last executing test programs: 8m11.369565789s ago: executing program 32 (id=62): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ppoll(&(0x7f0000000140)=[{r3, 0x2082}], 0x1, &(0x7f0000000240), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x10a, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1000000, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7m52.261262512s ago: executing program 5 (id=163): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r1, 0x20000007, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x20, 0x7, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x201}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$inet(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r2, 0x5) fsmount(r0, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r3 = accept$inet(r2, 0x0, 0x0) read(r3, &(0x7f00000001c0), 0x0) read(r3, &(0x7f0000000304), 0x4) write(r3, &(0x7f0000000300), 0x100) 7m51.134561017s ago: executing program 5 (id=168): r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000000c0)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, 0x0, 0x8004800) r6 = syz_io_uring_setup(0x1413, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x68, 0x0, 0xffffffffffffffff, &(0x7f0000000700)={0x4900, 0x92, 0xe}, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x12345}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00'}) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x3, 0x0, 0xc, 0x0) io_uring_enter(r6, 0x39d7, 0x1, 0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4c6}, 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 7m49.470752933s ago: executing program 5 (id=171): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000006000000850000004f00000085000000d000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)="000000f0ffff0000", &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7m49.220585484s ago: executing program 5 (id=175): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000480)={{0x0, 0xb, 0x100000000, 0xfffffffffffffffe, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x1, 0x75, 0x1}}) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) recvmmsg(r3, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) (async) close(0x3) 7m48.805688594s ago: executing program 5 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x10005, 0xff, {}, 0x0, 0x0, 0x4b}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2008c014) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) write$P9_RVERSION(r3, 0x0, 0x15) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x39b3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8) recvmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x23, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r4, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, 0x0) 7m48.387262634s ago: executing program 5 (id=180): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0x1, 0x6, "9a4ca7e636fe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="000601"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setuid(0xee01) setuid(0xee01) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0xffffffffffffff00}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_vs_stats_percpu\x00') read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000080)="520003000100b8", 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000002180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m48.03118452s ago: executing program 33 (id=180): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0x1, 0x6, "9a4ca7e636fe"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="000601"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setuid(0xee01) setuid(0xee01) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0xffffffffffffff00}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip_vs_stats_percpu\x00') read$FUSE(r3, &(0x7f0000001300)={0x2020}, 0x2020) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000080)="520003000100b8", 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000002180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m31.158602747s ago: executing program 6 (id=237): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x2, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x76798000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4038587a, &(0x7f0000000380)={{r6, 0x0, 0x101, &(0x7f00000000c0)={@align=0x7, {0x99, 0x80, 0x1, 0xfffffffffffffffd}}, 0x0, 0x0, 0x0}, {[0x3, 0xb, 0xd3f, 0x77c]}, 0x7, 0x0, 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r8, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) 7m29.866504106s ago: executing program 6 (id=240): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @local}, 0xfffffffffffffe14) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x4000000000010001, 0x1000000000000004, 0x400, 0x7}, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x10000) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000402, 0x1000008, 0x401d031, r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x140000001, 0x4600) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x0, 0x3, "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", 0xc, 0x26, 0x4, 0xc, 0x2, 0x8, 0x1, 0x1}, r4}}, 0x120) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc1105511, &(0x7f0000000040)={0x5, 0x2, 0x8, 0xffffff7f, 'syz1\x00', 0x5}) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b45, 0x8000000000001) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r5, @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x20000011) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000240)={0xfffffffffffffefb, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r10, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r10, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r9, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r11, 0x0, 0x10001, 0x0, 0x40a, 0x2b7906, 0x10003}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r9, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r11, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x5}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000614010029bd7000ffdbdf250800", @ANYRES32=r7], 0x40}}, 0x0) sendfile(r0, r1, 0x0, 0x7ffff004) 7m28.884469626s ago: executing program 6 (id=245): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt(r1, 0x29, 0x32, 0x0, 0x2000) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = io_uring_setup(0x17ce, &(0x7f0000000140)={0x0, 0x52c0, 0x2, 0xfffffffe, 0x31d}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x10001, 0xc}, 0x8) shutdown(r4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000100)=0x1002000, 0x4) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80000) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f0000000200)={0x1, 0x100, 0x5, 0xfffff687, 0x6, 0x6}) ioctl$TIOCGPTPEER(r6, 0x5441, 0x8) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/231, 0xe7}], 0x1) 7m25.665310817s ago: executing program 6 (id=266): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000027c00000400c2800c00"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 7m25.548060004s ago: executing program 6 (id=268): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="73b0376279672865d3fc6ffd036689c5222f6f21bc1528b4a7bfc0d3258ef92c2a0abd85d6f5595b8358610a6b647179e495fa8aae97f386692d203c65d0d2fd5e3c2ad185551ad1418eb5ed7a3e862813b1d98b86ab281a36abe09b0bc6fcece0e8bf9fd5453caf6e7213baccbf235025d8a8918474f9141b8579", @ANYRESHEX=0x0, @ANYRESHEX, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x8824}, 0x4008884) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000224)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)="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", 0x129) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x41, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)={0x40, 0x41}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {0x7, 0x1}, 0x6, 0x42, &(0x7f0000000400)={0x0, 0x5, 0x0, 0x9, 0x400}, 0x8, 0xffffffc0, 0x9445, 0x0, 0x7, 0x80000000, &(0x7f0000000440)="d9e187c96863036b1c151c4e2f1358685e058109f3113a9398882c6ac913ce6e7fdadcf8e00d816bd9c71cbc3213b91f761a960649e66acefd399cfd7df44087245ef418e96ca771b550571c3f8d0a92de888b4475bd4c96a7"}) ptrace$setopts(0x4200, r4, 0x0, 0x1) ptrace$cont(0x18, r4, 0x0, 0xfffffffffffffffe) setpgid(r4, r4) ptrace$setregs(0x4212, r4, 0x58, &(0x7f0000000080)="01") 7m22.342823097s ago: executing program 6 (id=286): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x22, 0x0, 0x0, 0x7a, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a}, 0xe) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0) shutdown(r0, 0x1) 7m7.208943471s ago: executing program 34 (id=286): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x22, 0x0, 0x0, 0x7a, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a}, 0xe) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xa}], 0x40000f6, 0x102, 0x0) shutdown(r0, 0x1) 5m21.10738657s ago: executing program 2 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000c1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xd0}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000380)={0x4}) socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000340)=0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl(r5, 0x404c4701, &(0x7f0000000100)="0100000000000000010000000000000001000000000000000000000040000000400000000000000001") openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0, 0xbd) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x10000000002, 0x303143) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) 5m19.260452391s ago: executing program 2 (id=610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x4044050) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$getown(r1, 0x9) sendmsg$nl_generic(r2, &(0x7f00000024c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002480)={&(0x7f0000000240)={0x2204, 0x21, 0x200, 0x70bd2b, 0x25dfdbfb, {0xf}, [@nested={0xf4, 0xca, 0x0, 0x1, [@generic="488e1160417d0f85b7ea286cb1d4b6393d6cbeaadebeb70f59a962679885801ec2d06ba32521fe5383f44135c387498e40176c2285e2406216ff1335e6cbee5869f46db13eeb264c1b2855c9fbeb919d9b129c3f73195448108dea8043efc8c78202d63af3a2e3c948d1250d7f6b25c8f262e0eca009699cff1dd980d9191c0e65c4fba34187116bbcfbc376b5f88335de5f7848d58cb60f22d9cc847ec08d3f97be7d92dfe99494b3166a35bf46f3d857d8c98c3ae46b61c9216dacee3de222e3c748e93d95f7e4d906b4b1bc83d2c12cef5175479194ca3441b7a50b16638320ba8bb51ecd0dd4df6a1a75cbcf78b4"]}, @generic="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", @typed={0x1004, 0xc9, 0x0, 0x0, @binary="a4d490008ee68f194f0f6f6e45798e67f4e5d8b64acdeebba782a6da76261787dce7ff294365fe1d865e02ccc8705c97138c2c745e6355c95e71ddcd2f86855a69fdc0d40925184acaba3d114483f729969e63afe8b438e38a0434aa0d77b48f51af21ee229b56b019c38fb32532812233536e592fade3c15c0172cf73de88e102e86f41394b58d49f137621a63f9db1a0dcc0bbfacf33e7bca0a8c734921a49ad88955cce6c60970e4a1e4642baa3b940fae49ec16434fced33f32a39dcdcfad38ce8c7294f583742602c3c070d94d2301e46e7786d73e65d861deb692511f4903829df35fb9014f9cf0dd142c641973124b94335fbfe98d18eea6ee6ab0f9c1cc065908632f56eba38669b5c3090c75d0db42a6f754a20229a3bc9b6890ba03b6feceb302664c4baf4e6eeba83804ce0305032f7c35ef6aa2e9faaa5e90b372cefc09f25f45ee0281700801f68e010360152888b1e22f8d9b830bf6a33ea94c4123b6444317cd28b6a3469f182aad4d66e831b029bb0d0ac177c3adfce93a800bec27590cd61541af0df7d1d870775048d6af09c8e75289ed2a843cc93b7074d12c687042ca92b3b55777ef7653bb2dec6fbb4f0e1f1935bfc789a08c7a0cc9276675f9c2ee3ba7d75c6c1af83ddc2303b1aefd806fe18895e6a3b2afa2d3d052460ddcd87b914a8d9a6eca463fc5b1e6ab7aced2a77a98e3bbca754423f24a83c593a7758cb74a78bd9a25424f2ca99054762d568f9cd77d4c3a0c294ef6b34c420b2fca1f906827e7b9d3c4cfbb318b3cb22096f5190457309c48a38536a7dc981e5d8cca50da2d0ac8e1020b57f5ad58a8409dcd028a4b82ba8f6e4c985e5c601e06f1b38710848267539f89ade799dc8863132ec24553144aa8f090a86bcd598c78101b9372eafe444ab3c65a7352c3321d9e596bfc6f8bd0e04a2e27073c5617316b5d940e2dce4edc6c3bd4da5b0c2af3b3d1034306f0085f5acf48d62ffb51d4f46920a56ebb09dcc8ae9d42001d0970c7fef3fbcf04539a03764e0aaa07d543a30da9e2cff7f107ac7abce1ac6e05bac016f76b551a1da7ebfadaae4b3c686184dc185f3ac81ff61f7fc801e8ddb1a9fab54b8a79ab6137e311fc55782cd70b22d9f3c2ea310caad566720897aab981f7087578c9f6ae5c34d418beb4293001d99844a5f52454c8acbcf858e360cb7e0d765779b8d3e923920bdd240c06510b7ff4b8a600b5487d987ab269299f17056ba3b5a0c4312ddfe4598d54e6589f8ac96f7a6183b20fe2d1055ebb70c07908adff76365cd59892eb7739296f5cc581537c6bfd7c779dc77e4b31871c54ded9138aeb2f9139c4e20b157825fe01506e0b8109b9e64d8f2089f80cafce51bb8b900173f22d3268f6c6033e992e27660646ed40a2f9b6d62c1a7ad696d14901ae3b0597970d5434ba432cef8e1e04de587562caacb2dcf983fba728b70e068b6670ae01d826b478ac701c48ff686ec77498266d22e6e5c65965cf350017171a577b146289a98de3ac4db936c45ea587920d9843031328b0e49bfa95ff6a3ee802b954313861cf9998fcaef78c1e771840fab4b0c03753093b72bea56d787233b78b1cdc25e23ab161cc9f2e0eab34cee1250c0bdd987e14e2af9f9b18919889268fe273c1a2200aa37817ad3b438f1e05d30ec9a34125c6aaae336ce682079d534e6606b7703706fc1416998de73a6bd08c9aab6fb2088d547bb8fd11f27664739cddd65cde20e68fb12263c9f94ad9cb9733745ee0717d1ccd1076816c5035046fb2e9a02edaa7205a317202ece88a7cfbcf13c5555c20a0f628074a9a38f8922978a5d19ccb2c4453447d48b26feb8fdf915370932091415b1d6e590c61ef8f639c122c273a8fc9dfb3c9ef07ec6acd6514f73281aa9590270a9ad332545057a904f3a81d20d0acef6698d13bc2907ceec1a37bf071c5b908b4a0e059c0210306464f3a7b988afc5d6f141d9a5f8d66817edfc656eee586c83e97b5b964b6b5e9aa74c5d436ca49b6b85e4f31c1aa62ced48868f5f6e8b7507060909c1f0d2b7c2a7872773a5958a67b6768ece3131d57f70c076cc8a49f76d67fc32d0e4fc774424b6fa0dfd871ae090dd37a82013de3174f6a1ede13b7850fede49a724387bb1d79d13489046883f649d5ee21e19870cba06617bca2256b9bc89e57cbb1adf7e6eea4ff2a4e3bb67e4e055beaa7042323328c1f2beba64c5fe43baa6deb7b81439380a30c27574489b68c707268266cb43f1be30d66aa44a65aab38098a95d30cbc0486c654e8bd0688a8e800acd5ba73b1b67506b4dc44081da6e7b729012ae0a9ca30792e35d551b4095f2144b9296369261041f1f0bb927f3b34b4b6f87af40879544a8b33300f02f65b30f6c45e3cad87fe852b56444ca7b88e19d453b6f00cea389f9fe556580c7f07b45ff7e03cfabfc58075cc175be8efeb209aae2a242cee421e2a713e94d52af7ebef64c3702fd3edc5c278013911af7c03a8811056e8f19a19719bdf323b2173b878268674b0baf6fb23a2abf0dccbed8b852ffe7773209d1eb8b63c0519bfd8c39c4e48935690ad8c7eb9e4b380308bc06e43d2097000bd05ab9cd8a029ed86742982bef5a273f22018e477cb1b12dcb576c7d956545de68a2db0ebb6a93793b2868654e6d21150b7775b00c45122e1d0a2c65e50454e71915b0810c150c016c33708a27e613cfac1ba795333aab06b3ea0a8454b9f9050a01bd1b4857177279f821c1d62269a13e9dab23ddae2354abb889fc951d4baa8df320abced2dd37b1e96b3256a6c0d6c0e48989a0738664f38b7563e2f677648507cc33b3b69733f68871c2cf9ea73dd27a4f2afd64a8e8fbea1c90f3835f41aa80f89306f88537126667765a8cfdef882c0d21c3fc2d73070d3f4410ef737f54053da2e0369c9aef098dd270a8eefe941be2f8cabd846be189b00808403077085fe2cb2f2970ac28cfe416b11739eeec0cd30acb684c45fd9fbe49028c6e6fd0688aceab1a0f944be5df79389bc7c1a88bf994ca45500f345507e7d339bd13baef32dc94ec9ad0d88d4d5f980ec547a5d47976804fcfb3e024eb85c360f14392228ff0309b01b32d3551d5c8457729dc74a50780f20b980b2355528c976bd5078c297b8b673da45f78143037b0849c15dbb7602da84058aa42fb1a3df249c768a441dfa5e10878783e1e0b9a75587c84a413855aa66ae37e651021025733ebe685ae501a2cca5bf8672fff5bcc03489360e53d5d828166d458a2d676292f87e8868272a18aeda9b8068c4214bbeccb86b1c7b2606e344fa399eb30143e8c0fe13b2ecb461d6c0229d7d5e70a067e0cd430e0f65d4a2130e7b1e1e9844030da8505c9c62e7e7f87cd7f0826940e3cde220a924adc78d8e74d9ee4c7f16ba499ad33eebae66542dc48f83a911c3d4395daa58e7e1597f456d7bdcb6df6991995a15fa104781e2836f5784fdae0eba01345216a0ba2e2c9cd0a99b3e73b0e23e0ccb7826172136b46c07488a4bfadac764c7d3c35c19d955aaf8cddfa348c989eb2c65dc3763aaaad8b1bcd230050c2f6e21039741950e8bc6383c372c4937a627d42bf5cdd7119e4dba027e7446bf9728991a88bff3e8075148164c41da776903bb40cb3103bba32503f8af87d3600ef6b721023e528efe0342e6a6e388c2071d352e47a69f8a12ad8155cbbcfbc7c5e8a31652b30ee0668ed4668c96b6948288dccc3e6efe28133974e273c75822fb80792268cc35bf186950cc31815078d90e460ad73807812c8f1da71546fdf6a38b5902cb9776bd02366f90142d14cb54cf4bd71bda785441c26bbd37c84308705a175696d6cc56425d6b3c151674e5b707cd0ef1625b17615b2ea12ec8203d0cb6bc54c4ca6c323a09cc75b5cdd7cc067667f5ad1215b6e6ee8fceb7608fad33e722c3cdd1345ed8ad177a09083f1945419720069101b0315f2b5598bb83cbd56d7224a404fe80a240731f2b47eb04101ffb20d34f33ce3e0ed28b29c75a1438c6cf215395c519365744c59c7ebc7fe6994ac51b504eea1681f533904e39008a516e6d83f21d3db1f90e8375e1203a762e438818057fa4afecf1d46c3966eb1dc89720a21697049558b39249d65a509173f8a05c817b104aa8d214ed8d301d31442ab120de1b5c8b662dc0b8693fbee4c74e45c72d6e46efafb3be00b494f58897cd4b4cf08c8b62bcd07a558bdb50b0d0b6a3c97ebeb4c31a4ded95660a32d7e7b0f1acb8efe99c3b497b10457279d7dfe597f33b1e9a06c99d659779a21129b0cf4fd6f6816b1462bb369e20f2290759d1430b5fc3b7ce2022051817c2305d976847ea24bd9e80eaea59c959adb1d890e5983bc54bb2fca9890d5b2622b278e7e3be8ced28896926ccb22e7280d40f652c9b68b7306fe1f80416f5a18adbde079cd216a06ecab04ebe3c6fe985ef385e7d642b6b13ab7b7c0b7cf7bca0c7531f38cc380bfd8705f7f34e1636a0cffed9095251a5c23a399951631a2d46695748950adeaf1069139d8f78f8664f473a66626267b0582dfa0cbbe97da420f5a797dda0f8c60dc4c5b4063054b749178e55640bba3b189fb4d79f4431bdaec6d13a032f700f3dd72e13d67f6ef5ded3411de28829b44a1c68b9e25ec21e3c260530d2b13f79e820d06659a192ac44f6d06597eb1a5f5ac32d701ff30ee12972831eb06829c7a60605296c472b9cfd79481aa659aa454c2ef9bf9c1921f986aa6884f5ba62a80785bcb92f3ecb32f23928d0dd90c092941f77f8e58412be1fc4bb3228fa6cad06091d09621d2f34cad02d752793731850a019dba446f7e3b56b5caa73116919ebb5fbfe9b36c4e2b0c0d74e300c1b7bda2b95e8732d05705ae996be0a5ce816cf08917e5efdd1c69d2cf2921da05b1d9926eb18d12fc73176c99898d3f66484ee1a27088021daaddea723eb1ff5a6787abda1c7887279bba266e025860612414fbdf87869e92a9c0e404ad9da5fb0eb1f887ff028b40caf1310177bcf03563500c582967a9ab801dd20ed4376a9de9db0c7d084246a6627a1dd8eadb0d4dba6dacd800dfa757eda31da4339c279d6d88c6910430701ad25dfc550f90c53129a2ee85a332aac5ea4636e7a5e2ce8e581420e4f5a2eb6b87d441be9f810b497520db872333f73a514d7172e8c75244a2054c4393f0e8a24f175187785bd11c830b6e19b04357d9095958dfc4242bee6b4ccd85f74fbe65ce7a529a8cb0cbcf933f5434252aaa19f96445a4ec34963142886a100a59554af6c927b248f743450c9e85975a94531194d10bf1815fd0f5178306996228587ee7b6531b65cb75801a40f80a5a505aea91a8ba13fe977d7bbd48b795759db840660f56588efd4b90ec14423160f69212a4bf64d7689de36b3be630ac23e7ff84ee8f784b8bae47f7fdc62767be6c48921bf4f3032f2a96b0ff4369f951f523c232da103044669327904bfaa8ce6c276078c0920e3337126076cb697924c81ecca9aca689f5d0f5c62dda21264a90bb162fd64148181e33b03e2252b3892264e54de875a35def4aefbe02669fd95863a27226abd331def6757045fa091272d576727300e12f1fca566ee3a89918eb3c7295f10ce0a865bdd5f8d437d3c27d6bd6fbf6b0f8c77bdb6102a2193aa72b2c4896a3ccfe05c22e74cb16a022519e03d14cea87d599b2766294d3e2c5821594a6aaf4c3c7ff668d2c3dbcf956928c21b1f0404225f4a466ffe7aed1ce7a647bd5a938df7f7a6903fc6a7e83f3"}, @nested={0x31, 0x103, 0x0, 0x1, [@generic="88a1352604aa62d901b6fc8a09ae7fa9a043e04594e44c4162f65b8f8b", @typed={0x8, 0x94, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xcf}, @nested={0x4, 0x80}]}, @nested={0x7c, 0x4e, 0x0, 0x1, [@nested={0x4, 0x139}, @generic="ed1eebfa5392307a51886b8da940858cb77785946acf4a7236ff6f7cba64f60f1f175fcb9d3bbd38bfbca85ba6c3feae226a8ec79e3b0456c346d6b0ac61b3ae33f5d45c5a07bab8bd236c6899c019c07e664ee6ad2b8fce7b60e82a4459d6deb2803a305065a8780c2ba4ca", @nested={0x4, 0x10a}, @nested={0x4, 0x143}]}, @nested={0x40, 0x16, 0x0, 0x1, [@typed={0x14, 0xcd, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0xfb}, @nested={0x4, 0x5b}, @nested={0x4, 0x3b}, @typed={0xc, 0xfc, 0x0, 0x0, @u64=0x1000}, @nested={0x4, 0xf}, @nested={0x4, 0xc6}, @nested={0x4, 0x4b}, @nested={0x4, 0x4d}]}, @typed={0x8, 0x10, 0x0, 0x0, @pid=r3}]}, 0x2204}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 5m19.167026519s ago: executing program 2 (id=611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) 5m17.728179101s ago: executing program 2 (id=617): r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x105403, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r1, &(0x7f0000000180)='nullb1\x00', 0x1ff) unlinkat(r1, &(0x7f0000000680)='nullb1\x00', 0x200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000280)=0xb3b, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) write$UHID_INPUT2(r0, &(0x7f00000000c0)={0xc, {0xcc, "c2b58fb566ea2d7be74e6f19d9ace5feb3a1664cc5df5aa5e6f3046344fd3a3f648605dc7066a6dbc6dc57806b43543c971405a0560647cfa7d3a3c8149f6c5d517f39f0c2ec816962fad12a69eaebe93aa5efe73693775c2c2c91c4cd728da09e481b4741338e67c61103d32614c8945a6a3f326399dc3b1abff7118ac062f3d84aa91458ff4083b0d03d0dced2fd61dbf44876fb29c7c1b4cb55a3f6da48e2e8dbcfc360d1d4d2e4d41c6eafe291701d7346b75ea39b7d556930c947fe018093d0c8d6392e65e260322f80"}}, 0xd2) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000001c0)={0x90000000}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000003c0)={0x6, "ce2c86f346ae24edcba08b81a5779ccb8ab3ba0606a8c8a6de33f735956ad575", 0xffffffffffffffff}) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendfile(r6, r7, &(0x7f0000000440)=0xb31, 0x6) syz_emit_ethernet(0x3e, &(0x7f0000000740)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x1, 0x39, 0x9, 0x66, 0x1e, 0x6, 0x89, 0x1, @remote, @broadcast}}}}}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x218c236ece0d9bb2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xd19}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xad}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x3c75}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x20044000) 5m16.197993456s ago: executing program 2 (id=624): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x101c40) 5m15.944983196s ago: executing program 2 (id=627): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {0x3}, 0x6, 0x21, &(0x7f0000000300)={0x0, 0x15, 0x8, 0x80, 0x6}, 0x8, 0x6, 0x4, 0x0, 0xf, 0xd, &(0x7f0000000340)="d96486f7208e13e197ed188f7a30e3967962d1df54a1082d2721e01256bde8924abc74e89ba681cd0e14e321eb1b3b6a84474a9fa78be9609b78a9096162b46446335c28649b8c6e7a4cbc543bda2cbf356eaf4e2691b6ba59819bb823f47931225254cdd6f930fa0df58d02d2feedf9d9205d2609be12a9268817d20c45"}) r1 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents64(r4, &(0x7f0000000000)=""/90, 0x5a) exit(0x1ff) getdents(r4, &(0x7f0000000100)=""/67, 0x43) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x2) fchdir(r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="00020000dbc5f66299d4f79940108daf267ff5602b025596f8e835aa80b2b1f63a2c5eddcab5c302344926fbeae176d63578737abcd1e585242a6c118e3919d6e4797889ca71c2afce149701802ee7efc19c9291bb8d22a3661cdc592e291e4c770d6181ddcc577752c9141eeec378d140e2e8137923fc41f5549867dca06d3f5fabb581f370b571c0b3e179ddd5e39e0094eee4650bf9adfe6a", @ANYRES16=r6, @ANYBLOB="000126bd7000fcdbdf254f00000034007a8014000200b4536cb2d42f80399eb2b54aa622582c14000200bf1ff0e4fc15e6f2b391fbd1804f85c10800040009000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x48008) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040), 0x4) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000001c0)={0xfffffffd, "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"}) 5m15.61903393s ago: executing program 4 (id=629): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x803, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x7, 0x17}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_emit_ethernet(0x4f, &(0x7f0000000600)=ANY=[], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0002fdff00000000fbc8aece0000000000000000000000000000000000000000d10ff5a16d0b3d1297312c5cd19e7cc8e904288940ff94d71ffa9390ea00"/73], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xe, &(0x7f00000006c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x63}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m14.765979593s ago: executing program 4 (id=633): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x4, 0x2) 5m13.407347946s ago: executing program 4 (id=635): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b) ioctl$KVM_GET_DEVICE_ATTR_vm(r1, 0xc004ae0a, &(0x7f0000000000)=@attr_other={0x0, 0x0, 0x6, &(0x7f0000000040)=0x6}) 5m12.541242937s ago: executing program 4 (id=637): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000540)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000002380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0, 0x700}]) 5m12.355433889s ago: executing program 4 (id=638): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x101c40) 5m12.083140314s ago: executing program 4 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x43}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x600000c, 0x14032, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e3", @ANYBLOB="8b75"], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0xc0c0583b, 0x0) 5m12.03918916s ago: executing program 35 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x43}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x600000c, 0x14032, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e3", @ANYBLOB="8b75"], 0x0) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0xc0c0583b, 0x0) 5m0.15687337s ago: executing program 36 (id=627): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {0x3}, 0x6, 0x21, &(0x7f0000000300)={0x0, 0x15, 0x8, 0x80, 0x6}, 0x8, 0x6, 0x4, 0x0, 0xf, 0xd, &(0x7f0000000340)="d96486f7208e13e197ed188f7a30e3967962d1df54a1082d2721e01256bde8924abc74e89ba681cd0e14e321eb1b3b6a84474a9fa78be9609b78a9096162b46446335c28649b8c6e7a4cbc543bda2cbf356eaf4e2691b6ba59819bb823f47931225254cdd6f930fa0df58d02d2feedf9d9205d2609be12a9268817d20c45"}) r1 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents64(r4, &(0x7f0000000000)=""/90, 0x5a) exit(0x1ff) getdents(r4, &(0x7f0000000100)=""/67, 0x43) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x2) fchdir(r5) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="00020000dbc5f66299d4f79940108daf267ff5602b025596f8e835aa80b2b1f63a2c5eddcab5c302344926fbeae176d63578737abcd1e585242a6c118e3919d6e4797889ca71c2afce149701802ee7efc19c9291bb8d22a3661cdc592e291e4c770d6181ddcc577752c9141eeec378d140e2e8137923fc41f5549867dca06d3f5fabb581f370b571c0b3e179ddd5e39e0094eee4650bf9adfe6a", @ANYRES16=r6, @ANYBLOB="000126bd7000fcdbdf254f00000034007a8014000200b4536cb2d42f80399eb2b54aa622582c14000200bf1ff0e4fc15e6f2b391fbd1804f85c10800040009000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x48008) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040), 0x4) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000001c0)={0xfffffffd, "e88bb9a4c351c740955ac05878fba3edff86c6986464346c455455c0dbbe48009cd10b4e8ed52d7df272b3b7cd95977b7121fa80267204e9a4ba62bf744a0944b1844acb4030af186654d915af6de28ef752722ad1c1a0f68ef204235aaff1b4d4a126ac8d8b5bf1b144c56170596e544ea784a906870d709a2487e59ba7bc9f9495c76ec71a3443528e130e7264edb7703fa51cc2155d6c43da480d9867f946400e25ab42edb4c3331c0989e06e0d96392e377d6ec90a0c453a3009e13e27962de4b4626104ac9eef63b7887f7e0310039d33e48ed658b630a7d5d17557b2b398d770206cb2ae544f0b15e2a74578ae280f8b6e1d563188136bf1671395fc49"}) 2m44.886300976s ago: executing program 1 (id=1194): mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183) listxattr(&(0x7f0000000040)='proc_dir/scsi/scsi/file0\x00', &(0x7f0000000080)=""/145, 0x91) write(r0, &(0x7f0000000700), 0x0) mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x42, 0x183) (async) listxattr(&(0x7f0000000040)='proc_dir/scsi/scsi/file0\x00', &(0x7f0000000080)=""/145, 0x91) (async) write(r0, &(0x7f0000000700), 0x0) (async) 2m44.746006801s ago: executing program 1 (id=1195): syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x30, 0x0, 0x0, 0x40, 0x1, 0x0, @private=0xa010103, @broadcast}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x1, 0x0, {0x5, 0x4, 0x2, 0x4, 0x5ae, 0x68, 0x0, 0x3, 0x89, 0x0, @multicast2, @rand_addr=0x64010102}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 2m44.555240977s ago: executing program 1 (id=1197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRES8=r0], 0x60}, 0x1, 0x0, 0x0, 0x24008000}, 0xe6050) 2m44.401621579s ago: executing program 1 (id=1198): prctl$PR_MCE_KILL(0x29, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) listen(0xffffffffffffffff, 0xfffffffa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2, 0x0, 0x0}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x1a6) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r3}) read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/189, 0xbd) 2m43.952812588s ago: executing program 1 (id=1200): r0 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0xe51d, 0x10000, 0x2, 0xf6}, &(0x7f00000007c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)=0x0) r3 = mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r6, 0x5}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r6, r5}}, 0x18) r7 = getpgid(0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0xd2d01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_debug\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000080)='./sys_debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x16, 0x7, 0x0, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x8804) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_debug/kvm/mmu_shadow_zapped\x00', 0x2, 0x0) write(r10, &(0x7f0000000140)='1\n\x00', 0x2) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000300)={'aio_iiro_16\x00', [0x8, 0xc2a, 0x5, 0x0, 0x0, 0x9, 0x0, 0x4, 0x1ff, 0x8, 0x9, 0x555, 0x0, 0x2, 0x401, 0x4, 0x1, 0x4, 0xfc7d, 0x6, 0x101, 0x0, 0x0, 0xc0000, 0x8564, 0xffffffff, 0x9, 0x0, 0x7, 0x9, 0x10000, 0x3]}) r11 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r7, r11, 0x32b19a22e1f36369, 0xffffffffffffffff, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0x1, 0x8000000, 0x3, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x69, 0x6, 0x1, 0xd817}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x74}}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r3, r2, &(0x7f00000003c0)={0x2e, 0x66, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x1, 0x860, 0x0, 0x0, 0x1000, 0x5, r7, 0x0, 0xfc}}}, &(0x7f0000000440)=0x0) r14 = openat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x80000, 0x18c) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r13, &(0x7f0000000480)={0x0, 0x82d8, 0x40000, 0x0, 0x237, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ad5, 0x800, 0x0, 0x1e5, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ad4, 0x80000, 0x2, 0x201, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x718b, 0x8000, 0x1, 0x104, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa394, 0x80000, 0x1, 0x19c}}], 0x4, &(0x7f00000020c0)={0x2e, 0x4, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xc}, 0x0, r15, '\x00', {0x3, 0x1ac, 0x0, &(0x7f00000010c0)=@buf_512="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"}}, &(0x7f0000002140)) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bddc424c226af5160e8b145c87bd150778b78411e88509de050000000000f2170e65e3f50327e4220000000000005b0700000200000000001900", 0x3c}, 0x60) getsockopt$nfc_llcp(r4, 0x118, 0x2, &(0x7f00000000c0)=""/222, 0xde) 2m43.736534503s ago: executing program 1 (id=1202): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305fcfffffffedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="11110200719400001c0012800b0001006d616373656300000c000280050003000f00000008000c"], 0x44}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/ramdisk_0\x00', 0x1fb) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) fsopen(0x0, 0x1) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) unlinkat(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) pipe2$watch_queue(&(0x7f0000001180), 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xe2) keyctl$chown(0x4, r5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2m28.591404253s ago: executing program 37 (id=1202): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305fcfffffffedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="11110200719400001c0012800b0001006d616373656300000c000280050003000f00000008000c"], 0x44}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/ramdisk_0\x00', 0x1fb) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) fsopen(0x0, 0x1) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) unlinkat(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) pipe2$watch_queue(&(0x7f0000001180), 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xe2) keyctl$chown(0x4, r5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 53.741945018s ago: executing program 3 (id=1531): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="d8000000190081054e81f782db4cb9040220080000000000000000070a0000000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400028f035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba610000000000000000df639500bfeb789d00000000000000d5e1cace81ed6c0500b5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0500000000000000000228001000000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, 0x0}) fcntl$lock(r1, 0x5, &(0x7f00000001c0)={0x0, 0x2, 0xd, 0x5, r4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000004c40)={0x1, 0x0, [{0xffffffff, 0x0, 0x0}]}) r10 = socket(0x1, 0x5, 0x0) close(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) recvmmsg(r11, &(0x7f0000000d00)=[{{}, 0x1}], 0x1, 0x10102, 0x0) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r10, &(0x7f0000000500)={0x6000000d}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x7, 0x0, 0x100}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) write(r5, &(0x7f0000000400)="00008847", 0x4) 51.262725709s ago: executing program 3 (id=1540): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x880) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x4, 0x5, 0xfbfffffd, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10006, 0xa}) 48.82924924s ago: executing program 3 (id=1544): getpid() socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$video(&(0x7f0000000080), 0x10000007, 0x2000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) syz_emit_ethernet(0x7e, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c, 0x3, 0x4, 0x7f}, {0x6, 0xff, 0x2, 0xfffffff3}]}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x6b, 0x0, 0x8, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], 0xfffffffc}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r6, 0xb}) 44.862538226s ago: executing program 3 (id=1554): r0 = socket$inet(0x2, 0x1, 0x9) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f51c93", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x2c, 0x0, 0x0, @private1, @loopback, [@hopopts={0x6}], "ba6d395246bf356c"}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r1, &(0x7f0000000300), &(0x7f0000000500)=""/148}, 0x20) mremap(&(0x7f00006fe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000e27000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000006c0)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000001a6a2b56fc1b00ae80000000000000010000500000000002000000000000000"], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) llistxattr(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 43.114743455s ago: executing program 3 (id=1557): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = fanotify_init(0x1a, 0x800) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) syz_usb_connect$uac1(0x3, 0x8f, &(0x7f0000000500)=ANY=[@ANYBLOB="12015002000000403512158240000102030109027d00030106a0220904000000010100000a2401f7ff1100020102c2b7f4aac8934c69c9cc072407020000070904010000010200000904010101010200000905010960083403040725010c7f08000904020000010200000904020101010200000f240202b1003a0902831399fc5c940724010c0800000905820920000f010207250100070500"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x641, 0x1028, r1, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xa02, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="4c00000011000f14001300020000020002000000200000", 0x17) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f090fc7b00000f2d2310fc7b19fcc0f01c90fc718660f74f367260f23970f09baf80c66b8d99d778466efbafc0cec", 0x2f}], 0x1, 0x51, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r7, &(0x7f0000000180), 0x1000) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) setxattr$incfs_id(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 40.302298192s ago: executing program 3 (id=1565): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) connect$pppoe(r2, &(0x7f0000000200)={0x18, 0x0, {0x3, @broadcast, 'bond_slave_0\x00'}}, 0x1e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x15c, &(0x7f0000000140)='bridge_slave_1\x00', 0xfffffffffffffffc, 0xe, 0xde}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x23d1) socket(0x28, 0x801, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000fdffffff5f00000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737972310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a400000000e0a050000000000000000000a0000050900010073797a3100000000140003800c0000800800034000000002040000800900020073797a3100000000140000001100010200000000000000000500000a"], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) 24.857786645s ago: executing program 38 (id=1565): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) connect$pppoe(r2, &(0x7f0000000200)={0x18, 0x0, {0x3, @broadcast, 'bond_slave_0\x00'}}, 0x1e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x15c, &(0x7f0000000140)='bridge_slave_1\x00', 0xfffffffffffffffc, 0xe, 0xde}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x23d1) socket(0x28, 0x801, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000fdffffff5f00000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737972310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a400000000e0a050000000000000000000a0000050900010073797a3100000000140003800c0000800800034000000002040000800900020073797a3100000000140000001100010200000000000000000500000a"], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) 22.325452386s ago: executing program 8 (id=1604): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x33c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0xffe5, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x4, 0x1, 0x2, 0xfffffffa, 0x5, 0x7}}, {0x12, 0x2, [0x9, 0xffff, 0x4, 0xffff, 0x6, 0xe, 0xd]}}, {{0x1c, 0x1, {0x10, 0xe6, 0x9, 0x5, 0x0, 0x7, 0x0, 0x1}}, {0x6, 0x2, [0x80]}}, {{0x1c, 0x1, {0x7, 0x2, 0xb, 0x6, 0x2, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x8, 0xc6, 0x9, 0x7, 0x0, 0xfffff0df, 0x8, 0x2}}, {0x8, 0x2, [0x2, 0x4]}}, {{0x1c, 0x1, {0x2, 0x2, 0x2, 0xe02, 0x0, 0x2, 0x74, 0x4}}, {0xc, 0x2, [0x2, 0x7f, 0x3, 0xfffa]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x66, 0x8, 0xb6, 0x3, 0x2, 0x2, 0x5, 0x7}}, {0x12, 0x2, [0xd, 0x8, 0x5, 0x3, 0x0, 0x8, 0x0]}}, {{0x1c, 0x1, {0xf, 0xc9, 0x7, 0x3ff, 0x2, 0x14, 0x2, 0x6}}, {0x10, 0x2, [0x100, 0xa, 0xa7, 0x26, 0x100, 0x6]}}, {{0x1c, 0x1, {0x81, 0x22, 0xfe01, 0x8, 0x2, 0x1, 0xa, 0x9}}, {0x16, 0x2, [0x7, 0x5, 0xd595, 0xecb9, 0xe, 0x10, 0xb, 0x3, 0x4cdf]}}, {{0x1c, 0x1, {0x5, 0x5, 0x1, 0x6, 0x0, 0x9, 0x9, 0x4}}, {0xc, 0x2, [0xb, 0x2, 0x3ff, 0x8000]}}, {{0x1c, 0x1, {0x1, 0x3, 0x3, 0x4, 0x0, 0x1, 0x7f, 0x5}}, {0xe, 0x2, [0x3, 0x8, 0x7, 0x6, 0x9]}}, {{0x1c, 0x1, {0x9, 0x9, 0x401, 0x3, 0x3, 0x582, 0x10001, 0x9}}, {0x16, 0x2, [0xdae, 0x7, 0x9, 0x800, 0x4, 0xd2e1, 0x7, 0x1, 0xe]}}, {{0x1c, 0x1, {0x9, 0x5, 0x2, 0xb, 0x1, 0x4, 0xac, 0x5}}, {0xe, 0x2, [0x5, 0x1, 0xf209, 0x1, 0x400]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0xf}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xa}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x4, 0x1, 0x5, 0x0, 0x9, 0x7, 0x7}}, {0x12, 0x2, [0x401, 0x2, 0x8, 0x100, 0x7cf7, 0x9, 0x81]}}, {{0x1c, 0x1, {0x7e, 0xc7, 0x6, 0xcd17, 0x1, 0x1ff, 0x1ff, 0x4}}, {0xc, 0x2, [0xfffa, 0x8452, 0x1, 0x2629]}}]}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x90, 0x5f2, 0x7, 0x0, 0x0, 0x8, 0x5}}, {0xe, 0x2, [0x0, 0x3, 0x3, 0x6, 0x8000]}}, {{0x1c, 0x1, {0x9, 0x79, 0x200, 0xfa0b, 0x0, 0x364f, 0x7, 0x5}}, {0xe, 0x2, [0x31, 0x3, 0x269, 0x1, 0x4]}}, {{0x1c, 0x1, {0x0, 0x49, 0x9, 0x8000, 0x2, 0xffff, 0x9e87, 0x2}}, {0x8, 0x2, [0x0, 0xe]}}]}, @TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x33c}}, 0x2004cc40) syz_usb_connect$midi(0x5, 0x60, &(0x7f0000000300)=ANY=[@ANYBLOB="120100020000001099044b4740000102030109024e0001010980e80904000003ffff0000072401ac00070009050c03"], 0x0) 20.103062386s ago: executing program 7 (id=1609): socket(0x18, 0x6, 0x81046) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x18, 0x3a, 0xff, @loopback, @private2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) personality(0x87bf5ac905ea0f7f) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x20, 0x2, 0x3, 0x5, 0x0, 0x0, {0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004094}, 0x40400d4) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) 16.476949416s ago: executing program 8 (id=1611): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000260007c17b6ee418", @ANYRES32, @ANYBLOB="000000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1}, 0x94) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000300)={0x0, 0x400, 0x4a, &(0x7f0000000180)=""/74}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = semget$private(0x0, 0x4000, 0x0) semctl$SETVAL(r1, 0xff7f0000, 0x10, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000020000008000000000240e9715c4eb0829782e3fe1863f6fbc5dafdc94b7d68f3300984be7ee4f3aee9b792344ccd87e58ec703ca191f43cf061fc3a2c93c66d22f469bc9f4243884d579627a67af053a517659ecef42e00675fe9", @ANYRES32, @ANYBLOB="d40f0000b6", @ANYRES64=r2], 0x50) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0x200000c3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) openat$audio(0xffffff9c, &(0x7f00000003c0), 0xa4081, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000240)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x29, 0x0, &(0x7f00000004c0)="f6f4e9a1d78a89e1a88750d62ceef1884386dd78bb3fb7dbfc4b6d9443afdae824320434cf775a52b9", 0x0, 0x2, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./cifs\x00', 0x1af) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) clock_adjtime(0x0, &(0x7f00000000c0)={0x8001, 0x9, 0xffff, 0xffffffffffffffff, 0x8000000000000001, 0x7f, 0x2, 0x9be7, 0x8, 0x1, 0x9, 0xc, 0x47, 0xf, 0x78, 0xfffffffffffffffb, 0x7, 0x6, 0x1, 0x10000, 0x81, 0x0, 0xffffffffffffff37, 0xc, 0xffffffffffffffff, 0x2}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @local}], 0x3c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 15.922260763s ago: executing program 7 (id=1614): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x3f, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) 12.874728391s ago: executing program 7 (id=1619): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xb76, 0xa, [0x5, 0x7fff, 0x1, 0x5, 0x106, 0x9, 0xd8ab, 0x4, 0x7, 0x8000]}, &(0x7f0000000140)=0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r1, 0xffff, 0xee, "03e39fb5cf0bcf04000000080000004c92a6d0c4e37fc0a7257f9f2ebb3a0cd2246e7b3673bb874865e59f99a26ed420c3119309bfe075b308cf076466d45fddcd24d6d059f6a4b2bfa3618fe224bc5336b7fe7b7f4b632711a02df1d9be997af8800287b70fa50a9dbc38465b664090833cf5126bdfa6574f196bb11a5d20736b0dbea897cde3fcdf94d449289e58bdd0b7de30ac99e9401ad4f39b976b4e9c267921fbacf0403a9055e863a1eebda8e24104ad9ebae7f7cf03c097661b08cc375ac7b0d8c61aad8446a8dc271ff28275804ecc76e432bcfee3e7f2c6b4129070c74333e9607c2f3d4050518395"}, 0xf6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) madvise(&(0x7f0000e9c000/0x2000)=nil, 0x2000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x400000b5}]}) write$bt_hci(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000ffff3201123936954394c21de7d51aef848c9958316f2a6fc75628ed0d43e2ba039cae24a0efc2394f40e07adc621710c6bfbd8d563d408c0b039bfa8358103aee45bdc4808d548572b45372998591d4de0fa63956650fdd3ebfba278bae0c4f82cfa427c5dc9f"], 0x138) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000002880)=""/4088, 0xff8}], 0x10000329, 0x15f, 0xfffffffd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r8], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) ioctl$CEC_ADAP_G_LOG_ADDRS(r6, 0x805c6103, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, 0x0) socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) 12.829715062s ago: executing program 8 (id=1620): setns(0xc9, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x1000}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) connect$unix(r3, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x10040900) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r4, 0x0, 0xf2, 0x40000120, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44849}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='!=mmon_pid > \"\"', 0xf) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xf8, 0x0, &(0x7f0000000080)="259a53f271a76d2688a24c6588a8384e6356f36724bdbb43e5949b52ed5b2445c0979ada3f66c23cc88557bd525b333f145276f389a26e6926e49577b0fbda0d7c8f32cd56c2518219a2ddd723781bb2cf3c62195b36d05fe6b2af3ccd62d2e4baceca21f6037f3459aeb9790773e20ac5c06b4a322e8d2e179830f4600d3514e0d8ad2dec5ec45a5e5d295eaec39d3dc648762af15881468e983a08858cb4e65dd1aeaf48c720d168377ab5f7bea61a55ea18cf852a728deac97865742e76828ce52c790353c9858af08fbb3b2c8b71935f16a97e18f1ce468ed21567f2e53720b8a6ff533cf43195440708822bb5366e2c516502497c43", 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x50) 12.767962525s ago: executing program 9 (id=1621): prctl$PR_MCE_KILL(0x29, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) listen(0xffffffffffffffff, 0xfffffffa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2, 0x0, 0x0}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x1a6) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r3}) read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/189, 0xbd) 12.426995246s ago: executing program 0 (id=1622): syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x8900, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x40, 0x0) syz_emit_ethernet(0xa, 0x0, &(0x7f00000001c0)={0x10004, 0x1, [0xb8f, 0x4a7, 0xb55, 0xcd3]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000400"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 11.575093698s ago: executing program 8 (id=1623): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)={0x29c, r1, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0x277, 0x1, 'C\xec\xf8\xa0w\x15|:\xac\r\xab\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x95K]\xce,\xd1\xeb\x17]\xd5\xd0\xa7D!_\xa9$\x94\x02\v\x10od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*s6\xec\x06\xc7\x1dO\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xdak\x1a\x13\xe9\tc\x85\xb4\xcb\x815\x87\xd5\x97C\x1cM\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd2\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\xb4\v[\xdc@5\xbe\x9f\xccz\x81\x1f\xb4A|\x1a2p\xd1\x95\xb0i\"g\xd1\xf7t\xa4\xb3\x94\xe9\x01\xce\x82`\x17n\f\x05\xaa:\x03\x8cJs\x92\x81\xb0\\\xa5\xc7eB\xa5\a\xb6\x814\x05\xd1$3\x15/\xfcwNV\xeaif\xeb\x0f6\x94{5Se\xe9o\x86\a!\xf0\x9b\x80\x95\x84\xa6E\x90\xc9 \t \x04\xb1\xe7\xec\xf4\xe6 \x91\xfa\xd01<\xbcc\xd1\xac?V\xe2b3\xdelP[I\xae\x18Z\xa6K\xf2~\x19\x0f\xe7\x90\xb0\x84M)\x8e\x1av\xc2\a\xb4{\xb1(\b\xb5uh\x12k\xe2R?\x8boI\t\x87\xab\x80{\x8a\x1e\x85\xd6\x8c8vx\xeeTF\x1f&\x1fmaCc;Q\x9e\xd2\x9e\xcb\xa4\xb5M\xb1I\xfe%ukl\x18\xf7\xa5`\xaa\xed\xd7\xb1\xbf\xa0S?8\xb3Z\xb3\x1c\xb7FI7\xac\xdb\xa8\x1aF\xe5\x99\xc1\xa8\x9d\x84\x80]\x96\x0f\x0e\xd3\x00\xc91\xf1\x99\x02\xce\x01\x00\x00\x00\x00\x00\x00\x00;\xc5\b\x95\x1e\xff\xfc\xc8\x8e\x82\xb1\x8b_E\xc1\xb9AVN\v\xdf\xc1\x7f\x8f\xe9\xac\xab/\x85\xb3\xe8\xde\r\x04\xe7`\xb2\x1a\xcb;\xd8)\xac\x96\x1b\xd6K\x94z\xf7\xb8l0e\xed\x7f\xbb]\xdb\x1e\xff\xe8\xe8\x03V\x0e/\xc5K\x1e\x99\x9d\x11\xfe\x85c\x8a\x98|}\v\xb6\xaak\xc9p\xa0j\xe5!\r3\xd3I|\x1e]\xc8\xc4x\x92\xf3UE\xbcr\xbe\x0fI\xcfj\xdeB\x90\xa1\xe2Q\fD\xda_p\x87\x1b\xcd\x04\x94\xd67\xbe\xa2\xcaW\x12c{RzZ\x06\xf9\x95Pj\x06\x04\xbdz\x89o\x83N\x1ez\x10\xda\xdeK\xbaf\xcbDq\x97'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x2a6}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x16, 0x7, 0x0, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x8804) 10.676460054s ago: executing program 9 (id=1624): io_setup(0x1000, &(0x7f0000001d00)=0x0) io_submit(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x30000000, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 10.150542407s ago: executing program 7 (id=1625): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r0, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, 0xb3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x94, r3, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x66, 0xe, {{{}, {}, @device_b, @device_b, @from_mac=@broadcast}, 0x40, @random=0x4, 0x562, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @val={0x2d, 0x1a, {0x800, 0x1, 0x4, 0x0, {0x6, 0xbaa, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x3, 0x2}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0xf0, 0x8}}, @val={0x76, 0x6, {0xff, 0x5, 0x24, 0x6fb9}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}}, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x20, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0x3, 0x8, 0x4, 0x100}, @generic={0x6, 0x8, 0x9, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x68}, 0x94) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.683389013s ago: executing program 8 (id=1626): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001100), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) 9.349355353s ago: executing program 0 (id=1627): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) listen(0xffffffffffffffff, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000400), &(0x7f0000000200), 0x400) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) close_range(r2, r3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x2000, 0x4048011}, 0x8050) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 7.894945802s ago: executing program 9 (id=1628): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200001304000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000a000000000f6ff00000000"], 0x50) 7.793030315s ago: executing program 0 (id=1629): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005"], 0xd0}}, 0x571f68543cec8180) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xc83, @loopback, 0xa}], 0x1c) 3.82265303s ago: executing program 9 (id=1630): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async, rerun: 64) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (rerun: 32) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r1, @ANYRES8=r0, @ANYRES64=r1, @ANYRESOCT=r1], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x1b, &(0x7f0000000940)=ANY=[@ANYBLOB="184a0000ffffffff000000000000000085000000c400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000000480f206000000008498fcff0400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500002086000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="12000000000000000000000023a46000"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4, r4}, 0x0, &(0x7f0000000640)=r3}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="00000000000b0000b703000000000000850000000c000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'veth1\x00', &(0x7f0000000240)=@ethtool_gstrings={0x38}}) r9 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r9, 0x4008b100, &(0x7f00000003c0)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'team_slave_0\x00'}}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000108000000000000000000008000", @ANYRES32=0x0, @ANYBLOB="00000000000000000800040044000000"], 0x28}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0xa, 0x2, 0x7, 0x2, 0x0, 0x8, 0x2}, 0x9c) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000340)={r5, &(0x7f0000000400)='/dev/snd/midiC#D#\x00\xeb\x80trX\xffK\xa3\x94\xc5o\xc1/\xc7\xbd$\x87\xe0\x0f\xf1\x91\t\n6\xd2rW\fF\xfa#\x9e VuE\xe2gZ\xcdU\x02z\xdaY\xc5%\xa5\xe1\x98\xddEx\xcc\xca\xb4\xfa\xe4\x95u\xf1\xd5\xb4\xb4\x8b\x8f\xaf0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1cee0600", @ANYRES16=r12, @ANYBLOB="09002cbd7000fddbdf254f00000008000300", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) 2.01549885s ago: executing program 7 (id=1631): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abbbe3e34704", 0x0, 0x8, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.975627848s ago: executing program 8 (id=1632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = dup3(r2, r3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x3a}]}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\"']) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000001dc0)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0xa, 0x1, 0xc000, 0x4, r10, r11, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x4, 0x0, 0x7fffffff, 0xfffffffd, 0x6, {0x2, 0x8000000000000000, 0x8, 0x100000000000, 0x2000000000000db4, 0x85, 0x8, 0x6, 0x200c, 0xa000, 0xe44, r10, r11, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpid() sched_setscheduler(r12, 0x1, &(0x7f0000000200)=0x6) lstat(&(0x7f0000000ec0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = landlock_create_ruleset(&(0x7f0000000f80)={0x11002, 0xa42c0126d3592b93, 0x1, 0x20, 0x8, 0x2}, 0x30, 0x3) sendmmsg$unix(r3, &(0x7f0000001880)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000340)="22946105ee0608606063371a2cf51cf9821666fe10a91888d9634d3f306bb7003caba231a1f60f4dc3dd9862953c9c6a6edfc178b87a24708f136c0a5a88f493514d068ac31b4bb463819f41088b3437f4215ea6ecc1192f2c1d3b6b1ad8aa1f3d0fb9c3ca59fb7a0bd4f7741199fe4de3d5919416607c6ec90825b965aeaf11656641a614abfe16bba94582f8365d5d0237ce7063f6d16bfec64b23bdb34713fd0d65826873c62ce2fef80e08c32c482a4aa0024301887ae230", 0xba}, {&(0x7f0000000440)="efaded074cb21e2f5465063d13d0f0b7e72aacf922614eb2a884a5c4b68e2e93712f216b2dd124dc420599c202bc5d0a5354a47e009ba3963ab8fd28f39b5c516efce21430d2fcdc8be90b3ee58780e06e125d1e73ec6f0c585e244ccb65bc52138f5213250ebed651", 0x69}, {&(0x7f00000004c0)="1648da6e5b25045513a88ecbf54f1e26d5b721b2fb560f7fcd5b3e564749901005dfd2d5f24d54fc754728abbe4f47fcee207d19827aa511c4eeba53382505a9f6dbc88a04848458ccb7b97a", 0x4c}, {&(0x7f0000000540)="cd3aca2690fef09e6bf7e700879f735138f93de0df78bbfbc6615f90d476bbc3975d58e15021f41be8d372983def40f20a7e3b84045709dcb4b5c3898a237461c84c88d92c915749c60cee7fb94398cf4000b4269347bb7adf392c2ff4ad41831776f6da24bfe9d8996702ba8e744ee397fec052061df1c2673c9a89b0205de89da842339bf62d6f3c032a4feef87536ef87ff10e585324305db725bfc71869ebbd34c1fb8b9e3c3", 0xa8}], 0x4, &(0x7f0000001e40)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x48}}, {{&(0x7f0000000700)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000780)="70e85e7b362fb31eafab34094c72367cfdbc77c2ff636cc1ff68f7350c344204c030fafd59af890df985669c60622d685e7d2d6fa07aab0f0365a5049768d40c0c48cdeb23ab202a1f45369f606d8459e93d477a5f5a571e6d0f46ea555caf7646ec6e788ee2859d7f35bfc19a732bde3b1f58a105df35b262d765ba1ad4435921e120e041dbf2c4fc2c5cf9ef11821cec0f68d866b060df4ca9e2217e054e31eecfcdbf02fd774d3fe696b7", 0xac}, {&(0x7f00000008c0)="3f58b9dd066d5077735867784269ff9273398fb8faa1b06178c4b18bc30407e366dde6f300e8f14d1f7018e964f6f6a587f55d9492140010f95cbbdaf1acdc777d77f6ed97540525029519e3ec5629a5ae5bf3f06f8bae5a250baddb55089d5a56cbe4d5cd878e8dd76b7b10f05b5f01889023ca369951402f0d15b1d1a4675a465ad3d889c94efea834cf3c874f5bb83ce72cd86bc6e7c33c20094478da8ab62908828ff596e1fa67270e65b3b8e3e82a6aad2c01cd97805dc863eb0e755ae034ce12a427f24e", 0xc7}, {&(0x7f00000009c0)="baffe5529863c94a32065828a45387eb5b14459a938f3e1f8240b0b5b796b65b5a853e4910059e05c082001655f152e9cbe46726d60e2be6a49357492671d8158b6e6fe4db4e110565a85cbfb1e847b3581b9ed5b0ba0d5373bce7ee4ff1e58f3ba866e8c3f1bb0044e8ae", 0x6b}, {&(0x7f0000000a40)="31b76ed93b6b13e768ef32f71e43355df89705fd0e8da309e7b97a203c864d7a5cf21c18f3d1db5be8b437654c6bfd35f9e0dffafb0dc1801ee87c191e9602", 0x3f}, {&(0x7f0000000a80)="a1dd9566c0e9314afd5c8740f9ebfa4ea1b739f57d6050984e92a3f7cebb24efc5d3f7301ba27b5a5adbfcdcdfb48c90f530", 0x32}, {&(0x7f0000000ac0)="37271266fdc6254affaa135b17b225ee5fe6e6e16f2b643a5880c6bf99f842b75fa164c910fdd77c5c11b3d2565f487f00c14677a2a7d3d3b356ec9160acae6ea09c86ec6e635cd5e2b6fc92f9e6abce6aeedc4c3be15b6e745e6230b63ac3d54d5517541c2139cfc4f10ed54c09e20fba89315e06ad3cf5644a1e19133673180adcee7353fdc3e113ee12ec3597776be0ddcb681c4e5eef3b8cdb9a905741b945d537bcf1fa1bbb839cdf2dbc470555e262a197808e8dfdc0d3c36a5e81f2644f95786d3107fdcd75faab6ca3ff02f0275d", 0xd2}], 0x6, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, r14}}}, @cred={{0x1c}}], 0x40, 0x4000010}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d40)="e489b8f4a2b998ff3c6eb94c4a6282f519ea8863dfa9fd36ccba42a6698cfae6edfdcc5a7a907b78ed3f97451a53341648d4bdbaf41016e30e80d063addf5e7d739647d451d6b4efc54600cb6ff60d955279b3d45876eecba529f3996eea6690aa9285154af18078d9e1be2b1290e9da88c53aefe1c0c1e38b4e7dbc46647ff6c94f7c5a96492784e5201c425285e2654402add8664d7f8ba49c86df7dbc004fcb03f72746ee496d7f32d0800578120eb427858f279df7b4f0759e316f8f157add1cd4e52e3caa86", 0xc8}], 0x1, &(0x7f0000000fc0)=[@rights={{0x28, 0x1, 0x1, [r0, r3, r2, 0xffffffffffffffff, r2, r0]}}, @rights={{0x24, 0x1, 0x1, [r3, r3, r4, r7, r4]}}, @rights={{0x24, 0x1, 0x1, [r3, r0, r0, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {r12, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r11}}}, @rights={{0x2c, 0x1, 0x1, [r4, r2, r3, r2, r2, r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r15, r3]}}], 0x120, 0x40844}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001100)="2d9e5037d12a564c963bc85cd1737e313a103750a0a3721fe05e1ed36e277bb5c287bf9bec3ca6c4c6c65ac4db6e6beaf7223cf1179e3344c99b17db1314523a6f23871cddd7c27e5bae8c81f075181eebaa33601b07e6269a6f0029ef3ae41561", 0x61}, {&(0x7f0000001180)="d1087c41efd68138b9961d9814e3b50142f8530a49cc39ca5ada4a0e3c4861f6dccdd04629b2e15a9b015d0df99c6f13799da7b769b0df10baaca9ccb1731ec9bb41324b86eddcf8722b175b3740c557867b5da37c336e2a06156c4da3231d3b146c44", 0x63}, {&(0x7f0000001200)="e5e4da25c6e68f1068a5dfd64cc846fd706f4cc25a67abba8b15da6061c41d6b41ae97866ab09fadbaa8cddeec57bae3b69f01776ad88f68d6268e789993343f781971f6aeb5637f04a69f9e2b5934cca5297af2", 0x54}, {&(0x7f0000001280)="e635ad5ef4522e4a4be901e8de1eb0b23efb76618fe4bb8d8b9105760548f66349c453194f867feacafd138edbfbbe5963e7e4591d4e8f2b452c0ec6ef1bb47af8c07c29802ea5b802df9d12388ac1f8fb6a35bb78d830e13a463d2ca7d2192fccd44757f933085741e2bf415093a5b1abfaee2109d8e34a200613", 0x7b}, {&(0x7f0000001300)="2e91de8b3ddb9f0de609947a3530e1de474d2303761ab2f6156aa41d54db20409cd534f7711227584b16db8a57a89ab2622c4e95572340bc9c0f1e7651db9073dab0200120cb6aea2604c2d962d4daa410b090b71fbcf4a95f52", 0x5a}], 0x5, 0x0, 0x0, 0x24000010}}, {{&(0x7f0000001400)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001480)="35572f14b2479b183e71e4dd13c6d996da5df701c4cfa731402ac24a2b9abc0ddd1c9f11f84c5811143c1f67980524cb9a1ece1bec0d47aa55d789ab41a7f4913d285daa9bb90faf6ae5cbf4a2fd82442055c4b14960209b9f0f04d6d64ec48eed4c49b8965671613c9ef63bfe21ab9791ca3b6cbdece68b3dfda46e1cf6d4948b03c939c7d8c5e3873492d6a2f7893c8845d8c43fa644c1c5a75609bd696f14f640411a86d47e97f4e5", 0xaa}], 0x1, 0x0, 0x0, 0x8000}}, {{&(0x7f0000001580)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001b00)="a9eeaa8e457124f486e64ef0781152399e6d761f337bbd722253d7e3d3940f7ea65583cf597360ef3f304c2e3a58f068ca948e2e118fa2610a82a22b80d2583a686c10508cd9062770a671e1ea28581f91c56797ba911ee7e0856e544d5f8934fd851882179f3009f55e9504f9c32027bd7dc959b9c52b4568cf20d5079a7c8fa32a86a5427b86e03d891702c4b29da347a0a761503a573b099eb2711d1cf0fa3d9b3cfa5fa75573cae95bedd8be2ce33e9f8a442ef8d4561cca2a87407527f48df51400bfd63b6d0a28c8a181aad2cf52e466b01e20f61473b379bfe568e6a5f0023d9941682673677daa35a6d0a1f9d5ef3b72af35a6bb88186b2d070eff5bc40c193cf096b1406d0e3186852affbf0b8ae89cc46f0312b31c15fa47", 0x11d}, {&(0x7f0000001700)="4c57c7d51f3229097ebd12e82154d28e339d6e88e2fa0fe735c5995a9aa57d667afdd8d00755049c7bac672f4c015d0e1aca592be851190375edc5f37986457425", 0x41}, {&(0x7f0000001780)="d46983157831059fc985a024b6faac205d2d82296c0b9c95baa5a7b019c3c380c4e732c6b9ccf941e669b785fc080ee54847b722392d44ae16cfa2d394d968479f7bc94a327d742638d181bd2c30b52526ec19d5b4467cd77b4b3f25b8a4fd398f64351c5cd3fa77b559a9eb5296aced7cc537f7b2ca58359d01ca06d8969d8d34868894cb09ffdeb18391870afa933c32c38d6540c1125c10010e0681914494d30948763c0ff7af8e01", 0xaa}], 0x3, 0x0, 0x0, 0x40014}}], 0x6, 0x1) r16 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r17 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io$hid(r17, 0x0, 0x0) syz_usb_control_io$hid(r17, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) sendmsg$netlink(r16, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="946cbb3b9516c832d4733c0ec6830e5d9731be3f31d026f1eb25880ca6403f3b8bd24e1e07d76449ac3614eac255374c7a1ed2e11295cac1", @ANYRES8=r16], 0x114}], 0x1}, 0x24000001) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) file_getattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x18, 0x1000) recvmmsg(r16, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) 1.877511609s ago: executing program 0 (id=1633): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/\\\\sswd task.uid=0 exec.argv[0]=\"sh\" exec.envp[\"PATH\"!=\"/bin\"\n', 0x4c) 1.450114053s ago: executing program 9 (id=1634): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) listen(r2, 0x0) close_range(r0, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x105, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e000000}]}]}, 0x3c}}, 0x0) 1.412421986s ago: executing program 0 (id=1635): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x30}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000829bd7000fedbdf253001000006005900390000000600360022000000060036004100000006003600170000000600360012000000060036001200000006003600004000000600360013000000060036001c000000"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f0000000400000004"], 0x48) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0xfffffffffffffed3, &(0x7f0000000100), 0x12, 0x0, 0x0, 0x406}, 0x40020000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x48011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r6, 0x5) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) accept4$inet(r6, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getpeername$inet(r5, 0x0, &(0x7f00000000c0)) 706.864161ms ago: executing program 0 (id=1636): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="4201c2017fe6ea1d248d5eddae834a7166dac00d6e95503d4afd1f2ef7"], 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x10000, @loopback, 0x29}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r7) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x38, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x7, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) shutdown(r6, 0x1) writev(r1, &(0x7f0000006280)=[{&(0x7f00000041c0)="d2", 0x1}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) 518.22057ms ago: executing program 9 (id=1637): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)}], 0x1}, 0x45) sendto$packet(r1, &(0x7f0000000180)='`', 0x3b2, 0x0, &(0x7f0000000240)={0x2f, 0x0, r0, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r3) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r2, 0xffffffffffffffff, 0x2) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r8, 0xc01864b1, &(0x7f0000000240)={0x0, 0x2, 0x401, 0x0, 0x0}) 0s ago: executing program 7 (id=1638): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) sendmmsg$unix(r0, &(0x7f0000001a00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000140)="96829391d3db97657e7cf6a928ca27bdf5b8f3044a29ef8a4d49cd8e58dc0d73cf26a06785debea776ca2d691105512eccc4dbc31493f2f7c9b104f47043753df18afeaf9e630f8ffad5e75aabca7d72391fcde4545532ac321052c3c31ed820e878dccee889ae4084f754d09edf3faca657760d9b18b975ef642a492c2456f66dc3d80b", 0x84}, {&(0x7f0000000200)="278f7a9a8dfb1f9e2ab3c3a201d7f909661b315b9b68aa0666be43ec618854b49a3e411b0bb2335237397246185486f656691b45138da1c42cc6ca075b2ab0a8d2cad62ad3376de4ea5c36851f1edfc76327d8d92f5d4f034207593eeaa58fdd8f3e48d702fce5dd4ee3dbe4fca3706301e533767eed8d310a7e49871e6fa7e41c084a8b9477675569ec494734e4be90c91e04820f36787eb02ce5f3139d4d514471c27999212d480a766ae71a781767fd790024398b5afa761c4da336f8acc1e3b2cdbcc4405923a8a8e08658b548d89bbebc0f5c8282de283227b65abb6a72ac78c68918da4d3dba4e5abe3969", 0xee}, {&(0x7f00000004c0)="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", 0xe00}, {0x0}, {&(0x7f00000015c0)="c751da202a69085d6daa1cf99513a25b5c33b905e9519198c5d499b249fdc09a7e8bc801671607f40a283dada4880ea44644cec64f74d69aac5ef50b66d999caed34d1447e94a958a18f8b17ab4d1ef0b8140e25668bce2f17d241e9637f5d78ad2f289617c328d55503d48b1d767050b571f7b21f59f1badc9d39dd35e323", 0x7f}, {&(0x7f00000016c0)}, {&(0x7f0000001700)="4a8cbc2cafe869c297a6561d31", 0xd}, {&(0x7f0000001740)="570b900768b448c5597239854d62a75f5c56d8a9b7013d72e20b0a88e2d8ff97006ff426d77ec8b6c4e5e57ee210d1f4e9431aafcc7b0bdc47180fd087812ce1065a0f817de7ac479aa596c60214691c965cd29ecfd99860d2b45fd75b083811ee59da8b923dee006061fdda07157d5a87a27988798b657b82fa7d774b85eaa755bb346cade62c636d3a8cff1c863a198a8a071afc9957682467dfe74214284b22abd0621bdf0fd425d0eef0b522f8c8caf437ccbc47c3fc2a41a4075ebbf896f579f2", 0xc3}, {&(0x7f0000001840)="7484d45a9fe0", 0x6}, {&(0x7f0000001880)="695b2b166639aad1ab4dfa1a67822cbae780c5db0d45d93008336198858ac0dca0e60ef4945161052b9bc8e116586f02199b100ed55c0f1456ab6ff7ced6396e3308275d654dbc160237413b4b8025c3ced6a2801c1c134d709a13f4057fa944334e1cd28e48d6426fa3a988b917b2005ad53be0ca7d72486bbdd717d62162a1574b0eb77c2c9ae0415b3c01f2f9bc19536e27f49873698be15e924edd6224099f28", 0xa2}], 0xa, 0x0, 0x0, 0x40}}], 0x1, 0x90) close(r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x7fff}}, './file1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000400000000000900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ot setting count and/or reply_len properly [ 470.139322][T11572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.140037][T11572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.190548][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1310'. [ 470.200354][T11572] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1310'. [ 471.136103][ T343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.136295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.242761][ T5726] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 472.386903][T11246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.407257][ T5726] usb 4-1: unable to get BOS descriptor or descriptor too short [ 472.407314][ T5726] usb 4-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=54.99 [ 472.408126][ T5726] usb 4-1: config 4 has an invalid interface number: 85 but max is 0 [ 472.408145][ T5726] usb 4-1: config 4 has no interface number 0 [ 472.408167][ T5726] usb 4-1: config 4 interface 85 has no altsetting 0 [ 472.409780][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.409798][ T5726] usb 4-1: Product: syz [ 472.409811][ T5726] usb 4-1: Manufacturer: syz [ 472.409824][ T5726] usb 4-1: SerialNumber: syz [ 472.548596][T11246] veth0_vlan: entered promiscuous mode [ 472.583839][T11246] veth1_vlan: entered promiscuous mode [ 472.697990][T11246] veth0_macvtap: entered promiscuous mode [ 472.709149][T11246] veth1_macvtap: entered promiscuous mode [ 472.743883][T11608] syzkaller0: entered promiscuous mode [ 472.743924][T11608] syzkaller0: entered allmulticast mode [ 472.780747][ T5726] safe_serial 4-1:4.85: safe_serial converter detected [ 472.780867][ T5726] safe_serial 4-1:4.85: probe with driver safe_serial failed with error -22 [ 472.784028][ T5726] usb 4-1: USB disconnect, device number 68 [ 472.787435][T11246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.797855][T11608] tipc: Started in network mode [ 472.797878][T11608] tipc: Node identity a61bb36157b6, cluster identity 4711 [ 472.798098][T11608] tipc: Enabled bearer , priority 0 [ 472.804456][ T343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.804610][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.840760][T11607] tipc: Resetting bearer [ 472.927871][T11607] tipc: Disabling bearer [ 472.941237][T11246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.090637][ T6510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.090829][ T6510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.091016][ T6510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.091189][ T6510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.232195][ T343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.232230][ T343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.324399][ T351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.324438][ T351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.731704][ T5703] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 473.748024][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 473.748214][ T31] audit: type=1400 audit(2000000007.020:1975): avc: denied { write } for pid=11613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.900698][T11636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1320'. [ 473.943807][T11636] bond3: entered promiscuous mode [ 473.944129][T11636] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.962036][ T5703] usb 10-1: Using ep0 maxpacket: 16 [ 473.969889][ T5703] usb 10-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 473.980475][ T5703] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 473.980653][ T5703] usb 10-1: config 0 has no interface number 0 [ 474.006047][ T5703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.006224][ T5703] usb 10-1: Product: syz [ 474.006389][ T5703] usb 10-1: Manufacturer: syz [ 474.006540][ T5703] usb 10-1: SerialNumber: syz [ 474.031445][ T5703] usb 10-1: config 0 descriptor?? [ 474.043515][ T5703] hub 10-1:0.132: bad descriptor, ignoring hub [ 474.049762][ T5703] hub 10-1:0.132: probe with driver hub failed with error -5 [ 474.066645][ T5703] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.132/input/input47 [ 474.087158][ T31] audit: type=1400 audit(2000000007.360:1976): avc: denied { write } for pid=11637 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.109466][ T31] audit: type=1400 audit(2000000007.360:1977): avc: denied { read } for pid=11639 comm="syz.3.1321" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 474.109512][ T31] audit: type=1400 audit(2000000007.360:1978): avc: denied { open } for pid=11639 comm="syz.3.1321" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 474.168109][ T31] audit: type=1400 audit(2000000007.440:1979): avc: denied { ioctl } for pid=11639 comm="syz.3.1321" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 474.232076][ T5611] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 474.620620][T11646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.620961][T11646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.921310][ T5725] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 474.998029][ T31] audit: type=1400 audit(2000000008.270:1980): avc: denied { write } for pid=11644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.063653][ T5725] usb 4-1: unable to get BOS descriptor or descriptor too short [ 475.063718][ T5725] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 475.064573][ T5725] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.067446][ T5725] usb 4-1: string descriptor 0 read error: -22 [ 475.067532][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.205034][ T5726] usb 10-1: USB disconnect, device number 27 [ 475.224291][ T31] audit: type=1400 audit(2000000008.500:1981): avc: denied { write } for pid=11664 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.358824][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.359002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.504396][ T31] audit: type=1400 audit(2000000008.760:1982): avc: denied { append } for pid=11648 comm="syz.3.1324" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 475.543979][T11649] loop2: detected capacity change from 0 to 8 [ 475.971838][T11649] Dev loop2: unable to read RDB block 8 [ 475.971883][T11649] loop2: unable to read partition table [ 475.972047][T11649] loop2: partition table beyond EOD, truncated [ 475.972078][T11649] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 476.058226][ T5725] usb 4-1: USB disconnect, device number 69 [ 476.080065][ T31] audit: type=1400 audit(2000000009.350:1983): avc: denied { write } for pid=11666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.219061][ T31] audit: type=1400 audit(2000000009.490:1984): avc: denied { read write } for pid=11676 comm="syz.9.1325" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 476.632717][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.632858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.788721][T11690] sg_write: data in/out 85/14 bytes for SCSI command 0x0-- guessing data in; [ 476.788721][T11690] program syz.0.1326 not setting count and/or reply_len properly [ 476.822379][T11692] sg_write: data in/out 85/14 bytes for SCSI command 0x0-- guessing data in; [ 476.822379][T11692] program syz.3.1327 not setting count and/or reply_len properly [ 476.951295][T11694] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1328'. [ 477.059553][T11697] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1328'. [ 477.071758][ T5726] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 477.222238][ T5726] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 477.223158][ T5726] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 477.223180][ T5726] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 477.223209][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.227388][ T5726] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 477.230370][ T5726] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 477.983481][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1327'. [ 478.009701][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1327'. [ 478.091673][ T351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.091899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.307234][T11563] Set syz1 is full, maxelem 65536 reached [ 478.447960][ T5703] usb 4-1: USB disconnect, device number 70 [ 478.482544][ T5703] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 478.491334][ T5703] spcp8x5 4-1:1.0: device disconnected [ 479.213338][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 479.213508][ T31] audit: type=1400 audit(2000000012.490:1989): avc: denied { shutdown } for pid=11719 comm="syz.8.1331" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 479.279110][ T31] audit: type=1400 audit(2000000012.540:1990): avc: denied { write } for pid=11721 comm="syz.3.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 479.717697][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.784809][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.012656][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.013218][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.163691][ T31] audit: type=1400 audit(2000000013.440:1991): avc: denied { create } for pid=11726 comm="syz.7.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 480.220800][ T31] audit: type=1400 audit(2000000013.490:1992): avc: denied { write } for pid=11733 comm="syz.0.1335" name="usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 480.250725][ T31] audit: type=1400 audit(2000000013.520:1993): avc: denied { setopt } for pid=11732 comm="syz.8.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 480.340385][ T31] audit: type=1400 audit(2000000013.610:1994): avc: denied { map } for pid=11733 comm="syz.0.1335" path="/dev/usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 480.340572][ T31] audit: type=1400 audit(2000000013.610:1995): avc: denied { execute } for pid=11733 comm="syz.0.1335" path="/dev/usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 480.642212][ T31] audit: type=1400 audit(2000000013.910:1996): avc: denied { setattr } for pid=11732 comm="syz.8.1336" name="XDP" dev="sockfs" ino=40465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 481.014601][ T31] audit: type=1400 audit(2000000014.290:1997): avc: denied { write } for pid=11718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.152428][T11751] syzkaller0: left promiscuous mode [ 481.152719][T11751] syzkaller0: left allmulticast mode [ 481.302092][T11748] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 481.302266][T11748] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 481.389481][T11748] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 481.389659][T11748] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 481.420691][T11748] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 481.420857][T11748] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 481.510342][T11764] GUP no longer grows the stack in syz.3.1342 (11764): 200000004000-20000000a000 (200000002000) [ 481.510525][T11764] CPU: 1 UID: 0 PID: 11764 Comm: syz.3.1342 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.510555][T11764] Tainted: [L]=SOFTLOCKUP [ 481.510563][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 481.510575][T11764] Call Trace: [ 481.510582][T11764] [ 481.510591][T11764] dump_stack_lvl+0x100/0x190 [ 481.510625][T11764] gup_vma_lookup.cold+0x83/0x96 [ 481.510656][T11764] __get_user_pages+0x252/0x2c30 [ 481.510684][T11764] ? lock_acquire+0x1d1/0x380 [ 481.510703][T11764] ? mtree_load+0xdc/0xb50 [ 481.510726][T11764] ? __pfx___get_user_pages+0x10/0x10 [ 481.510746][T11764] ? mtree_load+0x388/0xb50 [ 481.510767][T11764] ? mtree_load+0x388/0xb50 [ 481.510797][T11764] get_user_pages_remote+0x3d2/0xb10 [ 481.510819][T11764] ? mas_prev_setup.constprop.0+0x980/0x9e0 [ 481.510846][T11764] ? __pfx_get_user_pages_remote+0x10/0x10 [ 481.510879][T11764] __access_remote_vm+0x3bb/0x890 [ 481.510906][T11764] ? __pfx___access_remote_vm+0x10/0x10 [ 481.510924][T11764] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 481.510951][T11764] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 481.510973][T11764] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 481.511001][T11764] proc_pid_cmdline_read+0x552/0x9a0 [ 481.511027][T11764] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 481.511053][T11764] ? rw_verify_area+0xce/0x6d0 [ 481.511083][T11764] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 481.511105][T11764] vfs_readv+0x5d8/0x8d0 [ 481.511140][T11764] ? __pfx_vfs_readv+0x10/0x10 [ 481.511175][T11764] ? lock_acquire+0x1d1/0x380 [ 481.511194][T11764] ? __fget_files+0x34/0x3d0 [ 481.511234][T11764] ? __fget_files+0x21f/0x3d0 [ 481.511263][T11764] ? do_preadv+0x1ac/0x270 [ 481.511291][T11764] do_preadv+0x1ac/0x270 [ 481.511321][T11764] ? __pfx_do_preadv+0x10/0x10 [ 481.511358][T11764] do_syscall_64+0x123/0x790 [ 481.511386][T11764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.511406][T11764] RIP: 0033:0x7fa0c3b9e159 [ 481.511422][T11764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.511442][T11764] RSP: 002b:00007fa0c4ab2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 481.511464][T11764] RAX: ffffffffffffffda RBX: 00007fa0c3e25fa0 RCX: 00007fa0c3b9e159 [ 481.511478][T11764] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 481.511490][T11764] RBP: 00007fa0c3c35024 R08: 00000000fffffff9 R09: 0000000000000000 [ 481.511502][T11764] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 481.511514][T11764] R13: 00007fa0c3e26038 R14: 00007fa0c3e25fa0 R15: 00007fff3c7de9a8 [ 481.511541][T11764] [ 481.599833][ T31] audit: type=1400 audit(2000000014.870:1998): avc: denied { setopt } for pid=11756 comm="syz.7.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 481.775456][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.775611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.812378][T11769] sg_write: data in/out 85/14 bytes for SCSI command 0x0-- guessing data in; [ 481.812378][T11769] program syz.0.1343 not setting count and/or reply_len properly [ 482.024864][T11748] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 482.039438][T11748] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 482.071150][T11748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 482.071307][T11748] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 482.282435][T11748] autofs: Unknown parameter 'sÕø ÿ!Œ–°H<†¸™®9\«ZF-ý4¹»C}d' [ 483.222529][ T148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.222724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.668484][T11781] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1344'. [ 484.272375][T11808] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 484.446576][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 484.446768][ T31] audit: type=1400 audit(2000000530.715:2004): avc: denied { unmount } for pid=7430 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 484.529527][ T31] audit: type=1400 audit(2000000530.795:2005): avc: denied { write } for pid=11813 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.675731][T11808] Bluetooth: MGMT ver 1.23 [ 485.193443][T11832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.875057][T11841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.890342][T11841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.931316][ T31] audit: type=1400 audit(2000000532.185:2006): avc: denied { ioctl } for pid=11828 comm="syz.9.1352" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 486.141809][ T5725] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 486.535694][ T5725] usb 10-1: unable to get BOS descriptor or descriptor too short [ 486.537911][ T5725] usb 10-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 486.538941][ T5725] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 486.538968][ T5725] usb 10-1: can't read configurations, error -71 [ 486.544123][ T5703] usb 9-1: new full-speed USB device number 43 using dummy_hcd [ 486.745039][ T5703] usb 9-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=db.82 [ 486.757123][ T5703] usb 9-1: config 43 has an invalid descriptor of length 254, skipping remainder of the config [ 486.757294][ T5703] usb 9-1: config 43 has 0 interfaces, different from the descriptor's value: 1 [ 486.780817][ T5703] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.780990][ T5703] usb 9-1: Product: syz [ 486.781104][ T5703] usb 9-1: Manufacturer: syz [ 486.781319][ T5703] usb 9-1: SerialNumber: syz [ 486.862075][ T31] audit: type=1400 audit(2000000533.135:2007): avc: denied { ioctl } for pid=11854 comm="syz.3.1356" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 486.907935][ T31] audit: type=1400 audit(2000000533.175:2008): avc: denied { write } for pid=11827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.967197][T11866] sg_write: data in/out 85/14 bytes for SCSI command 0x0-- guessing data in; [ 486.967197][T11866] program syz.0.1358 not setting count and/or reply_len properly [ 486.992691][T11863] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 487.259690][ T31] audit: type=1400 audit(2000000533.526:2009): avc: denied { write } for pid=11869 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.278438][ T30] usb 9-1: USB disconnect, device number 43 [ 487.539365][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.539774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.856851][T11879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.857408][T11879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.271352][ T351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.271540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.426422][T11885] FAULT_INJECTION: forcing a failure. [ 488.426422][T11885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.448737][T11885] CPU: 0 UID: 0 PID: 11885 Comm: syz.8.1362 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.448762][T11885] Tainted: [L]=SOFTLOCKUP [ 488.448766][T11885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 488.448773][T11885] Call Trace: [ 488.448777][T11885] [ 488.448782][T11885] dump_stack_lvl+0x100/0x190 [ 488.448803][T11885] should_fail_ex.cold+0x5/0xa [ 488.448819][T11885] _copy_to_user+0x32/0xd0 [ 488.448838][T11885] do_pages_stat+0x5a9/0x850 [ 488.448858][T11885] ? __pfx_do_pages_stat+0x10/0x10 [ 488.448880][T11885] ? get_pid_task+0x2a/0x250 [ 488.448918][T11885] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 488.448947][T11885] ? lockdep_hardirqs_on+0x7d/0x110 [ 488.448966][T11885] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 488.448998][T11885] kernel_move_pages+0x1013/0x1560 [ 488.449026][T11885] ? __mutex_unlock_slowpath+0x35d/0x930 [ 488.449043][T11885] ? __pfx_kernel_move_pages+0x10/0x10 [ 488.449058][T11885] ? __fget_files+0x21f/0x3d0 [ 488.449074][T11885] ? fput+0x7c/0x100 [ 488.449087][T11885] ? ksys_write+0x1ac/0x250 [ 488.449097][T11885] ? __pfx_ksys_write+0x10/0x10 [ 488.449109][T11885] __x64_sys_move_pages+0xe0/0x1c0 [ 488.449124][T11885] ? do_syscall_64+0xae/0x790 [ 488.449136][T11885] ? lockdep_hardirqs_on+0x7d/0x110 [ 488.449148][T11885] do_syscall_64+0x123/0x790 [ 488.449161][T11885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.449173][T11885] RIP: 0033:0x7fa25e99e159 [ 488.449185][T11885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.449196][T11885] RSP: 002b:00007fa25f833028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 488.449208][T11885] RAX: ffffffffffffffda RBX: 00007fa25ec25fa0 RCX: 00007fa25e99e159 [ 488.449215][T11885] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 488.449222][T11885] RBP: 00007fa25f833090 R08: 0000200000000040 R09: 0000000000000000 [ 488.449230][T11885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 488.449236][T11885] R13: 00007fa25ec26038 R14: 00007fa25ec25fa0 R15: 00007ffeacec7f68 [ 488.449251][T11885] [ 489.185240][ T31] audit: type=1400 audit(2000000535.456:2010): avc: denied { write } for pid=11876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.309914][ T31] audit: type=1400 audit(2000000535.576:2011): avc: denied { map } for pid=11893 comm="syz.8.1364" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 489.830423][ T31] audit: type=1400 audit(2000000536.096:2012): avc: denied { write } for pid=11893 comm="syz.8.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 490.218304][ T31] audit: type=1400 audit(2000000536.486:2013): avc: denied { write } for pid=11901 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.340363][ T31] audit: type=1400 audit(2000000536.606:2014): avc: denied { bind } for pid=11902 comm="syz.0.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 490.389852][ T31] audit: type=1400 audit(2000000536.656:2015): avc: denied { listen } for pid=11902 comm="syz.0.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 490.452077][ T31] audit: type=1400 audit(2000000536.726:2016): avc: denied { accept } for pid=11902 comm="syz.0.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 490.994677][ T31] audit: type=1400 audit(2000000537.266:2017): avc: denied { read } for pid=11910 comm="syz.0.1366" laddr=fe80::e lport=54558 faddr=fe80::bb fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 491.534352][ T31] audit: type=1400 audit(2000000537.806:2018): avc: denied { listen } for pid=11919 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 491.925404][ T31] audit: type=1400 audit(2000000538.156:2019): avc: denied { listen } for pid=11923 comm="syz.3.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 492.680497][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.680692][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.974441][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.974636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.617752][ T31] audit: type=1400 audit(2000000540.886:2020): avc: denied { write } for pid=11909 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.092020][ T31] audit: type=1400 audit(2000000541.366:2021): avc: denied { write } for pid=11949 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.119345][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1370'. [ 495.302981][ T31] audit: type=1400 audit(2000000541.566:2022): avc: denied { map } for pid=11947 comm="syz.8.1375" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 495.827963][T11945] syzkaller0: entered promiscuous mode [ 495.828256][T11945] syzkaller0: entered allmulticast mode [ 495.844061][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.844250][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.914200][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1378'. [ 497.101051][ T5703] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 497.276650][ T5703] usb 4-1: unable to get BOS descriptor or descriptor too short [ 497.276845][ T5703] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 497.301114][ T5703] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 497.301299][ T5703] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 497.301467][ T5703] usb 4-1: config 63 has no interface number 0 [ 497.301632][ T5703] usb 4-1: config 63 interface 66 has no altsetting 0 [ 497.320396][ T31] audit: type=1400 audit(2000000543.576:2023): avc: denied { cmd } for pid=11972 comm="iou-wrk-11973" path="socket:[42199]" dev="sockfs" ino=42199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 497.380365][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.380517][ T5703] usb 4-1: Product: syz [ 497.381954][ T5703] usb 4-1: Manufacturer: syz [ 497.382083][ T5703] usb 4-1: SerialNumber: syz [ 497.405259][ T31] audit: type=1400 audit(2000000543.676:2024): avc: denied { bind } for pid=11972 comm="syz.8.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 497.696767][ T31] audit: type=1800 audit(2000000543.966:2025): pid=11967 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1377" name="file" dev="configfs" ino=41559 res=0 errno=0 [ 497.839729][T11967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.840146][T11967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.867993][ T31] audit: type=1400 audit(2000000544.136:2026): avc: denied { mounton } for pid=11964 comm="syz.3.1377" path="/278/config" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 497.925479][ T5703] uvcvideo 4-1:63.66: probe with driver uvcvideo failed with error -22 [ 497.953235][ T5703] usb 4-1: USB disconnect, device number 71 [ 498.121058][T11989] FAULT_INJECTION: forcing a failure. [ 498.121058][T11989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.134642][T11989] CPU: 1 UID: 0 PID: 11989 Comm: syz.9.1383 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.134672][T11989] Tainted: [L]=SOFTLOCKUP [ 498.134679][T11989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 498.134690][T11989] Call Trace: [ 498.134697][T11989] [ 498.134704][T11989] dump_stack_lvl+0x100/0x190 [ 498.134737][T11989] should_fail_ex.cold+0x5/0xa [ 498.134764][T11989] strncpy_from_user+0x3b/0x2d0 [ 498.134792][T11989] ? find_held_lock+0x2b/0x80 [ 498.134820][T11989] path_getxattrat+0x102/0x430 [ 498.134847][T11989] ? __pfx_path_getxattrat+0x10/0x10 [ 498.134869][T11989] ? find_held_lock+0x2b/0x80 [ 498.134893][T11989] ? ksys_write+0x190/0x250 [ 498.134933][T11989] ? __pfx_ksys_write+0x10/0x10 [ 498.134957][T11989] do_syscall_64+0x123/0x790 [ 498.134982][T11989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.135002][T11989] RIP: 0033:0x7f85cff9e159 [ 498.135018][T11989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.135036][T11989] RSP: 002b:00007f85d0ecd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 498.135056][T11989] RAX: ffffffffffffffda RBX: 00007f85d0225fa0 RCX: 00007f85cff9e159 [ 498.135069][T11989] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000180 [ 498.135082][T11989] RBP: 00007f85d0ecd090 R08: 0000000000000000 R09: 0000000000000000 [ 498.135095][T11989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.135106][T11989] R13: 00007f85d0226038 R14: 00007f85d0225fa0 R15: 00007ffe923ab8e8 [ 498.135133][T11989] [ 498.424254][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.424434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.061168][ T31] audit: type=1400 audit(2000000545.216:2027): avc: denied { cmd } for pid=11991 comm="syz.7.1384" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 499.367657][ T31] audit: type=1400 audit(2000000545.636:2028): avc: denied { bind } for pid=11996 comm="syz.9.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 499.401075][T11994] batman_adv: batadv0: Adding interface: veth0 [ 499.401231][T11994] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.401311][T11994] batman_adv: batadv0: Interface activated: veth0 [ 499.535255][T11994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.535563][T11994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.660999][ T5725] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 499.684751][ T321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.684929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.722545][T11994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.722867][T11994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.731931][T11994] batman_adv: batadv0: Interface deactivated: veth0 [ 499.732072][T11994] batman_adv: batadv0: Removing interface: veth0 [ 499.866585][ T5725] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 499.867730][ T5725] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.867892][ T5725] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 499.867937][ T5725] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 499.869925][ T5725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.869943][ T5725] usb 9-1: Product: syz [ 499.869957][ T5725] usb 9-1: Manufacturer: syz [ 499.869970][ T5725] usb 9-1: SerialNumber: syz [ 500.156260][ T31] audit: type=1400 audit(2000000546.426:2029): avc: denied { write } for pid=12005 comm="syz.8.1388" name="/" dev="ocfs2_dlmfs" ino=41608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 500.159588][ T31] audit: type=1400 audit(2000000546.426:2030): avc: denied { add_name } for pid=12005 comm="syz.8.1388" name="domain1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 500.170906][T12006] o2cb: This node has not been configured. [ 500.170915][T12006] o2cb: Cluster check failed. Fix errors before retrying. [ 500.170931][T12006] (syz.8.1388,12006,0):user_dlm_register:674 ERROR: status = -22 [ 500.170952][T12006] (syz.8.1388,12006,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "domain1" [ 500.171087][ T31] audit: type=1400 audit(2000000546.426:2031): avc: denied { create } for pid=12005 comm="syz.8.1388" name="domain1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 500.171122][ T31] audit: type=1400 audit(2000000546.426:2032): avc: denied { associate } for pid=12005 comm="syz.8.1388" name="domain1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 500.277928][ T31] audit: type=1400 audit(2000000546.556:2033): avc: denied { read } for pid=12005 comm="syz.8.1388" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 500.720732][ T5691] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 500.912358][ T5691] usb 10-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 500.923025][ T5691] usb 10-1: config 0 has no interfaces? [ 500.948446][ T5691] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.948620][ T5691] usb 10-1: Product: syz [ 500.948783][ T5691] usb 10-1: Manufacturer: syz [ 500.969027][ T5691] usb 10-1: SerialNumber: syz [ 500.980645][ T5691] usb 10-1: config 0 descriptor?? [ 501.118905][T12024] sg_write: data in/out 85/14 bytes for SCSI command 0x0-- guessing data in; [ 501.118905][T12024] program syz.3.1391 not setting count and/or reply_len properly [ 501.237092][ T5703] usb 10-1: USB disconnect, device number 30 [ 501.390451][ T5691] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 501.540800][ T5691] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 501.557331][ T5691] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 501.557505][ T5691] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 501.557684][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.595023][ T5691] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 501.611804][ T5691] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 501.851294][ T31] audit: type=1400 audit(2000000548.126:2034): avc: denied { write } for pid=12015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.201324][ T31] audit: type=1400 audit(2000000548.476:2035): avc: denied { write } for pid=12047 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.412871][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1391'. [ 502.413054][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1391'. [ 502.649917][ T5725] usb 9-1: 1:1 : no or invalid class specific endpoint descriptor [ 502.650093][ T5725] usb 9-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 502.650113][ T5725] usb 9-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 502.650133][ T5725] usb 9-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 502.653230][ T5725] usb 9-1: 0:2 : does not exist [ 502.663412][ T31] audit: type=1400 audit(2000000548.936:2036): avc: denied { unmount } for pid=8626 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 503.002994][ T5725] usb 9-1: USB disconnect, device number 44 [ 503.020327][T12042] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 503.021635][T12042] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 503.021861][T12042] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 503.131023][T12042] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 503.171348][ T9] usb 4-1: USB disconnect, device number 72 [ 503.272494][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 503.273342][ T9] spcp8x5 4-1:1.0: device disconnected [ 503.381768][ T8030] udevd[8030]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.462624][T12065] netlink: 'syz.8.1395': attribute type 1 has an invalid length. [ 503.462804][T12065] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1395'. [ 503.462820][T12065] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1395'. [ 503.467546][ T31] audit: type=1400 audit(2000000549.736:2037): avc: denied { create } for pid=12070 comm="syz.9.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 503.540856][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1396'. [ 503.819097][T12079] netlink: Unknown conntrack attr (0) [ 503.819328][T12079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.904558][ T31] audit: type=1400 audit(2000000550.156:2038): avc: denied { getopt } for pid=12063 comm="syz.8.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 504.256015][ T8918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.256217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.771596][T12087] fuse: Bad value for 'group_id' [ 504.786804][T12087] fuse: Bad value for 'group_id' [ 504.797102][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.797293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.899603][T12091] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20004 [ 505.190265][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 505.190742][ T31] audit: type=1400 audit(2000000551.467:2040): avc: denied { write } for pid=12064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.716892][ T31] audit: type=1400 audit(2000000551.987:2041): avc: denied { write } for pid=12107 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.778525][T12132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.780690][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.117304][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 507.118188][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 507.209051][T12135] ceph: No mds server is up or the cluster is laggy [ 507.415537][T12135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=12135 comm=syz.3.1408 [ 507.776149][T12145] 9p: Bad value for 'wfdno' [ 508.311972][ T31] audit: type=1400 audit(2000000554.587:2042): avc: denied { append } for pid=12150 comm="syz.3.1412" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 509.831959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.832489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.994175][ T321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.994379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.100648][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.100837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.589453][ T31] audit: type=1400 audit(2000000558.857:2043): avc: denied { write } for pid=12167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.176129][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.177270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.384478][ T31] audit: type=1400 audit(2000000559.657:2044): avc: denied { write } for pid=12206 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.145444][ T31] audit: type=1400 audit(2000000560.377:2045): avc: denied { watch_mount } for pid=12214 comm="syz.3.1427" path="/287" dev="tmpfs" ino=1565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 514.397353][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.397560][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.229817][ T30] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 515.254724][ T31] audit: type=1400 audit(2000000561.527:2046): avc: denied { read write } for pid=12244 comm="syz.8.1432" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 515.279421][ T31] audit: type=1400 audit(2000000561.527:2047): avc: denied { open } for pid=12244 comm="syz.8.1432" path="/160/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 515.402428][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 515.403074][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 515.403894][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.403915][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.403942][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.407569][ T30] usb 4-1: config 0 descriptor?? [ 515.426266][ T30] hub 4-1:0.0: USB hub found [ 515.649909][ T30] hub 4-1:0.0: 1 port detected [ 515.691358][ T321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.691538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.697644][ T321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.697764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.794432][ T31] audit: type=1400 audit(2000000562.067:2048): avc: denied { write } for pid=12229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.060391][ T31] audit: type=1400 audit(2000000562.337:2049): avc: denied { write } for pid=12254 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 516.145552][ T31] audit: type=1326 audit(2000000562.417:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.9.1434" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cff9e159 code=0x7ffc0000 [ 516.152279][ T31] audit: type=1326 audit(2000000562.417:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.9.1434" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cff9e159 code=0x7ffc0000 [ 516.152323][ T31] audit: type=1326 audit(2000000562.417:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.9.1434" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85cff9e159 code=0x7ffc0000 [ 516.179584][ T5703] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 516.309856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.318301][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.335119][ T5703] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 516.343792][ T5703] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.343817][ T5703] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.343837][ T5703] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.343869][ T5703] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.368410][ T5703] usb 9-1: config 0 descriptor?? [ 516.499740][ T5718] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 516.634293][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.634482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.640057][ T5718] usb 10-1: device descriptor read/64, error -71 [ 516.799796][ T5599] Bluetooth: hci3: command 0xfc11 tx timeout [ 516.806114][ T5611] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 516.861477][ T30] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 516.876149][ T30] usbhid 4-1:0.0: can't add hid device: -71 [ 516.876372][ T30] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 516.910203][ T5718] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 516.918873][ T30] usb 4-1: USB disconnect, device number 73 [ 517.059766][ T5718] usb 10-1: device descriptor read/64, error -71 [ 517.170207][ T5718] usb usb10-port1: attempt power cycle [ 517.509720][ T5718] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 517.533839][ T5718] usb 10-1: device descriptor read/8, error -71 [ 517.642267][ T31] kauditd_printk_skb: 46 callbacks suppressed [ 517.642429][ T31] audit: type=1326 audit(2000000563.917:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.9.1434" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85cff9ddeb code=0x7ffc0000 [ 517.685123][ T31] audit: type=1326 audit(2000000563.947:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.9.1434" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85cff9ddeb code=0x7ffc0000 [ 517.685318][ T31] audit: type=1400 audit(2000000563.947:2101): avc: denied { getopt } for pid=12260 comm="syz.3.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 517.735769][ T31] audit: type=1326 audit(2000000564.007:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.9.1434" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85cff9ddeb code=0x7ffc0000 [ 517.761096][T12265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.761543][T12265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.770684][ T5718] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 517.801581][ T31] audit: type=1326 audit(2000000564.077:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.9.1434" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85cff9ddeb code=0x7ffc0000 [ 517.801842][ T5718] usb 10-1: device descriptor read/8, error -71 [ 517.809137][ T31] audit: type=1326 audit(2000000564.077:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.9.1434" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85cff9ddeb code=0x7ffc0000 [ 517.861970][T12265] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1436'. [ 517.910429][ T5718] usb usb10-port1: unable to enumerate USB device [ 517.912679][ T31] audit: type=1326 audit(2000000564.187:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12255 comm="syz.9.1434" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85cff9ddeb code=0x7ffc0000 [ 518.104661][T12265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.104850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.325153][T12272] tipc: Started in network mode [ 518.325327][T12272] tipc: Node identity 4246, cluster identity 4711 [ 518.325496][T12272] tipc: Node number set to 16966 [ 518.499388][ T5725] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 518.660408][ T5725] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 518.670773][ T5725] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 518.670955][ T5725] usb 4-1: config 0 has no interface number 0 [ 518.671139][ T5725] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 518.671302][ T5725] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 518.671467][ T5725] usb 4-1: config 0 interface 200 has no altsetting 0 [ 518.719887][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.728096][ T5725] usb 4-1: Product: syz [ 518.728115][ T5725] usb 4-1: Manufacturer: syz [ 518.728130][ T5725] usb 4-1: SerialNumber: syz [ 518.755359][ T5725] usb 4-1: config 0 descriptor?? [ 518.786877][ T5703] plantronics 0003:047F:FFFF.0019: invalid report_count 1158938850 [ 518.787045][ T5703] plantronics 0003:047F:FFFF.0019: item 0 4 1 9 parsing failed [ 518.794660][ T5703] plantronics 0003:047F:FFFF.0019: parse failed [ 518.794731][ T5703] plantronics 0003:047F:FFFF.0019: probe with driver plantronics failed with error -22 [ 519.000196][ T5725] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input48 [ 519.014641][ C0] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 519.014942][ C0] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 519.015324][ C0] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 519.015519][ C0] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 519.016176][ C0] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 519.016474][ C0] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 519.016660][ C0] usb 4-1: hanwang_irq - nonzero urb status received: -71 [ 519.024906][ C0] usb 4-1: hanwang_irq - urb shutting down with status: -2 [ 519.032860][ C0] usb 4-1: hanwang_irq - urb shutting down with status: -2 [ 519.087242][ T5725] usb 4-1: USB disconnect, device number 74 [ 519.584908][T12281] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1441'. [ 519.679278][ T31] audit: type=1400 audit(2000000565.947:2106): avc: denied { write } for pid=12280 comm="syz.9.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 519.866977][ T5703] usb 9-1: USB disconnect, device number 46 [ 519.977961][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1442'. [ 520.308764][T12293] jffs2: notice: (12293) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 520.374014][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 520.487950][ T31] audit: type=1400 audit(2000000566.757:2107): avc: denied { listen } for pid=12297 comm="syz.0.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 520.488125][ T31] audit: type=1400 audit(2000000566.757:2108): avc: denied { ioctl } for pid=12297 comm="syz.0.1445" path="socket:[42856]" dev="sockfs" ino=42856 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 521.069402][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1449'. [ 521.112588][ T8918] net_ratelimit: 4 callbacks suppressed [ 521.112630][ T8918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.112794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.137578][T12313] tmpfs: Bad value for 'mpol' [ 521.437563][ T8917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.437731][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.444016][ T8918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.444151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.687829][T12322] jffs2: notice: (12322) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 521.829954][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1454'. [ 521.890943][ T10] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 522.059227][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 522.084106][ T10] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 522.136236][T12332] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 522.348965][ T10] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 522.349145][ T10] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 522.349165][ T10] usb 9-1: config 0 has no interface number 0 [ 522.349194][ T10] usb 9-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 522.349216][ T10] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 522.349238][ T10] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 522.438611][ T10] usb 9-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 522.438792][ T10] usb 9-1: Product: syz [ 522.438807][ T10] usb 9-1: Manufacturer: syz [ 523.527054][T12339] syzkaller0: left promiscuous mode [ 523.534411][T12339] syzkaller0: left allmulticast mode [ 523.763216][ T10] usb 9-1: config 0 descriptor?? [ 523.804684][T12321] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 524.026254][T12321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.026904][T12321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.159293][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'. [ 524.273052][ T10] usb 9-1: USB disconnect, device number 47 [ 524.443869][T12353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.463340][T12353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.733808][T12354] FAULT_INJECTION: forcing a failure. [ 524.733808][T12354] name failslab, interval 1, probability 0, space 0, times 0 [ 524.747058][T12354] CPU: 1 UID: 0 PID: 12354 Comm: syz.9.1458 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.747088][T12354] Tainted: [L]=SOFTLOCKUP [ 524.747095][T12354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 524.747105][T12354] Call Trace: [ 524.747112][T12354] [ 524.747120][T12354] dump_stack_lvl+0x100/0x190 [ 524.747150][T12354] should_fail_ex.cold+0x5/0xa [ 524.747172][T12354] ? __netlink_lookup+0x652/0x900 [ 524.747199][T12354] should_failslab+0xc2/0x120 [ 524.747222][T12354] kmem_cache_alloc_noprof+0x92/0x6a0 [ 524.747242][T12354] ? skb_clone+0x190/0x400 [ 524.747264][T12354] skb_clone+0x190/0x400 [ 524.747281][T12354] netlink_deliver_tap+0xaed/0xcc0 [ 524.747312][T12354] netlink_unicast+0x62b/0x850 [ 524.747341][T12354] ? __pfx_netlink_unicast+0x10/0x10 [ 524.747366][T12354] ? __pfx_sock_has_perm+0x10/0x10 [ 524.747396][T12354] netlink_sendmsg+0x8b0/0xda0 [ 524.747426][T12354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.747454][T12354] ? selinux_socket_sendmsg+0x198/0x2f0 [ 524.747484][T12354] __sys_sendto+0x48b/0x4e0 [ 524.747507][T12354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.747539][T12354] ? __pfx___sys_sendto+0x10/0x10 [ 524.747570][T12354] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 524.747617][T12354] __x64_sys_sendto+0xe0/0x1c0 [ 524.747642][T12354] ? do_syscall_64+0xae/0x790 [ 524.747662][T12354] ? lockdep_hardirqs_on+0x7d/0x110 [ 524.747681][T12354] do_syscall_64+0x123/0x790 [ 524.747703][T12354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.747722][T12354] RIP: 0033:0x7f85cff5e98e [ 524.747737][T12354] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 524.747754][T12354] RSP: 002b:00007f85d0e89e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 524.747773][T12354] RAX: ffffffffffffffda RBX: 00007f85d0e8b6c0 RCX: 00007f85cff5e98e [ 524.747786][T12354] RDX: 0000000000000020 RSI: 00007f85d0e8a000 RDI: 0000000000000008 [ 524.747797][T12354] RBP: 0000000000000000 R08: 00007f85d0e89f04 R09: 000000000000000c [ 524.747808][T12354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 524.747820][T12354] R13: 00007f85d0e89f58 R14: 00007f85d0e8a000 R15: 0000000000000000 [ 524.747845][T12354] [ 525.048572][T12357] FAULT_INJECTION: forcing a failure. [ 525.048572][T12357] name failslab, interval 1, probability 0, space 0, times 0 [ 525.048742][T12357] CPU: 0 UID: 0 PID: 12357 Comm: syz.3.1461 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.048765][T12357] Tainted: [L]=SOFTLOCKUP [ 525.048771][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 525.048781][T12357] Call Trace: [ 525.048786][T12357] [ 525.048794][T12357] dump_stack_lvl+0x100/0x190 [ 525.048824][T12357] should_fail_ex.cold+0x5/0xa [ 525.048846][T12357] should_failslab+0xc2/0x120 [ 525.048866][T12357] kmem_cache_alloc_noprof+0x92/0x6a0 [ 525.048884][T12357] ? do_getname+0x35/0x390 [ 525.048910][T12357] do_getname+0x35/0x390 [ 525.048937][T12357] user_path_at+0x26/0x60 [ 525.048955][T12357] __x64_sys_mount+0x1fb/0x310 [ 525.048977][T12357] ? __pfx___x64_sys_mount+0x10/0x10 [ 525.049005][T12357] do_syscall_64+0x123/0x790 [ 525.049026][T12357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.049048][T12357] RIP: 0033:0x7fa0c3b9e159 [ 525.049062][T12357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.049077][T12357] RSP: 002b:00007fa0c4ab2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 525.049093][T12357] RAX: ffffffffffffffda RBX: 00007fa0c3e25fa0 RCX: 00007fa0c3b9e159 [ 525.049104][T12357] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 525.049114][T12357] RBP: 00007fa0c4ab2090 R08: 0000200000000140 R09: 0000000000000000 [ 525.049125][T12357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.049134][T12357] R13: 00007fa0c3e26038 R14: 00007fa0c3e25fa0 R15: 00007fff3c7de9a8 [ 525.049156][T12357] [ 525.551637][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 525.576988][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 526.541290][T12363] netlink: 'syz.9.1465': attribute type 12 has an invalid length. [ 526.592494][ T321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.592684][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.107594][T12381] netlink: 'syz.7.1466': attribute type 1 has an invalid length. [ 527.165316][T12381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.181984][T12385] bond2: (slave gretap1): making interface the new active one [ 527.184115][T12385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.184393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.184833][T12385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.184996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.186276][T12385] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 527.227981][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.228169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.456730][T12387] SET target dimension over the limit! [ 527.475655][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 527.475741][ T31] audit: type=1400 audit(2000000573.748:2118): avc: denied { write } for pid=12335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.560616][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.563371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.897080][T12399] xt_bpf: check failed: parse error [ 527.951845][ T31] audit: type=1400 audit(2000000574.228:2119): avc: denied { write } for pid=12390 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.246861][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1471'. [ 528.247107][T12407] bridge_slave_1: left allmulticast mode [ 528.247546][T12407] bridge_slave_1: left promiscuous mode [ 528.269333][T12407] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.296189][T12407] bridge_slave_0: left allmulticast mode [ 528.297167][T12407] bridge_slave_0: left promiscuous mode [ 528.297814][T12407] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.452998][ T31] audit: type=1400 audit(2000000574.728:2120): avc: denied { mounton } for pid=12405 comm="syz.9.1471" path="/162/debug/lru_gen" dev="debugfs" ino=3683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 530.214844][T12429] SELinux: invalid class [ 530.214978][T12429] SELinux: failed to load policy [ 530.259794][ T31] audit: type=1400 audit(2000000576.488:2121): avc: denied { load_policy } for pid=12427 comm="syz.9.1477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 530.401802][ T13] rpcbind: server 127.0.0.1 not responding, timed out [ 530.764516][ T31] audit: type=1400 audit(2000000577.038:2122): avc: denied { write } for pid=12411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.788750][ T31] audit: type=1400 audit(2000000577.038:2123): avc: denied { read } for pid=12436 comm="syz.7.1478" path="socket:[43005]" dev="sockfs" ino=43005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 530.791699][ T31] audit: type=1400 audit(2000000577.068:2124): avc: denied { accept } for pid=12436 comm="syz.7.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 531.332650][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1479'. [ 531.332729][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1479'. [ 531.357937][T12451] batadv0: entered allmulticast mode [ 531.361632][T12451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.412313][ T5718] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 531.568920][ T5718] usb 10-1: device descriptor read/64, error -71 [ 531.588441][ T31] audit: type=1400 audit(2000000577.858:2125): avc: denied { write } for pid=12448 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.663893][ T8917] net_ratelimit: 18 callbacks suppressed [ 531.663934][ T8917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.664140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.818674][ T5718] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 531.983244][ T5718] usb 10-1: device descriptor read/64, error -71 [ 532.089131][ T5718] usb usb10-port1: attempt power cycle [ 532.338391][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.338591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.376448][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.376630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.429223][ T5718] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 532.451532][ T5718] usb 10-1: device descriptor read/8, error -71 [ 532.698988][ T5718] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 532.720521][ T5718] usb 10-1: device descriptor read/8, error -71 [ 532.811742][ T8917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.811946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.830472][ T5718] usb usb10-port1: unable to enumerate USB device [ 533.044908][T12475] tmpfs: Unknown parameter '' [ 533.062009][ T31] audit: type=1400 audit(2000000579.318:2126): avc: denied { remount } for pid=12472 comm="syz.7.1486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 533.268810][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.269376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.045795][ T31] audit: type=1400 audit(2000000580.318:2127): avc: denied { write } for pid=12458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.562043][ T31] audit: type=1400 audit(2000000580.838:2128): avc: denied { write } for pid=12488 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.998750][ T5718] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 535.078519][ T5785] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 535.160064][ T5718] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 535.164490][ T5718] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.164514][ T5718] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.164534][ T5718] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 535.164565][ T5718] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.183669][ T5718] usb 9-1: config 0 descriptor?? [ 535.300164][ T5785] usb 4-1: unable to get BOS descriptor or descriptor too short [ 535.308727][ T5785] usb 4-1: not running at top speed; connect to a high speed hub [ 535.316559][ T5785] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 535.327967][ T5785] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 535.328151][ T5785] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 535.328313][ T5785] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 535.328365][ T5785] usb 4-1: config 14 has no interface number 0 [ 535.328717][ T5785] usb 4-1: config 14 has no interface number 1 [ 535.328908][ T5785] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 535.329073][ T5785] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 535.329238][ T5785] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 535.329402][ T5785] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.329528][ T5785] usb 4-1: config 14 interface 57 has no altsetting 0 [ 535.329685][ T5785] usb 4-1: config 14 interface 228 has no altsetting 0 [ 535.432876][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.433042][ T5785] usb 4-1: Product: syz [ 535.433207][ T5785] usb 4-1: Manufacturer: syz [ 535.433359][ T5785] usb 4-1: SerialNumber: syz [ 535.694679][ T5718] usbhid 9-1:0.0: can't add hid device: -71 [ 535.694901][ T5718] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 535.712113][ T5718] usb 9-1: USB disconnect, device number 48 [ 536.087202][ T31] audit: type=1400 audit(2000000582.358:2129): avc: denied { write } for pid=12502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.577965][ T31] audit: type=1400 audit(2000000582.658:2130): avc: denied { bind } for pid=12501 comm="syz.3.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 537.285038][T12534] netlink: 'syz.7.1499': attribute type 1 has an invalid length. [ 537.285761][T12534] netlink: 'syz.7.1499': attribute type 1 has an invalid length. [ 538.088274][ T5939] net_ratelimit: 18 callbacks suppressed [ 538.088322][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.088467][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.100845][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.100976][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.451633][ T31] audit: type=1400 audit(2000000584.728:2131): avc: denied { write } for pid=12538 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.524090][T12539] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 538.550828][T12539] UDF-fs: Scanning with blocksize 512 failed [ 538.551782][T12539] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 538.551937][T12539] UDF-fs: Scanning with blocksize 1024 failed [ 538.552286][T12539] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 538.552410][T12539] UDF-fs: Scanning with blocksize 2048 failed [ 538.586758][ T5785] legousbtower 4-1:14.57: interrupt endpoints not found [ 538.700172][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.700484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.700793][ T5785] legousbtower 4-1:14.228: get version request failed: -71 [ 538.700896][ T5785] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 538.772024][ T5785] usb 4-1: USB disconnect, device number 75 [ 538.834460][T12539] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 538.834617][T12539] UDF-fs: Scanning with blocksize 4096 failed [ 538.928351][T12546] netlink: 'syz.8.1503': attribute type 10 has an invalid length. [ 539.163754][T12548] sg_write: data in/out 85/14 bytes for SCSI command 0x0-- guessing data in; [ 539.163754][T12548] program syz.3.1505 not setting count and/or reply_len properly [ 539.492821][T12554] vcan0: entered promiscuous mode [ 539.510774][T12554] jffs2: notice: (12554) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 539.528477][ T5785] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 539.579480][ T31] audit: type=1400 audit(2000000585.848:2132): avc: denied { write } for pid=12551 comm="syz.0.1507" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 539.623002][ T31] audit: type=1400 audit(2000000585.898:2133): avc: denied { add_name } for pid=12551 comm="syz.0.1507" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 539.712332][ T5785] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 539.718464][ T5785] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 539.718488][ T5785] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 539.718518][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.723339][ T31] audit: type=1400 audit(2000000585.998:2134): avc: denied { write } for pid=12551 comm="syz.0.1507" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 539.804672][ T5785] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 539.834630][ T5785] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 539.847813][ T31] audit: type=1400 audit(2000000585.998:2135): avc: denied { write } for pid=12551 comm="syz.0.1507" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 539.848724][ T31] audit: type=1400 audit(2000000586.118:2136): avc: denied { remove_name } for pid=12551 comm="syz.0.1507" name="file1" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 539.849028][ T31] audit: type=1400 audit(2000000586.118:2137): avc: denied { rename } for pid=12551 comm="syz.0.1507" name="file1" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 539.889491][ T343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.889691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.333800][ T9] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 540.342480][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1505'. [ 540.342649][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1505'. [ 540.521978][ T9] usb 9-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 540.534519][ T31] audit: type=1400 audit(2000000586.798:2138): avc: denied { write } for pid=12569 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 540.577076][ T9] usb 9-1: config 0 has an invalid interface number: 205 but max is 0 [ 540.577251][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.577410][ T9] usb 9-1: config 0 has no interface number 0 [ 540.577575][ T9] usb 9-1: config 0 interface 205 has no altsetting 0 [ 540.627741][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.627913][ T9] usb 9-1: Product: syz [ 540.628064][ T9] usb 9-1: Manufacturer: syz [ 540.628229][ T9] usb 9-1: SerialNumber: syz [ 540.719788][ T9] usb 9-1: config 0 descriptor?? [ 540.760373][ T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 540.760569][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 540.811648][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 540.833043][ T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 540.833251][ T9] usb 9-1: media controller created [ 540.834999][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 540.894258][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 540.900790][T12567] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 540.903482][T12567] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 540.904593][T12567] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 540.937674][ T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 540.969739][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input50 [ 540.988917][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 540.989103][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 541.009034][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.009268][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.010683][T12567] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 541.031951][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 541.046607][ T9] usb 9-1: USB disconnect, device number 49 [ 541.097643][ T5703] usb 4-1: USB disconnect, device number 76 [ 541.136610][ T5703] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 541.327401][ T5703] spcp8x5 4-1:1.0: device disconnected [ 541.425702][ T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 541.564821][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1517'. [ 541.617168][T12590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.716808][T12592] FAULT_INJECTION: forcing a failure. [ 541.716808][T12592] name failslab, interval 1, probability 0, space 0, times 0 [ 541.739600][T12592] CPU: 0 UID: 0 PID: 12592 Comm: syz.7.1518 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.739635][T12592] Tainted: [L]=SOFTLOCKUP [ 541.739643][T12592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 541.739654][T12592] Call Trace: [ 541.739661][T12592] [ 541.739668][T12592] dump_stack_lvl+0x100/0x190 [ 541.739709][T12592] should_fail_ex.cold+0x5/0xa [ 541.739735][T12592] should_failslab+0xc2/0x120 [ 541.739758][T12592] __kmalloc_cache_noprof+0x91/0x6d0 [ 541.739785][T12592] ? get_device_parent+0x260/0x4c0 [ 541.739803][T12592] ? get_device_parent+0x29a/0x4c0 [ 541.739824][T12592] get_device_parent+0x29a/0x4c0 [ 541.739843][T12592] device_add+0xc3b/0x1970 [ 541.739863][T12592] ? __pfx_dev_set_name+0x10/0x10 [ 541.739884][T12592] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 541.739903][T12592] ? __pfx_device_add+0x10/0x10 [ 541.739922][T12592] ? lockdep_init_map_type+0x5c/0x250 [ 541.739942][T12592] ? __init_waitqueue_head+0xca/0x150 [ 541.739973][T12592] wakeup_source_device_create+0x243/0x2e0 [ 541.739996][T12592] wakeup_source_sysfs_add+0x1c/0x90 [ 541.740016][T12592] wakeup_source_register+0x154/0x3e0 [ 541.740043][T12592] ep_create_wakeup_source+0x1df/0x2e0 [ 541.740066][T12592] ? __pfx_ep_create_wakeup_source+0x10/0x10 [ 541.740091][T12592] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 541.740114][T12592] ? do_epoll_ctl_file+0x10d0/0x36e0 [ 541.740143][T12592] do_epoll_ctl_file+0x1e26/0x36e0 [ 541.740174][T12592] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 541.740196][T12592] ? lock_acquire+0x1d1/0x380 [ 541.740212][T12592] ? __fget_files+0x34/0x3d0 [ 541.740232][T12592] ? find_held_lock+0x2b/0x80 [ 541.740254][T12592] ? __fget_files+0x215/0x3d0 [ 541.740277][T12592] ? __fget_files+0x21f/0x3d0 [ 541.740305][T12592] ? do_epoll_ctl+0xfd/0x1a0 [ 541.740328][T12592] do_epoll_ctl+0xfd/0x1a0 [ 541.740355][T12592] ? __pfx_do_epoll_ctl+0x10/0x10 [ 541.740390][T12592] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 541.740417][T12592] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 541.740441][T12592] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 541.740464][T12592] ? syscall_user_dispatch+0x76/0x130 [ 541.740491][T12592] do_syscall_64+0x123/0x790 [ 541.740514][T12592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.740534][T12592] RIP: 0033:0x7f4b3dd9e159 [ 541.740550][T12592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.740568][T12592] RSP: 002b:00007f4b3bff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 541.740588][T12592] RAX: ffffffffffffffda RBX: 00007f4b3e025fa0 RCX: 00007f4b3dd9e159 [ 541.740600][T12592] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 541.740612][T12592] RBP: 00007f4b3bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 541.740623][T12592] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 541.740634][T12592] R13: 00007f4b3e026038 R14: 00007f4b3e025fa0 R15: 00007ffebb03dce8 [ 541.740660][T12592] [ 542.539034][T12594] zero sized request [ 542.539223][ T31] audit: type=1400 audit(2000000588.819:2139): avc: denied { ioctl } for pid=12593 comm="syz.3.1519" path="/311/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 542.592002][T12597] tc_dump_action: action bad kind [ 543.055842][ T31] audit: type=1400 audit(2000000589.329:2140): avc: denied { read } for pid=12606 comm="syz.3.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 543.088214][ T10] usb 10-1: new full-speed USB device number 39 using dummy_hcd [ 543.219735][ T8918] net_ratelimit: 4 callbacks suppressed [ 543.219764][ T8918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.219980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.279381][ T10] usb 10-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 543.297057][ T10] usb 10-1: config 0 has an invalid interface number: 6 but max is 0 [ 543.308366][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.322444][ T10] usb 10-1: config 0 has no interface number 0 [ 543.322583][ T10] usb 10-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 543.322636][ T10] usb 10-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 543.342970][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.343176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.407141][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.407315][ T10] usb 10-1: Product: syz [ 543.407475][ T10] usb 10-1: Manufacturer: syz [ 543.407627][ T10] usb 10-1: SerialNumber: syz [ 543.436020][ T10] usb 10-1: config 0 descriptor?? [ 543.442844][T12604] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 543.443075][T12604] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 543.536577][ T10] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 543.780647][T12604] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1524'. [ 543.810780][ T10] usb 10-1: USB disconnect, device number 39 [ 543.860918][ T8917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.861105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.961396][T12614] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 544.625814][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 544.625994][ T31] audit: type=1400 audit(2000000590.899:2142): avc: denied { read } for pid=12617 comm="syz.8.1528" path="socket:[43873]" dev="sockfs" ino=43873 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 544.678538][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.678747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.043792][T12628] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1531'. [ 545.397825][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 545.409951][ T31] audit: type=1400 audit(2000000591.679:2143): avc: denied { lock } for pid=12627 comm="syz.3.1531" path="socket:[43898]" dev="sockfs" ino=43898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 545.425687][T12630] netlink: 'syz.7.1533': attribute type 1 has an invalid length. [ 545.718250][ T31] audit: type=1400 audit(2000000591.989:2144): avc: denied { read } for pid=12633 comm="syz.7.1535" name="/" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 545.718389][ T31] audit: type=1400 audit(2000000591.989:2145): avc: denied { open } for pid=12633 comm="syz.7.1535" path="/243/config" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 545.718569][ T31] audit: type=1400 audit(2000000591.989:2146): avc: denied { read } for pid=12633 comm="syz.7.1535" name="g1" dev="configfs" ino=15671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 546.972899][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.973105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.317346][ T31] audit: type=1400 audit(2000000593.589:2147): avc: denied { kexec_image_load } for pid=12640 comm="syz.9.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 547.868847][T12651] befs: (nbd8): unable to read superblock [ 547.878586][ T5718] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 548.054639][ T5718] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 548.057092][ T5718] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.057128][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 548.057149][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 548.057168][ T5718] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 548.057199][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.061323][T12656] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 548.061399][T12656] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 548.063956][ T5718] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 548.067359][ T5718] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 548.067415][ T5718] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 548.118184][ T5718] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 548.119548][ T5718] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 548.119604][ T5718] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 548.132320][ T5718] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 548.477732][ T5718] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 548.659475][ T5718] usb 10-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 548.674585][ T5718] usb 10-1: config 8 has an invalid interface number: 223 but max is 0 [ 548.674608][ T5718] usb 10-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 548.674624][ T5718] usb 10-1: config 8 has no interface number 0 [ 548.674653][ T5718] usb 10-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.694969][ T5718] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.694992][ T5718] usb 10-1: Product: syz [ 548.695006][ T5718] usb 10-1: Manufacturer: syz [ 548.695019][ T5718] usb 10-1: SerialNumber: syz [ 548.952428][ T5939] net_ratelimit: 2 callbacks suppressed [ 548.952463][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.952650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.084718][ T5691] usb 4-1: USB disconnect, device number 77 [ 549.096367][ T5691] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 549.127911][ T5691] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 549.131699][ T5691] keyspan 4-1:1.0: device disconnected [ 549.209228][ T8917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.209437][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.237740][ T31] audit: type=1400 audit(2000000595.509:2148): avc: denied { write } for pid=12663 comm="syz.8.1542" name="functions" dev="configfs" ino=15672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 549.619002][ T8917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.619189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.927325][T12672] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1545'. [ 550.007943][T12672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.018061][T12672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.073254][T12672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.073842][T12672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.116267][T12672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.116831][T12672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.926178][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.926406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.247071][ T5718] usb 10-1: USB disconnect, device number 40 [ 551.633752][ T31] audit: type=1400 audit(2000000597.889:2149): avc: denied { shutdown } for pid=12683 comm="syz.9.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 551.757513][ T10] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 552.038898][ T343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.039138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.107565][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 552.110744][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 552.274764][ T31] audit: type=1400 audit(2000000598.549:2150): avc: denied { rename } for pid=12685 comm="syz.7.1550" name="file0" dev="tmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 552.361603][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.361786][ T10] usb 9-1: Product: syz [ 552.361956][ T10] usb 9-1: Manufacturer: syz [ 552.362117][ T10] usb 9-1: SerialNumber: syz [ 552.408925][ T10] usb 9-1: config 0 descriptor?? [ 552.718252][T12682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.718621][T12682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.872516][ T31] audit: type=1326 audit(2000000599.149:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12673 comm="syz.3.1544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0c3b9e159 code=0x0 [ 552.947597][ T10] usb read operation failed. (-32) [ 553.358106][ T10] usb 9-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 553.359089][ T10] usb 9-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 553.359479][ T10] usb 9-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 553.365399][ T31] audit: type=1400 audit(2000000599.639:2152): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 553.627610][ T9] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 553.798964][ T9] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 553.844509][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.844694][ T9] usb 10-1: Product: syz [ 553.844708][ T9] usb 10-1: Manufacturer: syz [ 553.844722][ T9] usb 10-1: SerialNumber: syz [ 553.857543][ T9] usb 10-1: config 0 descriptor?? [ 554.291633][T12707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.292202][T12707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.485791][ T13] net_ratelimit: 4 callbacks suppressed [ 554.485824][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.486019][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.729888][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.730056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.018191][ T31] audit: type=1400 audit(2000000601.299:2153): avc: denied { view } for pid=12712 comm="syz.0.1547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 555.352634][ T8917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.352795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.504644][T12719] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 555.627940][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.628182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.800444][ T5691] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 556.211067][ T5691] usb 4-1: unable to get BOS descriptor or descriptor too short [ 556.211262][ T5691] usb 4-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 556.257276][ T5691] usb 4-1: config 1 has an invalid descriptor of length 194, skipping remainder of the config [ 556.257458][ T5691] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.406302][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.406483][ T5691] usb 4-1: Product: syz [ 556.406642][ T5691] usb 4-1: Manufacturer: syz [ 556.406793][ T5691] usb 4-1: SerialNumber: syz [ 556.487309][ T5703] usb 10-1: USB disconnect, device number 41 [ 556.917514][T12719] Bluetooth: hci0: unsupported parameter 5135 [ 556.917684][T12719] Bluetooth: hci0: unsupported parameter 8192 [ 556.917849][T12719] Bluetooth: hci0: unsupported parameter 5135 [ 556.918023][T12719] Bluetooth: hci0: unsupported parameter 8192 [ 557.068711][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.068928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.282058][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.282238][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.394424][ T5691] usb 4-1: 0:1 : does not exist [ 557.395249][ T5691] usb 4-1: 0:2 : does not exist [ 557.544101][ T5691] usb 4-1: USB disconnect, device number 78 [ 557.732888][ T7968] udevd[7968]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.906157][T12734] sg_write: data in/out 85/14 bytes for SCSI command 0x0-- guessing data in; [ 557.906157][T12734] program syz.7.1563 not setting count and/or reply_len properly [ 557.958443][T12734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.959135][T12734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.175919][T12734] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1563'. [ 558.219060][T12727] overlay: Unknown parameter 'smackfsdef' [ 558.401119][ T31] audit: type=1400 audit(2000000604.669:2154): avc: denied { connect } for pid=12725 comm="syz.9.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 558.663240][ T31] audit: type=1400 audit(2000000604.940:2155): avc: denied { create } for pid=5605 comm="syz-executor" name="#13" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 558.680152][ T31] audit: type=1400 audit(2000000604.940:2156): avc: denied { link } for pid=5605 comm="syz-executor" name="#13" dev="tmpfs" ino=1748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 559.827231][ C1] net_ratelimit: 4 callbacks suppressed [ 559.827285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.827614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.041912][T12756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8448 sclass=netlink_route_socket pid=12756 comm=syz.7.1567 [ 560.053452][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.053899][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.054360][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.054718][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.055133][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.055529][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.055933][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.056330][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.733714][ T31] audit: type=1400 audit(2000000607.010:2157): avc: denied { getopt } for pid=12757 comm="syz.8.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 560.754249][ T31] audit: type=1400 audit(2000000607.030:2158): avc: denied { read } for pid=12757 comm="syz.8.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 561.677190][ T5725] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 561.907126][ T5725] usb 10-1: Using ep0 maxpacket: 16 [ 561.911604][ T5725] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 561.961154][ T5725] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.961329][ T5725] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 561.984278][ T5725] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 561.984437][ T5725] usb 10-1: SerialNumber: syz [ 562.044971][ T5725] usb 10-1: 0:2 : does not exist [ 562.135852][T12771] mac80211_hwsim hwsim22 »»»»»»: renamed from wlan0 (while UP) [ 562.361648][T12768] ubi0: attaching mtd0 [ 562.363136][T12768] ubi0: scanning is finished [ 562.363170][T12768] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 562.578735][T12772] overlayfs: missing 'lowerdir' [ 562.583007][ T31] audit: type=1400 audit(2000000608.840:2159): avc: denied { mounton } for pid=12770 comm="syz.0.1574" path="/47/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 562.983158][T12768] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 562.997505][ T5725] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 563.208685][ T5725] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 563.331532][ T5725] usb 10-1: USB disconnect, device number 42 [ 563.409225][ T31] audit: type=1400 audit(2000000609.690:2160): avc: denied { ioctl } for pid=12775 comm="syz.7.1575" path="socket:[44687]" dev="sockfs" ino=44687 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 563.474993][ T7968] udevd[7968]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.117974][T12778] netlink: 'syz.9.1576': attribute type 9 has an invalid length. [ 564.134224][T12778] netlink: 'syz.9.1576': attribute type 6 has an invalid length. [ 564.146891][T12778] netlink: 'syz.9.1576': attribute type 7 has an invalid length. [ 564.155928][T12778] netlink: 'syz.9.1576': attribute type 8 has an invalid length. [ 564.267278][T12778] CIFS mount error: No usable UNC path provided in device string! [ 564.267278][T12778] [ 564.267770][T12778] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 564.353704][T12781] netlink: 'syz.7.1578': attribute type 5 has an invalid length. [ 564.414529][T12783] sg_write: data in/out 85/14 bytes for SCSI command 0x0-- guessing data in; [ 564.414529][T12783] program syz.0.1577 not setting count and/or reply_len properly [ 565.565315][T12790] net_ratelimit: 57 callbacks suppressed [ 565.565375][T12790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.565627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.867562][ T321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.868093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.260925][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.261108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.378143][ T31] audit: type=1400 audit(2000000612.660:2161): avc: denied { watch watch_reads } for pid=12795 comm="syz.8.1581" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 566.888842][ T8918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.889045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.017244][ T8918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.017462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.068376][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.068925][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.116786][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.117359][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.118554][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.118957][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.139239][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.139656][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.140408][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.140796][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.316756][ T5725] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 567.488127][ T5725] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 567.492587][ T5725] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 567.492610][ T5725] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.492627][ T5725] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 567.492659][ T5725] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.496938][ T5725] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 567.496958][ T5725] usb 10-1: Product: syz [ 567.496971][ T5725] usb 10-1: Manufacturer: syz [ 567.569829][ T5725] cdc_wdm 10-1:1.0: skipping garbage [ 567.570007][ T5725] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 567.711996][T12810] sg_write: data in/out 85/14 bytes for SCSI command 0x0-- guessing data in; [ 567.711996][T12810] program syz.8.1583 not setting count and/or reply_len properly [ 567.823848][ T5725] usb 10-1: USB disconnect, device number 43 [ 568.919932][ T31] audit: type=1400 audit(2000000615.200:2162): avc: denied { map } for pid=12817 comm="syz.0.1587" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 569.350276][ T31] audit: type=1400 audit(2000000615.630:2163): avc: denied { accept } for pid=12813 comm="syz.7.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 570.563248][T12829] FAULT_INJECTION: forcing a failure. [ 570.563248][T12829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.563435][T12829] CPU: 1 UID: 0 PID: 12829 Comm: syz.0.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.563460][T12829] Tainted: [L]=SOFTLOCKUP [ 570.563468][T12829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 570.563478][T12829] Call Trace: [ 570.563485][T12829] [ 570.563493][T12829] dump_stack_lvl+0x100/0x190 [ 570.563528][T12829] should_fail_ex.cold+0x5/0xa [ 570.563554][T12829] _copy_to_user+0x32/0xd0 [ 570.563583][T12829] simple_read_from_buffer+0xcb/0x170 [ 570.563607][T12829] proc_fail_nth_read+0x1af/0x230 [ 570.563629][T12829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 570.563651][T12829] ? rw_verify_area+0xce/0x6d0 [ 570.563676][T12829] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 570.563697][T12829] vfs_read+0x1e4/0xb40 [ 570.563724][T12829] ? lock_acquire+0x1d1/0x380 [ 570.563743][T12829] ? __fget_files+0x34/0x3d0 [ 570.563763][T12829] ? __pfx_vfs_read+0x10/0x10 [ 570.563787][T12829] ? find_held_lock+0x2b/0x80 [ 570.563812][T12829] ? __fget_files+0x215/0x3d0 [ 570.563838][T12829] ? __fget_files+0x21f/0x3d0 [ 570.563865][T12829] ksys_read+0x12a/0x250 [ 570.563892][T12829] ? __pfx_ksys_read+0x10/0x10 [ 570.563930][T12829] do_syscall_64+0x123/0x790 [ 570.563954][T12829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.563973][T12829] RIP: 0033:0x7f2b88b5e98e [ 570.563988][T12829] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 570.564005][T12829] RSP: 002b:00007f2b899d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 570.564024][T12829] RAX: ffffffffffffffda RBX: 00007f2b899d56c0 RCX: 00007f2b88b5e98e [ 570.564036][T12829] RDX: 000000000000000f RSI: 00007f2b899d50a0 RDI: 0000000000000006 [ 570.564047][T12829] RBP: 00007f2b899d5090 R08: 0000000000000000 R09: 0000000000000000 [ 570.564058][T12829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.564069][T12829] R13: 00007f2b88e26038 R14: 00007f2b88e25fa0 R15: 00007ffc8ae4da78 [ 570.564094][T12829] [ 570.717100][ T5939] net_ratelimit: 4 callbacks suppressed [ 570.717117][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.717318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.986448][ T5703] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 571.152893][ T5703] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 571.164139][ T5703] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.198965][ T5703] usb 10-1: config 0 descriptor?? [ 571.205990][ T5703] cp210x 10-1:0.0: cp210x converter detected [ 571.408658][ T5703] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 571.408835][ T5703] cp210x 10-1:0.0: querying part number failed [ 571.434825][ T5703] usb 10-1: cp210x converter now attached to ttyUSB0 [ 571.936148][ T8917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.936366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.999147][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.999299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.879420][T12840] netdevsim netdevsim7: loading /lib/firmware// failed with error -22 [ 572.879556][T12840] netdevsim netdevsim7: Direct firmware load for / failed with error -22 [ 572.879668][T12840] netdevsim netdevsim7: Falling back to sysfs fallback for: / [ 573.553771][ T5691] usb 10-1: USB disconnect, device number 44 [ 573.561075][ T31] audit: type=1400 audit(2000000619.830:2164): avc: denied { setopt } for pid=12852 comm="syz.0.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 573.587423][ T5691] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 573.596013][ T5691] cp210x 10-1:0.0: device disconnected [ 573.879526][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.879754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.190401][ T31] audit: type=1400 audit(2000000620.470:2165): avc: denied { read append } for pid=12856 comm="syz.9.1601" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 574.190587][ T31] audit: type=1400 audit(2000000620.470:2166): avc: denied { open } for pid=12856 comm="syz.9.1601" path="/dev/rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 574.299203][ T31] audit: type=1400 audit(2000000620.580:2167): avc: denied { ioctl } for pid=12856 comm="syz.9.1601" path="/dev/rtc0" dev="devtmpfs" ino=915 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 574.480736][ T9764] bond0: (slave syz_tun): Releasing backup interface [ 574.638416][ T5599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 574.661472][ T5599] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 574.670238][ T5599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 574.680301][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 574.688698][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 574.803294][T12866] netlink: 'syz.8.1600': attribute type 5 has an invalid length. [ 574.832503][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 574.841694][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 574.851097][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 574.876391][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 574.877604][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 575.127951][ T8918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.128190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.726203][ T5691] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 575.856474][ T5691] usb 10-1: device descriptor read/64, error -71 [ 576.071581][T12877] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1598'. [ 576.084671][ T8917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.096442][ T5691] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 576.105635][T12878] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1598'. [ 576.226350][ T5691] usb 10-1: device descriptor read/64, error -71 [ 576.244689][T12877] 8021q: VLANs not supported on ip_vti0 [ 576.336722][ T5691] usb usb10-port1: attempt power cycle [ 576.430088][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.432219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.501042][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.501219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.588894][T12885] comedi comedi1: comedi_config --init_data is deprecated [ 576.676160][ T5691] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 576.697251][ T5691] usb 10-1: device descriptor read/8, error -71 [ 576.730931][ T8917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.940747][ T5691] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 576.956360][ T5611] Bluetooth: hci2: command tx timeout [ 576.973525][ T5691] usb 10-1: device descriptor read/8, error -71 [ 577.011041][ T8917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.076528][ T5691] usb usb10-port1: unable to enumerate USB device [ 577.381362][T12896] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 577.382429][ T8917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.596294][ T343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.596504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.754042][T12902] comedi comedi3: no devices specified [ 577.782915][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.784518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.368863][ T8917] macvlan2: left allmulticast mode [ 578.369025][ T8917] ip6gretap0: left allmulticast mode [ 578.429596][ T8917] macvlan2: left promiscuous mode [ 578.430625][ T8917] bridge0: port 3(macvlan2) entered disabled state [ 578.485672][ T8917] bridge_slave_1: left allmulticast mode [ 578.486403][ T8917] bridge_slave_1: left promiscuous mode [ 578.488509][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.736549][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.736784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.041676][ T5611] Bluetooth: hci2: command tx timeout [ 581.107220][ T5611] Bluetooth: hci2: command tx timeout [ 581.735431][ T8918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.735613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.856143][ T7822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.856375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.887610][T12933] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1614'. [ 583.053919][ T31] audit: type=1400 audit(2000000629.321:2168): avc: denied { write } for pid=12906 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.096280][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.096563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.185827][ T5611] Bluetooth: hci2: command tx timeout [ 583.264908][ T31] audit: type=1400 audit(2000000629.541:2169): avc: denied { write } for pid=12937 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.519895][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.520193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.695510][ T8917] bond0 (unregistering): (slave erspan0): Releasing backup interface [ 583.768495][ T31] audit: type=1400 audit(2000000630.051:2170): avc: denied { read append } for pid=12939 comm="syz.9.1615" name="btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 583.773107][ T31] audit: type=1400 audit(2000000630.051:2171): avc: denied { open } for pid=12939 comm="syz.9.1615" path="/dev/btrfs-control" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 584.367693][ T427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.367932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.773234][ T8917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.876824][ T8917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.940775][ T8917] bond0 (unregistering): Released all slaves [ 585.069367][ T8917] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 585.069545][ T8917] veth0_to_bond: left promiscuous mode [ 585.070390][ T8917] veth0_to_bond: left allmulticast mode [ 585.153113][ T8917] bond1 (unregistering): Released all slaves [ 585.225935][ T8917] bond2 (unregistering): Released all slaves [ 585.291727][ T31] audit: type=1400 audit(2000000631.571:2172): avc: denied { map } for pid=12946 comm="syz.0.1617" path="/dev/dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 585.291913][ T31] audit: type=1400 audit(2000000631.571:2173): avc: denied { execute } for pid=12946 comm="syz.0.1617" path="/dev/dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 585.330408][ T8917] bond3 (unregistering): Released all slaves [ 585.555444][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 585.564216][T12951] netlink: 'syz.9.1618': attribute type 4 has an invalid length. [ 585.744907][ T8917] tipc: Disabling bearer [ 585.757113][ T8917] tipc: Left network mode [ 586.105515][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1619'. [ 586.335003][ T31] audit: type=1400 audit(2000000632.611:2174): avc: denied { read } for pid=12963 comm="syz.8.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 586.837860][ T427] net_ratelimit: 2 callbacks suppressed [ 586.837904][ T427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.838127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.477856][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.478043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.524877][T12964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.239322][T12982] netlink: Unknown conntrack attr (0) [ 588.239500][T12982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.335829][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.336089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.310312][ T7822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.310504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.731270][ T8917] hsr_slave_0: left promiscuous mode [ 589.735018][ T8917] hsr_slave_1: left promiscuous mode [ 590.603819][ T31] audit: type=1400 audit(2000000636.881:2175): avc: denied { write } for pid=12970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.738370][ T8917] veth1_macvtap: left promiscuous mode [ 590.738795][ T8917] veth0_macvtap: left promiscuous mode [ 590.739620][ T8917] veth1_vlan: left promiscuous mode [ 590.740675][ T8917] veth0_vlan: left promiscuous mode [ 591.255291][ T31] audit: type=1400 audit(2000000637.531:2176): avc: denied { write } for pid=13005 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.185621][ T6510] net_ratelimit: 4 callbacks suppressed [ 592.185663][ T6510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.185875][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.106882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.107784][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.121378][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.121527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.586983][ T427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.587215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.766815][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.767034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.982220][ T8917] team0 (unregistering): Port device team_slave_1 removed [ 595.181959][ T8917] team0 (unregistering): Port device team_slave_0 removed [ 595.324945][ T31] audit: type=1400 audit(2000000641.592:2177): avc: denied { ioctl } for pid=13012 comm="syz.9.1630" path="socket:[45940]" dev="sockfs" ino=45940 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 596.437878][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 597.225147][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1632'. [ 597.382951][T12865] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.383464][T12865] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.383670][T12865] bridge_slave_0: entered allmulticast mode [ 597.386074][T12865] bridge_slave_0: entered promiscuous mode [ 597.394086][T12865] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.394435][T12865] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.394637][T12865] bridge_slave_1: entered allmulticast mode [ 597.398421][T12865] bridge_slave_1: entered promiscuous mode [ 597.884248][T12865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.913396][T12865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.955105][ T8917] IPVS: stop unused estimator thread 0... [ 598.040491][T12865] team0: Port device team_slave_0 added [ 598.083559][T12865] team0: Port device team_slave_1 added [ 598.134957][T12865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.134985][T12865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.135017][T12865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.138037][T12865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.138049][T12865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.138068][T12865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.202386][T12865] hsr_slave_0: entered promiscuous mode [ 598.207564][T12865] hsr_slave_1: entered promiscuous mode [ 598.209737][T12865] debugfs: 'hsr0' already exists in 'hsr' [ 598.209753][T12865] Cannot create hsr debugfs directory [ 598.224869][ T31] audit: type=1400 audit(2000000644.472:2178): avc: denied { ioctl } for pid=13042 comm="syz.0.1636" path="socket:[46731]" dev="sockfs" ino=46731 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 598.224910][ T31] audit: type=1400 audit(2000000644.472:2179): avc: denied { name_bind } for pid=13042 comm="syz.0.1636" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 598.407055][ T7822] net_ratelimit: 6 callbacks suppressed [ 598.407110][ T7822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.407303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.459053][ T31] audit: type=1400 audit(2000000644.732:2180): avc: denied { write } for pid=13039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 598.632141][T13064] ------------[ cut here ]------------ [ 598.639735][T13064] UBSAN: array-index-out-of-bounds in kernel/bpf/disasm.c:306:21 [ 598.639780][T13064] index 3 is out of range for type 'char *[3]' [ 598.639801][T13064] CPU: 1 UID: 0 PID: 13064 Comm: syz.7.1638 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.639827][T13064] Tainted: [L]=SOFTLOCKUP [ 598.639834][T13064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 598.639846][T13064] Call Trace: [ 598.639852][T13064] [ 598.639860][T13064] dump_stack_lvl+0x100/0x190 [ 598.639893][T13064] ubsan_epilogue+0xa/0x30 [ 598.639918][T13064] __ubsan_handle_out_of_bounds+0xcc/0xf0 [ 598.639948][T13064] print_bpf_insn+0x2969/0x2a10 [ 598.639968][T13064] ? __pfx_disasm_print+0x10/0x10 [ 598.639991][T13064] ? __pfx_print_bpf_insn+0x10/0x10 [ 598.640013][T13064] ? _copy_to_user+0xaf/0xd0 [ 598.640041][T13064] ? bpf_verifier_vlog+0x19d/0x6d0 [ 598.640072][T13064] diag_print_insn_context+0x3ab/0x9b0 [ 598.640100][T13064] ? __pfx_diag_print_insn_context+0x10/0x10 [ 598.640128][T13064] ? __pfx_disasm_print+0x10/0x10 [ 598.640147][T13064] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 598.640170][T13064] ? diag_print_wrapped_prefixed+0x2ba/0x330 [ 598.640196][T13064] bpf_diag_source+0x698/0x1540 [ 598.640218][T13064] ? __might_fault+0xc5/0x140 [ 598.640255][T13064] ? __pfx_bpf_diag_source+0x10/0x10 [ 598.640276][T13064] ? bpf_verifier_vlog+0x19d/0x6d0 ** replaying previous printk message ** [ 598.640276][T13064] ? bpf_verifier_vlog+0x19d/0x6d0 [ 598.640307][T13064] ? diag_write+0x121/0x170 [ 598.640328][T13064] ? __pfx_diag_write+0x10/0x10 [ 598.640349][T13064] ? diag_vprint_indented+0x70/0xe0 [ 598.640370][T13064] ? diag_vprint_indented+0x9d/0xe0 [ 598.640390][T13064] ? kfree+0x22b/0x6d0 [ 598.640420][T13064] bpf_diag_program_structure+0x200/0x290 [ 598.640445][T13064] ? __pfx_bpf_diag_program_structure+0x10/0x10 [ 598.640468][T13064] ? __pfx_verbose+0x10/0x10 [ 598.640488][T13064] ? __pfx_cmp_subprogs+0x10/0x10 [ 598.640508][T13064] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 598.640528][T13064] ? bpf_find_containing_subprog+0x17f/0x1e0 [ 598.640557][T13064] bpf_check+0x5914/0xa7c0 [ 598.640582][T13064] ? __css_rstat_updated+0x1ce/0x590 [ 598.640601][T13064] ? __lock_acquire+0x4c5/0x1ec0 [ 598.640637][T13064] ? __pfx_bpf_check+0x10/0x10 [ 598.640659][T13064] ? lock_acquire+0x1d1/0x380 [ 598.640675][T13064] ? bpf_prog_load+0x1a09/0x2a80 [ 598.640697][T13064] ? find_held_lock+0x2b/0x80 [ 598.640721][T13064] ? bpf_prog_load+0x1a09/0x2a80 [ 598.640749][T13064] ? __asan_memset+0x23/0x50 [ 598.640789][T13064] ? bpf_prog_load+0x1ac3/0x2a80 [ 598.640811][T13064] bpf_prog_load+0x1ac3/0x2a80 [ 598.640839][T13064] ? __pfx_bpf_prog_load+0x10/0x10 [ 598.640884][T13064] __sys_bpf+0x1f46/0x4a30 [ 598.640919][T13064] ? __pfx___sys_bpf+0x10/0x10 [ 598.640946][T13064] ? find_held_lock+0x2b/0x80 [ 598.640969][T13064] ? futex_wake+0x4ea/0x5e0 [ 598.641014][T13064] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 598.641037][T13064] ? do_vfs_ioctl+0x226/0x13e0 [ 598.641079][T13064] ? __x64_sys_futex+0x34f/0x4d0 [ 598.641102][T13064] ? __x64_sys_futex+0x358/0x4d0 [ 598.641128][T13064] ? xfd_validate_state+0x129/0x190 [ 598.641152][T13064] ? __x64_sys_bpf+0xce/0x140 [ 598.641169][T13064] __x64_sys_bpf+0xce/0x140 [ 598.641188][T13064] ? do_syscall_64+0xae/0x790 [ 598.641210][T13064] do_syscall_64+0x123/0x790 [ 598.641232][T13064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.641252][T13064] RIP: 0033:0x7f4b3dd9e159 [ 598.641268][T13064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.641285][T13064] RSP: 002b:00007f4b3bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.641305][T13064] RAX: ffffffffffffffda RBX: 00007f4b3e025fa0 RCX: 00007f4b3dd9e159 [ 598.641317][T13064] RDX: 0000000000000094 RSI: 00002000000012c0 RDI: 0000000000000005 [ 598.641329][T13064] RBP: 00007f4b3de35024 R08: 0000000000000000 R09: 0000000000000000 [ 598.641340][T13064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.641351][T13064] R13: 00007f4b3e026038 R14: 00007f4b3e025fa0 R15: 00007ffebb03dce8 [ 598.641377][T13064] [ 598.692699][ T31] audit: type=1400 audit(2000000644.972:2181): avc: denied { write } for pid=5585 comm="syz-executor" path="pipe:[5409]" dev="pipefs" ino=5409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 598.779216][T13064] ---[ end trace ]--- [ 598.779230][T13064] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 599.079972][T13064] CPU: 0 UID: 0 PID: 13064 Comm: syz.7.1638 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.090902][T13064] Tainted: [L]=SOFTLOCKUP [ 599.095220][T13064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 599.105276][T13064] Call Trace: [ 599.108550][T13064] [ 599.111466][T13064] dump_stack_lvl+0x100/0x190 [ 599.116137][T13064] vpanic+0x553/0x970 [ 599.120122][T13064] ? __pfx_vpanic+0x10/0x10 [ 599.124610][T13064] ? irqentry_exit+0x24d/0xa10 [ 599.129362][T13064] panic+0xd1/0xe0 [ 599.133067][T13064] ? __pfx_panic+0x10/0x10 [ 599.137469][T13064] ? dump_stack_lvl+0x176/0x190 [ 599.142307][T13064] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 599.148361][T13064] check_panic_on_warn.cold+0x19/0x34 [ 599.153719][T13064] __ubsan_handle_out_of_bounds+0xcc/0xf0 [ 599.159432][T13064] print_bpf_insn+0x2969/0x2a10 [ 599.164275][T13064] ? __pfx_disasm_print+0x10/0x10 [ 599.169285][T13064] ? __pfx_print_bpf_insn+0x10/0x10 [ 599.174469][T13064] ? _copy_to_user+0xaf/0xd0 [ 599.179052][T13064] ? bpf_verifier_vlog+0x19d/0x6d0 [ 599.184155][T13064] diag_print_insn_context+0x3ab/0x9b0 [ 599.189607][T13064] ? __pfx_diag_print_insn_context+0x10/0x10 [ 599.195577][T13064] ? __pfx_disasm_print+0x10/0x10 [ 599.200585][T13064] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 599.206029][T13064] ? diag_print_wrapped_prefixed+0x2ba/0x330 [ 599.211997][T13064] bpf_diag_source+0x698/0x1540 [ 599.216840][T13064] ? __might_fault+0xc5/0x140 [ 599.221526][T13064] ? __pfx_bpf_diag_source+0x10/0x10 [ 599.226801][T13064] ? bpf_verifier_vlog+0x19d/0x6d0 [ 599.231906][T13064] ? diag_write+0x121/0x170 [ 599.236394][T13064] ? __pfx_diag_write+0x10/0x10 [ 599.241245][T13064] ? diag_vprint_indented+0x70/0xe0 [ 599.246432][T13064] ? diag_vprint_indented+0x9d/0xe0 [ 599.251614][T13064] ? kfree+0x22b/0x6d0 [ 599.255675][T13064] bpf_diag_program_structure+0x200/0x290 [ 599.261384][T13064] ? __pfx_bpf_diag_program_structure+0x10/0x10 [ 599.267611][T13064] ? __pfx_verbose+0x10/0x10 [ 599.272186][T13064] ? __pfx_cmp_subprogs+0x10/0x10 [ 599.277192][T13064] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 599.282721][T13064] ? bpf_find_containing_subprog+0x17f/0x1e0 [ 599.288691][T13064] bpf_check+0x5914/0xa7c0 [ 599.293094][T13064] ? __css_rstat_updated+0x1ce/0x590 [ 599.298363][T13064] ? __lock_acquire+0x4c5/0x1ec0 [ 599.303309][T13064] ? __pfx_bpf_check+0x10/0x10 [ 599.308057][T13064] ? lock_acquire+0x1d1/0x380 [ 599.312718][T13064] ? bpf_prog_load+0x1a09/0x2a80 [ 599.317641][T13064] ? find_held_lock+0x2b/0x80 [ 599.322306][T13064] ? bpf_prog_load+0x1a09/0x2a80 [ 599.327232][T13064] ? __asan_memset+0x23/0x50 [ 599.331822][T13064] ? bpf_prog_load+0x1ac3/0x2a80 [ 599.336745][T13064] bpf_prog_load+0x1ac3/0x2a80 [ 599.341503][T13064] ? __pfx_bpf_prog_load+0x10/0x10 [ 599.346615][T13064] __sys_bpf+0x1f46/0x4a30 [ 599.351026][T13064] ? __pfx___sys_bpf+0x10/0x10 [ 599.355777][T13064] ? find_held_lock+0x2b/0x80 [ 599.360441][T13064] ? futex_wake+0x4ea/0x5e0 [ 599.364944][T13064] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 599.370824][T13064] ? do_vfs_ioctl+0x226/0x13e0 [ 599.375591][T13064] ? __x64_sys_futex+0x34f/0x4d0 [ 599.380532][T13064] ? __x64_sys_futex+0x358/0x4d0 [ 599.385460][T13064] ? xfd_validate_state+0x129/0x190 [ 599.390643][T13064] ? __x64_sys_bpf+0xce/0x140 [ 599.395302][T13064] __x64_sys_bpf+0xce/0x140 [ 599.399788][T13064] ? do_syscall_64+0xae/0x790 [ 599.404451][T13064] do_syscall_64+0x123/0x790 [ 599.409025][T13064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.414903][T13064] RIP: 0033:0x7f4b3dd9e159 [ 599.419302][T13064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.438901][T13064] RSP: 002b:00007f4b3bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 599.447297][T13064] RAX: ffffffffffffffda RBX: 00007f4b3e025fa0 RCX: 00007f4b3dd9e159 [ 599.455265][T13064] RDX: 0000000000000094 RSI: 00002000000012c0 RDI: 0000000000000005 [ 599.463216][T13064] RBP: 00007f4b3de35024 R08: 0000000000000000 R09: 0000000000000000 [ 599.471172][T13064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.479124][T13064] R13: 00007f4b3e026038 R14: 00007f4b3e025fa0 R15: 00007ffebb03dce8 [ 599.487088][T13064] [ 599.490276][T13064] Kernel Offset: disabled [ 599.494574][T13064] Rebooting in 86400 seconds..