last executing test programs: 6m49.047614767s ago: executing program 1 (id=924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) setns(0xc9, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/llc/core\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x2020) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r3], 0x48}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$swradio(0x0, 0x0, 0x2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x20, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f0000000640)) 6m45.758072793s ago: executing program 1 (id=937): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x7) r0 = socket(0x10, 0x3, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000300), 0x0) r2 = open(&(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x141142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000014) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:usbtty_device_t:s0\x00', 0x25, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x44, r7, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001880)={'team_slave_0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x4, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x38}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x8738}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 6m43.875925611s ago: executing program 1 (id=944): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x8000000000000000, 0x12) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x1800, 0x0) pread64(r3, &(0x7f0000000580)=""/198, 0xc6, 0x10000) socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000023c0)={&(0x7f0000001000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000000)="5df087d114aeef619d906c1293a615a2100de72cd72cb8c8d1fa8119e958e6443d697fa59cdb599250f84a15921e0bbc34546ca2ae42a837a9b3a360d3448ca7e9a7b1cd013594160e410361def5fa8a15dc0c6d6e52fe81c671048296668f6698dc2361bc64ea6aefa6e26a9961c470a38b453fbfdbf9fea6a467f876e9d9e431a4824917ffb203e2d9e6bd97572842390f9ee5a6c3fecc826db423beb141b34b4de126e87cad4a62f5d7c09afcb8571fa9df0abb", 0xb5}, {&(0x7f0000000240)="89ce2d2abef6cbe04c3de8e71feeddd212", 0x11}, {&(0x7f0000000100)}], 0x3}, 0xd4) 6m43.784831414s ago: executing program 1 (id=945): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x31079000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000080)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES64=r2, @ANYRES16=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300070000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902270001010080320904000003fe03000007058102000200070502020002000705830340"], 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000140)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat(r0, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r6, 0x40104d01, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 6m43.138468912s ago: executing program 1 (id=947): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008f}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@deltclass={0x4c, 0x29, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x6}, {0x1, 0x4}, {0xc, 0xa}}, [@tclass_kind_options=@c_clsact, @tclass_kind_options=@c_qfq={{}, {0x0, 0x2, [@TCA_QFQ_WEIGHT={0x0, 0x1, 0xf9b9}, @TCA_QFQ_LMAX={0x0, 0x2, 0x40}, @TCA_QFQ_LMAX={0x0, 0x2, 0x5}, @TCA_QFQ_WEIGHT={0x0, 0x1, 0x7}, @TCA_QFQ_WEIGHT={0x0, 0x1, 0x279f}, @TCA_QFQ_LMAX={0x0, 0x2, 0x8}, @TCA_QFQ_WEIGHT={0x0, 0x1, 0x80}, @TCA_QFQ_WEIGHT={0x0, 0x1, 0xe0b}, @TCA_QFQ_LMAX, @TCA_QFQ_LMAX={0x0, 0x2, 0xfffffffe}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x1}}, @TCA_RATE={0x0, 0x5, {0xc, 0x8}}, @TCA_RATE={0x4, 0x5, {0x25, 0x7}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20008801) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x1, 0x829, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x12, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') name_to_handle_at(r4, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)=@xfs={0x1c, 0x81, {0x5, 0x1000, 0xc, 0xfffffffc}}, &(0x7f0000001500), 0x200) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(&(0x7f0000000280), 0x101, 0x4b0c80) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000044) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d3, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlim']) chdir(&(0x7f0000000100)='./file0\x00') 6m41.575380036s ago: executing program 1 (id=953): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) lseek(r1, 0x10005, 0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x1, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x4000) syz_emit_ethernet(0xa, 0x0, &(0x7f00000001c0)={0x10004, 0x1, [0xb8f, 0x4a7, 0xb55, 0xcd3]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$igmp6(0xa, 0x3, 0x2) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, &(0x7f0000000080)) r4 = syz_usb_connect(0x2, 0xc7, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b240401015955593200001000800000aa00389b711001000000001e2405"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0xc001) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r6, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) 6m41.189472134s ago: executing program 32 (id=953): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) lseek(r1, 0x10005, 0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x1, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x4000) syz_emit_ethernet(0xa, 0x0, &(0x7f00000001c0)={0x10004, 0x1, [0xb8f, 0x4a7, 0xb55, 0xcd3]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$igmp6(0xa, 0x3, 0x2) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, 0x0, &(0x7f0000000080)) r4 = syz_usb_connect(0x2, 0xc7, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b240401015955593200001000800000aa00389b711001000000001e2405"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0xc001) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r6, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) 5m3.352310545s ago: executing program 5 (id=1311): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='100000', 0x6) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r2 = userfaultfd(0x80001) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f01"], 0x4) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000260000000007000000000000e5000000000000000000"], 0x50) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52647600", 0x0, 0x5, 0x4000004, 0xffffffde}, 0x3c) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40881}, 0x4004000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) 5m2.058406306s ago: executing program 5 (id=1315): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x73}}}}, [@chandef_params, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x142}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40000c4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000480)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_ABS_SETUP(r5, 0x401c5504, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0xa, 0x5, 0xfff, 0xf, 0x8, 0x9, 0x1001, 0x92e}}) clock_adjtime(0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) r7 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x2) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x280, 0x1e0, 0x42474752, 0x1, 0x280, 0x4b000, 0x8}}) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000600)=0x1) 5m0.726025212s ago: executing program 5 (id=1317): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={{{}, {0x9}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x5801, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0x3}, @void, @void, @void, @void, @void}, 0x31) r1 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='\x00', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r2, r1}, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000740), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000001740)={r1, 0x0, r3}, &(0x7f0000001780)=""/248, 0xf8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:03.0/resource\x00', 0x0, 0x0) nanosleep(&(0x7f00000000c0)={0x0, 0x2faf080}, &(0x7f0000000100)) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000180)=@mgmt_frame=@auth={{{}, {}, @device_a, @broadcast, @from_mac=@broadcast, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f00000001c0)={0x0, 0x2faf080}, &(0x7f00000002c0)) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x28) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, &(0x7f0000000440)) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) 4m58.884074814s ago: executing program 5 (id=1328): r0 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x7, @sliced={0x6, [0xc04, 0xfffe, 0x5, 0x80, 0x5, 0x3, 0x4, 0x101, 0x9, 0x7, 0x4, 0x8001, 0x2, 0x9, 0x7, 0x7fff, 0x8, 0x5, 0xeca, 0x0, 0xdca1, 0x1, 0x6, 0xf, 0xe, 0x1, 0x3, 0x2e29, 0x5, 0x4, 0x5, 0x7, 0x0, 0x2, 0x1, 0x8000, 0x200, 0xfffb, 0x80, 0x7, 0x4007, 0x6, 0x7, 0x9, 0xf48c, 0xc, 0xec, 0x4], 0x8}}) 4m58.83710175s ago: executing program 5 (id=1329): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000540)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf250300000014000700fe8800000000000000000000000114000900fe880000000000000000000000000101ffffffff4e2000a4b70006007f0000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x80) io_setup(0x8, &(0x7f0000000600)=0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f00000004c0)) io_submit(r2, 0x1, &(0x7f0000002380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 4m58.674175428s ago: executing program 5 (id=1330): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x24}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000000)) 4m43.110694096s ago: executing program 33 (id=1330): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x24}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d2, &(0x7f0000000000)) 3m49.483711435s ago: executing program 4 (id=1550): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:127.0.0.1', 0x33) 3m49.215896459s ago: executing program 4 (id=1552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0xeefd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000680), 0x629, r0}, 0x38) syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff0101300209"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffff450000090000000024a746df28b7cd334e00000111009078e00000019bace2387c98a21674bdb53e7ed98bec8d7e5158a33dc0fcde5cb7e294916cae68f64126e73d9e334f9ab97742774593060e355e3c160fc462917b03310d4e175e43a8278f04a5b4af6a5054f03f2a597ba21961e752c038bf75065ac23f6cf59c2040"], 0x0) syz_clone3(&(0x7f0000001680)={0x4000000, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000340), {0x22}, &(0x7f0000000380)=""/147, 0x93, &(0x7f0000000680)=""/4096, &(0x7f0000001940), 0x7}, 0xa9) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r9 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r7}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@chain={'key_or_keyring:', r9}) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r11 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10, @ANYBLOB="c2ff51a58590ea94aaaefe0bd57ae1"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m44.657742225s ago: executing program 4 (id=1572): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000007000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3m43.527872757s ago: executing program 4 (id=1574): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000300)) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200), 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000980)="310ad606b24bc1c77ba4087dc47fd8cb4695d07ccd2b58170d0d0a7e9572d7dbd3ea708b938b818e9137081b997cc83c3ee93be5b4609dbef88bde07121a2dc65bc04578e0cd9ff5589c1b9ccff2a284abf0a623f2c2e29f6e55eab04d693dc19f50ef53ad148e16922bbf2999a7929ba5c1c6fb5ee5251ead59a9ea6e47bd3d16", 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='loop\n', 0x5) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r6, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0) 3m42.565600315s ago: executing program 4 (id=1584): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) eventfd(0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/devices/00:00/id\x00', 0x0, 0x0) read(r0, &(0x7f0000000200), 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x1, 0x8}, 0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x20000000) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40046f41, &(0x7f0000000440)=0x20000) write$cgroup_int(r6, &(0x7f0000000140)=0x3, 0x12) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) close_range(r1, r1, 0x2) 3m41.027065134s ago: executing program 4 (id=1586): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x7, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x3, {0x2, 0xf0, 0x4}, 0xfd}, 0x18) 3m25.626747117s ago: executing program 34 (id=1586): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x7, 0xfffa}, {0x7, 0xffff}, {0x3, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x3, {0x2, 0xf0, 0x4}, 0xfd}, 0x18) 2m15.440814346s ago: executing program 0 (id=1902): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) r2 = dup(r1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="3b6b349f51e880e82000"/19], 0x24}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) r7 = semget$private(0x0, 0x4, 0x108) semctl$GETALL(r7, 0x0, 0xd, &(0x7f00000001c0)=""/13) openat$audio(0xffffff9c, &(0x7f0000000100), 0x210001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001200192340834b80040d8c560a067f0202ff000000000000000558000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) 2m14.546777464s ago: executing program 0 (id=1905): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0xc, 0x1, 0x7}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x48011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$netlink(0xffffffffffffffff, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000010a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa0500"/206], 0x610) socket(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000005c0)={0x101ff, 0x0, 0xe000, 0x2000, &(0x7f0000000000/0x2000)=nil, 0x7ff}) 2m13.227900384s ago: executing program 0 (id=1907): socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x49}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0xac}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) mq_timedreceive(r5, 0x0, 0x0, 0xfff, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4) read$char_usb(r7, &(0x7f0000000040)=""/236, 0xec) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x1fe, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x7, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x10001, 0xb06e}, 0x0, 0x0) 2m10.143048841s ago: executing program 0 (id=1912): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000440)=0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee01) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103900, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x449) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x40100, 0x8) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x641, 0x800002e, r5, 0x0) fcntl$notify(r5, 0x402, 0x1a) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56741, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0x7}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4006}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40010) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80800) setregid(0xee00, 0xffffffffffffffff) 2m6.187015826s ago: executing program 0 (id=1918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$ARCH_MAP_VDSO_64(0x1e, r3, 0x2, 0x2003) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket(0x3, 0xa, 0x2) r5 = syz_open_dev$audion(&(0x7f0000000000), 0xfffffffffffffff8, 0x303080) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000040)) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r4, 0x17, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x10b}, @NL80211_ATTR_SSID={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x6d8635c8d1aedd20}, 0x8000) 2m4.890760934s ago: executing program 0 (id=1924): mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) landlock_restrict_self(0xffffffffffffffff, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0x1a4}}, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000004c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_clone(0x200000, &(0x7f0000001140)="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", 0x1000, &(0x7f0000002140), &(0x7f0000002180), &(0x7f00000021c0)="6b6e1e5b79b6d09d1a194e132de3543a644bb2d8170d4d396642445bcacf6140ec121bd1970d332bcde13f92d926bd7f0857f73af48141103f5129a56ffacd4127f0988a0f6adf4b41788494877a210805dbddb32cbb88d49f8c856985736137eb36815173e76e120cc8821c89d7c855afae33f4773ba58bde495d01e141b86dc9e14e5db97d16f51144b2176c6a4c60f986ee11ac6af36f818b6efcefaccddf337c01500b") read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x41) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r10, 0x0, 0x3f00) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, 0x1403, 0x5, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x800) 1m48.765307822s ago: executing program 35 (id=1924): mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) landlock_restrict_self(0xffffffffffffffff, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0x1a4}}, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000004c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) r4 = syz_clone(0x200000, &(0x7f0000001140)="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", 0x1000, &(0x7f0000002140), &(0x7f0000002180), &(0x7f00000021c0)="6b6e1e5b79b6d09d1a194e132de3543a644bb2d8170d4d396642445bcacf6140ec121bd1970d332bcde13f92d926bd7f0857f73af48141103f5129a56ffacd4127f0988a0f6adf4b41788494877a210805dbddb32cbb88d49f8c856985736137eb36815173e76e120cc8821c89d7c855afae33f4773ba58bde495d01e141b86dc9e14e5db97d16f51144b2176c6a4c60f986ee11ac6af36f818b6efcefaccddf337c01500b") read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000004340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004300)={&(0x7f00000042c0)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x41) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r10, 0x0, 0x3f00) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, 0x1403, 0x5, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x800) 23.479455596s ago: executing program 7 (id=2102): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x4a, 0x0, {0x7, 0x1f, 0x5, 0xffffffffd3110f4f, 0x9a64, 0x8002, 0x200, 0xffeffffd, 0x0, 0x0, 0x10, 0x103}}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x3}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x70bd25, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="05000000", @ANYRES16=r3, @ANYBLOB="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"], 0x198}}, 0x404c800) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) fchown(r7, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 18.926188893s ago: executing program 7 (id=2107): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={{{}, {0x9}, @device_a, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x5801, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0x3}, @void, @void, @void, @void, @void}, 0x31) r1 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='\x00', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r2, r1}, 0x0, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000740), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000001740)={r1, 0x0, r3}, &(0x7f0000001780)=""/248, 0xf8, &(0x7f00000018c0)={&(0x7f0000001880)={'sha384-generic\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/pci/devices/0000:00:03.0/resource\x00', 0x0, 0x0) nanosleep(&(0x7f00000000c0)={0x0, 0x2faf080}, &(0x7f0000000100)) syz_80211_inject_frame(0x0, &(0x7f0000000180)=@mgmt_frame=@auth={{{}, {}, @device_a, @broadcast, @from_mac=@broadcast, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f00000001c0)={0x0, 0x2faf080}, &(0x7f00000002c0)) syz_80211_inject_frame(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000080211000000ffffffffffffffffe6d8dd94b142fb7400000100010882848b960c121824c29d11666387ee3e5798dec9562f899c96035596f2c16c6d506c91440d7aef2973da53f533fefe83f830077a3f9fbdfb09ed2a6164e63df3297b616c6743e4454a7e251af9ace363513768510bd140854e4cd015b5d2bb3082e6888f46c7c29443a24c34d1b33acee564a6d03de788af26057349537ed4983008284a8d64df0bb1a7d838e1ff11e4bad954c07c166548108d928ff5ec4e382603b69233feaa96496b24de44dd8e3c90ecb547851305c4243c77afe350b540b791154d91ed9e08337952195548e75da42a439c61ef1ff2cecdbeb8e5e39c5680db87de6fd2d68e0d77701b5fa584e51173e3b4e1b9c40b4dc211434152253f0422a1027dcd2929b091d726"], 0x28) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, &(0x7f0000000440)) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) 16.847870391s ago: executing program 7 (id=2114): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) chmod(&(0x7f0000000000)='./config/cluster/ocfs2/heartbeat/dead_threshold\x00', 0x121) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/cluster/ocfs2/heartbeat/dead_threshold\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x5509, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x1, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETRSUBD(r1, 0x6410) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd3b, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0xf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) ioctl$COMEDI_UNLOCK(r1, 0x6406) r5 = accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendto$x25(r5, &(0x7f00000005c0)="1364878a0656aba516d05c67770294fa7f0cdde7236984269220b5e4046e516b84c80f9534907129511eff5c876468d2a209bc71bc66c410806880eca0848c31c27424c4309db038be54f1ab1049f4dd3c1042e9df2fa1c8e9c70c262e7048653a1514baf1c3026342228ef67ecc14c7e73bf7dc51e05ccd7012f21db9d2a8e8671dc57b86d5d1bb50f7c8eb290b7c7765d97798f2eb45dd9217cc9f39abb0e98a9f", 0xa2, 0x81, &(0x7f0000000680), 0x12) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f0000000100)) ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f0000000140)) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r6, r12, &(0x7f0000000200)={0x0, 0x1460, 0x1, 0x3, 0xb6}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e1e, 0x60, 0x2, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e40, 0x4, 0x2009, 0x102, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x1000, 0x3, 0x102c4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x400, 0x2, 0x21b, 0x0, r6}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r11, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) 16.582525892s ago: executing program 8 (id=2116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000001c0)) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x8000) r3 = msgget$private(0x0, 0xb2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb72b4000000590806000108000604"], 0x0) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000000)=""/102) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1000d, 0x0, 0x0, 0x41100}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r7, 0x8b2a, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b2b, &(0x7f0000000040)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00008ba000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00005b7000/0x2000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) creat(&(0x7f00000002c0)='./file0\x00', 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000696000/0x3000)=nil, 0x3000, 0x7b3b75edf0b8d49c, 0x110, r4, 0x0) 16.131136915s ago: executing program 2 (id=2118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) timer_settime(0x0, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) shmget(0x1, 0x3000, 0xd0e939a767219741, &(0x7f0000ffc000/0x3000)=nil) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='mydomain / 64\n', 0xe) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3e}]}, 0x34}, 0x1, 0x0, 0x0, 0x802}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xfc, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xd22}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x67d}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x9, 0xec, 0xffffffff, 0x0, 0x6, 0x7, 0x4, 0x7f, 0x80000000]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10000}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x7fff, 0x7, 0x7, 0x80, 0xa9, 0xb, 0x8, 0x5b, 0x4, 0x8]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x87d7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x40f}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1ff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1ff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x5, 0x101, 0x5]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4e2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5}, 0x20000001) 14.721271768s ago: executing program 8 (id=2120): socket$kcm(0xa, 0x2, 0x73) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000640)={0x10004000, &(0x7f0000000180), &(0x7f0000000340), &(0x7f00000003c0), {0x33}, &(0x7f0000000440)=""/103, 0x67, &(0x7f00000004c0)=""/203, &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x3}, 0x58) socket$inet6(0x10, 0x3, 0x0) r0 = syz_ublk_setup_io_uring(0x4daf, &(0x7f00000006c0)={0x0, 0x60001, 0x40, 0x0, 0x129}, &(0x7f0000000740), &(0x7f0000000280), &(0x7f0000000780)) inotify_init() r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/195, 0xc3}, {&(0x7f0000000180)=""/61, 0x3d}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0x10, 0x80002, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x800000000000008) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000300)='./tracing\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='!', 0x1) bind$inet(r3, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) socket(0x10, 0x2, 0x0) 12.423179251s ago: executing program 6 (id=2124): socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000980)=0xd) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x1, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x1, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0xdd, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x4, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xfffe, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0xa, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000000000a0000"], 0x14}}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000980)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x720, 0x65, &(0x7f0000000100)=""/101, 0x41100, 0x46, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000180)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x2, 0x4, 0x4}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000200)=[r2, r2, r3], &(0x7f0000000240)=[{0xe, 0x3, 0xb, 0x6}, {0x5, 0x4, 0xb, 0x1}, {0x2, 0x4, 0xc, 0xc}], 0x10, 0x2}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x4800) 12.302950694s ago: executing program 2 (id=2125): r0 = socket$inet(0x2, 0x2, 0x0) epoll_create1(0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x2, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x8880) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000680)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x44004) 12.197182664s ago: executing program 7 (id=2126): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xa1000000, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x2000000000000000, &(0x7f00000001c0)=0x7) r0 = gettid() syz_open_procfs(r0, &(0x7f0000000040)='gid_map\x00') exit(0xffff) exit(0x9) landlock_create_ruleset(&(0x7f0000000040)={0xc4dd, 0x6, 0x0, 0x0, 0x8}, 0x30, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) iopl(0xe) add_key$keyring(0x0, 0x0, 0x0, 0xfeffff, 0xfffffffffffffffd) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000300)={0x1ff, 0x6, 0x1, {0x2, @pix={0xfffffffc, 0x200, 0x30385056, 0x7, 0xa, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}}, 0x3ff}) r6 = socket(0x10, 0x803, 0x0) getsockopt$sock_buf(r6, 0x1, 0x37, &(0x7f0000000680)=""/173, &(0x7f0000000740)=0xad) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000280)="b461802305060000009805edd2fa6c06aea900d7dfe680150cc0ce000000000003000000", 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x50) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) 10.619743834s ago: executing program 7 (id=2127): mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./proc/net/afs/cells\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) r2 = dup(r1) write$FUSE_STATX(r2, &(0x7f0000003ac0)={0x130, 0x0, 0x0, {0x2, 0x100, 0x0, '\x00', {0x1000, 0x6, 0x8, 0xffff, 0x0, 0x0, 0xa000, '\x00', 0xffffffff00000000, 0x2, 0x80000000, 0x1, {0x4, 0x8}, {0x4, 0xffffffff}, {0x5, 0x4}, {0xdc, 0xffffffff}, 0x9, 0x7fff, 0xc68}}}, 0x130) mount$9p_xen(&(0x7f0000000080), &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100), 0x2800000, &(0x7f0000000180)={'trans=xen,', {[{@fscache}, {@cachetag={'cachetag', 0x3d, '!@$*'}}, {@dfltuid}, {@version_9p2000}, {@cachetag={'cachetag', 0x3d, 'proc\x00'}}], [{@obj_user={'obj_user', 0x3d, 'proc\x00'}}, {@subj_role}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x66, 0x38, 0x3, 0x62, 0x62, 0x33, 0x20], 0x2d, [0x61, 0x63, 0xb, 0x33], 0x2d, [0x30, 0x9, 0x66, 0x31], 0x2d, [0x32, 0x64, 0x37, 0x63], 0x2d, [0x65, 0x35, 0x66, 0x62, 0x63, 0x64, 0x31, 0x34]}}}]}}) write(r0, &(0x7f0000000040)='add syz0 ::', 0xb) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff2}, {0xffff, 0x2}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4182) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100102000008250c0114fe000102030109023b00010102b040090400ff030206000802"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) read$FUSE(r3, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./sys/devices/system/cpu/cpu1/online\x00', 0x0, 0x4000, r3}, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcff283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0a0978b54b65c38053996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e82e4d9d4e5d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d3c5638ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4404921d264b13435c764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc16559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad7543de7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06ec6e968208c7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4cd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa58601c86076da0fe3b4e02c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392edeb7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5b9453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a600a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c300", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0xb8, 0xfffffffffffffffe, 0x3, [{{0x6, 0x1, 0x4, 0x1b000000, 0x0, 0x80000000, {0x1, 0x7fff, 0x4, 0x5, 0x53d2, 0xff, 0x4, 0x8, 0xffffffff, 0xe000, 0x5, r5, 0x0, 0x0, 0x40}}, {0x3, 0x8000, 0xd, 0x7f, '.\x0f\xd2\x00\"\xa7\xfe\x1f\xebE\xfb\x9b\x01'}}]}, 0x0, 0x0, 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$nfs4(&(0x7f0000000240)='syz\x00', &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2af12a21237d855b2c6673757569642c2c73797a002c63616368657461672c64666c747569642c2c7d2d5b2e2e7b26232c3970002c666f776e65723d", @ANYRESDEC=r5, @ANYBLOB="2c706372012c736d61636b662ee672616e536d323030302c666f776e655a3e00030000000000002c00000000001b862a2d0b5ee7161f69b75ef517ecc0de50c5a12e739bbda56c332579b7090000009d626429e938c92ed4f3d4279e55fa5dcd4479a846521686f0a22dca05955ac094579ad4630600"/132, @ANYRESDEC, @ANYBLOB=',uid>', @ANYRESDEC=r7, @ANYBLOB=',uid>', @ANYRESDEC, @ANYBLOB=',audit,\x00']) 10.022304323s ago: executing program 2 (id=2128): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010001dd400000000000000000700000a18000000030a010200000000000000000100000004000480140000001100010000000000000000000000000a"], 0x40}}, 0xc000) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x1b000) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001a40)={&(0x7f0000000080)=[{0x3, 0x200, 0x3, &(0x7f0000000900)="40f1da"}], 0x1}) 9.525007522s ago: executing program 8 (id=2129): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x20) mmap(&(0x7f0000b5b000/0x4000)=nil, 0x4000, 0xb635773f046bbee4, 0x8031, 0xffffffffffffffff, 0x87be0000) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0xf4}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r7) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000012, 0x636c3) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x496080) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000000)={0x0, 0x2, 0x7, &(0x7f0000000240)={0x1d, "e922604a455494c905fd824393fe53e14fcab3d1eb00007456b15b0000000800"}}) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0305602, &(0x7f00000004c0)={0x1, 0x0, {0x34a, 0x0, 0x100e, 0xd, 0x4, 0x6}}) 9.071467075s ago: executing program 6 (id=2131): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000440)=0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee01) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103900, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x449) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40100, 0x8) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x641, 0x800002e, r5, 0x0) fcntl$notify(r5, 0x402, 0x1a) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0x7}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4006}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40010) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80800) setregid(0xee00, 0xffffffffffffffff) 8.089054957s ago: executing program 3 (id=2132): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) write$cgroup_type(r0, &(0x7f0000000580), 0x9) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000100)=""/45, &(0x7f0000000040)=0x2d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc4c85513, &(0x7f0000000240)={0x2, 0x4, 0x0, 0x2, 'syz0\x00'}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r3, &(0x7f0000000080)=0x5035000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x9f, 0x8, 0xc) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0) r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa0009058202"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="001606", @ANYRESDEC=r2, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="500f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="400400000000b0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) getpgrp(0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) umount2(&(0x7f0000000580)='./mnt\x00', 0x1) mount(0x0, 0x0, &(0x7f0000000600)='overlay\x00', 0x0, &(0x7f0000000640)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 7.85615821s ago: executing program 6 (id=2133): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000600)="0200d0e37237ea8388bfb8958ce2df7b22f3860784c30248ed39490dfe8037f6cb012c19e5f66193b7492fb9f8e66c469b9f96b242d5344e44ca9245b0a0fcf8ae83f291f080290ce9952b0112485d0761ec21cb22aeab9032", 0x59, 0x8) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x71, 0x5}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224000242d8000a0904001001"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) 6.535705232s ago: executing program 2 (id=2134): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_nanosleep(0x4, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) r1 = syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x0, 0x0) fsetxattr$security_capability(r5, &(0x7f0000000000), 0x0, 0x0, 0x1) r6 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f00000001c0)='%(\x1f\xf3PI\x02n\x16u{4\x9e+\xfd\xd9\xb2\xae\x1d\xbb\x16\xca[', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000100)='\\\x00', 0x0) fgetxattr(r5, &(0x7f0000000000)=ANY=[], 0x0, 0x3) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x6, 0x0, 0x0, 0x0, 0x0) 6.160058192s ago: executing program 2 (id=2135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) timer_settime(0x0, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) shmget(0x1, 0x3000, 0xd0e939a767219741, &(0x7f0000ffc000/0x3000)=nil) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='mydomain / 64\n', 0xe) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3e}]}, 0x34}, 0x1, 0x0, 0x0, 0x802}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x104, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xd22}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x67d}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x9, 0xec, 0xffffffff, 0x0, 0x6, 0x7, 0x4, 0x7f, 0x80000000]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10000}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x7fff, 0x7, 0x7, 0x80, 0xa9, 0xb, 0x8, 0x5b, 0x4, 0x8]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x87d7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x40f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7fff]}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1ff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1ff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x5, 0x101, 0x5]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4e2}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x5}, 0x20000001) 6.029997733s ago: executing program 8 (id=2136): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) (async, rerun: 64) r2 = socket$kcm(0x29, 0x5, 0x0) (rerun: 64) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) (async) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xa0000016}) (async) ioctl$FE_SET_FRONTEND(r3, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) (async) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x0, 0x900, 0x0, 0xfffffffe}}) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) read$FUSE(r7, &(0x7f00000007c0)={0x2020}, 0x2020) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa80008000300030000000800070005000000080001001000000006000200010000000b0005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r2], 0x84}}, 0x20008040) 5.710831499s ago: executing program 3 (id=2137): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000003aecc69f31b3a375", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250100000004000180100002800c0001800800010006000000"], 0x28}, 0x1, 0x0, 0x0, 0x141}, 0x80c0) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x541b, 0x0) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async) r5 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) (async) close(r5) r6 = eventfd2(0xbfff35a9, 0x80000) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000180)={0x0, r6}) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_SOCK={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0xfffffffc}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x6}, @TIPC_NLA_SOCK_CON, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x1}]}]}, 0x5c}}, 0x0) 4.160134744s ago: executing program 3 (id=2138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c050}, 0x48d2) 3.611752801s ago: executing program 3 (id=2139): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4004811}, 0x40) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000740)={0x4, 0x0, @ioapic={0x0, 0x4, 0xffffffff, 0x4, 0x0, [{}, {0x0, 0x4}, {}, {0x3, 0x2}, {0x0, 0x0, 0x2, '\x00', 0x4}, {0x6, 0x0, 0x0, '\x00', 0x3}, {}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0xfe, 0x0, 0x0, '\x00', 0x5}, {}, {}, {}, {0x3, 0x0, 0x1, '\x00', 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {0x6}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x2}, {0x81, 0x7}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='select \n', 0x10) write(r3, &(0x7f0000000100)='file read /etc/passwd task.uid=0 exec.argv[0]=\"s\\\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000040)={0x0, @meta={0x4f31434d, 0x1c6ae4, 0xcd0a, 0x833e, 0x54544094}}) 3.605863626s ago: executing program 6 (id=2140): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) socket(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60303bbb00282b00fc020000000003000000000000000000fe8000000000000000000000000000aa"], 0x0) 3.122805838s ago: executing program 7 (id=2141): socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000980)=0xd) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x1, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x1, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0xdd, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x4, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0xfffe, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0xa, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000000000000a00000200000000"], 0x14}}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000980)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x720, 0x65, &(0x7f0000000100)=""/101, 0x41100, 0x46, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000180)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x2, 0x4, 0x4}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000200)=[r2, r2, r3], &(0x7f0000000240)=[{0xe, 0x3, 0xb, 0x6}, {0x5, 0x4, 0xb, 0x1}, {0x2, 0x4, 0xc, 0xc}], 0x10, 0x2}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x4800) 3.028521469s ago: executing program 3 (id=2142): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xa6, 0xfc, 0x98, 0x10, 0x1608, 0x302, 0xff4c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x10, 0x4, "", [{{0x9, 0x4, 0xa9, 0x5d, 0x2, 0x5f, 0x8e, 0xfc, 0x2, [], [{{0x9, 0x5, 0xe, 0x2, 0x200, 0x8, 0x1}}, {{0x9, 0x5, 0x83, 0x2, 0x200, 0x9, 0x4, 0x6}}]}}]}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) eventfd2(0x0, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') r5 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(r4, &(0x7f0000003380)={0x2020}, 0x2020) close(0x3) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x23a000, 0x0) epoll_create1(0x80000) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000002c0)={0x0, 0x7, 0x0, 0x8, 0x1, [], [0x4, 0x1, 0x8, 0x2], [0x30, 0x0, 0x8, 0x2], [0x0, 0x89a5, 0x4, 0x291cfe7a]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r3, 0x2000000, 0x7, 0x0, &(0x7f0000001240)="14051b5ae730a1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) fsopen(&(0x7f0000000080)='squashfs\x00', 0x1) 2.926013874s ago: executing program 2 (id=2143): r0 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x800000c, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) fchdir(r5) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000280)=r8) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x100, 0xa5) read$FUSE(r10, &(0x7f0000003b40)={0x2020}, 0x2020) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) 2.288042086s ago: executing program 6 (id=2144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xa4, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, 0x0, 0x0, 0x2, 0x100e, &(0x7f0000001880)=""/4110, 0x40f00, 0x39}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r8, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r8, @ANYBLOB="000000002c12070008000400"], 0x28}}, 0x4004090) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r10 = gettid() sched_setaffinity(r10, 0x8, &(0x7f00000000c0)=0x3f4) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x3, 0x6, @remote}, 0x14) 2.04138145s ago: executing program 8 (id=2145): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) (fail_nth: 1) 812.514451ms ago: executing program 8 (id=2146): r0 = socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000180)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x0, 0x5, 0xd, 0x80000001, 0x4, @remote, @private1, 0x8, 0x80, 0x7, 0x8000}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@getqdisc={0x38, 0x26, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0xa}, {0x5, 0x10}, {0x41c8cf388ea74e1f, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x2c000}, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0xa) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x890b, 0x0) connect$x25(r6, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) fchdir(r5) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x404c080) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="3812f7bfd0724340140012806c0001006272696404000280"], 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 752.791824ms ago: executing program 3 (id=2147): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) write$cgroup_type(r0, &(0x7f0000000580), 0x9) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000100)=""/45, &(0x7f0000000040)=0x2d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc4c85513, &(0x7f0000000240)={0x2, 0x4, 0x0, 0x2, 'syz0\x00'}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r3, &(0x7f0000000080)=0x5035000000, 0xffffffffffffffff, &(0x7f00000000c0)=0x9f, 0x8, 0xc) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0) r4 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa0009058202"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="001606", @ANYRESDEC=r2, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="500f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="400400000000b0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) getpgrp(0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) umount2(&(0x7f0000000580)='./mnt\x00', 0x1) mount(0x0, 0x0, &(0x7f0000000600)='overlay\x00', 0x0, &(0x7f0000000640)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 0s ago: executing program 6 (id=2148): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x18e) truncate(0x0, 0xf0ffff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000900)=0x15) ioctl(r3, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000") r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000340)=0x1) ioctl$TCGETA(r4, 0x89f0, &(0x7f00000029c0)) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs={0x0, 0x0, 0x931}, 0x6e) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xfff, &(0x7f0000000000)=0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000009, 0x10, 0xffffffffffffffff, 0x23673000) kernel console output (not intermixed with test programs): oduct=fffb, bcdDevice=dc.7b [ 536.220943][T11754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11754 comm=syz.0.1630 [ 536.239758][ T8890] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 536.261239][ T8890] usb 7-1: config 0 has no interface number 0 [ 536.290648][ T8890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.309094][ T8890] usb 7-1: Product: syz [ 536.322561][ T8890] usb 7-1: Manufacturer: syz [ 536.342592][ T8890] usb 7-1: SerialNumber: syz [ 536.366656][ T8890] usb 7-1: config 0 descriptor?? [ 537.112644][T11755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11755 comm=syz.3.1629 [ 537.144694][ T8890] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 537.169648][ T8890] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 537.223900][ T8890] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 537.258941][ T8890] usb 7-1: media controller created [ 537.297293][ T8890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 537.552796][ T5700] ims_pcu 3-1:2.0: Incorrect number of endpoints on data interface (1) [ 537.620335][ T5700] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22 [ 537.675394][ T5700] usb 3-1: USB disconnect, device number 73 [ 537.892293][T11760] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1633'. [ 538.892263][ T8890] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 539.162680][T11745] SELinux: failed to load policy [ 539.385589][ T8890] usb 7-1: USB disconnect, device number 14 [ 540.704933][ T30] audit: type=1400 audit(1787506035.948:1338): avc: denied { listen } for pid=11767 comm="syz.6.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 541.155649][T11775] fuse: Bad value for 'fd' [ 541.539048][T11777] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1639'. [ 541.605217][ T9942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 541.629851][ T9942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 541.643373][ T9942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 541.659870][ T9942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 541.669840][ T9942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 541.884136][T11784] CUSE: unknown device info "" [ 541.890657][T11784] CUSE: unknown device info "" [ 541.895536][T11784] CUSE: unknown device info "" [ 541.902051][T11784] CUSE: unknown device info "" [ 541.906898][T11784] CUSE: unknown device info "ÿ" [ 541.913421][T11784] CUSE: zero length info key specified [ 542.016157][T11787] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 542.083912][T11790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.097200][T11790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.133439][T11790] syz.3.1642 (11790): drop_caches: 2 [ 542.157273][T11790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11790 comm=syz.3.1642 [ 542.274531][ T12] nvmet: Created nvm controller 49 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:3b82987b-3ef1-4835-949b-ba30067568d0. [ 542.311139][T11787] nvme nvme48: creating 1 I/O queues. [ 542.336223][T11787] nvme nvme48: new ctrl: "testsubsys" [ 542.445520][T11796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.490703][T11796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.710853][T11796] Bluetooth: MGMT ver 1.23 [ 542.992502][T11779] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.014976][T11779] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.024232][T11779] bridge_slave_0: entered allmulticast mode [ 543.033090][T11779] bridge_slave_0: entered promiscuous mode [ 543.052334][T11779] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.062745][T11779] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.074005][T11779] bridge_slave_1: entered allmulticast mode [ 543.082806][T11779] bridge_slave_1: entered promiscuous mode [ 543.090414][ T8890] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 543.131669][T11779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.162822][T11779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.194060][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.219570][T11779] team0: Port device team_slave_0 added [ 543.226600][T11779] team0: Port device team_slave_1 added [ 543.235460][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.249154][ T8890] usb 3-1: Using ep0 maxpacket: 8 [ 543.255125][ T8890] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 543.280221][ T8890] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 543.297250][T11779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.305994][ T8890] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.321566][T11779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.353458][ T8890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 543.373445][ T8890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 543.386740][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1648'. [ 543.401318][ T8890] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.427326][T11779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.463776][ T8890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.474443][T11779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.496871][T11779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.561031][T11824] fuse: Bad value for 'fd' [ 543.659934][T11779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.696311][T11829] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1651'. [ 543.760618][ T8890] usb 3-1: GET_CAPABILITIES returned 0 [ 543.768958][ T5598] Bluetooth: hci0: command tx timeout [ 543.792781][ T8890] usbtmc 3-1:16.0: can't read capabilities [ 543.865630][T11779] hsr_slave_0: entered promiscuous mode [ 543.894347][T11779] hsr_slave_1: entered promiscuous mode [ 543.916188][T11779] debugfs: 'hsr0' already exists in 'hsr' [ 543.930397][T11779] Cannot create hsr debugfs directory [ 543.941381][T11831] syzkaller1: entered promiscuous mode [ 543.951930][T11831] syzkaller1: entered allmulticast mode [ 543.982508][ T8890] usb 3-1: USB disconnect, device number 74 [ 544.131837][ T30] audit: type=1400 audit(1787506039.378:1339): avc: denied { getopt } for pid=11838 comm="syz.0.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 544.186289][T11839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.219630][T11839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.259528][ T5692] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 544.281129][T11839] overlayfs: failed to resolve 'lower': -2 [ 544.419741][ T5692] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 544.442292][ T5692] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 544.454152][ T5692] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.474626][T11779] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 544.486792][T11835] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 544.520080][ T5692] opticon 7-1:1.0: opticon converter detected [ 544.526824][T11779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.561338][ T5692] usb 7-1: opticon converter now attached to ttyUSB0 [ 544.580769][T11779] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 544.622841][T11779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.646317][T11779] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 544.660824][T11779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.670389][T11779] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 544.680690][T11779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.747135][T11779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.767137][T11779] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.782220][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.789365][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.824954][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.832090][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.879695][ T5700] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 544.925096][T11849] FAULT_INJECTION: forcing a failure. [ 544.925096][T11849] name failslab, interval 1, probability 0, space 0, times 0 [ 545.024938][T11849] CPU: 0 UID: 0 PID: 11849 Comm: syz.0.1656 Not tainted syzkaller #0 PREEMPT(full) [ 545.024958][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 545.024964][T11849] Call Trace: [ 545.024968][T11849] [ 545.024973][T11849] dump_stack_lvl+0x100/0x190 [ 545.024996][T11849] should_fail_ex.cold+0x5/0xa [ 545.025013][T11849] should_failslab+0xc2/0x120 [ 545.025031][T11849] __kmalloc_noprof+0xfc/0x820 [ 545.025047][T11849] ? tomoyo_encode2+0xfb/0x3c0 [ 545.025061][T11849] tomoyo_encode2+0xfb/0x3c0 [ 545.025074][T11849] tomoyo_encode+0x29/0x50 [ 545.025084][T11849] tomoyo_realpath_from_path+0x18c/0x690 [ 545.025098][T11849] tomoyo_path_number_perm+0x23c/0x580 [ 545.025113][T11849] ? tomoyo_path_number_perm+0x22e/0x580 [ 545.025130][T11849] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 545.025160][T11849] ? find_held_lock+0x2b/0x80 [ 545.025173][T11849] ? hook_file_ioctl_common+0x140/0x440 [ 545.025189][T11849] ? __fget_files+0x21f/0x3d0 [ 545.025208][T11849] security_file_ioctl+0xd3/0x230 [ 545.025226][T11849] __x64_sys_ioctl+0xb7/0x210 [ 545.025242][T11849] do_syscall_64+0x123/0x790 [ 545.025260][T11849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.025271][T11849] RIP: 0033:0x7f6d3b19e0d9 [ 545.025281][T11849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.025292][T11849] RSP: 002b:00007f6d3c0ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.025304][T11849] RAX: ffffffffffffffda RBX: 00007f6d3b425fa0 RCX: 00007f6d3b19e0d9 [ 545.025311][T11849] RDX: 0000200000000000 RSI: 00000000c138fd0d RDI: 0000000000000003 [ 545.025317][T11849] RBP: 00007f6d3c0ec090 R08: 0000000000000000 R09: 0000000000000000 [ 545.025324][T11849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.025330][T11849] R13: 00007f6d3b426038 R14: 00007f6d3b425fa0 R15: 00007ffed7489898 [ 545.025344][T11849] [ 545.025436][T11849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 545.264196][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 545.330351][ T5700] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 545.390542][ T5700] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.412751][ T4924] block nbd1: Possible stuck request ffff888028050000: control (read@0,1024B). Runtime 180 seconds [ 545.425755][ T4924] block nbd1: Possible stuck request ffff8880280501c0: control (read@1024,3072B). Runtime 180 seconds [ 545.440308][ T5700] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.484543][ T5700] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 545.495087][ T5700] usb 3-1: Product: syz [ 545.501245][ T5700] usb 3-1: Manufacturer: syz [ 545.546738][ T5700] hub 3-1:4.0: USB hub found [ 545.582927][T11853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1657'. [ 545.758793][T11841] syz.2.1655 (11841): drop_caches: 2 [ 545.776101][T11841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11841 comm=syz.2.1655 [ 545.797199][ T5700] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 545.869065][ T5598] Bluetooth: hci0: command tx timeout [ 545.874713][ T30] audit: type=1400 audit(1787506041.058:1340): avc: denied { write } for pid=11857 comm="syz.3.1658" path="socket:[40844]" dev="sockfs" ino=40844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 545.921147][ T5700] usb 3-1: USB disconnect, device number 75 [ 546.063514][T11865] rnbd_client L607: Mapping device /d on session s+, (access_mode: rw, nr_poll_queues: 0) [ 546.081235][T11865] rnbd_client L1256: Session s+ not found, and path parameter not given [ 546.142999][T11779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.240921][ T5598] Bluetooth: hci2: ISO packet too small [ 546.456203][T11873] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1662'. [ 546.755731][T11879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.805349][ T5700] usb 7-1: USB disconnect, device number 15 [ 546.815636][ T5700] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 546.863549][ T5700] opticon 7-1:1.0: device disconnected [ 546.902632][T11879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.933306][T11779] veth0_vlan: entered promiscuous mode [ 547.022207][T11879] kAFS: unable to lookup cell '(,Ì' [ 547.062408][T11779] veth1_vlan: entered promiscuous mode [ 547.127085][T11887] syzkaller1: entered promiscuous mode [ 547.142942][T11887] syzkaller1: entered allmulticast mode [ 547.170479][T11890] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1667'. [ 547.193225][T11779] veth0_macvtap: entered promiscuous mode [ 547.206514][T11779] veth1_macvtap: entered promiscuous mode [ 547.221213][ T5693] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 547.236267][T11887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.280609][T11779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.306630][T11887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.334170][T11779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.492300][ T5693] usb 3-1: Using ep0 maxpacket: 16 [ 547.499810][ T5693] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 547.513877][ T5693] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 547.689915][ T5693] usb 3-1: config 0 has no interface number 0 [ 547.723537][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.742358][ T5693] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 547.764023][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.778420][ T5693] usb 3-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 547.811296][ T1010] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.830263][ T5693] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 547.853573][ T1010] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.886380][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.905725][ T5693] usb 3-1: Product: syz [ 547.929732][ T9942] Bluetooth: hci0: command tx timeout [ 547.981063][ T5693] usb 3-1: Manufacturer: syz [ 548.005242][ T5693] usb 3-1: SerialNumber: syz [ 548.063068][ T5693] usb 3-1: config 0 descriptor?? [ 548.081951][T11898] rnbd_client L607: Mapping device /d on session s+, (access_mode: rw, nr_poll_queues: 0) [ 548.099461][T11885] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 548.113046][ T6076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.133174][ T6076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.143170][ T5693] asix 3-1:0.34: probe with driver asix failed with error -22 [ 548.172265][T11898] rnbd_client L1256: Session s+ not found, and path parameter not given [ 548.290097][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.366060][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.385707][T11902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.396205][T11902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.414001][T11902] syz.3.1671 (11902): drop_caches: 2 [ 548.422818][T11902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11902 comm=syz.3.1671 [ 548.441666][T11900] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 548.641159][ T6076] nvmet: Created nvm controller 50 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:3b82987b-3ef1-4835-949b-ba30067568d0. [ 548.761960][T11906] nvme nvme49: creating 1 I/O queues. [ 548.823113][T11906] nvme nvme49: new ctrl: "testsubsys" [ 548.952932][T11919] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1674'. [ 550.015738][ T5598] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 550.029640][ T5598] Bluetooth: hci0: command 0x0419 tx timeout [ 550.193474][ T8890] usb 3-1: USB disconnect, device number 76 [ 550.336336][ T30] audit: type=1400 audit(1787506045.578:1341): avc: denied { map } for pid=11931 comm="syz.2.1678" path="pid:[4026532782]" dev="nsfs" ino=4026532782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 550.369564][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.385432][T11928] syzkaller1: entered promiscuous mode [ 550.519372][ T30] audit: type=1400 audit(1787506045.768:1342): avc: denied { ioctl } for pid=11931 comm="syz.2.1678" path="socket:[41493]" dev="sockfs" ino=41493 ioctlcmd=0x5840 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 550.561404][T11928] syzkaller1: entered allmulticast mode [ 550.754871][T11932] SELinux: policydb magic number 0x3b7cff8c does not match expected magic number 0xf97cff8c [ 550.766351][T11932] SELinux: failed to load policy [ 550.795239][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.830942][T11939] veth0: entered promiscuous mode [ 550.840030][T11930] veth0: left promiscuous mode [ 550.925929][ T30] audit: type=1400 audit(1787506046.018:1343): avc: denied { read } for pid=11931 comm="syz.2.1678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 551.025072][T11926] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1675'. [ 551.089571][ T30] audit: type=1400 audit(1787506046.088:1344): avc: denied { remount } for pid=11930 comm="syz.0.1677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 551.119193][ T5692] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 551.158798][T11941] rnbd_client L202: map_device: Unknown parameter or missing value 'path=' [ 551.319237][ T5692] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 551.360387][ T5692] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 551.420485][ T5692] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.455249][T11950] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 551.493642][T11936] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 551.526295][ T5692] opticon 7-1:1.0: opticon converter detected [ 551.579304][ T5692] usb 7-1: opticon converter now attached to ttyUSB0 [ 552.055362][T11963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.066459][T11963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.086341][T11963] syz.3.1685 (11963): drop_caches: 2 [ 552.096398][ T5598] Bluetooth: hci0: command 0x0419 tx timeout [ 552.115158][T11963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11963 comm=syz.3.1685 [ 552.278843][ T5692] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 552.344282][ T30] audit: type=1400 audit(1787506047.588:1345): avc: denied { mounton } for pid=11942 comm="syz.0.1679" path="/403/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 552.459253][ T5692] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 552.500868][ T5692] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 552.534963][ T5692] usb 3-1: config 0 has no interface number 0 [ 552.573674][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.600762][ T5692] usb 3-1: Product: syz [ 552.621398][ T5692] usb 3-1: Manufacturer: syz [ 552.656688][ T5692] usb 3-1: SerialNumber: syz [ 552.704269][ T5692] usb 3-1: config 0 descriptor?? [ 552.779117][T11969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.856969][T11969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.915242][T11969] overlayfs: failed to resolve 'lower': -2 [ 552.946131][ T5692] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 552.990232][ T5692] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 553.002920][T11971] dummy_hcd dummy_hcd.0: remove, state 1 [ 553.041303][ T5692] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 553.082397][T11971] usb usb1: USB disconnect, device number 1 [ 553.095779][ T5692] usb 3-1: media controller created [ 553.143440][T11971] usb 1-1: USB disconnect, device number 68 [ 553.169107][ T5692] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 553.272455][ T8890] usb 7-1: USB disconnect, device number 16 [ 553.321916][ T8890] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 553.365833][ T8890] opticon 7-1:1.0: device disconnected [ 554.636418][T11964] SELinux: failed to load policy [ 554.644373][ T5692] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 556.821434][ T30] audit: type=1400 audit(1787506052.068:1346): avc: denied { connect } for pid=11981 comm="syz.6.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 556.909370][ T5692] usb 3-1: USB disconnect, device number 77 [ 556.988886][T11986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1694'. [ 557.456006][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.463821][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.556722][T11995] netlink: 'syz.2.1697': attribute type 2 has an invalid length. [ 557.590703][T11998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.601231][T11998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.616030][T11998] syz.3.1698 (11998): drop_caches: 2 [ 557.636812][T11998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11998 comm=syz.3.1698 [ 557.863440][T12003] syzkaller1: entered promiscuous mode [ 557.902412][ T5692] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 557.960810][T12003] syzkaller1: entered allmulticast mode [ 557.996277][T12005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.070192][T12005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.119357][ T5692] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 558.143376][ T5692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 558.195057][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.259852][ T5692] usb 3-1: config 0 descriptor?? [ 558.270743][T11971] dummy_hcd dummy_hcd.0: stopped [ 558.294128][T12001] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 558.303574][T11971] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 558.318762][ T8890] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 558.489132][ T8890] usb 7-1: Using ep0 maxpacket: 16 [ 558.505070][ T8890] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 558.574843][ T8890] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 558.606219][ T8890] usb 7-1: config 0 has no interface number 0 [ 558.639042][ T8890] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 558.685840][ T8890] usb 7-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 558.769238][ T8890] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 558.815838][ T8890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.853827][ T8890] usb 7-1: Product: syz [ 558.885799][ T8890] usb 7-1: Manufacturer: syz [ 558.921189][ T8890] usb 7-1: SerialNumber: syz [ 558.974068][ T8890] usb 7-1: config 0 descriptor?? [ 558.990577][ T5692] usbhid 3-1:0.0: can't add hid device: -71 [ 559.031905][ T5692] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 559.046140][T12007] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 559.099029][ T5692] usb 3-1: USB disconnect, device number 78 [ 559.146973][ T8890] asix 7-1:0.34: probe with driver asix failed with error -22 [ 559.284577][T12024] netlink: 448 bytes leftover after parsing attributes in process `syz.0.1706'. [ 559.301427][ T30] audit: type=1400 audit(1787506054.528:1347): avc: denied { ioctl } for pid=12023 comm="syz.0.1706" path="socket:[41992]" dev="sockfs" ino=41992 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 559.621798][T12033] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 559.763495][ T30] audit: type=1326 audit(1787506055.008:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1710" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982319e0d9 code=0x7ffc0000 [ 559.836228][ T30] audit: type=1326 audit(1787506055.008:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1710" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982319e0d9 code=0x7ffc0000 [ 559.931912][ T30] audit: type=1326 audit(1787506055.048:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1710" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982319e0d9 code=0x7ffc0000 [ 560.022218][ T30] audit: type=1326 audit(1787506055.048:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1710" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982319e0d9 code=0x7ffc0000 [ 560.134028][ T30] audit: type=1326 audit(1787506055.058:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1710" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f982319e0d9 code=0x7ffc0000 [ 560.215478][ T30] audit: type=1326 audit(1787506055.058:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1710" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982319e0d9 code=0x7ffc0000 [ 560.265508][T12046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.301003][ T30] audit: type=1326 audit(1787506055.058:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1710" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982319e0d9 code=0x7ffc0000 [ 560.331010][T12046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.416665][ T30] audit: type=1326 audit(1787506055.058:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12037 comm="syz.2.1710" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982319e0d9 code=0x7ffc0000 [ 560.758790][T12064] syzkaller1: entered promiscuous mode [ 560.764489][T12064] syzkaller1: entered allmulticast mode [ 560.779519][T12064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.791006][T12064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.986934][ T8890] usb 7-1: USB disconnect, device number 17 [ 561.105955][T12067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.187117][T12069] gfs2: not a GFS2 filesystem [ 561.223932][T12067] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.231385][T12067] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.410673][T12073] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 561.464154][T12067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.709548][T12067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.771460][ T5598] Bluetooth: hci3: ISO packet too small [ 561.782121][ T6345] nvmet: Created nvm controller 51 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:3b82987b-3ef1-4835-949b-ba30067568d0. [ 561.811349][T12073] nvme nvme50: creating 1 I/O queues. [ 561.871100][T12073] nvme nvme50: new ctrl: "testsubsys" [ 562.149357][ T6347] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.180636][ T6347] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.265135][ T6347] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.290075][T12098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.655990][ T6347] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.705113][T12098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.749665][T12108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.689168][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 563.723480][T12108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.782885][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1724'. [ 564.160848][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 564.160859][ T30] audit: type=1326 audit(1787506059.408:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.6.1732" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41159e0d9 code=0x7ffc0000 [ 564.250426][ T30] audit: type=1326 audit(1787506059.438:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.6.1732" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41159e0d9 code=0x7ffc0000 [ 564.343213][ T30] audit: type=1326 audit(1787506059.448:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.6.1732" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41159e0d9 code=0x7ffc0000 [ 564.432405][ T30] audit: type=1326 audit(1787506059.448:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.6.1732" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41159e0d9 code=0x7ffc0000 [ 564.492448][ T30] audit: type=1326 audit(1787506059.448:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.6.1732" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe41159e0d9 code=0x7ffc0000 [ 564.594323][ T30] audit: type=1326 audit(1787506059.448:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.6.1732" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41159e0d9 code=0x7ffc0000 [ 564.687223][ T30] audit: type=1326 audit(1787506059.448:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.6.1732" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41159e0d9 code=0x7ffc0000 [ 564.716009][ T8890] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 564.764235][ T5598] Bluetooth: hci2: ISO packet too small [ 564.801141][ T30] audit: type=1326 audit(1787506059.468:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.6.1732" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41159e0d9 code=0x7ffc0000 [ 564.979363][ T8890] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 564.996903][ T8890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.185424][ T30] audit: type=1326 audit(1787506059.468:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.6.1732" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe41159e0d9 code=0x7ffc0000 [ 565.220479][ T8890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.242497][ T8890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.301328][ T8890] usb 3-1: config 0 descriptor?? [ 565.307010][ T30] audit: type=1326 audit(1787506059.468:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12121 comm="syz.6.1732" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41159e0d9 code=0x7ffc0000 [ 565.760812][ T8890] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0 [ 565.811321][ T8890] hid-steam 0003:28DE:1142.0012: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 565.876132][T12148] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1738'. [ 565.979587][ T8890] hid-steam 0003:28DE:1142.0012: Steam wireless receiver connected [ 565.991514][ T8890] hid-steam 0003:28DE:1142.0012: No HID_FEATURE_REPORT present for ID 0 [ 566.929060][ T8890] hid-steam 0003:28DE:1142.0012: steam_probe:steam_get_conn_status failed with error -22 [ 567.124156][ T8890] hid-steam 0003:28DE:1142.0013: unknown main item tag 0x0 [ 567.331597][ T8890] hid-steam 0003:28DE:1142.0013: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 567.436299][T12159] syz.0.1741 (12159): drop_caches: 2 [ 567.445724][T12159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.455639][T12159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.656686][T12166] 9p: Bad value for 'rfdno' [ 567.685902][T12168] rnbd_client L127: Can't parse path ip:127: -22 [ 567.696081][ T5692] usb 3-1: reset high-speed USB device number 79 using dummy_hcd [ 567.788964][T12171] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1742'. [ 567.921107][T12173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.953846][T12158] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 568.006327][T12158] block device autoloading is deprecated and will be removed. [ 568.106732][T12173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.267093][ T5598] Bluetooth: hci5: ISO packet too small [ 568.282198][T12180] CUSE: unknown device info "" [ 568.287110][T12180] CUSE: unknown device info "" [ 568.293576][T12180] CUSE: unknown device info "" [ 568.300015][T12180] CUSE: unknown device info "" [ 568.304858][T12180] CUSE: unknown device info "ÿ" [ 568.311371][T12180] CUSE: zero length info key specified [ 568.516019][T12187] x_tables: duplicate underflow at hook 1 [ 569.324607][T12190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12190 comm=syz.6.1751 [ 569.367298][T12193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1750'. [ 569.441791][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 569.441804][ T30] audit: type=1400 audit(1787506064.638:1464): avc: denied { watch watch_reads } for pid=12189 comm="syz.0.1752" path="pipe:[42881]" dev="pipefs" ino=42881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 569.501913][T12191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=12191 comm=syz.0.1752 [ 569.582760][ T8890] usb 3-1: USB disconnect, device number 79 [ 569.689449][T12193] team0 (unregistering): left promiscuous mode [ 569.725639][ T8890] hid-steam 0003:28DE:1142.0012: Steam wireless receiver disconnected [ 569.754279][T12193] team_slave_0: left promiscuous mode [ 569.883955][T12193] team_slave_1: left promiscuous mode [ 570.069051][ T8890] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 571.025273][T12193] team0 (unregistering): Port device team_slave_0 removed [ 571.076279][T12201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.136154][T12193] team0 (unregistering): Port device team_slave_1 removed [ 571.169163][ T8890] usb 3-1: Using ep0 maxpacket: 8 [ 571.181452][T12201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.201357][ T8890] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 571.266961][ T8890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.324073][ T8890] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 571.423619][ T8890] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 571.466600][T12201] overlayfs: failed to resolve 'lower': -2 [ 571.831765][T12209] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 571.838379][T12209] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 571.906317][ T8890] usb 3-1: string descriptor 0 read error: -71 [ 571.941265][ T8890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.016904][ T8890] usb 3-1: can't set config #1, error -71 [ 572.066557][ T8890] usb 3-1: USB disconnect, device number 80 [ 572.101003][T12209] vhci_hcd vhci_hcd.0: Device attached [ 572.286787][T12213] vhci_hcd: connection closed [ 572.287007][ T12] vhci_hcd vhci_hcd.7: stop threads [ 572.329079][ T5692] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 572.341818][ T12] vhci_hcd vhci_hcd.7: release socket [ 572.387060][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 572.399346][ T5700] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 572.760641][ T5700] usb 47-1: enqueue for inactive port 0 [ 573.091169][ T5692] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 573.148793][ T5692] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.172023][ T5700] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 573.245581][ T5692] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 573.328801][ T5692] usb 7-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 573.419605][ T5692] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.473057][ T5692] usb 7-1: Product: syz [ 573.516233][ T5692] usb 7-1: Manufacturer: syz [ 573.554986][ T5692] usb 7-1: SerialNumber: syz [ 574.255040][T12230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12230 comm=syz.7.1763 [ 576.010195][ T9910] block nbd1: Possible stuck request ffff888028050000: control (read@0,1024B). Runtime 210 seconds [ 576.022571][ T9910] block nbd1: Possible stuck request ffff8880280501c0: control (read@1024,3072B). Runtime 210 seconds [ 576.625644][ T5692] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 577.036247][ T5692] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 577.211649][ T5692] usb 7-1: USB disconnect, device number 18 [ 577.295798][T10103] udevd[10103]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 577.622212][ T5692] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 577.749464][ T190] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 577.779519][ T30] audit: type=1326 audit(1787506073.028:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.3.1775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e999e0d9 code=0x7ffc0000 [ 577.812228][ T5692] usb 7-1: Using ep0 maxpacket: 16 [ 577.893119][ T5692] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 577.919272][ T5692] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 577.945716][ T30] audit: type=1326 audit(1787506073.028:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.3.1775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e999e0d9 code=0x7ffc0000 [ 577.994519][ T5692] usb 7-1: config 0 has no interface number 0 [ 578.013172][ T190] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 578.029541][ T5692] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 578.054008][ T190] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.076675][ T5692] usb 7-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 578.092760][ T190] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 578.106945][ T30] audit: type=1326 audit(1787506073.058:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.3.1775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e999e0d9 code=0x7ffc0000 [ 578.142985][T12270] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 578.158971][ T5692] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 578.181531][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.192856][ T190] usb 3-1: Product: syz [ 578.203954][ T5692] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.215202][ T190] usb 3-1: Manufacturer: syz [ 578.225907][ T5692] usb 7-1: Product: syz [ 578.234587][ T190] usb 3-1: SerialNumber: syz [ 578.247006][ T30] audit: type=1326 audit(1787506073.058:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.3.1775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e999e0d9 code=0x7ffc0000 [ 578.279336][ T5692] usb 7-1: Manufacturer: syz [ 578.296625][ T5692] usb 7-1: SerialNumber: syz [ 578.322814][ T5692] usb 7-1: config 0 descriptor?? [ 578.343299][ T1010] nvmet: Created nvm controller 52 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:3b82987b-3ef1-4835-949b-ba30067568d0. [ 578.372921][T12252] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 578.393202][ T5692] asix 7-1:0.34: probe with driver asix failed with error -22 [ 578.403392][ T30] audit: type=1326 audit(1787506073.118:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.3.1775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e999e0d9 code=0x7ffc0000 [ 578.454075][T12270] nvme nvme51: creating 1 I/O queues. [ 578.508788][T12263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1774'. [ 578.522818][ T30] audit: type=1326 audit(1787506073.118:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.3.1775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f29e999de42 code=0x7ffc0000 [ 578.559259][T12270] nvme nvme51: new ctrl: "testsubsys" [ 578.619930][ T30] audit: type=1326 audit(1787506073.118:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.3.1775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f29e999ded7 code=0x7ffc0000 [ 578.691687][ T5598] Bluetooth: hci2: ISO packet too small [ 578.722544][ T30] audit: type=1326 audit(1787506073.118:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.3.1775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f29e995add1 code=0x7ffc0000 [ 578.820566][ T30] audit: type=1326 audit(1787506073.118:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.3.1775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f29e999eec9 code=0x7ffc0000 [ 578.921462][ T30] audit: type=1326 audit(1787506073.118:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12266 comm="syz.3.1775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f29e995ae3b code=0x7ffc0000 [ 579.089842][ T190] usb 3-1: USB disconnect, device number 81 [ 580.411476][ T190] usb 7-1: USB disconnect, device number 19 [ 580.561727][T12295] rnbd_client L127: Can't parse path ip:127.0.0.: -22 [ 580.632078][T12293] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 580.659411][T12293] SELinux: failed to load policy [ 581.005091][T12286] uprobe: syz.3.1782:12286 failed to unregister, leaking uprobe [ 581.089367][T12304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13300 sclass=netlink_route_socket pid=12304 comm=syz.6.1786 [ 581.146569][T12307] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1786'. [ 581.434758][T12320] SELinux: Context ? is not valid (left unmapped). [ 581.506467][T12323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.605411][T12323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.755497][T12323] overlayfs: failed to resolve 'lower': -2 [ 581.783511][T12330] rnbd_client L127: Can't parse path ip:127.0.0.: -22 [ 582.456887][T12357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.634796][T12357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.428997][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 584.429010][ T30] audit: type=1400 audit(1787506079.658:1507): avc: denied { cmd } for pid=12360 comm="iou-wrk-12361" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 584.601761][ T30] audit: type=1400 audit(1787506079.738:1508): avc: denied { write } for pid=12363 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.903966][T12337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.011617][T12383] FAULT_INJECTION: forcing a failure. [ 585.011617][T12383] name failslab, interval 1, probability 0, space 0, times 0 [ 585.191832][T12383] CPU: 0 UID: 0 PID: 12383 Comm: syz.0.1807 Not tainted syzkaller #0 PREEMPT(full) [ 585.191849][T12383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 585.191856][T12383] Call Trace: [ 585.191860][T12383] [ 585.191865][T12383] dump_stack_lvl+0x100/0x190 [ 585.191886][T12383] should_fail_ex.cold+0x5/0xa [ 585.191901][T12383] should_failslab+0xc2/0x120 [ 585.191925][T12383] __kmalloc_cache_node_noprof+0x94/0x6c0 [ 585.191944][T12383] ? __get_vm_area_node+0x124/0x350 [ 585.191966][T12383] __get_vm_area_node+0x124/0x350 [ 585.191986][T12383] __vmalloc_node_range_noprof+0x262/0x1460 [ 585.191998][T12383] ? vmalloc_array_noprof+0x43/0x70 [ 585.192018][T12383] ? vmalloc_array_noprof+0x43/0x70 [ 585.192033][T12383] ? is_bpf_text_address+0x8a/0x1a0 [ 585.192047][T12383] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 585.192059][T12383] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 585.192079][T12383] ? vmalloc_array_noprof+0x43/0x70 [ 585.192093][T12383] __vmalloc_node_noprof+0xad/0xf0 [ 585.192105][T12383] ? vmalloc_array_noprof+0x43/0x70 [ 585.192121][T12383] __vmalloc_noprof+0xa3/0x120 [ 585.192132][T12383] ? __pfx___vmalloc_noprof+0x10/0x10 [ 585.192145][T12383] ? find_held_lock+0x2b/0x80 [ 585.192159][T12383] ? __might_fault+0xc5/0x140 [ 585.192175][T12383] vmalloc_array_noprof+0x43/0x70 [ 585.192189][T12383] do_update_counters.constprop.0+0x53/0x9c0 [ 585.192209][T12383] update_counters+0x127/0x1c0 [ 585.192223][T12383] ? __pfx_update_counters+0x10/0x10 [ 585.192242][T12383] ? bpf_lsm_capable+0x9/0x10 [ 585.192255][T12383] ? security_capable+0x80/0x260 [ 585.192271][T12383] do_ebt_set_ctl+0x27d/0x670 [ 585.192286][T12383] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 585.192301][T12383] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 585.192316][T12383] ? nf_sockopt_find.isra.0+0x222/0x290 [ 585.192334][T12383] nf_setsockopt+0x8d/0xf0 [ 585.192351][T12383] ip_setsockopt+0xcb/0xf0 [ 585.192363][T12383] udp_setsockopt+0x64/0xb0 [ 585.192379][T12383] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 585.192399][T12383] do_sock_setsockopt+0xf3/0x1d0 [ 585.192417][T12383] __sys_setsockopt+0x195/0x220 [ 585.192435][T12383] __x64_sys_setsockopt+0xbd/0x160 [ 585.192449][T12383] ? do_syscall_64+0xae/0x790 [ 585.192465][T12383] ? lockdep_hardirqs_on+0x7d/0x110 [ 585.192481][T12383] do_syscall_64+0x123/0x790 [ 585.192497][T12383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.192509][T12383] RIP: 0033:0x7f6d3b19e0d9 [ 585.192519][T12383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.192530][T12383] RSP: 002b:00007f6d3c0ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 585.192541][T12383] RAX: ffffffffffffffda RBX: 00007f6d3b425fa0 RCX: 00007f6d3b19e0d9 [ 585.192548][T12383] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000004 [ 585.192555][T12383] RBP: 00007f6d3c0ec090 R08: 0000000000000088 R09: 0000000000000000 [ 585.192561][T12383] R10: 0000200000002400 R11: 0000000000000246 R12: 0000000000000001 [ 585.192568][T12383] R13: 00007f6d3b426038 R14: 00007f6d3b425fa0 R15: 00007ffed7489898 [ 585.192581][T12383] [ 585.192905][T12390] FAULT_INJECTION: forcing a failure. [ 585.192905][T12390] name failslab, interval 1, probability 0, space 0, times 0 [ 585.575795][T12383] syz.0.1807: vmalloc error: size 16, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 585.636283][T12383] CPU: 0 UID: 0 PID: 12383 Comm: syz.0.1807 Not tainted syzkaller #0 PREEMPT(full) [ 585.636301][T12383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 585.636308][T12383] Call Trace: [ 585.636312][T12383] [ 585.636316][T12383] dump_stack_lvl+0x100/0x190 [ 585.636336][T12383] warn_alloc.cold+0x9e/0xb2 [ 585.636349][T12383] ? __pfx_warn_alloc+0x10/0x10 [ 585.636362][T12383] ? __kasan_kmalloc+0x8a/0xb0 [ 585.636383][T12383] ? __get_vm_area_node+0x22b/0x350 [ 585.636404][T12383] __vmalloc_node_range_noprof+0xf6b/0x1460 [ 585.636420][T12383] ? vmalloc_array_noprof+0x43/0x70 [ 585.636436][T12383] ? is_bpf_text_address+0x8a/0x1a0 [ 585.636449][T12383] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 585.636461][T12383] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 585.636480][T12383] ? vmalloc_array_noprof+0x43/0x70 [ 585.636495][T12383] __vmalloc_node_noprof+0xad/0xf0 [ 585.636506][T12383] ? vmalloc_array_noprof+0x43/0x70 [ 585.636526][T12383] __vmalloc_noprof+0xa3/0x120 [ 585.636537][T12383] ? __pfx___vmalloc_noprof+0x10/0x10 [ 585.636558][T12383] ? find_held_lock+0x2b/0x80 [ 585.636572][T12383] ? __might_fault+0xc5/0x140 [ 585.636585][T12383] vmalloc_array_noprof+0x43/0x70 [ 585.636600][T12383] do_update_counters.constprop.0+0x53/0x9c0 [ 585.636619][T12383] update_counters+0x127/0x1c0 [ 585.636633][T12383] ? __pfx_update_counters+0x10/0x10 [ 585.636652][T12383] ? bpf_lsm_capable+0x9/0x10 [ 585.636665][T12383] ? security_capable+0x80/0x260 [ 585.636681][T12383] do_ebt_set_ctl+0x27d/0x670 [ 585.636695][T12383] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 585.636710][T12383] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 585.636725][T12383] ? nf_sockopt_find.isra.0+0x222/0x290 [ 585.636742][T12383] nf_setsockopt+0x8d/0xf0 [ 585.636760][T12383] ip_setsockopt+0xcb/0xf0 [ 585.636772][T12383] udp_setsockopt+0x64/0xb0 [ 585.636788][T12383] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 585.636807][T12383] do_sock_setsockopt+0xf3/0x1d0 [ 585.636826][T12383] __sys_setsockopt+0x195/0x220 [ 585.636843][T12383] __x64_sys_setsockopt+0xbd/0x160 [ 585.636857][T12383] ? do_syscall_64+0xae/0x790 [ 585.636873][T12383] ? lockdep_hardirqs_on+0x7d/0x110 [ 585.636888][T12383] do_syscall_64+0x123/0x790 [ 585.636905][T12383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.636917][T12383] RIP: 0033:0x7f6d3b19e0d9 [ 585.636927][T12383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.636938][T12383] RSP: 002b:00007f6d3c0ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 585.636949][T12383] RAX: ffffffffffffffda RBX: 00007f6d3b425fa0 RCX: 00007f6d3b19e0d9 [ 585.636956][T12383] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000004 [ 585.636962][T12383] RBP: 00007f6d3c0ec090 R08: 0000000000000088 R09: 0000000000000000 [ 585.636969][T12383] R10: 0000200000002400 R11: 0000000000000246 R12: 0000000000000001 [ 585.636975][T12383] R13: 00007f6d3b426038 R14: 00007f6d3b425fa0 R15: 00007ffed7489898 [ 585.636989][T12383] [ 585.636993][T12383] Mem-Info: [ 586.054662][ T30] audit: type=1400 audit(1787506081.288:1509): avc: denied { write } for pid=12372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.246688][ T30] audit: type=1400 audit(1787506081.458:1510): avc: denied { write } for pid=12397 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.593616][T12406] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 586.638488][T12390] CPU: 0 UID: 0 PID: 12390 Comm: syz.6.1809 Not tainted syzkaller #0 PREEMPT(full) [ 586.638508][T12390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 586.638515][T12390] Call Trace: [ 586.638519][T12390] [ 586.638524][T12390] dump_stack_lvl+0x100/0x190 [ 586.638545][T12390] should_fail_ex.cold+0x5/0xa [ 586.638563][T12390] should_failslab+0xc2/0x120 [ 586.638581][T12390] kmem_cache_alloc_noprof+0x91/0x6a0 [ 586.638599][T12390] ? mpol_new+0x11b/0x2d0 [ 586.638617][T12390] mpol_new+0x11b/0x2d0 [ 586.638635][T12390] do_set_mempolicy+0x85/0x3d0 [ 586.638646][T12390] ? __pfx_do_set_mempolicy+0x10/0x10 [ 586.638661][T12390] kernel_set_mempolicy+0x198/0x1e0 [ 586.638673][T12390] ? ksys_write+0x1ac/0x250 [ 586.638688][T12390] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 586.638704][T12390] do_syscall_64+0x123/0x790 [ 586.638722][T12390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.638734][T12390] RIP: 0033:0x7fe41159e0d9 [ 586.638745][T12390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.638756][T12390] RSP: 002b:00007fe4123cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 586.638768][T12390] RAX: ffffffffffffffda RBX: 00007fe411825fa0 RCX: 00007fe41159e0d9 [ 586.638776][T12390] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 586.638782][T12390] RBP: 00007fe4123cd090 R08: 0000000000000000 R09: 0000000000000000 [ 586.638789][T12390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.638795][T12390] R13: 00007fe411826038 R14: 00007fe411825fa0 R15: 00007ffdfac037c8 [ 586.638810][T12390] [ 587.809701][T12383] active_anon:16003 inactive_anon:2959 isolated_anon:0 [ 587.809701][T12383] active_file:2899 inactive_file:55230 isolated_file:0 [ 587.809701][T12383] unevictable:0 dirty:407 writeback:0 [ 587.809701][T12383] slab_reclaimable:7839 slab_unreclaimable:111030 [ 587.809701][T12383] mapped:31457 shmem:6244 pagetables:1861 [ 587.809701][T12383] sec_pagetables:0 bounce:0 [ 587.809701][T12383] kernel_misc_reclaimable:0 [ 587.809701][T12383] free:1210033 free_pcp:15174 free_cma:0 [ 587.896602][T12417] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 587.911888][T12383] Node 0 active_anon:64116kB inactive_anon:11836kB active_file:11596kB inactive_file:220724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129936kB dirty:1624kB writeback:0kB shmem:24976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13184kB pagetables:7340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 588.070905][ T6347] nvmet: Created nvm controller 53 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:3b82987b-3ef1-4835-949b-ba30067568d0. [ 588.125089][T12406] nvme nvme52: creating 1 I/O queues. [ 588.160516][T12406] nvme nvme52: new ctrl: "testsubsys" [ 588.191281][T12383] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 588.355654][T12428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.386504][T12383] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 588.420867][T12428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.461270][T12383] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 589.021740][ T552] nvmet: Created nvm controller 54 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:3b82987b-3ef1-4835-949b-ba30067568d0. [ 589.055165][T12383] Node 0 DMA32 free:965144kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:126724kB inactive_anon:11836kB active_file:11596kB inactive_file:221348kB unevictable:0kB writepending:1624kB zspages:412kB present:3129332kB managed:2530784kB mlocked:0kB bounce:0kB free_pcp:35760kB local_pcp:35760kB free_cma:0kB [ 589.129672][T12417] nvme nvme53: creating 1 I/O queues. [ 589.150210][T12417] nvme nvme53: new ctrl: "testsubsys" [ 589.225814][T12383] lowmem_reserve[]: 0 0 0 0 0 [ 589.248720][T12383] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:96kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 589.334362][T12383] lowmem_reserve[]: 0 0 0 0 0 [ 589.369158][T12383] Node 1 Normal free:3821672kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 589.480342][T12383] lowmem_reserve[]: 0 0 0 0 0 [ 589.496085][T12383] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 589.563402][T12383] Node 0 DMA32: 622*4kB (UME) 581*8kB (UE) 272*16kB (UE) 712*32kB (UME) 581*64kB (UME) 441*128kB (UME) 204*256kB (UME) 122*512kB (UME) 60*1024kB (UME) 2*2048kB (UM) 159*4096kB (UM) = 959392kB [ 589.761717][T12383] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 589.814431][T12383] Node 1 Normal: 2*4kB (U) 4*8kB (UM) 6*16kB (UM) 5*32kB (UM) 7*64kB (UM) 7*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 932*4096kB (UM) = 3821672kB [ 589.910168][T12383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 589.943031][T12383] Node 0 hugepages_total=61 hugepages_free=61 hugepages_surp=0 hugepages_size=2048kB [ 589.972185][T12383] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 590.020199][T12383] Node 1 hugepages_total=60 hugepages_free=60 hugepages_surp=0 hugepages_size=2048kB [ 590.061187][T12383] 73199 total pagecache pages [ 590.084776][T12383] 0 pages in swap cache [ 590.112888][T12383] Free swap = 124832kB [ 590.134662][T12383] Total swap = 124996kB [ 590.156046][T12383] 2097051 pages RAM [ 590.179299][T12383] 0 pages HighMem/MovableOnly [ 590.197050][T12383] 432716 pages reserved [ 590.214327][T12383] 0 pages cma reserved [ 590.377101][T12456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.399962][T12456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.540828][ T5693] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 590.626263][T12459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12459 comm=syz.3.1821 [ 590.699425][ T5693] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 590.719736][ T5693] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 590.735008][ T5693] usb 3-1: config 0 has no interface number 0 [ 590.754476][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.773443][ T5693] usb 3-1: Product: syz [ 590.782544][ T5693] usb 3-1: Manufacturer: syz [ 590.793012][ T5693] usb 3-1: SerialNumber: syz [ 590.813771][ T5693] usb 3-1: config 0 descriptor?? [ 591.212726][ T5693] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 591.284239][ T5693] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 591.326580][ T5693] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 591.362754][ T5693] usb 3-1: media controller created [ 591.406931][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 591.441262][T12452] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 591.526621][T12452] SELinux: failed to load policy [ 592.245317][T12434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.750934][ T5693] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 592.906345][ T5693] usb 3-1: USB disconnect, device number 82 [ 592.975142][T12476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.040535][ T30] audit: type=1400 audit(1787506088.288:1511): avc: denied { write } for pid=12472 comm="syz.3.1831" name="functions" dev="configfs" ino=16377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 593.072744][T12476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.096186][T12474] FAULT_INJECTION: forcing a failure. [ 593.096186][T12474] name failslab, interval 1, probability 0, space 0, times 0 [ 593.169546][ T30] audit: type=1400 audit(1787506088.408:1512): avc: denied { write } for pid=12472 comm="syz.3.1831" name="c.1" dev="configfs" ino=31107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 593.262939][T12480] CUSE: unknown device info "" [ 593.269384][T12480] CUSE: unknown device info "" [ 593.274224][T12480] CUSE: unknown device info "" [ 593.279747][T12480] CUSE: unknown device info "" [ 593.284583][T12480] CUSE: unknown device info "ÿ" [ 593.291545][T12480] CUSE: zero length info key specified [ 593.329365][ T30] audit: type=1400 audit(1787506088.508:1513): avc: denied { write } for pid=12472 comm="syz.3.1831" name="c.1" dev="configfs" ino=31107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 593.383724][T12474] CPU: 0 UID: 0 PID: 12474 Comm: syz.3.1831 Not tainted syzkaller #0 PREEMPT(full) [ 593.383745][T12474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 593.383752][T12474] Call Trace: [ 593.383756][T12474] [ 593.383761][T12474] dump_stack_lvl+0x100/0x190 [ 593.383781][T12474] should_fail_ex.cold+0x5/0xa [ 593.383797][T12474] should_failslab+0xc2/0x120 [ 593.383815][T12474] kmem_cache_alloc_noprof+0x91/0x6a0 [ 593.383832][T12474] ? do_getname+0x35/0x390 [ 593.383847][T12474] do_getname+0x35/0x390 [ 593.383860][T12474] do_sys_openat2+0xc7/0x1e0 [ 593.383873][T12474] ? __pfx_do_sys_openat2+0x10/0x10 [ 593.383885][T12474] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 593.383902][T12474] ? __fget_files+0x21f/0x3d0 [ 593.383922][T12474] __x64_sys_openat+0x12d/0x210 [ 593.383934][T12474] ? __pfx___x64_sys_openat+0x10/0x10 [ 593.383945][T12474] ? ksys_write+0x1ac/0x250 [ 593.383963][T12474] do_syscall_64+0x123/0x790 [ 593.383981][T12474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.383993][T12474] RIP: 0033:0x7f29e999e0d9 [ 593.384003][T12474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.384014][T12474] RSP: 002b:00007f29ea928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 593.384026][T12474] RAX: ffffffffffffffda RBX: 00007f29e9c25fa0 RCX: 00007f29e999e0d9 [ 593.384033][T12474] RDX: 0000000000000002 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 593.384040][T12474] RBP: 00007f29ea928090 R08: 0000000000000000 R09: 0000000000000000 [ 593.384046][T12474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.384052][T12474] R13: 00007f29e9c26038 R14: 00007f29e9c25fa0 R15: 00007ffd44173848 [ 593.384066][T12474] [ 594.220370][ T5598] Bluetooth: hci3: Malformed HCI Event [ 595.604482][T12510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12510 comm=syz.6.1837 [ 595.836790][T12518] CUSE: unknown device info "" [ 595.843365][T12518] CUSE: unknown device info "" [ 595.852821][T12518] CUSE: unknown device info "" [ 595.859246][T12518] CUSE: unknown device info "" [ 595.864077][T12518] CUSE: unknown device info "ÿ" [ 595.870625][T12518] CUSE: zero length info key specified [ 595.938424][ T5693] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 596.179470][ T5693] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 597.112677][ T5693] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 597.131596][ T5693] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 597.173081][T12522] netlink: 'syz.3.1846': attribute type 2 has an invalid length. [ 597.284894][ T5693] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 597.314973][T12527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.362120][ T5693] usb 3-1: config 220 has no interface number 2 [ 597.384677][ T5693] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 597.426871][T12527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.445760][ T5693] usb 3-1: config 220 interface 0 has no altsetting 0 [ 597.470399][ T5693] usb 3-1: config 220 interface 76 has no altsetting 0 [ 597.505080][ T5693] usb 3-1: config 220 interface 1 has no altsetting 0 [ 597.540340][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.585817][ T5693] usb 3-1: Product: syz [ 597.610697][ T5693] usb 3-1: Manufacturer: syz [ 597.634395][ T5693] usb 3-1: SerialNumber: syz [ 597.901861][ T5693] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 597.944671][ T5693] uvcvideo 3-1:220.0: No valid video chain found. [ 597.972116][ T5693] usb 3-1: selecting invalid altsetting 0 [ 598.203879][ T5693] usb 3-1: selecting invalid altsetting 0 [ 598.230202][ T5693] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 598.270290][ T5693] usb 3-1: USB disconnect, device number 83 [ 598.622780][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 598.659501][ T190] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 598.716319][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1857'. [ 598.763349][T12556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.828969][ T190] usb 7-1: Using ep0 maxpacket: 8 [ 598.840365][ T190] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 598.863347][T12556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.882998][ T190] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 598.905004][ T190] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 598.945215][ T190] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 598.974588][T12558] syzkaller1: entered promiscuous mode [ 598.982644][ T190] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 599.004124][ T190] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 599.032736][T12558] syzkaller1: entered allmulticast mode [ 599.062771][ T190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.331015][ T190] usb 7-1: GET_CAPABILITIES returned 0 [ 599.347293][ T190] usbtmc 7-1:16.0: can't read capabilities [ 599.368950][ T5693] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 599.529252][ T5693] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 599.542565][ T5693] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 599.567084][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.587277][ T190] usb 7-1: USB disconnect, device number 20 [ 599.621638][T12558] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 599.665208][ T5693] opticon 3-1:1.0: opticon converter detected [ 599.701178][ T5693] usb 3-1: opticon converter now attached to ttyUSB0 [ 600.023582][T12570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.066329][T12570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.174445][T12573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1863'. [ 600.604737][ T30] audit: type=1804 audit(1787506095.848:1514): pid=12579 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.1865" name="/newroot/24/file0" dev="tmpfs" ino=148 res=1 errno=0 [ 600.643987][T12578] uprobe: syz.7.1865:12578 failed to unregister, leaking uprobe [ 600.806026][T12583] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 600.870022][ T6345] nvmet: Created nvm controller 55 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:3b82987b-3ef1-4835-949b-ba30067568d0. [ 600.890535][T12583] nvme nvme54: creating 1 I/O queues. [ 600.906037][T12583] nvme nvme54: new ctrl: "testsubsys" [ 601.333024][T12589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.380278][T12589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.419605][T12591] netlink: 'syz.6.1869': attribute type 2 has an invalid length. [ 602.449405][ T190] usb 3-1: USB disconnect, device number 84 [ 602.469807][ T190] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 602.631047][ T190] opticon 3-1:1.0: device disconnected [ 602.696624][T12596] netlink: 'syz.7.1870': attribute type 2 has an invalid length. [ 602.885537][T12605] FAULT_INJECTION: forcing a failure. [ 602.885537][T12605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.949015][T12605] CPU: 0 UID: 0 PID: 12605 Comm: syz.6.1874 Not tainted syzkaller #0 PREEMPT(full) [ 602.949033][T12605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 602.949039][T12605] Call Trace: [ 602.949044][T12605] [ 602.949049][T12605] dump_stack_lvl+0x100/0x190 [ 602.949070][T12605] should_fail_ex.cold+0x5/0xa [ 602.949085][T12605] _copy_from_user+0x2e/0xd0 [ 602.949102][T12605] set_selection_user+0x88/0x140 [ 602.949117][T12605] ? __pfx_set_selection_user+0x10/0x10 [ 602.949132][T12605] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 602.949150][T12605] tioclinux+0x1b0/0x640 [ 602.949167][T12605] vt_ioctl+0x145d/0x3150 [ 602.949180][T12605] ? __pfx_vt_ioctl+0x10/0x10 [ 602.949191][T12605] ? tomoyo_path_number_perm+0x28f/0x580 [ 602.949213][T12605] ? tomoyo_path_number_perm+0x188/0x580 [ 602.949233][T12605] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 602.949250][T12605] ? tty_jobctrl_ioctl+0x152/0xce0 [ 602.949262][T12605] ? __pfx_vt_ioctl+0x10/0x10 [ 602.949274][T12605] tty_ioctl+0x26a/0x1640 [ 602.949291][T12605] ? __pfx_tty_ioctl+0x10/0x10 [ 602.949305][T12605] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 602.949324][T12605] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 602.949350][T12605] ? selinux_file_ioctl+0x13b/0x290 [ 602.949366][T12605] ? selinux_file_ioctl+0xb6/0x290 [ 602.949383][T12605] ? __pfx_tty_ioctl+0x10/0x10 [ 602.949399][T12605] __x64_sys_ioctl+0x18e/0x210 [ 602.949415][T12605] do_syscall_64+0x123/0x790 [ 602.949433][T12605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.949444][T12605] RIP: 0033:0x7fe41159e0d9 [ 602.949455][T12605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.949465][T12605] RSP: 002b:00007fe4123cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.949477][T12605] RAX: ffffffffffffffda RBX: 00007fe411825fa0 RCX: 00007fe41159e0d9 [ 602.949484][T12605] RDX: 0000200000001900 RSI: 000000000000541c RDI: 0000000000000003 [ 602.949490][T12605] RBP: 00007fe4123cd090 R08: 0000000000000000 R09: 0000000000000000 [ 602.949496][T12605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.949502][T12605] R13: 00007fe411826038 R14: 00007fe411825fa0 R15: 00007ffdfac037c8 [ 602.949521][T12605] [ 603.882758][T12612] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 604.084738][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.086251][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.122314][T12615] netlink: 'syz.0.1878': attribute type 21 has an invalid length. [ 604.122330][T12615] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1878'. [ 604.125259][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.125449][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.440438][T12620] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 604.440531][T12620] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 605.049070][ T190] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 605.189193][ T190] usb 7-1: device descriptor read/64, error -71 [ 605.250033][T12640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.311962][T12642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.322608][T12640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.340361][T12642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.881011][ T190] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 606.028982][ T190] usb 7-1: device descriptor read/64, error -71 [ 606.090730][ T4924] block nbd1: Possible stuck request ffff888028050000: control (read@0,1024B). Runtime 240 seconds [ 606.102985][ T4924] block nbd1: Possible stuck request ffff8880280501c0: control (read@1024,3072B). Runtime 240 seconds [ 606.149335][ T190] usb usb7-port1: attempt power cycle [ 606.310539][T12640] SELinux: failed to load policy [ 606.518974][ T190] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 606.680100][ T190] usb 7-1: device descriptor read/8, error -71 [ 607.038680][ T190] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 607.059704][ T190] usb 7-1: device descriptor read/8, error -71 [ 607.200258][ T190] usb usb7-port1: unable to enumerate USB device [ 607.236816][T12654] PKCS7: Unsupported SignerInfo version [ 607.891625][ T30] audit: type=1800 audit(1787506103.138:1515): pid=12654 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1891" name="ifname" dev="configfs" ino=45042 res=0 errno=0 [ 608.465491][ T30] audit: type=1400 audit(1787506103.388:1516): avc: denied { write } for pid=12653 comm="syz.0.1891" name="c.1" dev="configfs" ino=31107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 609.249213][ T30] audit: type=1400 audit(1787506103.388:1517): avc: denied { write } for pid=12653 comm="syz.0.1891" name="c.1" dev="configfs" ino=31107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 609.522255][ T30] audit: type=1400 audit(1787506104.768:1518): avc: denied { bind } for pid=12669 comm="syz.0.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 609.571722][T12672] netlink: 'syz.6.1897': attribute type 2 has an invalid length. [ 609.684608][ T30] audit: type=1400 audit(1787506104.828:1519): avc: denied { create } for pid=12669 comm="syz.0.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 610.078975][ T190] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 610.271567][ T190] usb 3-1: unable to get BOS descriptor or descriptor too short [ 610.300334][ T190] usb 3-1: New USB device found, idVendor=061c, idProduct=c0a4, bcdDevice=ed.f2 [ 610.379449][ T5692] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 610.495100][ T190] usb 3-1: config 16 has an invalid interface number: 80 but max is 0 [ 610.594580][ T190] usb 3-1: config 16 has no interface number 0 [ 610.615579][ T5692] usb 7-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 610.651306][ T190] usb 3-1: config 16 interface 80 altsetting 129 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 610.696970][ T5692] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 610.757360][ T190] usb 3-1: config 16 interface 80 altsetting 129 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 610.775734][ T5692] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.844525][ T30] audit: type=1400 audit(1787506106.068:1520): avc: denied { connect } for pid=12693 comm="syz.0.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 610.877032][ T190] usb 3-1: config 16 interface 80 altsetting 129 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 610.923983][ T5692] usb 7-1: config 0 descriptor?? [ 610.949189][T12680] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 610.970892][ T190] usb 3-1: config 16 interface 80 has no altsetting 0 [ 611.037388][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.076173][ T190] usb 3-1: Product: syz [ 611.093077][ T190] usb 3-1: Manufacturer: syz [ 611.113226][ T190] usb 3-1: SerialNumber: syz [ 611.162337][T12703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.261797][T12703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.722505][ T190] usb 3-1: USB disconnect, device number 85 [ 612.999156][ T5692] usbhid 7-1:0.0: can't add hid device: -71 [ 613.099007][ T5692] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 613.375587][ T5692] usb 7-1: USB disconnect, device number 25 [ 613.716571][T12719] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1907'. [ 613.894238][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'. [ 613.904954][T12723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'. [ 617.105075][T12741] netlink: 1216 bytes leftover after parsing attributes in process `syz.2.1913'. [ 617.959950][T12744] xt_CT: No such helper "snmp" [ 618.900449][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.181963][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.318843][ T30] audit: type=1804 audit(1787506115.558:1521): pid=12751 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1916" name="/newroot/381/file0" dev="tmpfs" ino=2137 res=1 errno=0 [ 620.422099][T12747] uprobe: syz.2.1916:12747 failed to unregister, leaking uprobe [ 620.515549][T12762] 9p: Bad value for 'wfdno' [ 621.558767][T12771] autofs: Bad value for 'fd' [ 621.703596][T12777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.842308][ T5692] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 621.988497][T12777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.148756][ T5692] usb 3-1: device descriptor read/64, error -71 [ 623.759084][ T5692] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 623.936333][T12790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.946178][ T5692] usb 3-1: device descriptor read/64, error -71 [ 624.083896][T12790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.094516][ T5692] usb usb3-port1: attempt power cycle [ 624.513663][ T30] audit: type=1400 audit(1787506119.758:1522): avc: denied { bind } for pid=12799 comm="syz.2.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 624.534995][ T5693] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 624.579196][T12794] lo speed is unknown, defaulting to 1000 [ 624.770592][ T5693] usb 7-1: device descriptor read/64, error -71 [ 625.818995][ T5693] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 625.830167][T12794] lo speed is unknown, defaulting to 1000 [ 625.936863][ T30] audit: type=1400 audit(1787506121.158:1523): avc: denied { connect } for pid=12799 comm="syz.2.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 625.961394][ T5692] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 626.434829][ T5693] usb 7-1: device descriptor read/64, error -71 [ 626.518647][ T5692] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 626.561199][ T5692] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 626.622469][T12794] lo speed is unknown, defaulting to 1000 [ 626.646859][ T5693] usb usb7-port1: attempt power cycle [ 626.716268][ T5692] usb 3-1: config 2 has an invalid interface number: 43 but max is 0 [ 626.881956][ T5692] usb 3-1: config 2 has no interface number 0 [ 627.064426][ T5692] usb 3-1: config 2 interface 43 has no altsetting 0 [ 627.209024][ T5693] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 627.283549][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.361197][T12805] hfsplus: unable to find HFS+ superblock [ 627.436471][ T5692] usb 3-1: Product: syz [ 627.592683][ T5693] usb 7-1: device descriptor read/8, error -71 [ 627.785301][ T5692] usb 3-1: Manufacturer: syz [ 627.948710][ T5692] usb 3-1: SerialNumber: syz [ 628.082356][ T5692] usb 3-1: can't set config #2, error -71 [ 628.246227][ T5692] usb 3-1: USB disconnect, device number 89 [ 628.802075][ T30] audit: type=1400 audit(1787506124.048:1524): avc: denied { write } for pid=12809 comm="syz.2.1930" name="functions" dev="configfs" ino=16377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 629.584914][ T5693] lo speed is unknown, defaulting to 1000 [ 629.611480][T12794] infiniband syz1: set active [ 629.659668][T12794] infiniband syz1: added lo [ 629.759697][T12824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.956087][T12824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.969777][T12794] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 630.052007][T12826] autofs: Bad value for 'fd' [ 630.112316][T12794] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 630.322567][T12794] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 630.338690][ T5693] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 630.493124][ T5693] usb 3-1: device descriptor read/64, error -71 [ 630.535814][T12794] RDS/IB: syz1: added [ 630.572692][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1937'. [ 630.585297][T12794] smc: adding ib device syz1 with port count 1 [ 630.627688][T12794] smc: ib device syz1 port 1 has no pnetid [ 630.650891][ T190] lo speed is unknown, defaulting to 1000 [ 630.698974][ T5692] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 630.739361][T12794] lo speed is unknown, defaulting to 1000 [ 630.789037][ T5693] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 630.814805][T12833] bridge0: port 3(netdevsim0) entered blocking state [ 630.870118][T12833] bridge0: port 3(netdevsim0) entered disabled state [ 630.898802][ T5692] usb 7-1: device descriptor read/64, error -71 [ 630.965554][T12833] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 630.979200][ T5693] usb 3-1: device descriptor read/64, error -71 [ 630.996681][ T5598] Bluetooth: hci2: ISO packet too small [ 631.123366][ T5693] usb usb3-port1: attempt power cycle [ 631.139141][ T5692] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 631.261352][T12833] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 631.414700][ T5692] usb 7-1: device descriptor read/64, error -71 [ 631.663689][T12833] bridge0: port 3(netdevsim0) entered blocking state [ 631.670496][T12833] bridge0: port 3(netdevsim0) entered forwarding state [ 631.679612][ T5692] usb usb7-port1: attempt power cycle [ 631.879086][ T5693] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 632.054568][ T5693] usb 3-1: device descriptor read/8, error -71 [ 632.185519][ T30] audit: type=1400 audit(1787506127.428:1525): avc: denied { accept } for pid=12843 comm="syz.3.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 632.211859][ T5692] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 632.448985][ T5693] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 632.467424][ T5692] usb 7-1: device descriptor read/8, error -71 [ 632.475343][T12794] lo speed is unknown, defaulting to 1000 [ 632.534086][ T5693] usb 3-1: device descriptor read/8, error -71 [ 632.754758][ T5693] usb usb3-port1: unable to enumerate USB device [ 632.839040][ T5692] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 632.883845][ T5692] usb 7-1: device descriptor read/8, error -71 [ 633.269869][ T5692] usb usb7-port1: unable to enumerate USB device [ 634.340362][T12857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12857 comm=syz.7.1945 [ 634.795312][T12794] lo speed is unknown, defaulting to 1000 [ 636.041855][T12867] autofs: Unknown parameter '00000000000000000000' [ 636.249437][ T4924] block nbd1: Possible stuck request ffff888028050000: control (read@0,1024B). Runtime 270 seconds [ 636.272448][ T4924] block nbd1: Possible stuck request ffff8880280501c0: control (read@1024,3072B). Runtime 270 seconds [ 636.396752][T12794] lo speed is unknown, defaulting to 1000 [ 637.084206][T12871] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1949'. [ 637.134084][ T5598] Bluetooth: hci3: ISO packet too small [ 639.070736][T12794] lo speed is unknown, defaulting to 1000 [ 639.750888][T11905] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 639.796459][T11905] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 639.809177][T11905] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 639.819509][T11905] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 639.829919][T11905] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 641.147192][T12898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12898 comm=syz.2.1957 [ 641.930121][T11905] Bluetooth: hci1: command tx timeout [ 642.744923][T12794] lo speed is unknown, defaulting to 1000 [ 644.013091][ T5598] Bluetooth: hci1: command tx timeout [ 646.039123][ T5598] Bluetooth: hci0: ISO packet too small [ 646.090078][ T5598] Bluetooth: hci1: command tx timeout [ 646.196599][T12890] lo speed is unknown, defaulting to 1000 [ 646.669065][ T190] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 646.854013][T12929] autofs: Unknown parameter '00000000000000000000' [ 646.862307][ T190] usb 7-1: device descriptor read/64, error -71 [ 647.141413][ T190] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 647.252639][T12932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=12932 comm=syz.3.1964 [ 647.345352][ T190] usb 7-1: device descriptor read/64, error -71 [ 647.509301][ T190] usb usb7-port1: attempt power cycle [ 647.939302][ T190] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 648.091227][ T190] usb 7-1: device descriptor read/8, error -71 [ 648.170124][ T5598] Bluetooth: hci1: command tx timeout [ 648.412892][T12945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.578924][ T190] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 648.615123][T12945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.726152][ T190] usb 7-1: device descriptor read/8, error -71 [ 649.724746][ T190] usb usb7-port1: unable to enumerate USB device [ 649.814153][T12890] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.012802][T12890] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.060618][T12890] bridge_slave_0: entered allmulticast mode [ 650.103574][T12890] bridge_slave_0: entered promiscuous mode [ 650.131750][T12890] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.154165][T12890] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.174883][T12890] bridge_slave_1: entered allmulticast mode [ 650.210141][T12890] bridge_slave_1: entered promiscuous mode [ 650.305025][ T190] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 650.405212][T12890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.669020][ T190] usb 7-1: Using ep0 maxpacket: 8 [ 650.711504][ T190] usb 7-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 650.725713][T12890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.020802][ T190] usb 7-1: config 0 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 651.154979][T12957] sctp: [Deprecated]: syz.7.1970 (pid 12957) Use of int in max_burst socket option. [ 651.154979][T12957] Use struct sctp_assoc_value instead [ 651.301074][ T190] usb 7-1: config 0 interface 0 has no altsetting 0 [ 651.454749][ T190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.494925][T12890] team0: Port device team_slave_0 added [ 651.782395][ T190] usb 7-1: config 0 descriptor?? [ 651.792342][T12890] team0: Port device team_slave_1 added [ 652.021590][T12890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.058665][T12890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.383965][ T190] usbhid 7-1:0.0: can't add hid device: -71 [ 652.412697][ T5598] Bluetooth: hci3: ISO packet too small [ 652.455073][ T190] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 652.614019][ T190] usb 7-1: USB disconnect, device number 38 [ 652.647352][T12890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.797145][T12890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.962761][T12890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.215339][T12890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.821009][T12890] hsr_slave_0: entered promiscuous mode [ 653.960883][T12890] hsr_slave_1: entered promiscuous mode [ 654.069779][T12890] debugfs: 'hsr0' already exists in 'hsr' [ 654.136603][T12890] Cannot create hsr debugfs directory [ 654.192210][T12974] autofs: Unknown parameter '00000000000000000000' [ 655.168375][ T190] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 655.263487][T12981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.361015][ T190] usb 7-1: unable to get BOS descriptor or descriptor too short [ 655.390533][T12981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.419161][ T190] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 655.495860][ T190] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 655.570312][ T190] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.610343][ T190] usb 7-1: Product: syz [ 655.681283][ T190] usb 7-1: Manufacturer: syz [ 655.701517][ T190] usb 7-1: SerialNumber: syz [ 655.708741][ T5692] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 655.871801][ T5692] usb 3-1: device descriptor read/64, error -71 [ 655.991976][ T190] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 656.176514][T12890] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 656.204912][ T190] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 656.299030][ T5692] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 656.359917][T12890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 656.451675][ T190] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 656.547334][T12890] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 656.638667][ T5692] usb 3-1: device descriptor read/64, error -71 [ 656.805478][ T190] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 656.815659][ T5602] Bluetooth: hci5: command 0x0406 tx timeout [ 656.859801][ T5692] usb usb3-port1: attempt power cycle [ 656.916134][T12890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 657.090150][ T190] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 657.106799][T12890] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 657.134255][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1982'. [ 657.147386][ T190] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 657.264869][T12890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 657.287013][ T190] usb 7-1: USB disconnect, device number 39 [ 657.326341][T12890] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 657.467367][ T5692] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 657.483824][T12890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 657.569442][ T5692] usb 3-1: device descriptor read/8, error -71 [ 657.848423][ T5692] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 657.922505][ T5692] usb 3-1: device descriptor read/8, error -71 [ 657.989617][ T30] audit: type=1400 audit(1787506153.238:1526): avc: denied { create } for pid=12995 comm="syz.3.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 658.081638][T12890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.096347][ T5692] usb usb3-port1: unable to enumerate USB device [ 660.015345][T12890] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.053920][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.061071][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.882344][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.889492][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.792207][T13020] autofs: Unknown parameter '00000000000000000000' [ 663.860248][T13032] netlink: 'syz.3.1990': attribute type 1 has an invalid length. [ 664.039769][T13036] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 664.049317][T13036] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 664.319182][ T190] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 664.386124][T13041] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1993'. [ 664.396798][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1993'. [ 664.529708][ T190] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 666.274396][ T190] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 666.741879][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.890973][ T4924] block nbd1: Possible stuck request ffff888028050000: control (read@0,1024B). Runtime 300 seconds [ 666.903583][ T4924] block nbd1: Possible stuck request ffff8880280501c0: control (read@1024,3072B). Runtime 300 seconds [ 666.972294][T13045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.061647][ T5602] Bluetooth: hci0: command 0x0419 tx timeout [ 667.146708][ T190] usb 3-1: can't set config #1, error -71 [ 667.378678][T13045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.432200][ T190] usb 3-1: USB disconnect, device number 98 [ 668.577342][ T30] audit: type=1400 audit(1787506163.818:1527): avc: denied { read } for pid=13056 comm="syz.2.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 668.730954][T12890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.741998][T13058] input: syz0 as /devices/virtual/input/input27 [ 669.045024][ T30] audit: type=1400 audit(1787506163.938:1528): avc: denied { getopt } for pid=13056 comm="syz.2.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 669.159271][T13063] autofs: Unknown parameter '00000000000000000000' [ 669.634541][T13072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.739732][T13072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.872492][ T5729] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 670.165969][ T5729] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 670.381969][ T5729] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.511974][ T5729] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 670.655512][ T5729] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.807040][T12890] veth0_vlan: entered promiscuous mode [ 670.996523][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 671.094856][T12890] veth1_vlan: entered promiscuous mode [ 671.111092][ T5729] usb 3-1: Product: syz [ 671.569632][ T5729] usb 3-1: Manufacturer: syz [ 671.733179][T13070] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 671.961127][T12890] veth0_macvtap: entered promiscuous mode [ 672.166839][ T5729] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 672.380912][T12890] veth1_macvtap: entered promiscuous mode [ 672.639219][ T5729] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 672.884956][ T5729] usb 3-1: USB disconnect, device number 99 [ 672.921506][T12890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.027183][ T5729] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 673.280358][T12890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.369672][ T5729] garmin_gps 3-1:1.0: device disconnected [ 673.492901][T13094] syzkaller1: entered promiscuous mode [ 673.564086][T13094] syzkaller1: entered allmulticast mode [ 674.028755][ T5729] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 674.218892][ T6076] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.234398][ T5729] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 674.464126][ T5729] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 674.545391][ T6349] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.837248][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.931226][ T6349] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.041430][T13095] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 675.360878][ T77] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.509928][ T5729] opticon 3-1:1.0: opticon converter detected [ 675.677099][ T5729] usb 3-1: opticon converter now attached to ttyUSB0 [ 675.741098][ T6349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.841439][ T6349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.371018][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.536524][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.414173][ T30] audit: type=1400 audit(1787506172.658:1529): avc: denied { mounton } for pid=13106 comm="syz.7.2009" path="/file1" dev="tmpfs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 677.829819][T13111] input: syz1 as /devices/virtual/input/input28 [ 677.842223][T13112] autofs: Unknown parameter '00000000000000000000' [ 678.942365][ T190] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 679.168973][ T190] usb 9-1: Using ep0 maxpacket: 16 [ 679.271280][ T190] usb 9-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 679.381990][ T190] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 99, changing to 10 [ 679.476595][ T190] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.515838][ T190] usb 9-1: config 0 descriptor?? [ 679.730084][T13129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2015'. [ 680.225962][ T190] elo 0003:04E7:0009.0014: unknown main item tag 0x0 [ 680.359562][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.368866][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.569046][ T190] elo 0003:04E7:0009.0014: unknown main item tag 0x0 [ 680.642699][ T190] elo 0003:04E7:0009.0014: unknown main item tag 0x0 [ 680.815275][ T190] elo 0003:04E7:0009.0014: unknown main item tag 0x0 [ 681.071300][ T5693] usb 3-1: USB disconnect, device number 100 [ 681.225854][ T190] elo 0003:04E7:0009.0014: unknown main item tag 0x0 [ 681.255028][ T5693] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 681.287359][ T190] elo 0003:04E7:0009.0014: unknown main item tag 0x0 [ 681.316853][ T5693] opticon 3-1:1.0: device disconnected [ 681.369312][ T190] elo 0003:04E7:0009.0014: unknown main item tag 0x0 [ 681.414399][ T190] elo 0003:04E7:0009.0014: unknown main item tag 0x0 [ 681.518790][ T190] elo 0003:04E7:0009.0014: unknown main item tag 0x0 [ 681.590818][ T190] elo 0003:04E7:0009.0014: unknown main item tag 0x0 [ 681.788902][ T190] elo 0003:04E7:0009.0014: unexpected long global item [ 681.814081][T13142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.929889][ T190] elo 0003:04E7:0009.0014: parse failed [ 682.034191][T13142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.061460][ T190] elo 0003:04E7:0009.0014: probe with driver elo failed with error -22 [ 682.242467][T13150] can0: slcan on ttyS3. [ 682.364972][ T190] usb 9-1: USB disconnect, device number 2 [ 682.639799][ T30] audit: type=1400 audit(1787506177.888:1530): avc: denied { setopt } for pid=13149 comm="syz.6.2019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 682.932482][T13148] can0 (unregistered): slcan off ttyS3. [ 682.983855][T13161] binder: 13160:13161 ioctl c0306201 200000000080 returned -14 [ 684.232431][T13174] autofs: Unknown parameter 'fd00000000000000000000' [ 684.972019][T13183] FAULT_INJECTION: forcing a failure. [ 684.972019][T13183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.339738][T13189] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2026'. [ 685.541073][T13183] CPU: 0 UID: 0 PID: 13183 Comm: syz.2.2025 Not tainted syzkaller #0 PREEMPT(full) [ 685.541091][T13183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 685.541098][T13183] Call Trace: [ 685.541102][T13183] [ 685.541108][T13183] dump_stack_lvl+0x100/0x190 [ 685.541128][T13183] should_fail_ex.cold+0x5/0xa [ 685.541144][T13183] core_sys_select+0x5d1/0xbb0 [ 685.541163][T13183] ? __pfx_core_sys_select+0x10/0x10 [ 685.541179][T13183] ? get_pid_task+0xfc/0x250 [ 685.541205][T13183] ? ktime_get_ts64+0x306/0x420 [ 685.541223][T13183] ? ktime_get_ts64+0x318/0x420 [ 685.541239][T13183] ? ktime_get_ts64+0x257/0x420 [ 685.541257][T13183] kern_select+0x1d0/0x280 [ 685.541274][T13183] ? __pfx_kern_select+0x10/0x10 [ 685.541292][T13183] ? __pfx_ksys_write+0x10/0x10 [ 685.541308][T13183] __x64_sys_select+0xbd/0x160 [ 685.541324][T13183] ? do_syscall_64+0xae/0x790 [ 685.541340][T13183] ? lockdep_hardirqs_on+0x7d/0x110 [ 685.541356][T13183] do_syscall_64+0x123/0x790 [ 685.541372][T13183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.541385][T13183] RIP: 0033:0x7f982319e0d9 [ 685.541395][T13183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.541406][T13183] RSP: 002b:00007f98240e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 685.541417][T13183] RAX: ffffffffffffffda RBX: 00007f9823425fa0 RCX: 00007f982319e0d9 [ 685.541424][T13183] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000046 [ 685.541430][T13183] RBP: 00007f98240e1090 R08: 0000200000000440 R09: 0000000000000000 [ 685.541437][T13183] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 685.541443][T13183] R13: 00007f9823426038 R14: 00007f9823425fa0 R15: 00007ffca09e8b88 [ 685.541457][T13183] [ 686.832945][ T30] audit: type=1400 audit(1787506181.648:1531): avc: denied { write } for pid=13166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.530409][ T30] audit: type=1400 audit(1787506182.768:1532): avc: denied { write } for pid=13214 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 688.030212][T13223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.050849][T13215] cgroup: No subsys list or none specified [ 688.132250][T13223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.158594][ T190] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 688.213148][ T5729] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 688.332776][ T190] usb 9-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 688.373434][ T190] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 688.407175][ T5729] usb 7-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 688.642401][ T5729] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.690705][ T190] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.939895][ T5729] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 690.404314][ T5729] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 690.689587][ T190] usb 9-1: can't set config #1, error -71 [ 690.944503][ T190] usb 9-1: USB disconnect, device number 3 [ 690.975141][ T5729] usb 7-1: string descriptor 0 read error: -71 [ 691.398910][ T5729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.426267][T13242] syzkaller0: entered promiscuous mode [ 691.634880][ T5729] usb 7-1: can't set config #1, error -71 [ 691.730883][T13242] syzkaller0: entered allmulticast mode [ 691.938997][ T5729] usb 7-1: USB disconnect, device number 40 [ 692.205740][T13262] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2040'. [ 692.383439][ T30] audit: type=1400 audit(1787506187.628:1533): avc: denied { write } for pid=13231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.429758][T13282] SELinux: Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped). [ 693.451770][ T30] audit: type=1400 audit(1787506188.678:1535): avc: denied { relabelfrom } for pid=13278 comm="syz.8.2044" name="ALG" dev="sockfs" ino=48607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 693.805987][ T190] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 693.918224][ T30] audit: type=1400 audit(1787506188.638:1534): avc: denied { write } for pid=13276 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.173434][ T190] usb 9-1: Invalid ep0 maxpacket: 16 [ 695.499047][ T30] audit: type=1400 audit(1787506189.308:1536): avc: denied { relabelto } for pid=13278 comm="syz.8.2044" name="ALG" dev="sockfs" ino=48607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=alg_socket permissive=1 trawcon="system_u:object_r:hostname_exec_t:s0" [ 695.687607][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 696.497573][T13297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 696.569139][ T190] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 698.109384][ T4924] block nbd1: Possible stuck request ffff888028050000: control (read@0,1024B). Runtime 330 seconds [ 698.121927][ T4924] block nbd1: Possible stuck request ffff8880280501c0: control (read@1024,3072B). Runtime 330 seconds [ 698.524967][T13297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.759545][T13302] tls_set_device_offload: netdev not found [ 699.505175][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2054'. [ 699.639144][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2054'. [ 700.736987][T13315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.834878][ T5692] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 701.178287][ T5692] usb 3-1: Using ep0 maxpacket: 8 [ 701.333947][ T5692] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 701.349043][T13315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.561045][T13315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.580350][ T5692] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 701.712582][T13315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.828975][ T5692] usb 3-1: string descriptor 0 read error: -71 [ 701.931780][ T5692] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 702.258995][ T5692] usb 3-1: can't set config #1, error -71 [ 702.283884][T13327] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2056'. [ 702.351978][ T5692] usb 3-1: USB disconnect, device number 101 [ 706.373905][T13351] overlayfs: failed to resolve './sys': -2 [ 707.022565][T13345] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2062'. [ 709.796874][T13362] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 711.739784][ T30] audit: type=1326 audit(1787506206.988:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13383 comm="syz.2.2072" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f982319e0d9 code=0x0 [ 712.266823][ T77] Bluetooth: hci4: Frame reassembly failed (-84) [ 714.328951][ T5602] Bluetooth: hci4: command 0x1003 tx timeout [ 714.339522][ T5598] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 714.625200][ T30] audit: type=1400 audit(1787506209.868:1538): avc: denied { write } for pid=13393 comm="syz.8.2074" name="functions" dev="configfs" ino=16377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 714.870661][T13397] could not allocate digest TFM handle sha384-generic [ 717.926189][T13423] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2082'. [ 720.546403][T13451] loop6: detected capacity change from 0 to 7 [ 720.615535][T13451] Dev loop6: unable to read RDB block 7 [ 720.799323][T13451] loop6: unable to read partition table [ 721.235385][T13451] loop6: partition table beyond EOD, truncated [ 721.252982][T13453] could not allocate digest TFM handle sha384-generic [ 721.646743][T13451] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 722.173335][T13471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2095'. [ 722.365335][ T4963] Dev loop6: unable to read RDB block 7 [ 722.415490][ T4963] loop6: unable to read partition table [ 722.470515][ T4963] loop6: partition table beyond EOD, truncated [ 722.525272][T13484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.741333][T13484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.193775][T13486] kvm: kvm [13485]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000000 [ 728.329505][ T4924] block nbd1: Possible stuck request ffff888028050000: control (read@0,1024B). Runtime 360 seconds [ 728.341826][ T4924] block nbd1: Possible stuck request ffff8880280501c0: control (read@1024,3072B). Runtime 360 seconds [ 728.667053][T13518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.768360][T13510] could not allocate digest TFM handle sha384-generic [ 728.846180][T13523] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2103'. [ 728.891647][T13518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.980418][T13523] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2103'. [ 729.026280][ T30] audit: type=1400 audit(1787506224.268:1539): avc: denied { connect } for pid=13528 comm="syz.2.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 729.113083][ T30] audit: type=1400 audit(1787506224.338:1540): avc: denied { ioctl } for pid=13528 comm="syz.2.2112" path="socket:[49802]" dev="sockfs" ino=49802 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 730.413359][T13541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.739487][T13541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.141591][T13541] overlayfs: failed to resolve 'lower': -2 [ 731.149542][ T30] audit: type=1400 audit(1787506226.388:1541): avc: denied { mounton } for pid=13539 comm="syz.3.2117" path="/417/mnt" dev="gadgetfs" ino=6895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 732.232532][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2121'. [ 732.492585][ T5692] hid_parser_main: 57 callbacks suppressed [ 732.492601][ T5692] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 732.536007][T13561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2122'. [ 733.166445][ T5692] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 733.925566][T13574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.369621][T13574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.684538][ T5692] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 734.802426][T13586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2125'. [ 735.683882][ T5692] usb 7-1: device descriptor read/64, error -71 [ 735.989148][ T5692] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 736.338702][ T5692] usb 7-1: device descriptor read/64, error -71 [ 736.634797][ T5692] usb usb7-port1: attempt power cycle [ 737.008631][ T5700] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 737.118887][ T5692] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 737.175770][ T5692] usb 7-1: device descriptor read/8, error -71 [ 737.229182][ T5700] usb 3-1: device descriptor read/64, error -71 [ 737.438990][ T5729] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 737.558959][ T5700] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 737.644472][ T5729] usb 9-1: Using ep0 maxpacket: 32 [ 737.672243][ T5729] usb 9-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 737.728911][ T5700] usb 3-1: device descriptor read/64, error -71 [ 737.809031][ T5729] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.826225][ T5729] usb 9-1: Product: syz [ 737.874239][ T5729] usb 9-1: Manufacturer: syz [ 737.892629][ T5700] usb usb3-port1: attempt power cycle [ 738.166225][ T5729] usb 9-1: SerialNumber: syz [ 738.346948][ T5729] usb 9-1: config 0 descriptor?? [ 738.466984][ T5729] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 738.558993][ T5700] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 738.686096][ T5700] usb 3-1: device descriptor read/8, error -71 [ 738.740950][ T5729] dvb-usb: bulk message failed: -22 (4/0) [ 738.932199][ T5729] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 738.973697][T13600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.818888][ T5700] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 739.836400][ T5729] dvb-usb: bulk message failed: -22 (5/0) [ 739.899414][ T5729] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 739.911565][ T5700] usb 3-1: device descriptor read/8, error -71 [ 739.947017][T13600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.032103][ T5700] usb usb3-port1: unable to enumerate USB device [ 740.086955][ T5729] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 740.155140][ T5729] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 740.215208][ T5729] usb 9-1: media controller created [ 740.292951][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 740.379015][ T190] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 740.393838][ T5729] usb 9-1: selecting invalid altsetting 3 [ 740.427872][ T5729] ttusb2: set interface to alts=3 failed [ 740.569672][ T190] usb 7-1: unable to get BOS descriptor or descriptor too short [ 740.661969][ T190] usb 7-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 740.761367][ T5729] DVB: Unable to find symbol tda10086_attach() [ 740.809091][ T190] usb 7-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 741.118996][ T5729] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 741.189195][ T190] usb 7-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 741.231174][ T5729] dvb-usb: bulk message failed: -22 (4/0) [ 741.286309][ T5729] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 741.501927][ T190] usb 7-1: config 66 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 741.581565][ T5729] dvb-usb: bulk message failed: -22 (5/0) [ 741.622430][ T190] usb 7-1: config 66 interface 0 has no altsetting 0 [ 741.658820][ T5729] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 741.676308][T13617] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2137'. [ 741.707163][ T5729] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 741.731847][ T190] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.125038][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 742.134424][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.156764][ T190] usb 7-1: Product: syz [ 742.191579][ T190] usb 7-1: Manufacturer: syz [ 742.206412][ T5729] usb 9-1: USB disconnect, device number 6 [ 742.314702][ T190] usb 7-1: SerialNumber: syz [ 742.681738][ T5729] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 742.844214][ T190] ati_remote2 7-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 742.997086][ T190] usb 7-1: USB disconnect, device number 45 [ 743.126728][ T30] audit: type=1400 audit(1787506238.368:1542): avc: denied { write } for pid=13629 comm="syz.3.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 743.239557][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2140'. [ 743.602885][T13630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.711973][T13638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.766176][T13638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.613305][T13647] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2144'. [ 744.630454][T13649] FAULT_INJECTION: forcing a failure. [ 744.630454][T13649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.721194][T13650] syzkaller0: entered promiscuous mode [ 744.745211][T13649] CPU: 0 UID: 0 PID: 13649 Comm: syz.8.2145 Not tainted syzkaller #0 PREEMPT(full) [ 744.745232][T13649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 744.745240][T13649] Call Trace: [ 744.745244][T13649] [ 744.745248][T13649] dump_stack_lvl+0x100/0x190 [ 744.745269][T13649] should_fail_ex.cold+0x5/0xa [ 744.745284][T13649] _copy_from_user+0x2e/0xd0 [ 744.745301][T13649] kern_select+0xcf/0x280 [ 744.745319][T13649] ? __pfx_kern_select+0x10/0x10 [ 744.745336][T13649] ? __pfx_ksys_write+0x10/0x10 [ 744.745353][T13649] __x64_sys_select+0xbd/0x160 [ 744.745369][T13649] do_syscall_64+0x123/0x790 [ 744.745387][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.745398][T13649] RIP: 0033:0x7fdcdf99e0d9 [ 744.745407][T13649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.745418][T13649] RSP: 002b:00007fdce07dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 744.745430][T13649] RAX: ffffffffffffffda RBX: 00007fdcdfc25fa0 RCX: 00007fdcdf99e0d9 [ 744.745437][T13649] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 744.745443][T13649] RBP: 00007fdce07dc090 R08: 0000200000000100 R09: 0000000000000000 [ 744.745449][T13649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.745455][T13649] R13: 00007fdcdfc26038 R14: 00007fdcdfc25fa0 R15: 00007ffc8ddf6328 [ 744.745469][T13649] [ 745.075247][T13650] syzkaller0: entered allmulticast mode [ 746.086691][T13658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.431561][ T30] audit: type=1400 audit(1787506241.678:1543): avc: denied { connect } for pid=13654 comm="syz.8.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 746.503063][T13661] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2146'. [ 746.743554][T13658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.799076][ T4924] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 746.811137][ T4924] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 746.819541][ T4924] CPU: 0 UID: 0 PID: 4924 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 746.828965][ T4924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 746.838992][ T4924] Workqueue: events_highpri f_midi_in_work [ 746.844775][ T4924] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 746.849949][ T4924] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 ab 3e 31 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 746.869537][ T4924] RSP: 0018:ffffc90006c5fa08 EFLAGS: 00010006 [ 746.875575][ T4924] RAX: dffffc0000000000 RBX: ffff88807cdc5a10 RCX: 0000000000000001 [ 746.883535][ T4924] RDX: 000000000000000c RSI: ffffffff87d9d585 RDI: 0000000000000060 [ 746.891477][ T4924] RBP: ffff88802b1240e0 R08: 0000000000000005 R09: 0000000000000005 [ 746.899419][ T4924] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802b124c00 [ 746.907366][ T4924] R13: ffff88807cdc5a00 R14: ffff88802b1240d8 R15: 0000000000000000 [ 746.915335][ T4924] FS: 0000000000000000(0000) GS:ffff888123b88000(0000) knlGS:0000000000000000 [ 746.924250][ T4924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 746.930809][ T4924] CR2: 000000110c3d0975 CR3: 000000007614a000 CR4: 00000000003526f0 [ 746.938756][ T4924] Call Trace: [ 746.942009][ T4924] [ 746.944918][ T4924] usb_ep_queue+0xfa/0x3c0 [ 746.949309][ T4924] f_midi_in_work+0x9b0/0x1580 [ 746.954049][ T4924] ? __pfx_f_midi_in_work+0x10/0x10 [ 746.959220][ T4924] ? process_one_work+0x906/0x1b10 [ 746.964306][ T4924] ? process_one_work+0x906/0x1b10 [ 746.969392][ T4924] process_one_work+0xac7/0x1b10 [ 746.974311][ T4924] ? __pfx___mod_timer+0x10/0x10 [ 746.979226][ T4924] ? __pfx_process_one_work+0x10/0x10 [ 746.984575][ T4924] ? __pfx_f_midi_in_work+0x10/0x10 [ 746.989747][ T4924] worker_thread+0x5ef/0xe50 [ 746.994313][ T4924] ? __pfx_worker_thread+0x10/0x10 [ 746.999412][ T4924] ? kthread+0x13a/0x450 [ 747.003637][ T4924] ? __pfx_worker_thread+0x10/0x10 [ 747.008727][ T4924] kthread+0x373/0x450 [ 747.012777][ T4924] ? __pfx_kthread+0x10/0x10 [ 747.017355][ T4924] ret_from_fork+0x730/0xd60 [ 747.021917][ T4924] ? __pfx_ret_from_fork+0x10/0x10 [ 747.027000][ T4924] ? __switch_to+0x800/0x10f0 [ 747.031650][ T4924] ? __pfx_kthread+0x10/0x10 [ 747.036238][ T4924] ret_from_fork_asm+0x1a/0x30 [ 747.040984][ T4924] [ 747.043981][ T4924] Modules linked in: [ 747.047849][ T4924] ---[ end trace 0000000000000000 ]--- [ 747.053279][ T4924] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 747.058544][ T4924] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 ab 3e 31 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 747.078153][ T4924] RSP: 0018:ffffc90006c5fa08 EFLAGS: 00010006 [ 747.084214][ T4924] RAX: dffffc0000000000 RBX: ffff88807cdc5a10 RCX: 0000000000000001 [ 747.092175][ T4924] RDX: 000000000000000c RSI: ffffffff87d9d585 RDI: 0000000000000060 [ 747.100130][ T4924] RBP: ffff88802b1240e0 R08: 0000000000000005 R09: 0000000000000005 [ 747.108087][ T4924] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802b124c00 [ 747.116040][ T4924] R13: ffff88807cdc5a00 R14: ffff88802b1240d8 R15: 0000000000000000 [ 747.123992][ T4924] FS: 0000000000000000(0000) GS:ffff888123b88000(0000) knlGS:0000000000000000 [ 747.133004][ T4924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.139574][ T4924] CR2: 000000110c3d0975 CR3: 000000007614a000 CR4: 00000000003526f0 [ 747.147525][ T4924] Kernel panic - not syncing: Fatal exception [ 747.153604][ T4924] Kernel Offset: disabled [ 747.157900][ T4924] Rebooting in 86400 seconds..