243.183890][ T30] audit: type=1400 audit(1786995766.028:1069): avc: denied { ioctl } for pid=16812 comm="syz.5.2737" path="socket:[53826]" dev="sockfs" ino=53826 ioctlcmd=0x581e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1244.832301][T16842] SET target dimension over the limit! [ 1244.921263][T16851] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2748'. [ 1245.352711][T16873] FAULT_INJECTION: forcing a failure. [ 1245.352711][T16873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1245.382430][T16873] CPU: 1 UID: 0 PID: 16873 Comm: syz.3.2758 Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.382459][T16873] Tainted: [L]=SOFTLOCKUP [ 1245.382466][T16873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1245.382476][T16873] Call Trace: [ 1245.382482][T16873] [ 1245.382489][T16873] dump_stack_lvl+0x100/0x190 [ 1245.382521][T16873] should_fail_ex.cold+0x5/0xa [ 1245.382544][T16873] _copy_from_iter+0x1f4/0x1690 [ 1245.382571][T16873] ? __lock_acquire+0x49f/0x1a40 [ 1245.382596][T16873] ? __pfx__copy_from_iter+0x10/0x10 [ 1245.382620][T16873] ? __lock_acquire+0x49f/0x1a40 [ 1245.382651][T16873] copy_page_from_iter+0x238/0x300 [ 1245.382679][T16873] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 1245.382707][T16873] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1245.382727][T16873] ? unwind_get_return_address+0x59/0xa0 [ 1245.382746][T16873] ? arch_stack_walk+0xa6/0xf0 [ 1245.382779][T16873] ? _kstrtoull+0x13c/0x1f0 [ 1245.382797][T16873] ? __pfx__kstrtoull+0x10/0x10 [ 1245.382819][T16873] tun_get_user+0x16d6/0x3c20 [ 1245.382849][T16873] ? __pfx_tun_get_user+0x10/0x10 [ 1245.382870][T16873] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1245.382904][T16873] ? find_held_lock+0x2b/0x80 [ 1245.382920][T16873] ? tun_get+0x191/0x370 [ 1245.382936][T16873] ? tun_get+0x191/0x370 [ 1245.382958][T16873] tun_chr_write_iter+0xdc/0x200 [ 1245.382979][T16873] vfs_write+0x6ac/0x1050 [ 1245.382996][T16873] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1245.383017][T16873] ? __pfx_vfs_write+0x10/0x10 [ 1245.383031][T16873] ? find_held_lock+0x2b/0x80 [ 1245.383063][T16873] ksys_write+0x12a/0x250 [ 1245.383078][T16873] ? __pfx_ksys_write+0x10/0x10 [ 1245.383101][T16873] do_syscall_64+0x115/0x870 [ 1245.383122][T16873] ? clear_bhb_loop+0x70/0xc0 [ 1245.383143][T16873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.383162][T16873] RIP: 0033:0x7f8053d5e90e [ 1245.383177][T16873] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1245.383193][T16873] RSP: 002b:00007f8054d33fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1245.383211][T16873] RAX: ffffffffffffffda RBX: 00007f8054d346c0 RCX: 00007f8053d5e90e [ 1245.383222][T16873] RDX: 000000000000003a RSI: 00002000000003c0 RDI: 00000000000000c8 [ 1245.383236][T16873] RBP: 00007f8054d34090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.383247][T16873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.383257][T16873] R13: 00007f8054026038 R14: 00007f8054025fa0 R15: 00007fff1c08bda8 [ 1245.383284][T16873] [ 1246.150176][ T9] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1246.300797][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1246.312426][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1246.330386][ T9] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 1246.375840][ T9] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 1246.389900][ T9] usb 4-1: Product: syz [ 1246.397441][ T9] usb 4-1: Manufacturer: syz [ 1246.416075][ T9] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1246.430653][ T9] r8152-cfgselector 4-1: config 0 descriptor?? [ 1246.693618][ T9] rndis_host 4-1:0.0: rndis: master #0/ffff888036667000 slave #1/0000000000000000 [ 1246.716720][ T9] r8152-cfgselector 4-1: USB disconnect, device number 81 [ 1247.666271][T16946] FAULT_INJECTION: forcing a failure. [ 1247.666271][T16946] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.714802][T16946] CPU: 1 UID: 0 PID: 16946 Comm: syz.3.2783 Tainted: G L syzkaller #0 PREEMPT(full) [ 1247.714827][T16946] Tainted: [L]=SOFTLOCKUP [ 1247.714834][T16946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1247.714845][T16946] Call Trace: [ 1247.714852][T16946] [ 1247.714859][T16946] dump_stack_lvl+0x100/0x190 [ 1247.714885][T16946] should_fail_ex.cold+0x5/0xa [ 1247.714907][T16946] should_failslab+0xc2/0x120 [ 1247.714930][T16946] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1247.714953][T16946] ? __alloc_skb+0x140/0x710 [ 1247.714978][T16946] __alloc_skb+0x140/0x710 [ 1247.714996][T16946] ? __alloc_skb+0x5b7/0x710 [ 1247.715016][T16946] ? __pfx___alloc_skb+0x10/0x10 [ 1247.715035][T16946] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1247.715067][T16946] sock_wmalloc+0xd4/0x120 [ 1247.715087][T16946] pppoe_sendmsg+0x2be/0x830 [ 1247.715121][T16946] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 1247.715148][T16946] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1247.715177][T16946] sock_write_iter+0x53a/0x5b0 [ 1247.715192][T16946] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 1247.715218][T16946] ? __pfx_sock_write_iter+0x10/0x10 [ 1247.715240][T16946] ? bpf_lsm_file_permission+0x9/0x10 [ 1247.715266][T16946] ? security_file_permission+0x76/0x210 [ 1247.715294][T16946] ? rw_verify_area+0xce/0x6d0 [ 1247.715321][T16946] vfs_write+0x6ac/0x1050 [ 1247.715337][T16946] ? __pfx_sock_write_iter+0x10/0x10 [ 1247.715357][T16946] ? __pfx_vfs_write+0x10/0x10 [ 1247.715372][T16946] ? find_held_lock+0x2b/0x80 [ 1247.715404][T16946] ksys_write+0x1f8/0x250 [ 1247.715421][T16946] ? __pfx_ksys_write+0x10/0x10 [ 1247.715445][T16946] do_syscall_64+0x115/0x870 [ 1247.715466][T16946] ? clear_bhb_loop+0x70/0xc0 [ 1247.715493][T16946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.715511][T16946] RIP: 0033:0x7f8053d9e0d9 [ 1247.715527][T16946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1247.715543][T16946] RSP: 002b:00007f8054d34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1247.715560][T16946] RAX: ffffffffffffffda RBX: 00007f8054025fa0 RCX: 00007f8053d9e0d9 [ 1247.715571][T16946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1247.715581][T16946] RBP: 00007f8054d34090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.715592][T16946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.715603][T16946] R13: 00007f8054026038 R14: 00007f8054025fa0 R15: 00007fff1c08bda8 [ 1247.715628][T16946] [ 1248.276215][T16961] No such timeout policy "s" [ 1248.281322][T16961] netlink: Failed to associated timeout policy 's' [ 1248.795596][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2794'. [ 1248.828221][T16975] Cannot find add_set index 2 as target [ 1248.837107][T16975] netlink: 'syz.1.2793': attribute type 1 has an invalid length. [ 1249.588239][ T30] audit: type=1400 audit(1786995772.428:1070): avc: denied { setopt } for pid=16985 comm="syz.7.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1249.682849][T16988] syz.3.2799 (16988): drop_caches: 2 [ 1249.953770][T17004] fuse: Bad value for 'fd' [ 1250.054568][T17015] fuse: fd is not a fuse device [ 1250.802307][T17029] jffs2: notice: (17029) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1250.966690][T17036] jffs2: notice: (17036) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1250.987956][ T30] audit: type=1400 audit(1786995773.828:1071): avc: denied { write } for pid=17035 comm="syz.3.2817" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1251.137882][T17039] FAULT_INJECTION: forcing a failure. [ 1251.137882][T17039] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.313297][T17039] CPU: 0 UID: 0 PID: 17039 Comm: syz.3.2817 Tainted: G L syzkaller #0 PREEMPT(full) [ 1251.313329][T17039] Tainted: [L]=SOFTLOCKUP [ 1251.313336][T17039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1251.313346][T17039] Call Trace: [ 1251.313353][T17039] [ 1251.313361][T17039] dump_stack_lvl+0x100/0x190 [ 1251.313389][T17039] should_fail_ex.cold+0x5/0xa [ 1251.313411][T17039] should_failslab+0xc2/0x120 [ 1251.313436][T17039] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1251.313459][T17039] ? do_getname+0x35/0x390 [ 1251.313486][T17039] do_getname+0x35/0x390 [ 1251.313510][T17039] __x64_sys_unlinkat+0xa0/0x130 [ 1251.313534][T17039] do_syscall_64+0x115/0x870 [ 1251.313553][T17039] ? clear_bhb_loop+0x70/0xc0 [ 1251.313575][T17039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.313593][T17039] RIP: 0033:0x7f8053d9e0d9 [ 1251.313608][T17039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1251.313625][T17039] RSP: 002b:00007f8054d13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 1251.313642][T17039] RAX: ffffffffffffffda RBX: 00007f8054026090 RCX: 00007f8053d9e0d9 [ 1251.313654][T17039] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 1251.313665][T17039] RBP: 00007f8054d13090 R08: 0000000000000000 R09: 0000000000000000 [ 1251.313675][T17039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1251.313686][T17039] R13: 00007f8054026128 R14: 00007f8054026090 R15: 00007fff1c08bda8 [ 1251.313709][T17039] [ 1251.474795][ T30] audit: type=1400 audit(1786995773.838:1072): avc: denied { add_name } for pid=17035 comm="syz.3.2817" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1251.500990][ T30] audit: type=1400 audit(1786995773.838:1073): avc: denied { create } for pid=17035 comm="syz.3.2817" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1251.536512][ T30] audit: type=1400 audit(1786995774.378:1074): avc: denied { read write open } for pid=17035 comm="syz.3.2817" path="/554/mnt/file2" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1251.731323][T17049] Cannot find add_set index 2 as target [ 1251.766410][T17049] netlink: 'syz.5.2822': attribute type 1 has an invalid length. [ 1251.780834][T17054] jffs2: notice: (17054) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1252.229887][T12813] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1252.315704][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2826'. [ 1252.333641][T17067] jffs2: notice: (17067) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1252.390226][T12813] usb 4-1: Using ep0 maxpacket: 32 [ 1252.398372][T12813] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1252.412811][T12813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.428047][T12813] usb 4-1: Product: syz [ 1252.432538][T12813] usb 4-1: Manufacturer: syz [ 1252.437174][T12813] usb 4-1: SerialNumber: syz [ 1252.485313][T12813] usb 4-1: config 0 descriptor?? [ 1252.493046][T17074] netlink: 'syz.7.2828': attribute type 1 has an invalid length. [ 1252.509110][T12813] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1252.521393][T12813] dvb-usb: bulk message failed: -22 (4/0) [ 1252.537820][T12813] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1252.567428][T12813] dvb-usb: bulk message failed: -22 (5/0) [ 1252.586381][T12813] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1252.617802][T12813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1252.628107][T12813] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1252.641451][T12813] usb 4-1: media controller created [ 1252.672922][T12813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1252.782940][T12813] usb 4-1: selecting invalid altsetting 3 [ 1252.788784][T12813] ttusb2: set interface to alts=3 failed [ 1253.267378][T12813] DVB: Unable to find symbol tda10086_attach() [ 1253.276411][T12813] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1253.287075][T12813] dvb-usb: bulk message failed: -22 (4/0) [ 1253.298761][T12813] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1253.315460][T12813] dvb-usb: bulk message failed: -22 (5/0) [ 1253.321733][T12813] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1253.326059][T17094] fuse: Bad value for 'fd' [ 1253.331929][T12813] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1253.348445][T12813] usb 4-1: USB disconnect, device number 82 [ 1253.448503][T12813] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1254.900780][T17126] Cannot find add_set index 2 as target [ 1254.914014][T17126] netlink: 'syz.8.2846': attribute type 1 has an invalid length. [ 1255.578319][T17136] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1255.748673][T17147] overlayfs: failed to clone upperpath [ 1255.929716][ T1225] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1256.100894][ T1225] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 1256.115707][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.123946][ T1225] usb 4-1: Product: syz [ 1256.128112][ T1225] usb 4-1: Manufacturer: syz [ 1256.132703][ T1225] usb 4-1: SerialNumber: syz [ 1256.141602][ T1225] etas_es58x 4-1:1.0: Starting syz syz (Serial Number syz) [ 1256.404827][T17152] netlink: 'syz.3.2851': attribute type 1 has an invalid length. [ 1256.895782][ T30] audit: type=1400 audit(1786995779.738:1075): avc: denied { write } for pid=17173 comm="syz.8.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1257.395158][ T1225] etas_es58x 4-1:1.0: could not retrieve the product info string [ 1257.445817][ T30] audit: type=1400 audit(1786995780.288:1076): avc: denied { shutdown } for pid=17181 comm="syz.8.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1257.483537][ T1225] usb 4-1: USB disconnect, device number 83 [ 1257.515985][ T1225] etas_es58x 4-1:1.0: Disconnecting syz syz [ 1257.518970][T17187] Cannot find add_set index 2 as target [ 1257.632817][T17187] netlink: 'syz.1.2864': attribute type 1 has an invalid length. [ 1257.716225][T17194] nftables ruleset with unbound set [ 1257.779065][T17197] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2866'. [ 1257.822917][T17194] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2866'. [ 1258.073208][T17209] hub 8-0:1.0: USB hub found [ 1258.095340][T17209] hub 8-0:1.0: 1 port detected [ 1258.308940][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2874'. [ 1258.321750][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2874'. [ 1258.485929][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2874'. [ 1258.495257][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2874'. [ 1259.091882][T17245] netlink: 'syz.1.2882': attribute type 1 has an invalid length. [ 1260.301756][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2892'. [ 1261.265939][T17297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2900'. [ 1261.276548][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2900'. [ 1261.316463][T17297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2900'. [ 1261.439145][ T30] audit: type=1326 audit(1786995784.278:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17306 comm="syz.5.2903" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bb499e0d9 code=0x0 [ 1262.096080][T17319] netlink: 'syz.1.2906': attribute type 1 has an invalid length. [ 1263.127920][T17341] __nla_validate_parse: 2 callbacks suppressed [ 1263.127936][T17341] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2913'. [ 1263.289153][T17342] overlayfs: failed to clone upperpath [ 1263.338955][T17343] trusted_key: syz.7.2913 sent an empty control message without MSG_MORE. [ 1263.613509][T17350] overlayfs: failed to clone upperpath [ 1264.029074][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 1264.046800][T17355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2917'. [ 1264.088903][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 1264.099758][T17355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2917'. [ 1264.355020][ T30] audit: type=1400 audit(1786995787.198:1078): avc: denied { getopt } for pid=17371 comm="syz.1.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1264.416773][T17380] overlayfs: failed to clone upperpath [ 1264.426751][T17380] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1264.507323][T17387] netlink: 'syz.7.2927': attribute type 1 has an invalid length. [ 1264.555587][T17386] jffs2: notice: (17386) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1264.730040][T17398] fuse: Bad value for 'fd' [ 1264.976341][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2934'. [ 1265.013650][ T30] audit: type=1400 audit(1786995787.848:1079): avc: denied { listen } for pid=17402 comm="syz.5.2934" path=0000214E0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1265.020475][T17403] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1267.932822][T17450] netlink: 'syz.5.2953': attribute type 1 has an invalid length. [ 1268.285461][T17460] overlayfs: failed to clone upperpath [ 1268.285461][T17461] overlayfs: failed to clone upperpath [ 1269.327682][T17486] CIFS: Attempting to mount //127.0.0.1/share [ 1269.347955][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2963'. [ 1269.690345][T17503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2972'. [ 1269.766068][T17505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2973'. [ 1270.184858][T17486] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1270.708218][T17523] fuse: fd is not a fuse device [ 1270.751867][T17526] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2980'. [ 1271.143488][ T30] audit: type=1400 audit(1786995793.988:1080): avc: denied { watch watch_reads } for pid=17536 comm="syz.7.2984" path="/230/file0" dev="tmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1271.669522][T17541] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2985'. [ 1271.779452][ T30] audit: type=1326 audit(1786995794.618:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.3.2988" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8053d9e0d9 code=0x7ffc0000 [ 1271.832216][ T30] audit: type=1326 audit(1786995794.618:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.3.2988" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8053d9e0d9 code=0x7ffc0000 [ 1271.893114][ T30] audit: type=1326 audit(1786995794.658:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.3.2988" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8053d9e0d9 code=0x7ffc0000 [ 1271.924097][ T30] audit: type=1326 audit(1786995794.658:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.3.2988" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8053d9e0d9 code=0x7ffc0000 [ 1271.988035][ T30] audit: type=1326 audit(1786995794.658:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.3.2988" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8053d9e0d9 code=0x7ffc0000 [ 1272.027207][ T30] audit: type=1326 audit(1786995794.658:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.3.2988" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f8053d9e0d9 code=0x7ffc0000 [ 1272.068365][ T30] audit: type=1326 audit(1786995794.658:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.3.2988" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8053d9e0d9 code=0x7ffc0000 [ 1272.101516][ T30] audit: type=1326 audit(1786995794.658:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.3.2988" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8053d9e0d9 code=0x7ffc0000 [ 1272.131814][ T30] audit: type=1326 audit(1786995794.668:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.3.2988" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f8053d9e0d9 code=0x7ffc0000 [ 1273.727263][T17571] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2997'. [ 1276.236346][T17625] fuse: Bad value for 'fd' [ 1276.257571][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1276.257588][ T30] audit: type=1326 audit(1786995799.098:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17618 comm="syz.1.3012" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f302a39e0d9 code=0x0 [ 1277.756902][T17645] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3019'. [ 1277.773808][T17645] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3019'. [ 1277.791235][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3019'. [ 1277.828645][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3019'. [ 1277.861704][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3019'. [ 1278.040479][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3023'. [ 1280.282787][T14062] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1280.298414][T14062] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1280.307797][T14062] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1280.315794][T14062] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1280.326405][T14062] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1281.413459][T17724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1281.478067][T17729] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3038'. [ 1281.542448][T17722] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3038'. [ 1281.704676][T17731] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3043'. [ 1282.747170][T10511] Bluetooth: hci0: command tx timeout [ 1282.770269][T17700] lo speed is unknown, defaulting to 1000 [ 1284.641353][T17762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3049'. [ 1284.642319][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1284.671608][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.839916][T10511] Bluetooth: hci0: command tx timeout [ 1285.142288][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.188665][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.431301][ T13] bond0: (slave netdevsim1): Releasing backup interface [ 1285.485519][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.504176][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.678391][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1285.690514][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.778926][T17700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.802633][T17700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.854201][T17700] bridge_slave_0: entered allmulticast mode [ 1285.862983][T17700] bridge_slave_0: entered promiscuous mode [ 1285.873916][T17700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.882192][T17700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.889446][T17700] bridge_slave_1: entered allmulticast mode [ 1285.897261][T17700] bridge_slave_1: entered promiscuous mode [ 1285.928230][T17700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.973712][T17795] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3057'. [ 1286.025293][T17700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.222119][T17700] team0: Port device team_slave_0 added [ 1286.261468][T17804] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3059'. [ 1286.296244][T17700] team0: Port device team_slave_1 added [ 1286.484882][T17700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.511763][T17700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.565906][ T30] audit: type=1400 audit(1786995809.398:1128): avc: denied { getopt } for pid=17813 comm="syz.1.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1286.595816][T17700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.646844][T17819] CIFS: Attempting to mount //127.0.0.1/share [ 1286.658191][T17700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.670251][T17700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.697336][T17700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.811639][T17700] hsr_slave_0: entered promiscuous mode [ 1286.820603][T17700] hsr_slave_1: entered promiscuous mode [ 1286.837020][ T13] bridge_slave_1: left allmulticast mode [ 1286.845202][ T13] bridge_slave_1: left promiscuous mode [ 1286.853154][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.884423][ T13] bridge_slave_0: left allmulticast mode [ 1286.890674][ T13] bridge_slave_0: left promiscuous mode [ 1286.897397][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.920171][T10511] Bluetooth: hci0: command tx timeout [ 1287.463266][ T30] audit: type=1400 audit(1786995810.308:1129): avc: denied { write } for pid=17827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1287.490599][T17819] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1287.534894][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1287.564158][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1287.586496][ T13] bond0 (unregistering): Released all slaves [ 1287.675184][ T30] audit: type=1400 audit(1786995810.518:1130): avc: denied { write } for pid=17850 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1287.841941][ T13] tipc: Left network mode [ 1287.891337][ T5257] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1287.904042][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3071'. [ 1287.956306][T17861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3071'. [ 1288.079697][T17861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'. [ 1288.162952][ T30] audit: type=1400 audit(1786995810.998:1131): avc: denied { listen } for pid=17857 comm="syz.1.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1288.542313][T17861] netlink: 'syz.5.3071': attribute type 14 has an invalid length. [ 1288.998967][T10511] Bluetooth: hci0: command tx timeout [ 1289.533468][T17889] CIFS: Attempting to mount //127.0.0.1/share [ 1289.873639][ T30] audit: type=1400 audit(1786995812.718:1132): avc: denied { write } for pid=17873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1290.118802][ T30] audit: type=1400 audit(1786995812.958:1133): avc: denied { getopt } for pid=17909 comm="syz.1.3084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1290.138470][ T13] hsr_slave_0: left promiscuous mode [ 1290.144443][ T13] hsr_slave_1: left promiscuous mode [ 1290.150942][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1290.158974][ T13] batadv0: mtu less than device minimum [ 1290.170459][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1290.182506][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1290.193392][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1290.204233][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1290.215136][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1290.225973][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1290.236827][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1290.247667][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1290.258602][ T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1290.313244][ T30] audit: type=1400 audit(1786995813.148:1134): avc: denied { write } for pid=17907 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1290.341788][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1290.352222][T17889] CIFS: VFS: cifs_mount failed w/return code = -512 [ 1290.364633][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1290.435606][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1290.450539][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 1290.457565][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 1290.555019][ T13] veth1_macvtap: left promiscuous mode [ 1290.561399][ T13] veth1_vlan: left promiscuous mode [ 1290.566682][ T13] veth0_vlan: left promiscuous mode [ 1291.074614][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1291.088351][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1291.196132][ T5840] smbdirect: ib_dev[syz2] removed [ 1291.273146][ T187] lo speed is unknown, defaulting to 1000 [ 1291.363234][ T187] infiniband syz2: ib_query_port failed (-19) [ 1292.169935][T17934] netlink: 'syz.5.3093': attribute type 4 has an invalid length. [ 1292.199928][T17934] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3093'. [ 1292.488699][ T13] IPVS: stop unused estimator thread 0... [ 1292.645890][T17700] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1292.667365][T17700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1292.691832][T17700] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1292.713036][T17700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1292.731786][T17700] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1292.757947][T17700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1292.774203][T17700] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1292.809758][ T30] audit: type=1400 audit(1786995815.648:1135): avc: denied { write } for pid=17939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.833532][T17700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1292.952163][ T30] audit: type=1400 audit(1786995815.788:1136): avc: denied { write } for pid=17955 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1292.977973][T17963] fuse: fd is not a fuse device [ 1293.058811][T17700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.112997][T17700] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.189210][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.196363][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.211061][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.218239][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.260833][T17976] fuse: Bad value for 'fd' [ 1293.902956][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 1293.921278][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3101'. [ 1294.021435][T17987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 1294.049707][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3101'. [ 1294.219684][ T30] audit: type=1400 audit(1786995817.058:1137): avc: denied { write } for pid=17967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1294.494536][ T30] audit: type=1400 audit(1786995817.338:1138): avc: denied { write } for pid=18017 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1294.605893][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1294.616117][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.689068][T17700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.768713][T18028] jffs2: notice: (18028) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1294.786549][T18030] netlink: 'syz.5.3109': attribute type 11 has an invalid length. [ 1294.826671][T17700] veth0_vlan: entered promiscuous mode [ 1294.856525][T17700] veth1_vlan: entered promiscuous mode [ 1294.860822][T18030] netlink: 'syz.5.3109': attribute type 23 has an invalid length. [ 1294.974679][T17700] veth0_macvtap: entered promiscuous mode [ 1295.008198][T17700] veth1_macvtap: entered promiscuous mode [ 1295.060535][T17700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.117407][T17700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.193258][ T30] audit: type=1400 audit(1786995818.038:1139): avc: denied { write } for pid=18024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1295.244209][T18047] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3113'. [ 1295.287027][ T187] libceph: connect (1)[c::]:6789 error -101 [ 1295.294129][T18044] ceph: No mds server is up or the cluster is laggy [ 1295.301784][ T266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.315905][ T266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.341933][ T266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.360725][ T187] libceph: mon0 (1)[c::]:6789 connect error [ 1295.419409][ T266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.619892][ T266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.751505][ T30] audit: type=1400 audit(1786995818.598:1140): avc: denied { write } for pid=18054 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1295.778233][ T266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.848232][T18064] xt_hl: Unknown Hop Limit match mode: 206 [ 1295.869408][T18064] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3116'. [ 1296.055410][ T9468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.604467][ T9468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.670247][T18068] Process accounting resumed [ 1296.716443][T18072] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3117'. [ 1296.967977][T18083] netlink: 'syz.7.3119': attribute type 1 has an invalid length. [ 1297.063396][T18085] fuse: Unknown parameter '0x000000000000000b' [ 1298.104041][T18099] net_ratelimit: 30 callbacks suppressed [ 1298.104068][T18099] netlink: zone id is out of range [ 1298.203451][T18099] netlink: zone id is out of range [ 1298.258579][T18099] netlink: zone id is out of range [ 1298.279304][T18099] netlink: zone id is out of range [ 1298.292944][T18099] netlink: zone id is out of range [ 1298.304496][T18099] netlink: zone id is out of range [ 1298.321498][T18099] netlink: zone id is out of range [ 1298.355699][T18099] netlink: zone id is out of range [ 1298.390622][T18099] netlink: zone id is out of range [ 1298.432266][T18099] netlink: zone id is out of range [ 1298.484788][ T30] audit: type=1400 audit(1786995821.328:1141): avc: denied { watch } for pid=18107 comm="syz.3.3127" path="/2/net_prio.prioidx" dev="tmpfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1298.552207][ T30] audit: type=1400 audit(1786995821.358:1142): avc: denied { watch_sb } for pid=18107 comm="syz.3.3127" path="/2/net_prio.prioidx" dev="tmpfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1298.661735][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3131'. [ 1298.702644][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3131'. [ 1298.813451][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3131'. [ 1298.854063][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3131'. [ 1299.108387][T18120] fuse: fd is not a fuse device [ 1299.467765][T18130] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3134'. [ 1299.572211][T18134] fuse: Unknown parameter 'fd0x0000000000000008' [ 1299.669077][ T30] audit: type=1400 audit(1786995822.508:1143): avc: denied { module_load } for pid=18139 comm="syz.1.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1299.721402][T18142] overlayfs: failed to clone lowerpath [ 1300.578979][T18160] overlayfs: failed to clone lowerpath [ 1300.765730][ T30] audit: type=1400 audit(1786995823.608:1144): avc: denied { create } for pid=18157 comm="syz.8.3141" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1301.288327][T18174] FAULT_INJECTION: forcing a failure. [ 1301.288327][T18174] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.301133][T18174] CPU: 1 UID: 0 PID: 18174 Comm: syz.3.3144 Tainted: G L syzkaller #0 PREEMPT(full) [ 1301.301159][T18174] Tainted: [L]=SOFTLOCKUP [ 1301.301165][T18174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1301.301175][T18174] Call Trace: [ 1301.301181][T18174] [ 1301.301187][T18174] dump_stack_lvl+0x100/0x190 [ 1301.301215][T18174] should_fail_ex.cold+0x5/0xa [ 1301.301238][T18174] should_failslab+0xc2/0x120 [ 1301.301262][T18174] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1301.301286][T18174] ? __alloc_skb+0x5b7/0x710 [ 1301.301308][T18174] ? __alloc_skb+0x140/0x710 [ 1301.301334][T18174] __alloc_skb+0x140/0x710 [ 1301.301355][T18174] ? __alloc_skb+0x5b7/0x710 [ 1301.301376][T18174] ? __pfx___alloc_skb+0x10/0x10 [ 1301.301406][T18174] netlink_alloc_large_skb+0x69/0x150 [ 1301.301429][T18174] netlink_sendmsg+0x680/0xda0 [ 1301.301454][T18174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1301.301477][T18174] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1301.301504][T18174] ____sys_sendmsg+0xa4d/0xbe0 [ 1301.301523][T18174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1301.301543][T18174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1301.301569][T18174] ___sys_sendmsg+0x190/0x1e0 [ 1301.301590][T18174] ? __pfx____sys_sendmsg+0x10/0x10 [ 1301.301606][T18174] ? __lock_acquire+0x49f/0x1a40 [ 1301.301628][T18174] ? get_pid_task+0x106/0x250 [ 1301.301675][T18174] __sys_sendmsg+0x160/0x210 [ 1301.301697][T18174] ? __pfx___sys_sendmsg+0x10/0x10 [ 1301.301734][T18174] do_syscall_64+0x115/0x870 [ 1301.301753][T18174] ? clear_bhb_loop+0x70/0xc0 [ 1301.301774][T18174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.301793][T18174] RIP: 0033:0x7fe55fb9e0d9 [ 1301.301808][T18174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.301824][T18174] RSP: 002b:00007fe560b0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1301.301841][T18174] RAX: ffffffffffffffda RBX: 00007fe55fe26180 RCX: 00007fe55fb9e0d9 [ 1301.301851][T18174] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000007 [ 1301.301861][T18174] RBP: 00007fe560b0d090 R08: 0000000000000000 R09: 0000000000000000 [ 1301.301870][T18174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1301.301880][T18174] R13: 00007fe55fe26218 R14: 00007fe55fe26180 R15: 00007ffe2dabe338 [ 1301.301905][T18174] [ 1302.012679][ T30] audit: type=1400 audit(1786995824.678:1145): avc: denied { unlink } for pid=12571 comm="syz-executor" name="file0" dev="tmpfs" ino=1661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1302.626542][T18207] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1307.458669][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3170'. [ 1307.501565][T18286] team0: Port device team_slave_0 removed [ 1307.526560][T18288] CIFS: Attempting to mount //127.0.0.1/share [ 1307.572940][T10948] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1307.756838][T10948] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1307.791702][T10948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.813934][T10948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.829115][T10948] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1307.853855][T10948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.877494][T10948] usb 4-1: config 0 descriptor?? [ 1308.122521][T10948] usbhid 4-1:0.0: can't add hid device: -71 [ 1308.155249][T10948] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1308.203182][T10948] usb 4-1: USB disconnect, device number 84 [ 1308.371100][T18288] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1308.378502][T18294] CIFS: Attempting to mount //127.0.0.1/share [ 1308.401623][T18305] netlink: 'syz.1.3176': attribute type 10 has an invalid length. [ 1308.492814][T18307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3176'. [ 1308.553246][T18305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1308.589156][T18314] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3176'. [ 1308.734913][T18305] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1308.853405][T18319] 9p: Bad value for 'rfdno' [ 1309.156831][T18294] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1309.164289][T18294] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1309.330864][ T30] audit: type=1400 audit(1786995832.178:1146): avc: denied { connect } for pid=18304 comm="syz.1.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1309.911866][T18314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.022334][T18330] PKCS7: Unknown OID: [4] 0.0 [ 1310.029272][T18330] PKCS7: Only support pkcs7_signedData type [ 1310.149928][T18314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.209451][T18314] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1310.775015][T18314] bond0 (unregistering): Released all slaves [ 1310.793902][T18332] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1311.602257][T18359] syz_tun: entered promiscuous mode [ 1311.790588][T18359] net_ratelimit: 23 callbacks suppressed [ 1311.790605][T18359] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1312.119709][ T5694] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1312.640357][ T5694] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1312.651116][ T5694] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1312.659919][ T5694] usb 4-1: config 0 has no interface number 0 [ 1312.667657][ T5694] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1312.680301][ T5694] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.148167][ T5694] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1313.180166][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.191475][ T5694] usb 4-1: config 0 descriptor?? [ 1314.542862][ T5694] uclogic 0003:28BD:0042.000C: failed retrieving string descriptor #100: -71 [ 1314.563943][ T5694] uclogic 0003:28BD:0042.000C: failed retrieving pen parameters: -71 [ 1314.584635][ T5694] uclogic 0003:28BD:0042.000C: pen probing failed: -71 [ 1314.603108][ T5694] uclogic 0003:28BD:0042.000C: failed probing parameters: -71 [ 1314.619077][ T5694] uclogic 0003:28BD:0042.000C: probe with driver uclogic failed with error -71 [ 1314.634871][ T5694] usb 4-1: USB disconnect, device number 85 [ 1315.287308][T18400] erspan0: entered promiscuous mode [ 1315.908315][ C0] Unknown status report in ack skb [ 1316.017343][T18419] jffs2: notice: (18419) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1317.675974][T18443] Cannot find add_set index 2 as target [ 1317.701014][T18443] netlink: 'syz.7.3216': attribute type 1 has an invalid length. [ 1318.263869][ T5694] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1318.500400][ T5694] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1318.586306][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.614258][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.657074][ T5694] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1318.697964][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.854104][ T5694] usb 4-1: config 0 descriptor?? [ 1319.347478][ T5694] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1319.445528][ C0] Unknown status report in ack skb [ 1319.481414][T18465] loop2: detected capacity change from 0 to 2640 [ 1319.666728][T18466] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 1319.717953][T18466] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 1319.740778][T18466] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 1319.765983][T18466] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 1319.795804][T18466] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 1319.809866][T18466] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 1319.831962][T18466] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 1319.856019][T18466] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 1319.877419][T18466] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 1319.897686][T18466] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 1320.045817][T18472] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1321.195202][T10948] usb 4-1: USB disconnect, device number 86 [ 1321.580421][T10948] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1321.644293][ C0] Unknown status report in ack skb [ 1321.781274][T10948] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1321.792066][T18501] Cannot find add_set index 2 as target [ 1321.803786][T10948] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1321.824441][T10948] usb 4-1: config 0 has no interface number 0 [ 1321.839700][T10948] usb 4-1: config 0 interface 251 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1321.852656][T18501] netlink: 'syz.5.3231': attribute type 1 has an invalid length. [ 1321.868383][T10948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.893915][T10948] usb 4-1: Product: syz [ 1321.914138][T10948] usb 4-1: Manufacturer: syz [ 1321.927009][T10948] usb 4-1: SerialNumber: syz [ 1321.945857][T10948] usb 4-1: config 0 descriptor?? [ 1321.962605][T10948] asix 4-1:0.251: probe with driver asix failed with error -22 [ 1321.990546][ T30] audit: type=1400 audit(1786995844.838:1147): avc: denied { listen } for pid=18502 comm="syz.1.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1322.075977][ T30] audit: type=1400 audit(1786995844.858:1148): avc: denied { bind } for pid=18502 comm="syz.1.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1322.137971][T18511] CIFS: Attempting to mount //127.0.0.1/share [ 1322.327277][ T30] audit: type=1800 audit(1786995845.168:1149): pid=18515 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3235" name="nullb0" dev="tmpfs" ino=1557 res=0 errno=0 [ 1322.896794][T18511] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1322.916305][T18511] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1323.943512][T18528] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3239'. [ 1324.308211][T10948] usb 4-1: USB disconnect, device number 87 [ 1324.345389][T18539] netlink: 312 bytes leftover after parsing attributes in process `syz.8.3243'. [ 1326.289788][T18568] Cannot find add_set index 2 as target [ 1326.323910][T18568] netlink: 'syz.7.3252': attribute type 1 has an invalid length. [ 1326.523171][T18579] fuse: Bad value for 'fd' [ 1326.618246][T18581] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3255'. [ 1326.706470][T18586] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3256'. [ 1326.719014][T18581] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3255'. [ 1326.962221][T18592] CIFS: Attempting to mount //127.0.0.1/share [ 1326.969223][T18592] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1326.976640][T18592] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1327.935517][ T30] audit: type=1326 audit(1786995850.778:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18601 comm="syz.1.3262" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x0 [ 1327.973461][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3260'. [ 1328.666525][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3267'. [ 1328.690923][T18630] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3267'. [ 1328.730284][T18630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3267'. [ 1328.751759][T18630] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3267'. [ 1328.887782][T18638] xt_socket: unknown flags 0xc [ 1328.903027][T18638] 9p: Bad value for 'wfdno' [ 1331.032203][T10511] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 1331.153953][T18661] fuse: fd is not a fuse device [ 1331.180299][T18662] fuse: Bad value for 'fd' [ 1332.397886][T18675] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3279'. [ 1333.687927][T18709] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3289'. [ 1333.696949][T18709] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3289'. [ 1336.752268][T18746] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3301'. [ 1336.805564][T18750] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3301'. [ 1337.756015][T18762] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=18762 comm=syz.8.3306 [ 1338.008098][ T30] audit: type=1400 audit(1786995860.848:1151): avc: denied { accept } for pid=18765 comm="syz.5.3308" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1338.130796][T18772] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3302'. [ 1339.800223][T18794] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3316'. [ 1342.749934][T18809] Bluetooth: hci1: command 0x0406 tx timeout [ 1342.848482][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3327'. [ 1342.922992][T18840] netlink: 'syz.5.3327': attribute type 10 has an invalid length. [ 1342.947509][T18840] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3327'. [ 1343.009761][T18840] dummy0: entered promiscuous mode [ 1344.707783][T18877] netlink: 'syz.1.3329': attribute type 1 has an invalid length. [ 1345.348176][T18894] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3342'. [ 1345.654165][T18885] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3339'. [ 1345.671459][T18903] trusted_key: encrypted_key: master key parameter 'userAsyz' is invalid [ 1346.473267][T18921] CIFS: Attempting to mount //127.0.0.1/share [ 1346.480783][T18921] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1346.488153][T18921] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1346.646803][T18924] fuse: Bad value for 'fd' [ 1347.317583][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3353'. [ 1347.769136][T18934] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3353'. [ 1348.471729][T18953] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3357'. [ 1348.824649][T18971] veth0_macvtap: left promiscuous mode [ 1348.842355][T18971] macvtap0: entered allmulticast mode [ 1348.892998][T18972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1348.893124][T18971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3363'. [ 1348.902556][T18973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3362'. [ 1348.948465][T18973] netlink: 'syz.3.3362': attribute type 10 has an invalid length. [ 1348.957380][T18973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3362'. [ 1348.969269][T18973] dummy0: entered promiscuous mode [ 1349.079398][T18978] lo speed is unknown, defaulting to 1000 [ 1349.085316][T18978] lo speed is unknown, defaulting to 1000 [ 1349.091529][T18978] lo speed is unknown, defaulting to 1000 [ 1349.097618][T18978] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1349.111780][T18978] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1349.130063][T18978] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1349.143528][T18978] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1349.161598][T18978] lo speed is unknown, defaulting to 1000 [ 1349.168091][T18978] lo speed is unknown, defaulting to 1000 [ 1349.174567][T18978] lo speed is unknown, defaulting to 1000 [ 1349.181275][T18978] lo speed is unknown, defaulting to 1000 [ 1349.187702][T18978] lo speed is unknown, defaulting to 1000 [ 1351.398607][T19028] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3376'. [ 1352.959234][T19050] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1355.033889][T19084] macsec2: entered promiscuous mode [ 1356.167742][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.174210][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.488036][T19105] bond0: invalid NS target ff00:: specified for addition [ 1356.499252][T19105] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 1357.296183][T19115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3406'. [ 1357.315680][T19115] bridge_slave_1: left allmulticast mode [ 1357.327659][T19115] bridge_slave_1: left promiscuous mode [ 1357.341009][T19115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.363867][T19115] bridge_slave_0: left allmulticast mode [ 1357.377612][T19115] bridge_slave_0: left promiscuous mode [ 1357.384284][T19115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.896161][T19142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3412'. [ 1359.036930][T19142] netlink: 'syz.1.3412': attribute type 10 has an invalid length. [ 1359.049347][T19142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3412'. [ 1359.084386][T19142] dummy0: entered promiscuous mode [ 1359.539750][T19152] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3416'. [ 1361.293428][T19175] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3424'. [ 1361.667866][T19190] xt_policy: output policy not valid in PREROUTING and INPUT [ 1365.111000][ T30] audit: type=1400 audit(1786995887.958:1152): avc: denied { write } for pid=19245 comm="syz.7.3447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1365.431232][T19257] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1367.557270][T19285] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3460'. [ 1367.651836][T19288] Cannot find add_set index 2 as target [ 1367.671617][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3460'. [ 1367.727498][T19288] netlink: 'syz.5.3459': attribute type 1 has an invalid length. [ 1367.874320][T19304] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3466'. [ 1369.835760][ T30] audit: type=1326 audit(1786995892.678:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1369.898929][ T30] audit: type=1326 audit(1786995892.678:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1369.927752][ T30] audit: type=1326 audit(1786995892.678:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1369.927806][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3489'. [ 1369.956613][ T30] audit: type=1326 audit(1786995892.678:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1370.052639][ T30] audit: type=1326 audit(1786995892.678:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1370.129061][ T30] audit: type=1326 audit(1786995892.678:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1370.187853][ T30] audit: type=1326 audit(1786995892.678:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1370.216225][ T30] audit: type=1326 audit(1786995892.678:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1370.299717][ T30] audit: type=1326 audit(1786995892.718:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1370.326332][ T30] audit: type=1326 audit(1786995892.718:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1370.909255][ T30] audit: type=1326 audit(1786995892.718:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1370.946433][ T30] audit: type=1326 audit(1786995892.718:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1370.974748][ T30] audit: type=1326 audit(1786995892.718:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1371.038211][ T30] audit: type=1326 audit(1786995892.718:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1371.156557][ T30] audit: type=1326 audit(1786995892.718:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19363 comm="syz.1.3486" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1372.105237][T19422] lo speed is unknown, defaulting to 1000 [ 1373.985372][T19462] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3519'. [ 1375.570038][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1375.570053][ T30] audit: type=1400 audit(1786995898.418:1177): avc: denied { getopt } for pid=19485 comm="syz.7.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1375.731907][T19495] xt_hashlimit: max too large, truncated to 1048576 [ 1375.875421][T19502] jffs2: notice: (19502) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1376.098110][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3538'. [ 1376.114169][T19512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3538'. [ 1376.142368][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3538'. [ 1376.156114][T19512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3538'. [ 1376.497038][T19518] IPVS: set_ctl: invalid protocol: 98 172.20.20.54:19 [ 1376.540974][T19522] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 3, id = 0 [ 1376.551594][T19515] lo speed is unknown, defaulting to 1000 [ 1377.888958][ T30] audit: type=1326 audit(1786995900.728:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19539 comm="syz.5.3544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6bb499e0d9 code=0x0 [ 1378.939803][T19553] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3549'. [ 1378.940829][T19554] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3549'. [ 1379.105065][T19553] netlink: 'syz.8.3549': attribute type 7 has an invalid length. [ 1379.117336][T19553] netlink: 'syz.8.3549': attribute type 8 has an invalid length. [ 1379.126991][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3549'. [ 1379.184416][T19554] netlink: 'syz.8.3549': attribute type 7 has an invalid length. [ 1379.261926][T19554] netlink: 'syz.8.3549': attribute type 8 has an invalid length. [ 1379.309035][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3549'. [ 1381.779092][ T30] audit: type=1400 audit(1786995904.618:1179): avc: denied { read } for pid=19577 comm="syz.8.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1381.932965][ T30] audit: type=1326 audit(1786995904.778:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.1.3560" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1381.966756][ T30] audit: type=1326 audit(1786995904.778:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.1.3560" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1381.993759][ T30] audit: type=1326 audit(1786995904.808:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.1.3560" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1382.113028][ T30] audit: type=1326 audit(1786995904.808:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.1.3560" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1382.186916][ T30] audit: type=1326 audit(1786995904.808:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.1.3560" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1382.255901][ T30] audit: type=1326 audit(1786995904.868:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.1.3560" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1382.323229][ T30] audit: type=1326 audit(1786995904.868:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.1.3560" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1382.351600][T19594] CIFS: VFS: UNC: path must begin with // or \\ [ 1382.358171][T19594] Malformed UNC in devname [ 1382.358171][T19594] [ 1382.364807][T19594] CIFS: VFS: Malformed UNC in devname [ 1382.392629][T19592] fuse: Unknown parameter 'f¬˜6Ëe˜d' [ 1382.414902][ T30] audit: type=1326 audit(1786995904.868:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.1.3560" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1382.482881][ T30] audit: type=1326 audit(1786995904.948:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.1.3560" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f302a39e0d9 code=0x7ffc0000 [ 1382.537103][T19598] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19598 comm=syz.7.3563 [ 1384.371712][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3577'. [ 1384.408199][T19639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3577'. [ 1384.481518][T19639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3577'. [ 1384.518877][T19639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3577'. [ 1385.078027][T19663] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3584'. [ 1385.121381][T19657] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3584'. [ 1385.385099][T19662] lo speed is unknown, defaulting to 1000 [ 1385.522696][T10511] Bluetooth: hci4: unexpected event for opcode 0x0c7d [ 1385.898910][T19686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46712 sclass=netlink_route_socket pid=19686 comm=syz.7.3592 [ 1388.091345][T19724] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1392.272754][T19781] lo speed is unknown, defaulting to 1000 [ 1398.066309][T19857] syz_tun: entered allmulticast mode [ 1399.335532][T19866] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3651'. [ 1399.427502][T19866] netlink: 'syz.7.3651': attribute type 10 has an invalid length. [ 1399.464759][T19866] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3651'. [ 1399.649920][T19866] dummy0: entered promiscuous mode [ 1399.899227][T19881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3646'. [ 1401.562212][T19901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=19901 comm=syz.8.3662 [ 1401.698565][T19901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=19901 comm=syz.8.3662 [ 1402.415380][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1402.415396][ T30] audit: type=1400 audit(1786995925.258:1239): avc: denied { bind } for pid=19918 comm="syz.5.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1403.935012][T19968] netlink: 'syz.1.3686': attribute type 21 has an invalid length. [ 1403.953280][T19968] netlink: 'syz.1.3686': attribute type 1 has an invalid length. [ 1403.972906][T19968] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3686'. [ 1404.596530][T19994] xt_policy: output policy not valid in PREROUTING and INPUT [ 1405.467939][T20011] jffs2: notice: (20011) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1405.684342][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3702'. [ 1405.789190][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3702'. [ 1406.436525][T20041] lo speed is unknown, defaulting to 1000 [ 1406.558697][T20048] jffs2: notice: (20048) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1406.657327][T20053] jffs2: notice: (20053) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1406.762841][T20057] xt_policy: output policy not valid in PREROUTING and INPUT [ 1406.832709][T20059] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3713'. [ 1406.842134][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3713'. [ 1406.979689][T20063] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1406.996302][T20063] bond1 (unregistering): Released all slaves [ 1407.081986][T20072] netlink: 59 bytes leftover after parsing attributes in process `syz.7.3717'. [ 1407.307852][T20081] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000 [ 1407.878620][T20084] jffs2: notice: (20084) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1408.086069][ T30] audit: type=1400 audit(1786995930.928:1240): avc: denied { ioctl } for pid=20092 comm="syz.7.3725" path="socket:[66109]" dev="sockfs" ino=66109 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1408.385156][T20109] jffs2: notice: (20109) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1408.606337][T20125] netlink: 'syz.8.3737': attribute type 1 has an invalid length. [ 1408.626599][T20125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1408.727316][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1408.735850][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1408.747845][T20128] ceph: No mds server is up or the cluster is laggy [ 1408.761318][ T30] audit: type=1400 audit(1786995931.608:1241): avc: denied { create } for pid=20133 comm="syz.8.3740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1408.775218][T20137] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3738'. [ 1408.795729][ T30] audit: type=1400 audit(1786995931.638:1242): avc: denied { sys_admin } for pid=20133 comm="syz.8.3740" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1409.468656][T20149] jffs2: notice: (20149) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1410.205348][ T30] audit: type=1400 audit(1786995933.048:1243): avc: denied { bind } for pid=20173 comm="syz.5.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1410.353574][ T30] audit: type=1400 audit(1786995933.198:1244): avc: denied { map } for pid=20157 comm="syz.1.3747" path="socket:[66196]" dev="sockfs" ino=66196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1410.448282][T20181] xt_policy: output policy not valid in PREROUTING and INPUT [ 1411.068847][T20192] jffs2: notice: (20192) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1411.104118][T20193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3756'. [ 1411.139415][T20193] dummy0: left promiscuous mode [ 1411.153423][T20193] netlink: 'syz.5.3756': attribute type 10 has an invalid length. [ 1411.161980][T20193] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3756'. [ 1411.171384][T20193] dummy0: entered promiscuous mode [ 1412.092181][T20221] jffs2: notice: (20221) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1413.371089][ T30] audit: type=1400 audit(1786995936.208:1245): avc: denied { write } for pid=20241 comm="syz.5.3775" name="file2" dev="tmpfs" ino=2772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1413.413960][ T30] audit: type=1400 audit(1786995936.208:1246): avc: denied { open } for pid=20241 comm="syz.5.3775" path="/511/file2" dev="tmpfs" ino=2772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1413.471106][ T30] audit: type=1400 audit(1786995936.218:1247): avc: denied { cmd } for pid=20241 comm="syz.5.3775" path="/511/file2" dev="tmpfs" ino=2772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 1413.635079][T20253] jffs2: notice: (20253) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1413.663237][T20246] lo speed is unknown, defaulting to 1000 [ 1414.928589][T20280] netlink: 'syz.8.3787': attribute type 10 has an invalid length. [ 1414.977575][T20280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1415.016651][T20280] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1415.026857][T20284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3783'. [ 1415.112995][T20282] dummy0: left promiscuous mode [ 1415.142976][T20282] netlink: 'syz.3.3783': attribute type 10 has an invalid length. [ 1415.164279][T20282] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3783'. [ 1415.185993][T20282] dummy0: entered promiscuous mode [ 1416.165332][T20303] jffs2: notice: (20303) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1416.226992][T20296] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1416.236418][T20296] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1416.244285][T20296] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1416.252127][T20296] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1416.259981][T20296] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1416.267806][T20296] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1416.275646][T20296] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1416.283474][T20296] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1416.291331][T20296] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1416.299142][T20296] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1417.692639][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.698987][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.818692][T20342] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3806'. [ 1417.849980][T20342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1417.940300][T20351] netlink: 'syz.1.3809': attribute type 12 has an invalid length. [ 1418.741955][T20363] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1420.060358][T20375] jffs2: notice: (20375) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1420.363046][ T30] audit: type=1326 audit(1786995943.208:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20396 comm="syz.1.3825" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f302a39e0d9 code=0x0 [ 1421.573786][T20419] netlink: 'syz.7.3832': attribute type 1 has an invalid length. [ 1421.595603][T20419] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1421.611001][T20419] bond4: (slave gretap1): making interface the new active one [ 1421.621080][T20419] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1421.632743][T20419] dummy0: left promiscuous mode [ 1421.643074][T20419] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1421.884648][T20425] jffs2: notice: (20425) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1421.953328][T20430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3835'. [ 1421.991264][T20430] dummy0: left promiscuous mode [ 1422.002065][T20430] netlink: 'syz.3.3835': attribute type 10 has an invalid length. [ 1422.010158][T20430] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3835'. [ 1422.042822][T20430] dummy0: entered promiscuous mode [ 1422.159212][T20441] netlink: 'syz.1.3838': attribute type 1 has an invalid length. [ 1422.716912][T20460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.779012][T20460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.844133][T20460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.020737][ T30] audit: type=1326 audit(1786995945.868:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20469 comm="syz.8.3848" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9b459e0d9 code=0x0 [ 1423.574711][T20476] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1423.615063][T20476] xt_hashlimit: size too large, truncated to 1048576 [ 1425.221733][ T30] audit: type=1400 audit(1786995948.068:1250): avc: denied { ioctl } for pid=20515 comm="syz.1.3865" path="socket:[67455]" dev="sockfs" ino=67455 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1425.683602][ T30] audit: type=1400 audit(1786995948.528:1251): avc: denied { read } for pid=20527 comm="syz.8.3869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1425.729273][ T30] audit: type=1400 audit(1786995948.528:1252): avc: denied { write } for pid=20527 comm="syz.8.3869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1425.788391][ T30] audit: type=1400 audit(1786995948.628:1253): avc: denied { listen } for pid=20532 comm="syz.8.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1426.018559][ T30] audit: type=1326 audit(1786995948.858:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20538 comm="syz.5.3871" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bb499e0d9 code=0x0 [ 1426.667461][ T30] audit: type=1400 audit(1786995949.508:1255): avc: denied { setopt } for pid=20548 comm="syz.3.3874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1427.419785][T10511] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1430.286107][T20621] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3897'. [ 1432.135956][T10511] Bluetooth: hci1: unexpected event for opcode 0x203b [ 1432.144324][ T30] audit: type=1400 audit(1786995954.998:1256): avc: denied { accept } for pid=20639 comm="syz.1.3901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1432.335013][T20643] fuse: fd is not a fuse device [ 1433.810470][T20663] fuse: Bad value for 'fd' [ 1433.878572][T20668] fuse: Bad value for 'fd' [ 1434.064358][T20678] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1437.300933][ T5694] libceph: connect (1)[c::]:6789 error -99 [ 1437.312725][ T5694] libceph: mon0 (1)[c::]:6789 connect error [ 1437.339426][T20738] ceph: No mds server is up or the cluster is laggy [ 1438.308346][T10511] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1439.927233][T10511] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1440.470767][T20809] xt_limit: Overflow, try lower: 2147483649/3300 [ 1440.894864][T20825] No control pipe specified [ 1440.945428][T20827] netlink: 'syz.8.3961': attribute type 1 has an invalid length. [ 1441.326412][T10511] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1441.517058][T20840] overlayfs: failed to clone upperpath [ 1442.274271][ T30] audit: type=1400 audit(1786995965.118:1257): avc: denied { map } for pid=20854 comm="syz.1.3971" path="socket:[69016]" dev="sockfs" ino=69016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1442.725279][ T30] audit: type=1400 audit(1786995965.568:1258): avc: denied { bind } for pid=20871 comm="syz.1.3976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1444.558392][T20900] netlink: 'syz.7.3984': attribute type 1 has an invalid length. [ 1444.631234][T20903] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3986'. [ 1444.659861][T20903] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3986'. [ 1444.819087][T20910] 9pnet_virtio: no channels available for device syz [ 1444.842875][T20910] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3988'. [ 1444.882119][T20910] netlink: 'syz.8.3988': attribute type 1 has an invalid length. [ 1444.910606][T20910] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1445.099142][T20914] sctp: [Deprecated]: syz.5.3989 (pid 20914) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1445.099142][T20914] Use struct sctp_sack_info instead [ 1445.192555][T20919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1445.709119][ T30] audit: type=1326 audit(1786995968.548:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20909 comm="syz.5.3989" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb499e0d9 code=0x7fc00000 [ 1445.793030][ T30] audit: type=1326 audit(1786995968.638:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20909 comm="syz.5.3989" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6bb493f459 code=0x7fc00000 [ 1446.124557][T20939] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3997'. [ 1446.149239][T20939] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3997'. [ 1446.238510][ T30] audit: type=1326 audit(1786995969.078:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20946 comm="syz.5.3999" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6bb499e0d9 code=0x0 [ 1446.272249][T20948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3998'. [ 1447.200191][T20969] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4006'. [ 1447.209446][T20968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4004'. [ 1447.240959][T20968] dummy0: left promiscuous mode [ 1447.241489][T20969] xt_nfacct: accounting object `syz0' does not exist [ 1447.247678][T20968] bridge6: port 1(dummy0) entered blocking state [ 1447.260702][T20968] bridge6: port 1(dummy0) entered disabled state [ 1447.267317][T20968] dummy0: entered allmulticast mode [ 1447.275182][T20968] dummy0: entered promiscuous mode [ 1447.298504][T20968] netlink: 'syz.3.4004': attribute type 10 has an invalid length. [ 1447.306863][T20968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4004'. [ 1447.320685][T20968] bridge6: port 1(dummy0) entered blocking state [ 1447.328131][T20968] bridge6: port 1(dummy0) entered forwarding state [ 1447.340096][T20968] dummy0: left allmulticast mode [ 1447.345487][T20968] bridge6: port 1(dummy0) entered disabled state [ 1450.386824][T21039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4025'. [ 1450.419305][T21039] dummy0: left promiscuous mode [ 1450.427696][T21039] bridge7: port 1(dummy0) entered blocking state [ 1450.452712][T21039] bridge7: port 1(dummy0) entered disabled state [ 1450.475473][T21043] netlink: 'syz.3.4025': attribute type 10 has an invalid length. [ 1450.476558][T21039] dummy0: entered allmulticast mode [ 1450.509664][T21043] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4025'. [ 1450.566053][T21039] dummy0: entered promiscuous mode [ 1450.730518][T21043] bridge7: port 1(dummy0) entered blocking state [ 1450.737074][T21043] bridge7: port 1(dummy0) entered forwarding state [ 1450.805692][T21043] dummy0: left allmulticast mode [ 1451.272131][T21043] bridge7: port 1(dummy0) entered disabled state [ 1451.500808][T21056] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4032'. [ 1451.580430][T21056] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4032'. [ 1453.002324][ T30] audit: type=1400 audit(1786995975.848:1262): avc: denied { ioctl } for pid=21090 comm="syz.5.4045" path="socket:[69898]" dev="sockfs" ino=69898 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1453.068583][T21095] pim6reg: entered allmulticast mode [ 1453.088377][T21091] pim6reg: left allmulticast mode [ 1453.257453][ T5702] IPVS: starting estimator thread 0... [ 1453.380217][T21101] IPVS: using max 42 ests per chain, 100800 per kthread [ 1453.759803][T21105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4048'. [ 1453.820150][T21108] netlink: 'syz.1.4048': attribute type 10 has an invalid length. [ 1453.830835][T21108] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4048'. [ 1454.230779][T21129] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4055'. [ 1454.306284][T21132] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4055'. [ 1454.356597][T21132] tc_dump_action: action bad kind [ 1455.262546][ T30] audit: type=1326 audit(1786995978.108:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21148 comm="syz.7.4059" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62d999e0d9 code=0x0 [ 1455.536038][T21158] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4061'. [ 1455.595214][T21157] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4062'. [ 1456.355559][T21169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4065'. [ 1456.390158][T21169] netlink: 'syz.1.4065': attribute type 10 has an invalid length. [ 1456.409198][T21169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4065'. [ 1457.096008][T21191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4073'. [ 1457.139513][T21191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4073'. [ 1457.263460][T21191] vlan2: entered promiscuous mode [ 1457.297405][T21191] bond0: entered promiscuous mode [ 1457.311414][T21191] bond_slave_0: entered promiscuous mode [ 1457.352735][T21191] bond_slave_1: entered promiscuous mode [ 1458.761367][T21217] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4079'. [ 1459.193320][T21233] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4083'. [ 1462.109709][T21272] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4097'. [ 1462.566917][T21278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4099'. [ 1464.298015][T21314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1465.616934][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4121'. [ 1467.939253][T10511] Bluetooth: hci1: unexpected subevent 0x18 length: 30 > 19 [ 1467.947370][T10511] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1468.038034][T21391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4134'. [ 1468.201793][T21396] 9p: Bad value for 'rfdno' [ 1468.212585][T21396] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4137'. [ 1468.705724][T21396] team0 (unregistering): Port device team_slave_0 removed [ 1468.728658][T21396] team0 (unregistering): Port device team_slave_1 removed [ 1468.743511][T21404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4137'. [ 1470.333113][T10511] Bluetooth: hci5: ISO packet for unknown connection handle 1550 [ 1471.055752][T21435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4147'. [ 1471.738638][T21457] xt_policy: output policy not valid in PREROUTING and INPUT [ 1472.083697][T21461] hsr0: entered allmulticast mode [ 1472.093565][T21461] hsr_slave_0: entered allmulticast mode [ 1472.106163][T21461] hsr_slave_1: entered allmulticast mode [ 1472.118327][T21461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4156'. [ 1472.128483][T21461] hsr_slave_0: left promiscuous mode [ 1472.134598][T10511] Bluetooth: hci1: unexpected subevent 0x18 length: 30 > 19 [ 1472.142634][T10511] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1472.153408][T21461] hsr_slave_1: left promiscuous mode [ 1472.163265][T21461] hsr0 (unregistering): left allmulticast mode [ 1472.373800][T10511] Bluetooth: hci3: ISO packet for unknown connection handle 1550 [ 1472.997361][T21486] jffs2: notice: (21486) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1473.869086][T21499] netlink: 'syz.3.4170': attribute type 21 has an invalid length. [ 1473.878433][T21499] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1473.889027][T21499] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1473.930152][T21501] lo speed is unknown, defaulting to 1000 [ 1474.149209][T10511] Bluetooth: hci1: ISO packet for unknown connection handle 1550 [ 1474.489312][T10511] Bluetooth: hci4: unexpected subevent 0x18 length: 30 > 19 [ 1474.509000][T10511] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1474.604937][T21526] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1474.604937][T21526] [ 1474.699695][T21526] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1474.723305][T21526] CIFS: Attempting to mount //127.0.0.1/share [ 1475.404223][T21526] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1475.411786][T21526] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1475.665078][T10511] Bluetooth: hci1: ISO packet for unknown connection handle 1550 [ 1476.003053][ T30] audit: type=1400 audit(1786995998.708:1264): avc: denied { getopt } for pid=21545 comm="syz.7.4187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1476.039972][T10511] Bluetooth: hci5: unexpected subevent 0x18 length: 30 > 19 [ 1476.047411][T10511] Bluetooth: hci5: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1476.829941][ T30] audit: type=1400 audit(1786995999.658:1265): avc: denied { name_connect } for pid=21564 comm="syz.3.4191" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1477.136870][ T30] audit: type=1400 audit(1786995999.978:1266): avc: denied { mounton } for pid=21575 comm="syz.3.4196" path="/208/proc" dev="tmpfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1477.397635][ T30] audit: type=1400 audit(1786996000.238:1267): avc: denied { watch } for pid=21575 comm="syz.3.4196" path="/208" dev="tmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1477.788719][T10511] Bluetooth: hci4: ISO packet for unknown connection handle 1550 [ 1478.594947][T21608] fuse: Bad value for 'fd' [ 1478.615708][ T30] audit: type=1400 audit(1786996001.458:1268): avc: denied { write } for pid=21606 comm="syz.3.4208" name="file0" dev="tmpfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1478.694934][ T30] audit: type=1400 audit(1786996001.458:1269): avc: denied { open } for pid=21606 comm="syz.3.4208" path="/209/file0" dev="tmpfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1478.911325][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1478.917783][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1479.474933][T10511] Bluetooth: hci4: unexpected event for opcode 0x1001 [ 1479.634980][ T30] audit: type=1400 audit(1786996002.478:1270): avc: denied { read write } for pid=21627 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1479.665950][T18809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1479.674068][T18809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1479.690706][ T30] audit: type=1400 audit(1786996002.478:1271): avc: denied { open } for pid=21627 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1479.716383][T18809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1479.762382][T18809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1479.782026][T18809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1480.493744][ T6216] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.506836][ T6216] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.656997][ T6216] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.667373][ T6216] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.724126][ T6216] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.834443][ T6216] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.899465][T21660] jffs2: notice: (21660) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1480.997875][ T6216] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.018145][ T30] audit: type=1326 audit(1786996003.858:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21666 comm="syz.7.4226" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62d999e0d9 code=0x0 [ 1481.019107][ T6216] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.120618][T21627] lo speed is unknown, defaulting to 1000 [ 1481.155334][T21664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4225'. [ 1481.208004][T21664] dummy0: left promiscuous mode [ 1481.223694][T21664] bridge9: port 1(dummy0) entered blocking state [ 1481.239839][T21664] bridge9: port 1(dummy0) entered disabled state [ 1481.246391][T21664] dummy0: entered allmulticast mode [ 1481.253598][T21664] dummy0: entered promiscuous mode [ 1481.260509][T21674] netlink: 'syz.3.4225': attribute type 10 has an invalid length. [ 1481.272926][T21674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4225'. [ 1481.319496][T21674] bridge9: port 1(dummy0) entered blocking state [ 1481.325923][T21674] bridge9: port 1(dummy0) entered forwarding state [ 1481.334469][T21674] dummy0: left allmulticast mode [ 1481.340037][T21674] bridge9: port 1(dummy0) entered disabled state [ 1481.447038][ T6216] bridge_slave_1: left allmulticast mode [ 1481.456172][ T6216] bridge_slave_1: left promiscuous mode [ 1481.465624][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.478818][ T6216] bridge_slave_0: left allmulticast mode [ 1481.485355][ T6216] bridge_slave_0: left promiscuous mode [ 1481.491408][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.802969][ T6216] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1481.836536][ T30] audit: type=1400 audit(1786996004.678:1273): avc: denied { write } for pid=21680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1481.879450][T18809] Bluetooth: hci2: command tx timeout [ 1482.041490][ T30] audit: type=1400 audit(1786996004.888:1274): avc: denied { write } for pid=21694 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1482.065789][ T6216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1482.116661][ T6216] bond0 (unregistering): (slave ªªªªªª): Releasing backup interface [ 1482.133746][ T6216] bond0 (unregistering): Released all slaves [ 1482.178858][ T5257] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1482.254598][ T6216] IPVS: stopping master sync thread 19522 ... [ 1482.879379][T21627] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.889929][T21627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.898148][T21627] bridge_slave_0: entered allmulticast mode [ 1482.929450][T21627] bridge_slave_0: entered promiscuous mode [ 1482.942560][T21719] jffs2: notice: (21719) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1482.989814][T21627] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.999973][T21627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.007225][T21627] bridge_slave_1: entered allmulticast mode [ 1483.016714][T21627] bridge_slave_1: entered promiscuous mode [ 1483.125103][ T30] audit: type=1400 audit(1786996005.968:1275): avc: denied { getopt } for pid=21725 comm="syz.7.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1483.204542][T21627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.224766][ T30] audit: type=1400 audit(1786996006.068:1276): avc: denied { write } for pid=21702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1483.371065][T21627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1483.591822][T18809] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1483.602744][T18809] Bluetooth: hci4: Injecting HCI hardware error event [ 1483.617713][T18809] Bluetooth: hci4: hardware error 0x00 [ 1483.868511][T21627] team0: Port device team_slave_0 added [ 1483.922750][T21627] team0: Port device team_slave_1 added [ 1483.950641][T10511] Bluetooth: hci2: command tx timeout [ 1484.018578][ T30] audit: type=1400 audit(1786996006.858:1277): avc: denied { write } for pid=21736 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1484.041600][T21627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.041616][T21627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.043197][T21627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1484.303609][T21627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1484.333094][T21627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.543719][T21627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1484.798372][ T5257] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1484.842256][T21744] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4237'. [ 1484.866178][ T30] audit: type=1400 audit(1786996007.708:1278): avc: denied { create } for pid=21751 comm="syz.8.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1485.092764][T21750] netlink: 'syz.7.4237': attribute type 10 has an invalid length. [ 1485.120133][T21750] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4237'. [ 1485.177365][T21749] bond4: (slave dummy0): Releasing active interface [ 1485.327232][T21749] gretap1: entered promiscuous mode [ 1485.861414][T21627] hsr_slave_0: entered promiscuous mode [ 1485.880214][T21627] hsr_slave_1: entered promiscuous mode [ 1485.896105][T21627] debugfs: 'hsr0' already exists in 'hsr' [ 1485.910572][T21627] Cannot create hsr debugfs directory [ 1485.928322][T21750] dummy0: entered promiscuous mode [ 1485.946800][ T30] audit: type=1400 audit(1786996008.788:1279): avc: denied { write } for pid=21756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1485.974009][T18809] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1485.982529][T21759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4240'. [ 1486.031541][T18809] Bluetooth: hci2: command tx timeout [ 1486.170684][T21773] netlink: 'syz.3.4240': attribute type 10 has an invalid length. [ 1486.188777][ T30] audit: type=1400 audit(1786996009.028:1280): avc: denied { write } for pid=21779 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1486.254591][T21768] dummy0: left promiscuous mode [ 1486.295598][T21773] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4240'. [ 1486.329367][T21768] bridge10: port 1(dummy0) entered blocking state [ 1486.342890][T21768] bridge10: port 1(dummy0) entered disabled state [ 1486.380807][T21768] dummy0: entered allmulticast mode [ 1486.407934][T21768] dummy0: entered promiscuous mode [ 1486.515050][ T5257] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1486.611731][T21773] bridge10: port 1(dummy0) entered blocking state [ 1486.618272][T21773] bridge10: port 1(dummy0) entered forwarding state [ 1486.626920][T21773] dummy0: left allmulticast mode [ 1486.632255][T21773] bridge10: port 1(dummy0) entered disabled state [ 1487.355944][T21794] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4248'. [ 1487.947012][T21811] netlink: 'syz.7.4248': attribute type 10 has an invalid length. [ 1487.991306][T21811] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4248'. [ 1488.119934][T18809] Bluetooth: hci2: command tx timeout [ 1488.177226][T21807] dummy0: left promiscuous mode [ 1488.229480][T21818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4253'. [ 1488.342020][T21811] dummy0: entered promiscuous mode [ 1489.112894][ T30] audit: type=1400 audit(1786996011.958:1281): avc: denied { write } for pid=21813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1489.328365][T21837] netlink: 'syz.8.4257': attribute type 4 has an invalid length. [ 1489.337041][T21837] netlink: 17 bytes leftover after parsing attributes in process `syz.8.4257'. [ 1489.701155][T21847] xt_policy: output policy not valid in PREROUTING and INPUT [ 1490.501583][ T30] audit: type=1400 audit(1786996013.338:1282): avc: denied { write } for pid=21840 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1490.556891][ T5257] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1490.936036][ T6216] veth1_macvtap: left promiscuous mode [ 1490.952942][ T6216] veth0_macvtap: left promiscuous mode [ 1490.971103][ T6216] veth1_vlan: left promiscuous mode [ 1490.988786][ T6216] veth0_vlan: left promiscuous mode [ 1491.108585][T21865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4263'. [ 1491.247077][T21867] netlink: 'syz.3.4263': attribute type 10 has an invalid length. [ 1491.275132][T21867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4263'. [ 1491.303937][ T6216] team0 (unregistering): Port device team_slave_1 removed [ 1491.343453][ T6216] team0 (unregistering): Port device team_slave_0 removed [ 1491.447416][T21869] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4264'. [ 1491.618604][T21866] dummy0: left promiscuous mode [ 1491.683733][T21866] bridge11: port 1(dummy0) entered blocking state [ 1491.728068][T21866] bridge11: port 1(dummy0) entered disabled state [ 1491.755840][T21866] dummy0: entered allmulticast mode [ 1491.811159][T21866] dummy0: entered promiscuous mode [ 1491.847139][T21867] bridge11: port 1(dummy0) entered blocking state [ 1491.854335][T21867] bridge11: port 1(dummy0) entered forwarding state [ 1491.914710][T21867] dummy0: left allmulticast mode [ 1491.947672][T21867] bridge11: port 1(dummy0) entered disabled state [ 1493.616389][ T6216] IPVS: stop unused estimator thread 0... [ 1493.756534][ T30] audit: type=1400 audit(1786996016.598:1283): avc: denied { write } for pid=21882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1493.978487][ T30] audit: type=1400 audit(1786996016.818:1284): avc: denied { write } for pid=21908 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1494.240780][T21627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1494.668154][T21627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1494.687196][T21627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1494.704574][T21627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1494.736246][T21627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1494.774419][T21627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1494.787577][T21627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1494.822033][T21627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1495.106814][T21627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.681430][T21627] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.727087][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.734200][ T6216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.775708][T21940] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4277'. [ 1495.787562][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.794666][ T6216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.893991][T21943] bridge3: port 1(dummy0) entered blocking state [ 1495.915292][T21940] netlink: 'syz.8.4277': attribute type 10 has an invalid length. [ 1495.939829][T21943] bridge3: port 1(dummy0) entered disabled state [ 1495.959958][T21940] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4277'. [ 1495.999763][T21943] dummy0: entered allmulticast mode [ 1496.030648][T21943] dummy0: entered promiscuous mode [ 1496.072685][T21940] bridge3: port 1(dummy0) entered blocking state [ 1496.079127][T21940] bridge3: port 1(dummy0) entered forwarding state [ 1496.112885][T21940] dummy0: left allmulticast mode [ 1496.133635][T21940] bridge3: port 1(dummy0) entered disabled state [ 1496.943876][ T30] audit: type=1400 audit(1786996019.788:1285): avc: denied { write } for pid=21930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1497.025870][T21959] xt_policy: output policy not valid in PREROUTING and INPUT [ 1497.636891][ T30] audit: type=1400 audit(1786996020.468:1286): avc: denied { write } for pid=21965 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1499.463450][T21627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1499.553026][ T30] audit: type=1400 audit(1786996022.398:1287): avc: denied { write } for pid=21973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1499.745452][ T30] audit: type=1400 audit(1786996022.588:1288): avc: denied { write } for pid=22005 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1500.108440][T21627] veth0_vlan: entered promiscuous mode [ 1500.158904][T21627] veth1_vlan: entered promiscuous mode [ 1500.241098][T21627] veth0_macvtap: entered promiscuous mode [ 1500.267349][T21627] veth1_macvtap: entered promiscuous mode [ 1500.323938][T21627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1500.367842][T21627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1500.409355][ T5840] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.473219][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.493175][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.639917][ T5840] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.694025][ T30] audit: type=1400 audit(1786996023.538:1289): avc: denied { write } for pid=22014 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1500.756486][ T5840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.786635][ T5840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.896795][ T30] audit: type=1400 audit(1786996023.738:1290): avc: denied { write } for pid=22034 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1501.079351][ T5840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.107961][ T5840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1502.443913][ T6216] gretap1: left promiscuous mode [ 1502.811495][ T30] audit: type=1400 audit(1786996025.648:1291): avc: denied { write } for pid=22042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1502.955379][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4297'. [ 1503.006240][T22071] dummy0: left promiscuous mode [ 1503.036659][T22071] netlink: 'syz.3.4297': attribute type 10 has an invalid length. [ 1503.044752][ T30] audit: type=1400 audit(1786996025.888:1292): avc: denied { write } for pid=22072 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1503.067666][T22071] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4297'. [ 1503.085103][T22071] dummy0: entered promiscuous mode [ 1503.443493][ T30] audit: type=1400 audit(1786996026.278:1293): avc: denied { write } for pid=22079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1503.562300][ T30] audit: type=1400 audit(1786996026.408:1294): avc: denied { write } for pid=22103 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1503.903781][T22117] FAULT_INJECTION: forcing a failure. [ 1503.903781][T22117] name failslab, interval 1, probability 0, space 0, times 0 [ 1503.921584][T22117] CPU: 1 UID: 0 PID: 22117 Comm: syz.5.4305 Tainted: G L syzkaller #0 PREEMPT(full) [ 1503.921618][T22117] Tainted: [L]=SOFTLOCKUP [ 1503.921625][T22117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1503.921636][T22117] Call Trace: [ 1503.921643][T22117] [ 1503.921651][T22117] dump_stack_lvl+0x100/0x190 [ 1503.921680][T22117] should_fail_ex.cold+0x5/0xa [ 1503.921703][T22117] should_failslab+0xc2/0x120 [ 1503.921729][T22117] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1503.921752][T22117] ? do_getname+0x35/0x390 [ 1503.921781][T22117] do_getname+0x35/0x390 [ 1503.921807][T22117] do_sys_openat2+0xc7/0x1e0 [ 1503.921827][T22117] ? __pfx_do_sys_openat2+0x10/0x10 [ 1503.921851][T22117] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1503.921875][T22117] ? __fget_files+0x21f/0x3d0 [ 1503.921896][T22117] __x64_sys_openat+0x12d/0x210 [ 1503.921918][T22117] ? __pfx___x64_sys_openat+0x10/0x10 [ 1503.921939][T22117] ? ksys_write+0x1ac/0x250 [ 1503.921963][T22117] do_syscall_64+0x115/0x870 [ 1503.921982][T22117] ? clear_bhb_loop+0x70/0xc0 [ 1503.922004][T22117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1503.922021][T22117] RIP: 0033:0x7f9cae79e0d9 [ 1503.922035][T22117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1503.922050][T22117] RSP: 002b:00007f9cac9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1503.922068][T22117] RAX: ffffffffffffffda RBX: 00007f9caea26180 RCX: 00007f9cae79e0d9 [ 1503.922079][T22117] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 00000000ffffff9c [ 1503.922089][T22117] RBP: 00007f9cac9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1503.922100][T22117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1503.922110][T22117] R13: 00007f9caea26218 R14: 00007f9caea26180 R15: 00007ffcf30fdb68 [ 1503.922133][T22117] [ 1504.314892][T22128] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1504.566188][ T30] audit: type=1400 audit(1786996027.408:1295): avc: denied { getopt } for pid=22134 comm="syz.8.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1504.668938][ T30] audit: type=1326 audit(1786996027.508:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22140 comm="syz.3.4314" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe55fb9e0d9 code=0x0 [ 1504.764856][T22143] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4315'. [ 1609.799528][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1609.806502][ C1] rcu: 0-...!: (0 ticks this GP) idle=aadc/1/0x4000000000000000 softirq=124666/124666 fqs=0 [ 1609.817610][ C1] rcu: (detected by 1, t=10502 jiffies, g=128185, q=460 ncpus=2) [ 1609.825415][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1609.825442][ C0] NMI backtrace for cpu 0 [ 1609.825457][ C0] CPU: 0 UID: 0 PID: 21676 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1609.825475][ C0] Tainted: [L]=SOFTLOCKUP [ 1609.825481][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1609.825489][ C0] RIP: 0010:find_held_lock+0x0/0x80 [ 1609.825508][ C0] Code: 91 89 c2 48 c7 c6 c2 ec 25 91 48 c7 c7 86 70 38 8e e9 34 ba 3c ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 56 41 89 d6 41 55 49 89 cd 41 54 49 89 f4 55 8d 6a ff 48 63 c5 [ 1609.825522][ C0] RSP: 0018:ffffc90000007d98 EFLAGS: 00000002 [ 1609.825534][ C0] RAX: 0000000000000000 RBX: ffffffff8ede8240 RCX: ffffc90000007dac [ 1609.825543][ C0] RDX: 0000000000000001 RSI: ffffffff8ede8240 RDI: ffff8880291d8000 [ 1609.825553][ C0] RBP: ffffffff89c6c77b R08: 0000000000000001 R09: 0000000000000000 [ 1609.825562][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880291d8000 [ 1609.825570][ C0] R13: 18ccd7e778a2d320 R14: 0000000000000002 R15: 0000000000000001 [ 1609.825579][ C0] FS: 00007f48cbe57880(0000) GS:ffff888123bde000(0000) knlGS:0000000000000000 [ 1609.825594][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1609.825603][ C0] CR2: 00007fe55fbeb7c0 CR3: 0000000031e3a000 CR4: 00000000003526f0 [ 1609.825612][ C0] Call Trace: [ 1609.825618][ C0] [ 1609.825623][ C0] lock_release+0xdb/0x310 [ 1609.825644][ C0] advance_sched+0x770/0xd20 [ 1609.825665][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1609.825685][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1609.825701][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1609.825726][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1609.825745][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1609.825768][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1609.825784][ C0] [ 1609.825789][ C0] [ 1609.825794][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1609.825809][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 1609.825825][ C0] Code: ff 65 0f c1 05 a3 5b 9e 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad 14 9e 12 0f 85 4d 01 00 00 48 83 c4 [ 1609.825838][ C0] RSP: 0018:ffffc900043af468 EFLAGS: 00000206 [ 1609.825848][ C0] RAX: 0000000000000046 RBX: ffffffff8ede8240 RCX: ffffc900043af474 [ 1609.825858][ C0] RDX: 0000000000000000 RSI: ffffffff8e3870a4 RDI: ffffffff8c600380 [ 1609.825867][ C0] RBP: ffffffff81b876be R08: 0000000000000001 R09: 0000000000000007 [ 1609.825875][ C0] R10: 0000000000000200 R11: 0000000000017ad2 R12: ffff8880291d8000 [ 1609.825884][ C0] R13: ffffc900043af520 R14: 0000000000000202 R15: 0000000000000001 [ 1609.825894][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1609.825914][ C0] unwind_next_frame+0x3c3/0x2090 [ 1609.825928][ C0] ? kasan_save_track+0x14/0x30 [ 1609.825945][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1609.825960][ C0] arch_stack_walk+0x94/0xf0 [ 1609.825975][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1609.825993][ C0] stack_trace_save+0x8e/0xc0 [ 1609.826006][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1609.826022][ C0] ? kasan_save_stack+0x3f/0x50 [ 1609.826037][ C0] ? kasan_save_stack+0x30/0x50 [ 1609.826052][ C0] ? kasan_save_track+0x14/0x30 [ 1609.826067][ C0] kasan_save_stack+0x30/0x50 [ 1609.826082][ C0] ? kasan_save_stack+0x30/0x50 [ 1609.826097][ C0] ? kasan_save_track+0x14/0x30 [ 1609.826124][ C0] kasan_save_track+0x14/0x30 [ 1609.826144][ C0] __kasan_slab_alloc+0x89/0x90 [ 1609.826161][ C0] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1609.826179][ C0] ? skb_clone+0x190/0x400 [ 1609.826198][ C0] skb_clone+0x190/0x400 [ 1609.826216][ C0] netlink_broadcast_filtered+0xb22/0xf20 [ 1609.826234][ C0] netlink_sendmsg+0xa16/0xda0 [ 1609.826250][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1609.826266][ C0] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1609.826287][ C0] ____sys_sendmsg+0xa4d/0xbe0 [ 1609.826299][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1609.826314][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1609.826326][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.826344][ C0] ___sys_sendmsg+0x190/0x1e0 [ 1609.826358][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1609.826379][ C0] ? kmem_cache_free+0x43e/0x6b0 [ 1609.826392][ C0] ? percpu_counter_add_batch+0xb9/0x230 [ 1609.826412][ C0] __sys_sendmsg+0x160/0x210 [ 1609.826430][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 1609.826451][ C0] do_syscall_64+0x115/0x870 [ 1609.826467][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1609.826483][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.826496][ C0] RIP: 0033:0x7f48cb6a7407 [ 1609.826508][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1609.826521][ C0] RSP: 002b:00007ffd01a67130 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 1609.826534][ C0] RAX: ffffffffffffffda RBX: 00007f48cbe57880 RCX: 00007f48cb6a7407 [ 1609.826543][ C0] RDX: 0000000000000000 RSI: 00007ffd01a67190 RDI: 000000000000000c [ 1609.826551][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1609.826559][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000d3 [ 1609.826567][ C0] R13: 00005610c9a384c0 R14: 0000000000000000 R15: 00005610c9a45150 [ 1609.826581][ C0] [ 1609.827437][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g128185 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1610.351382][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1610.361334][ C1] rcu: RCU grace-period kthread stack dump: [ 1610.367201][ C1] task:rcu_preempt state:R running task stack:27848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1610.380680][ C1] Call Trace: [ 1610.383943][ C1] [ 1610.386863][ C1] __schedule+0x125c/0x6730 [ 1610.391373][ C1] ? __pfx___schedule+0x10/0x10 [ 1610.396208][ C1] ? find_held_lock+0x2b/0x80 [ 1610.400873][ C1] ? schedule+0x225/0x2c0 [ 1610.405194][ C1] schedule+0xdd/0x2c0 [ 1610.409255][ C1] schedule_timeout+0x127/0x280 [ 1610.414103][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1610.419468][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1610.424745][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1610.430541][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1610.435994][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1610.440749][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1610.446028][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1610.450960][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1610.456150][ C1] ? rcu_is_watching+0x12/0xc0 [ 1610.460909][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1610.466708][ C1] rcu_gp_kthread+0x179/0x230 [ 1610.471378][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1610.476568][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1610.482377][ C1] ? __kthread_parkme+0x18c/0x230 [ 1610.487402][ C1] ? kthread+0x13a/0x450 [ 1610.491632][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1610.496818][ C1] kthread+0x370/0x450 [ 1610.500877][ C1] ? __pfx_kthread+0x10/0x10 [ 1610.505456][ C1] ret_from_fork+0x72b/0xd50 [ 1610.510047][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1610.515155][ C1] ? __switch_to+0x800/0x10f0 [ 1610.519820][ C1] ? __pfx_kthread+0x10/0x10 [ 1610.524399][ C1] ret_from_fork_asm+0x1a/0x30 [ 1610.529174][ C1] [ 1610.532182][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1610.538491][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1610.548980][ C1] Tainted: [L]=SOFTLOCKUP [ 1610.553285][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1610.563324][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1610.568946][ C1] Code: e5 aa 02 e9 83 4b 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 1f 2f 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1610.588538][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 1610.594591][ C1] RAX: 000000000480df8d RBX: ffff88801f28a540 RCX: ffffffff8bbc8345 [ 1610.602550][ C1] RDX: 0000000000000000 RSI: ffffffff8e3acef2 RDI: ffffffff8c600380 [ 1610.610516][ C1] RBP: ffffed1003e514a8 R08: 0000000000000001 R09: ffffed10170a678d [ 1610.618473][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 1610.626431][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 1610.634397][ C1] FS: 0000000000000000(0000) GS:ffff888123cde000(0000) knlGS:0000000000000000 [ 1610.643313][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1610.649883][ C1] CR2: 0000001b30b0bff8 CR3: 00000000791a1000 CR4: 00000000003526f0 [ 1610.657845][ C1] Call Trace: [ 1610.661109][ C1] [ 1610.664024][ C1] default_idle+0x9/0x10 [ 1610.668259][ C1] default_idle_call+0x6c/0xb0 [ 1610.673017][ C1] do_idle+0x3a7/0x5b0 [ 1610.677081][ C1] ? __pfx_do_idle+0x10/0x10 [ 1610.681662][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 1610.687556][ C1] cpu_startup_entry+0x4f/0x60 [ 1610.692316][ C1] start_secondary+0x21d/0x2d0 [ 1610.697073][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1610.702357][ C1] common_startup_64+0x13e/0x158 [ 1610.707294][ C1]