last executing test programs: 14m29.281997203s ago: executing program 32 (id=13): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000019140)=0x6) prlimit64(r0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x5, &(0x7f0000019380)={0x3, 0x855}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000100)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000019100)=0x7) pipe2$watch_queue(&(0x7f00000193c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) r4 = add_key(&(0x7f0000019400)='id_resolver\x00', &(0x7f0000019440)={'syz', 0x3}, &(0x7f0000019480)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) keyctl$revoke(0x3, r4) r5 = add_key$keyring(&(0x7f00000194c0), &(0x7f0000019500)={'syz', 0x0}, 0x0, 0x0, r4) add_key(&(0x7f0000019540)='id_legacy\x00', 0x0, &(0x7f0000019580)="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", 0x1d8, r5) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, @none, 0x6}, 0xa) shutdown(r6, 0x1) 14m29.182634074s ago: executing program 33 (id=12): r0 = syz_usb_connect(0x5, 0x39, &(0x7f00000010c0)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000001100)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="403001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000001200)={0x40, 0x24, 0x5b, {0x5b, 0x30, "1bfe6a6c9625397cf21f77cef348e33833f72e04fc0ad9bd27d753d415cac18e8e0dcd81e6e0ff5de0d7baad9f992647d2254f135b2699b13d43d7b7075030cf788005a7f8d3c8d17c83b71fff821b67a60fcd3ea27906f832"}}, &(0x7f0000001280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, &(0x7f0000000140)={0x0, 0xf, 0x21, {0x5, 0xf, 0x21, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x8b, 0x11, 0x6, 0x8, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3, 0x6c, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x5, 0x3}]}}, &(0x7f0000001300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x8, 0x59, 0x3, "1b806660", 'lLr<'}}, 0x0}, &(0x7f0000001340)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0015540000004f5591edbf85591566bf2029b5868691f22d4560812c7980519a37875716bbe46341b37389c3eaa6273b65377af39bd97e7fc8af06b0bddd379101af0e8aa93b9dfb59463a3e24316c3664c7297bc1f7d6520803"], &(0x7f0000001440)={0x0, 0xa, 0x1, 0x72}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000014c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001500)={0x20, 0x0, 0x8, {0x100, 0x1, [0xf0f]}}, &(0x7f0000001540)={0x40, 0x7, 0x2, 0xa05}, 0x0, &(0x7f0000001580)={0x40, 0xb, 0x2, "94af"}, &(0x7f00000015c0)={0x40, 0xf, 0x2, 0xc83}, &(0x7f0000001600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001680)={0x40, 0x19, 0x2, "5ad4"}, &(0x7f00000016c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000001700)={0x40, 0x1c, 0x1, 0xb}, &(0x7f0000001740)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000001780)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 11m31.38556691s ago: executing program 34 (id=647): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) syz_usb_connect(0x2, 0xcd7, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x8f, 0xc5, 0xe, 0x8, 0x4e2, 0x1411, 0xcfce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc5, 0x4, 0x7, 0x40, 0x10, 0x7, "", [{{0x9, 0x4, 0xe, 0xff, 0xa, 0x2, 0xc8, 0x98, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x9, 0xb, 0x9}, {0x6, 0x24, 0x1a, 0x1, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x59}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x2, 0x1}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xb86c, 0x0, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x39}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x1, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0xe5, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}, @acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x5, 0x7, [0x0, 0x9, 0xd, 0x1ff, 0x620f, 0xb]}]}], [{{0x9, 0x5, 0x5, 0x4, 0x8, 0xfb, 0x4, 0x80}}, {{0x9, 0x5, 0x6, 0x0, 0x1f7, 0xad, 0x3, 0x10, [@generic={0x89, 0x21, "8d0fba7f7f139c4b25623d25a98f808edea7aaab3af9a4fbe214a7932ca65ff87666d25dd04806c230881ad24fa3a57994950c0a0766705770cdc09322541d29fef98ac2f56e0e2eac18bd11e5121d8b02e3c0b81e567306ac9a6703e09f4017267e87f06ec154f1bf5510102d36979d6deb9ddc209cfbc1ef3f8593c4ef1b92be57626cb922ca"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x4, 0x1, 0xcd, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x6}, @generic={0xfc, 0x1, "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"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x9, 0x4, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x5}, @generic={0x46, 0x23, "acbf8c19cd7d50bf1019af5578682282cbd0fc48780660b4078f802d97207bf3c61412502cfff7bcfdea7b063e3c5c9385559451031bcf03bd714dd617d62a0a22fafed6"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x9, 0xcc, 0x5, [@generic={0x37, 0x22, "19f0595b8ff785cf3d72bc85ac23ebb120d3b6a1d37fdeec0fa9e9cfe9483be5af26f57d13e7aecf2805a3427488509b2749411a7c"}, @generic={0xd2, 0x10, "baf81eb28ae58813eb6586bdfbbd9b89f98f5082117455fabfa384258f0c1c20eb1f7f091802fe1629cb603b0ef529c69cbe76c69b53897621461eb2de55013bf6348acaac9d2e7e4c2377b9748e1b4606774060a7a501d76845c8691db47e11a3834d173367bf60e8b3022e8e033370f3e391c42110c051ad220e97edd479d0d29b22c389e35e25b066d47b9b2d04f99b766bfab7e96aea33b4151e4ed27e720ca7323332e08c125f77662c3a441bfb88f9ca24d2b7532d2e5abe740f950be864c07891993f1ffad525ea82848feaa6"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x0, 0x9, 0xf5, [@generic={0xc7, 0x5, "a709695426dded32504ee7040603570629d567ad33faeaa735e756841969f8fa7c91e880ebb299b32751a8926eb6cc2a40f851d226b9404f195ce19fc8e8a43d25287c5d37feb4dadd05e5cbb7fdb07aa7dcc23228703554c9e6fb601efc7ae3b15ae8eb4c0d4f42e0fba8b4c8d097602e5df8c127d1f4e7fe89771224ace154f59fca6c12b1ca21bc0384fb1da2c4b19c701731da6d9fa90d38ee033ada05cf3dbe6b8d830880039d2190f1951e3fb089f36fcca4d239448d5a077d5113ec5d363d870b0b"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x2, 0x6, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0xd7, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x40, 0x9, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0xf, 0x4, 0x3, [@generic={0x1c, 0x24, "84780f9aba39102b2c6003571c518e3667de46f19524bc6bbbef"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x9}]}}]}}, {{0x9, 0x4, 0x65, 0x40, 0x10, 0xe1, 0xb3, 0xe2, 0x40, [], [{{0x9, 0x5, 0x4, 0x4, 0x400, 0x40, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x3, 0x8a, 0x8}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x80, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfc, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x4, 0x3, 0x9c, [@generic={0x39, 0xf, "96cffc94bf7da126f8b99612a912fb3e31669662436733b6577ace9566cbce9fa87d7cb7a4248e36091a9254a603569439bee56fc6fcd2"}, @generic={0x89, 0xc, "b95e78cb03f1544630ff0bbd305e85fc63eed175220406fc4356859c7a5de5be3d7f366bea0cce69019482289ec5304f5740225de6f3fc44bbce85e115daa7a94d2007e738fde6a8579b547f5d0bc698f1d7c956f442aa22848789f4ee7739b02237acbd3bf3e70438ecd85c81fafe74d3f1100ed0fc52cda8065e3b26c8255ba8e1c4fe179b88"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x3, 0x2d, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x5, 0xd0}}, {{0x9, 0x5, 0x4, 0x6, 0x40, 0x8, 0x6, 0x13, [@generic={0xcb, 0x9, "00af99556c82decc11fbd073540cdb9107509201470be5b3e566ebb8c9210f7ac195592360f603d31941f2785441367c36ba7abaafbb7e020242b58fd025241cfa966198d944ef5366b6358613f20ab06800aafcf52be77a9b281ea76753fe43341a61a4605cc700fe9d3db9d40c1e5e4667d1e88af90decd04250fc900f48bc7ed287ad98a7049a41e6b6302848e38fb11d355253e76ff749e8ac6868fdd4a617e9d186533a57746fcdb63df3296c0756545b42f8416d4acc2ccf254f923b2e4649545ef82cf4e36a"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x0, 0x81, 0x0, 0xfa}}, {{0x9, 0x5, 0x8e, 0x1, 0x648, 0x1, 0x7, 0xbf}}, {{0x9, 0x5, 0x3, 0xd, 0x40, 0x1, 0x1, 0xaa, [@generic={0xef, 0xb, "5303b1f4ed804746e8a0741af5daefdda0cea6415f4ccb3d33faa0e9ab58a7447433251fd4bfe2c363ec6eb3dcd9131aa29ded6e63e8decb294f78bbe79ddeb1bd1354af4b5dd753f1810914161b45284a80a317672d8e184569f094a165e37cfdb33d50e45e01ef6647960c3135d38f8bdddd5031707a1d6d04d88d61437a40673321b0dff32a68b65bf4d334e103ff95879cc68faeb0ae94b2f98828f89c407e5b17147466111ba440595b95c467ba045b12762957f04e9978fa6e8bf1ee213a2b1c96de16d72014d31417f40ff2677ce1f09807b493cf27e91828abc85b3ffdadec248ee543a452f7e1cbee"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x94, 0x8}]}}, {{0x9, 0x5, 0x3, 0x0, 0x468, 0x1, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0xfff5}]}}, {{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x3, 0x9, 0xd}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x3, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x774}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x2, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x2, 0x3d, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x4b}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x2, 0x0, 0x7, [@generic={0x63, 0xd, "ca0cf03781fb92e90f1ce06715dd73e68371f6d77251e8220d59d3c184f50080d9432193178d65365175e5a6f98ee7d199fff2735d01d456f0eef27eebfbc1747af02ed907fff4aa6c74242abd8d8f1ed8a447acde3f5b9e7c88d70a64a7b3b12e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xfff}]}}]}}, {{0x9, 0x4, 0x37, 0x9, 0x5, 0xc0, 0x1b, 0x35, 0x10, [@hid_hid={0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x1e0}}, @hid_hid={0x9, 0x21, 0xa7, 0x40, 0x1, {0x22, 0x4d}}], [{{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x7, 0x9, 0xed}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x5e, 0xb, 0x6}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x3, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x2}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x3, 0x3, 0x5}}, {{0x9, 0x5, 0xa, 0x0, 0x30, 0x6, 0x3, 0xf, [@generic={0x17, 0x37, "20452a2a5ef19f761ffa34178a65fa94c351f24869"}]}}]}}, {{0x9, 0x4, 0xeb, 0x80, 0xe, 0xae, 0x17, 0x1b, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x3a}, [@selector_unit={0x8, 0x24, 0x5, 0x1, 0xa, 'z ['}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x402, 0x2, 0x2, 0xc}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x3, 0x3, [0x5, 0x8, 0x6], 0x9b}, @mixer_unit={0x5, 0x24, 0x4, 0x1, 0xa0}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x0, 0x4, "ec"}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x4}]}], [{{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x6, 0xb, 0x3}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x8, 0x9, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7f}, @generic={0x49, 0x21, "b35cb7909442145bc6f4c3fe5cfef98736aff41dbfc051e0aa8c477df89cd4ee0901d64103e3f71eeaa831d3b3dd93d220f78f1ae96b224c48b7b634a738c897e9769fde87b2cd"}]}}, {{0x9, 0x5, 0x8d, 0x3, 0x20, 0x5, 0x0, 0x7f, [@generic={0x66, 0x30, "4c2b6c7f89a2211a5d18ec47aac40e044b818115765ec7861646e59fcc4d2bc205b7023f144db6ef142e274dec262899a8f3d723b35fa8ab8829942f781971abe3529d23e579c68ae7e2057b87c9c3cbed743a17770e0772b7b89e76b80840562bc383a2"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0xc7, 0xfd}}, {{0x9, 0x5, 0x8, 0x2dd0d90ae71529c8, 0x8, 0x8, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x5}, @generic={0x1a, 0x1a, "5f113ac995c382d212bc3d3fc6cc3096128a86be580dc213"}]}}, {{0x9, 0x5, 0xa79d090cc60dd34, 0x0, 0x8, 0x4, 0x0, 0x4a}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x9, 0xfa, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xc, 0x7, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd6, 0x2}]}}, {{0x9, 0x5, 0xd, 0x8, 0x597, 0x7, 0xff, 0x3}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0xb, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x10}, @generic={0xa0, 0xa, "fc9237a7bf90d4941a6f260ae7d7976be7036cec3dfc7412d62465846c51f6b968e2fb09e4ee381bf70b6a79a368d3925899bd27b4d7b439e8e36432271082224b979e1d71654cf6e1549d37caf7880a67ec21a2e4c2cee53c77f91a1e6e01ec6eee57f0221ccca5c31d3932eb2a51529247198a5b73c68a8289a42ec9a551c4c5629ff79897bfb3a783ffcf955a8a2477791d9e3e5008713239a599ad5c"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x0, 0xe5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x401}, @generic={0x94, 0x8, "c7f00725dd5d11a00221463c3cd21196cd7ce4c9cc8781d105df2f96f06b71852e943aa5f9c2dab2a611f11a76f88988099bb3045044dacc025d1fe910cf81a4fc1145eef26c07a8d6195912063c24f0f705cef4d4d5f905c9dcd379ba82568def0b6cd5c76769d2ce8b9be4fe889eb32d2fd5731b7ab61cf17464300f0be5a546f477b6b3e0039567137c49317ec680b31f"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x1, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}, @generic={0xb, 0x24, "0cf474a8a38b9ce88a"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x0, 0xe, 0x7}}, {{0x9, 0x5, 0x7, 0x2f, 0x8, 0x80, 0x3, 0x7, [@generic={0xe5, 0x0, "d3f0c22d8b1fc0837f704a90025c1715fbaeec204ad3f4387bdc751beef9d38aa20daba6dc619bb594774544f2fe9be819e338c80199c40fd01a56b7432f038e00b790da4ad9ee50f91e111669735803d4c8a1e355dd4c903ac1053a6cbd3e0fca0c640604188977a3e28e62e42c9e61c346b3a4351a899125daeaea6cfe7e644c9e6a047c273262880f43b65dcd1417aab4a86958b3c4d32f1dffd47696fc80bdd91db16cf6d4bd56a3f3ba0573bd5dd775b9c772f3af6d5fed40d7ebfdb30b77bd8b6fef5e76f6d66ed85b993063ec74733bb1a89c172d60ab2285ca3f5f1126e47d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5f, 0x4}]}}]}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x250, 0x1d, 0x5, 0x3, 0x20, 0x9}, 0xf, &(0x7f0000001240)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x71, 0x2, 0x6}]}, 0x2, [{0x4b, &(0x7f0000001280)=ANY=[@ANYBLOB="4b03f69809496f454ecf789082465215b41c53956da1b71cd9bb7eae91bf0415af3045ebafb57b097bfe2c82c104c61085a0718e62094b1c073882140c933047ce9900419874"]}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0xfcff}}]}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x0, 0x0, &(0x7f00000004c0)) 11m21.510712072s ago: executing program 35 (id=722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4000040) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newtfilter={0x58, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x9, 0x4, 0x0, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5}}, @TCA_U32_INDEV={0x14, 0x8, 'wg2\x00'}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000009c0)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000a00)=ANY=[], 0xfdef) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) getsockopt$inet6_buf(r7, 0x29, 0xca, &(0x7f00000005c0)=""/241, &(0x7f00000006c0)=0xf1) 10m30.18731222s ago: executing program 6 (id=893): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = dup3(r0, r1, 0x80000) r3 = dup(r2) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0706090803"], 0xa) read$alg(r2, &(0x7f0000000ac0)=""/237, 0xed) pwrite64(r0, 0x0, 0x0, 0x4) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c80)={0x1, &(0x7f0000000cc0)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x200020c0) r5 = openat(0xffffffffffffff9c, 0x0, 0x602, 0x184) socketpair(0xa, 0x1, 0x100, &(0x7f00000000c0)) writev(r5, 0x0, 0x0) 10m26.511428577s ago: executing program 6 (id=903): r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) ptrace$poke(0x4, 0x0, &(0x7f00000194c0), 0x70c57bdf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000019280)={0x0, 0x2, 0x26000, 0x2000, &(0x7f000097e000/0x2000)=nil}) read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019180)=0x7) ioperm(0x7, 0x10, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f00000191c0)=0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 10m24.447124025s ago: executing program 6 (id=905): syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) ptrace$setopts(0x4200, r1, 0x6, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000002600), 0x12) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) r5 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) r6 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000002c0)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f00000004c0)}, 0x400000}) 10m20.793023307s ago: executing program 6 (id=910): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x803, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000080)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x70, 0x3, "", [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x3, 0x4, 0x9b}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x3, 0x7f, 0x4, 0xff, 0x9}, 0x16, &(0x7f0000000480)={0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x38, 0x1, 0x12, 0x3, 0x9}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x98, &(0x7f0000000500)=@string={0x98, 0x3, "6856d096988d8795582b480724a4ff2c318f1e772150feb0041b9660ed1930a26fbaaeaf1807a33af3c2075a5b7f0c6fe2cd46d97f498779e0b7fed8d81958490cb43622a9cfa9c8468c51d209238f11c57fe004de664116d7829119601927b78371b3fade87e0a8f3ba27d0de5d75668b44c9d5e26142dfcd18facdac983e129d7acaffee35c0dee252e59fed2179b63ec4db5c817d"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x430}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x1) 10m17.14600793s ago: executing program 6 (id=919): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0xf7ffff7f}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x2b, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}], 0x20}}], 0x2, 0x4000001) 10m17.008175549s ago: executing program 6 (id=921): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410072786500140033006c6f000000000000000000000000000000c7037516f481a25d43cd1a4f918cb2b83c4d254a412a17574ae7cae17685052c27b7084968c5f2b8d6a027867e5172262ac331ead865d7e1a543c6fe67a81ec7895f362720e65bd98e1ddc138b2f11b7e3d5e9215451a0cf14a27312d88dccfebda26d80efc2e54b0b965f8bea8f1ca2bc6097262b9e9c74c85e71a69139b6dd5fd85166d2fb1b4fb8fad86e70e0a8d56b080cd6d0a24f88113cb9b3428ba8d48c3c3953737ea11388a532f78da2"], 0x38}}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x2, 0x4}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410072786500140033006c6f000000000000000000000000000000c7037516f481a25d43cd1a4f918cb2b83c4d254a412a17574ae7cae17685052c27b7084968c5f2b8d6a027867e5172262ac331ead865d7e1a543c6fe67a81ec7895f362720e65bd98e1ddc138b2f11b7e3d5e9215451a0cf14a27312d88dccfebda26d80efc2e54b0b965f8bea8f1ca2bc6097262b9e9c74c85e71a69139b6dd5fd85166d2fb1b4fb8fad86e70e0a8d56b080cd6d0a24f88113cb9b3428ba8d48c3c3953737ea11388a532f78da2"], 0x38}}, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x2, 0x4}) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000041401000000001a00000000080001000000000013ae46edbcdac6339a41bfbc7b1df59e15076e986bf38866e356f921f81c4fca1f6ef185fabd57607d1379bd0b1a44929ee7763b475eef8336c4a820b55c8b5db0a3b8101f881f61adc1e10d70f3ae5e074be726792f6aabb0156e66ca4ff6a8517b1e9bff90b288cdd8d1bd5b07d6c42b78d029f5fa6969c1f352b2b881eb894a006e95df1114ac8a2a5f934bc21e65976d627112e12216bf9482579ba6ce4a8fbc657f200e45e4edfa1b0f9aad3e1f278eb45bd5fe1ec503827483f826f018189c03d261cc97931e74d7b1714f7bfb0ba4cb2bf3500324ca1f736bede984b8271b9e25f8347e08fbbea6"], 0x18}}, 0x0) (async) 10m1.394237057s ago: executing program 36 (id=921): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410072786500140033006c6f000000000000000000000000000000c7037516f481a25d43cd1a4f918cb2b83c4d254a412a17574ae7cae17685052c27b7084968c5f2b8d6a027867e5172262ac331ead865d7e1a543c6fe67a81ec7895f362720e65bd98e1ddc138b2f11b7e3d5e9215451a0cf14a27312d88dccfebda26d80efc2e54b0b965f8bea8f1ca2bc6097262b9e9c74c85e71a69139b6dd5fd85166d2fb1b4fb8fad86e70e0a8d56b080cd6d0a24f88113cb9b3428ba8d48c3c3953737ea11388a532f78da2"], 0x38}}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x2, 0x4}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410072786500140033006c6f000000000000000000000000000000c7037516f481a25d43cd1a4f918cb2b83c4d254a412a17574ae7cae17685052c27b7084968c5f2b8d6a027867e5172262ac331ead865d7e1a543c6fe67a81ec7895f362720e65bd98e1ddc138b2f11b7e3d5e9215451a0cf14a27312d88dccfebda26d80efc2e54b0b965f8bea8f1ca2bc6097262b9e9c74c85e71a69139b6dd5fd85166d2fb1b4fb8fad86e70e0a8d56b080cd6d0a24f88113cb9b3428ba8d48c3c3953737ea11388a532f78da2"], 0x38}}, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000040)={0x1, 0x2, 0x4}) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) (async) 8m34.593885926s ago: executing program 3 (id=1188): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000300), 0x2ae, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000440)='\x8b\xc9\xac\xb5\x15\x85\xbey\xc2\xd0\xfd7O\xdb\xf2\xa3\xa6\xea\vi\x91|\xf7;;G\xee\xc2\xa5\xb1^\x19F\xbd\x8a\x13\xf9\xa6;\xce\xa9\x8e\x8bF.\xdc\x1e\xff\xed\xf0Rr\x93q\xbd{=3!-I\a\xc3\xe4\xdc\xf9y\xd5\x18\xa6\x17\xcc\xeb\xae-\x06\xed\xa7n\'\xa6\xdf\x84\x8b\x00\x00\x00\xcc]\x8f\xfd[\x8b;\x9ed\xe7_\xf6\xd4\xa2\xc6k\xee\xa3_J;\x9c\xf8r,\"B\x1atm\xd893\xf8\"\xbb]Z!\x80pU\x98\x00\\\x9e\"\xea\xa1[\xbc.%@xT\xb4\xa7\xf9\xb5\xa5eW\xf9\xfez{y\x95\x14\x1a\xfc\xb1%sP\x16\x1f\x15[\x00\xd7\x92u\x9d#\xee\xa9\xf9\x1a\xe1\xd6\xd3\x1a\xb3\xee\x80Y\x17&?\x10\x88s<5\xeb\xc3\xb5\xa3\x1fF\xcfOf\x13\xc7\xc4\xb0mUR\x84\xab\x8fp\x1aZV\x13\xff\xef\x18\f\xbc\x00[\x85|\xd0d\x9d\xef\xc8\xfc\xb9\xc2\x87\xd0M~c\xd7\xe0\xa0L\"c\xca\x94\x9a<\x98\xe6\x86\xc3\x9e\xc7}\x9ak\xe8\x86\xed\xbb<\xa3\xcd\xb5\xa8\xc1\xe6\x9f\xb6\xb3\x8c\x15\xda9\xf7H\xe4\x9c\x87\xe4\xe8{&v(\xe7\xc3\'K\bN\r\x04\xb8B(((\xce\xc2\xbf\xa7\xd5v7n\xd0N\x19\v\xf1\xd4\xc3\x98\x8c~`\x1e\xb4\x9e\x9f\xc5\xef\x85Bb\xba\xc3\xa1*\xfd\x02\xa3\x90mX\x03\x8c\x96Ch\x13\x9b^\x89CI\x7f\x99A:\x1a8\xa1\x01\x19\x1c!\xca\xd7D]\xaf\x9b_:\xba~9\xd2D\x9a3\xd9\xc3\xf5\a\xe5\x9f\x9aEJ\xc9\xb0sBh') mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mq_timedreceive(r1, 0x0, 0x0, 0xe, &(0x7f0000000280)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x80000000) 8m34.228677933s ago: executing program 3 (id=1193): openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c3040, 0x0) setxattr$security_ima(&(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000740)=@sha1={0x1, "ca216891e220ecfc0c1d3ae6ce7c38427759547c"}, 0x15, 0x1) r0 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 8m34.173790817s ago: executing program 3 (id=1194): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000200), 0x8) write(r1, &(0x7f0000000100)="1c00000018002551075c0165ff0ffc02802000030011000500e1000c", 0x1c) (async) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./proc/file0\x00', &(0x7f0000000140)='ext4\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) write(r3, &(0x7f0000000880)='3', 0x4e) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000008c0)={0x0, 0x0, "acb4581ca350dbf26ddf56b464a671e38f60899d0b8e03b874fbf4805eab805f1b1afffd74b43e39848bcb869047601b5cfaddd987a111e465f691fce628d8da2016e66d3e84d0880d402390799a3780f39c0d900cac6eba8e8189727d9d2b87ed7ad5f2f2a41573886761ea4b3edff70d16e5fa8c0803d4d78647f61d4d9b80737178dc6fc405eb3a2b03b87d77a5b6c61fa814dc1f69a760f1189a1510fe31a51e490c2fdf5325e4d640a0ef486bd7309e63d39206e532b5e1d9a6eadbf0d69a724008e9c4cab8a5012cd35f3adfe0e3aed66e48dee0c724e125aca9524b0ae0d92afd7f839090ad070640f9528bedd66365e1d1f7ec5f8f730977d9288a15", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000018c0)={{0x0, 0x1, 0x5, 0x5, 0xcc, 0xc, 0x3, 0xfffffffa, 0x4, 0x5, 0x10, 0x4, 0x7, 0xb4b, 0xffffffffffff7fff}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001980)={r4, r5, "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", "4670a762b72a7b5006db6772e215a624beea9637cfbbdb43ebe166dab0cc8d349bc41355cb73d4a6d456e8d581c88edaef2908002eba2b7b2fd4d4515e87f14388622603a8d0116e91db103e62e9ebbb3d0dae8db7cd414185a8753153ec455a7bb46869b1c627d140a449ebfbcc571bcdf79700a710dc53210b271a9c2628c4dfdd29c2ce02ac38523d2c255c3eb0abc8e76fc81d8254a77b9db436c41fdadbb3fd3f1254dcb131fcf7559031070990eb2e2999da32134f109ede44acaabd75fbc338c1ede2f5928eaf2d937e1a8f1a21737b68b0c991e85404deeb59add11dca97f1bd6654485dd9446c66239baf38211a80d55957f06094078bc0ba450deb780f32f798f7473c15c4ed698fb30985ecd774bb7530de88b8763eb11919da84dbd46ae2a641af69e120d30c787ed8d5ce4d1ff2b7ca11f648f8b33bed0f6c49351fbf7e82ad9534fb6f727767e85069781c66a0b695d9b6fa9ba849ff4188efe4434bcf10336218dd2657622cb39a76dbe8bff0efa189b5b7a9c3b0e4998925cede9f943603f4a2a88c1fda1569783266c2806d07c7d24bab70e831570937315c798e2a6e331577c9109c210f200ec78d4d8f7b0eef0a2d6f957034c1251612856e8879bb60ba57659ed98325c59ba492a13dd29603ef14add230e03636324ec375846cd95ed791cf8dec773908eba75676dce0e8739d6e6d149ef6c79bbbeb1ccd2453b68a4815967bbe5cda928b2dc08c2505b0b859983c7074705bdc1aa4984f987d76823edab10a9641de25fc62276108373925d32e9758076ede5aecd0b19ced79bac0e727038c588e3f85aeb8f8a980f6552eabff742b8f4764c75f97d9207f1dca31e6e091620d8a5ea66646d97a7b1b8beb764dfa4401072ebae8353aee3e8a63c3475d0ca07e45787374784ed7dfcd4f617f23777cdd7e6206ad00958cc5283e19356326bbaf4b1b43c5743f0a0646f8b0759b1f3f42f00d557a8a7cf6b6404135c04ad2b9806c001841e3091c6e308a97b4dc628cb875aa4d897b81bb640bd5423b4151d9f78d1fe6e1fa35323ea1ee2e05532e83c4b19714e49ea4968931bc9aa59965c3a5d0fdd12ba7194567fe86c9da59b375c06a06980887f1f94e13e7a54ae8476a03f38aebf63c1714b74946086b93de8ff5f0efb043c7f9191e6e8b8282ad7203be2b098e930dea317246d0ab207b2e8e4c12d44c7026c72aa018ee9d6ac1c361941ffa6e4d4b6f4ddcf44da9ba9f57cf1327a4392a411b445d215c3b55576dcd517a850690b6835ae1f55575ba9056c0db6b54e5bdaa980e55617be4957b93e9f34567b26f261dfb2c7bbe18cf30ffcf04ae8ca332a9b78ada16795ac953c276a16ea3a8cb56733be7a5e1cbeb78f4956a65058a3e10c2a8b1a4347f3a5c688266cddf2280ef3d01296cd3a78de7b23a0b4f9756183d73c35dadd404a6ce63caa5d3d2a6db72ec33129720c7c7152fd6f766f514e3b015a2bf225f41213ff78cf8e530a23d9a292ecbe416d6baf8ba784b3929bc39bab29b8091a71e993b21cb072ff9da579a3dd5f907e229f0efc210fa86c6c57aafdb0e8528d119c0b6f7edeb27a55f7a31b3ed2f51d14735a73138d1f0fb1512e59b08ca52778c836ba9ee11f24da09b52a3237b96463069ecb0753b30d472d6425370d39bb53c9cbd1cae4e1af0029db5531804ab9026e309a62230570dc64948479c18f7ada4f860930d5a6355f2e90b2433a66502efa7c397c47ed0298bdd0644b1c64b692928f71972dae3d979028ce8a1750005b3a3b1d84500c8d48d23167c022a6885090bb4a2618527925cca57487a0a555d4a9fc50ea6bbb3294c305768a37453cde11299ceb043f87f37f7eccd83d249ba131d84cbaf02a233b91dbe568d3aa02652180bd2b2066a1f0ab76eecf03c6fbfad71c8bee57d9e43de79fc30c706b6a287c356b267e0f858f16c93f5420d0cf1ab72742cb858f1c0ade76b2a010017f61b2f7d12342b5cdcf25129f95251115be31f62fa9ede00a39067946bc1920718c9dddbf06fa045be6780c174c5b7a446d5b7cb4c69c12267612964dff431f248fae8a76b3b422bc55a12b896239166a067435030a734fe9c8033054f815402a057471590e93e04d6b942616025a71bc023ba7fb7f4dd2fc896249a9a3d03f0e59a2e369bcc8b677b43b34012a97ee98054390a83a61011cac40682e2229083af269d613caf155e5bf5a2a3934f48561eb85a062f39164982bd47ba957f2706c9f4708506327de2c4b4a95ac080f90d48b439cb46de019ec138472b324a9d1173667cd59364b94f451f50662f425f277d699df22daacdd50c3ba28136b4646c4d13eb6901249e8893fd48119af6e516eeb014eaf65d6e551915ac03c47ae3f930f41e412e02ced8dbfa2ba56a65c9743009b89febeaf6670a38175bd0f9ed88bd078cafb837916682e192dc510f46023a7da219e03d2c3e40d73fadc0607609f324d3ed3e4199829e37d2d728cb179b320a44f78acc191376adfb96d134c15d575de1d62d060fce32654c78b39ee99317c8a4d558cc23982ec58cfbdd2ba12c8e78b5cd18de0a6604b4d02ab58888937257e93525bb7f3eea39fbe755599ab27f47b073780a1cf0c385492f5b0a7f2cba6ca649cb07fa516fe8ca265debe87f165368dc2dcb0593fb8b8f8fa53c9ffb5b122b8a7b4e17e29c7577b809a3962c098f036ca370a24d0d0428700408fe1f806a97b71903c7d142b0bc9e9ed4960c6907bce69cfdc88e5fd08399f400eaa3a6a2bcdd26aca112b655f65b6d701c6bfcf3606b07cce24e5976cc0c9ddd06df34307bb86710285114694dbddd52273c1e6afab44e0c990830920139ff1272d1ec1286cd8c1d423c1306cc3e98bbd2306410e534672a11d87bf76f6f5b89d808330f292d40ee28762f5bca2c6de491318eff7010119bf7e9f2417e221f6f914294d1c9e5744ddca6e638b920ab0a8b29eaba6c7a1e64bf56f72c9a5c0dfc745bd639c76868563ae487e71fe46d5efb64c7e8a24215566f76952328ddd0dbd468d3505eec833eddcf58010e72b236bf4f22f874683a90ac73d73f190b0852f9b5e4639533a5bab9240b54bebdef2c0fc713f1f09de997e68c86eb0b7d1f98e1dfc1a3d202c49e9b89c6a7fbb6e391115d0923775041dffbe63206bc269ecc989ad59ae68d15d5a1ef89fbf802c0024a53f21f9a7cdd0599bc4f5c7ae7b3c36915ed3255f112bc61b21edd96c5b4e30ba2c60b54b5cf5af61e373eac36a46230023a1db0d11e5d921c1192523f694911960fc0bee265d155aa58c2381c3bb3e6ccaf3019504d3dd938c132ee3e839578846667bf08270ecf7bddb90fe2ebc3a6be332fb2f64738773604f3c36c91cf5accb9b710f46e78246c4ad35fd28256f1132d6cbefb0e38ef9d3b221f0508710762e1891d76ca8da4e284282bc3fb3ac932a70c2d9a23b9cf97acd3276f64a30579fd94d70e3ec1aa7ca9548419c76e59c933ba3abba5e4e95674511268680717f8322a7f00cec93196155537a1f2838c6d7035adf39e59c2985caabfc5c935f8a129d9068afeb722aff3b16cfd0bbf21cabe8ad6b480a4d7db6d0cfb19bb49d0d21ca918f1eeda4ac183a2778ac69e87b24583e97a61706dac742e9919a7c0ce2df69a88b79d01abeb93dd9ef01c6f2945c68b7826f38d236a14a67f166f62ef0437aae5675de7460acac26cee51f6676597ed354b266a4be282a9f8a89ebef40bcf196319215910f22d73631ff569d78ddbe2e551e396ef54c815ffccb7148880129e7ccf960622e2deb9443e7499b39b34aa6f92c4a7338b1a3e48d7cd8663b4ed14864cfee210c7c44730346cd9fedbb3c4fd406478a63164c939f278c3d321b2d5fc4f12145a7e799c2ee2443d70eb499116023eac998a9823c8e9d7b2d3af65e49ee8844bcd99d775b5c718c3eadd05bf0dab44b8db2d03b16e5b291b8635bcae27bf4b67305dc778891bb19d289176efacdd8f896411697f585b1bd8fc91d5bdd32b595d579fb3305538e53f5aa4c7dc289d8c3ff035e78be05ff267c31c656007562b8c4a73c78e8d32dad878dd368c9bf823be9a64e8608821d25c992e71eba204a61c8882202ee09c0bcec02e287fea8276b475218580b3cc6807ffe64d9ac44a233941471700323b7f9de138b12befca0d703ee415cdf8c8d3ed1e1a03f3b396a0932211442a21349a744597e39f0bce84761914ba87b4c103c6a5b793c3b96bb889e4f005c39cbc496ad6018d70d10a8801b196a098a236544c9f51746608e190e28e1eb2c3e6c324a1e57abb937fc1a254e27a6dfee5196b1d3de772ddcd4b6def35858288cb36ca83e5baf0f66acda434bda4afd9e1f222c9965bbbf6ef7ba7c1207967a0214bdea8456cc683b071841bf5b34973f61f6ddee1847dcd672754afeee4e75388ec1e143282a63c1488fa0267b780c2a8497caaab95864f7e89d36e7f1e075fea4ec0590fdeb15a66047513c9fcb1ba47875dd9fcb7c9b1368784229f08ff2370d03c924dc671c6c0b7d847a355ee9616a19e6fa118e297934cb2547a09a682bb49be3b52b607383fd901eb76a4bb3cd2bff28e7f14b047b82c27956846881da6a92ada53819a78159c02a7ddac06058f53d0d1eae99f0a406711aae4904fe5d617d008e8d4fce4f8cc88c36ea95cfb9ab4498856d28e42df7ea4b21ba6c19d3351f269f9f0ac6f1e32c31321994ebb7a43fa9ea49890ec457ce1ffb33741ddbc252f92b4dfedd2f92d27404bb89c2f8af8feb257ab51656b35bc52b5cd29fe3b0ee258bbe7448b79abdf30ddf29556afb208a54aee31cefc60ef2b602e3009dd5ae6a53c2184332c0d13377fe89e5fbb0627bceae49b8585c061cdb37d2d06f32dc6b87dc394f14ec3c775588794df836337ffaeb227791ceb4422ba6ae47bc9f07a164cd8a57e8fb70a4db9626a2fa38da65769c3a2aa3de5f5896e97d29bd9dd8eb3bda8939aca2fe19cb6eec63be90fb12ac1a01b5fc238d543eff4ad38400ff0b20a9b158ed54ed74f8ff95d48adaa04ef22ebc8af7b9960aad5b2d37d3035288f1f3971991064f4bec7d52d755e371798218cb465dad6bba804265cea78c3aed19f320961f7ce7e939553cfe3141071cfe42945f6b48910b65ffe7b83f2ae9ae32c123ed1270d899fcc23cc0e18a62b1f402dc412d6e69a14b5607a618c7936ed5f3ae49b9ba094accf0f0811fc00237c01f81874aed4cf33b1e689bfab99ae6c29b1684cf709dc5780fcf02325610ba83cfb91fb18a372b5593fdb1ccca177698254ee3c0217eeabda3a2d8cc4459b25acd227230762258a6bc0c2557e63e7b6351b1e09afb3f9bf861f521a2236b78a6a8659ca224e5280a5b611370b26"}) 8m33.185667161s ago: executing program 3 (id=1198): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40042, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4000}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000500), 0x40000000000032a, 0x0) recvmmsg(r3, &(0x7f0000000540), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r5 = socket$inet6(0xa, 0x800000000000002, 0x3) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f00000005c0)="04", 0x1) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000680), 0x400, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="2000000014000504010000000000000023000000010000000500020008000000", 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000700)={0x4, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0x5, 0x3, 0xfffffffffffffffe, 0x9, 0x4}}, {0xc7, 0x2, 0x1, 0x0, @irqchip={0x81, 0xcc01}}, {0x7ff, 0x3, 0x1, 0x0, @irqchip={0x1ff, 0x80000000}}, {0x7f, 0x3, 0x1, 0x0, @msi={0x7, 0x780, 0x4, 0x7}}]}) syz_create_resource$binfmt(&(0x7f0000000800)='./file0\x00') r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x413, &(0x7f0000000900)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r7, &(0x7f0000000980)="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", 0x2000, &(0x7f0000002980)={&(0x7f0000002a40)={0x50, 0x0, 0x9da, {0x7, 0x29, 0xfffffffb, 0x48000010, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x80, 0x97}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000002ac0)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) socket$phonet(0x23, 0x2, 0x1) 8m30.98083193s ago: executing program 3 (id=1202): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000440)={0x604, 0xa, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x35}, @NFTA_SET_USERDATA={0x9b, 0xd, 0x1, 0x0, "20d513d15242f93dd91f58eacb48741f7e67b5e959797e2969920b345549501687e76340ab1ef137f530f10d038ffc6dec400b5dcdf0566e3fa562773da9b07b382ab4cf272d0f7f94516d91ff0b48e02f7716f734b1cd52037ef4c1bc3257bc271c6170879655150221224cb2a1129a38254c14c4bdc9d34a074cad74a21dcfece88ff742cc9c17bc460b9307a5cd6bff2a4b9d62f744"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x7c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x28}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x80000000}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_USERDATA={0x2b, 0xd, 0x1, 0x0, "4c19f9b78789eaf7bdad4a0fe5524a34fc0299737111f735a8f4fcfc453b171d93f23060a4adc2"}, @NFTA_SET_DESC={0x490, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x138, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8295}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9d34}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x4}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffd3f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x53}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81a}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xaca}]}]}, @NFTA_SET_DESC_CONCAT={0x168, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd43}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8f8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe2db}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x491b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7a7149b9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa616}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffac}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}]}, @NFTA_SET_DESC_CONCAT={0x124, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf8d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe30}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x93}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf7}, @NFTA_SET_DESC_CONCAT={0xb0, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1a84}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x727}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9b0b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa268}]}]}, 0x604}, 0x1, 0x0, 0x0, 0x2}, 0x8004) syz_io_uring_setup(0x174, &(0x7f0000000bc0)={0x0, 0x92d0, 0x200, 0x2, 0x9e}, &(0x7f0000000c40)=0x0, &(0x7f0000000c80), &(0x7f0000000cc0)) r4 = mmap$IORING_OFF_CQ_RING(0x0, 0x80000001, 0x0, 0x100010, r2, 0x8000000) syz_ublk_setup_io_uring(0x6310, &(0x7f0000000d00)={0x0, 0x7406, 0x2, 0x2, 0x2be, 0x0, r2}, &(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000e40)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x2, 0x8, 0x0, {0x0, r6, r1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000b00)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./sys/class/net/bridge0/bridge/nf_call_arptables\x00', 0x2, 0x0) write$binfmt_format(r7, &(0x7f0000000b80)='0\x00', 0x2) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000280)="34000000070006000000000000", 0xd) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 8m28.989639791s ago: executing program 3 (id=1212): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019940)=0x80000000000003) bpf$PROG_LOAD(0x5, &(0x7f0000019980)={0x10, 0x16, &(0x7f0000019a40)=ANY=[@ANYBLOB="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"], &(0x7f0000019c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000019cc0)={0x0, 0x0, &(0x7f0000019d00)={&(0x7f0000019d40)={0x14, 0x0, 0x100, 0x70bd2e, 0x25dfe000}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0xa080) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000019d80), 0x200, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x59616d61, 0x1) io_uring_setup(0x4c24, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e0278f7c5768793f40cc764532db", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8m13.928866186s ago: executing program 37 (id=1212): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019940)=0x80000000000003) bpf$PROG_LOAD(0x5, &(0x7f0000019980)={0x10, 0x16, &(0x7f0000019a40)=ANY=[@ANYBLOB="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"], &(0x7f0000019c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000019cc0)={0x0, 0x0, &(0x7f0000019d00)={&(0x7f0000019d40)={0x14, 0x0, 0x100, 0x70bd2e, 0x25dfe000}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0xa080) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000019d80), 0x200, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x59616d61, 0x1) io_uring_setup(0x4c24, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e0278f7c5768793f40cc764532db", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7m11.870756474s ago: executing program 1 (id=1445): sendto(0xffffffffffffffff, &(0x7f0000000180)='Y~', 0x2, 0x1, 0x0, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000280), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1fd) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000ac0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x30}}, 0x0) write(r3, &(0x7f0000000b40)='auto', 0x4) 7m11.388189518s ago: executing program 1 (id=1449): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) (fail_nth: 2) 7m9.863949982s ago: executing program 1 (id=1453): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) r3 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000580)={r3, 0x1, 0x0, 0x2000}) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 7m9.62579584s ago: executing program 1 (id=1456): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='0', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x400a40, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000540)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r5, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000480)=0x43eab51b) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000180)={r8, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000080)=0x4) shutdown(r0, 0x1) syz_ublk_setup_io_uring(0x6944, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000140)=0x0) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r10, r11, r12, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, r13, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4}}) 7m8.153724337s ago: executing program 1 (id=1464): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000020c0)='fdinfo/3\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 7m6.140668257s ago: executing program 1 (id=1476): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x10000, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000340)) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0xa382) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x1902) futimesat(r0, 0x0, 0x0) 7m5.431779837s ago: executing program 38 (id=1476): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x10000, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000340)) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0xa382) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x1902) futimesat(r0, 0x0, 0x0) 4m21.970028065s ago: executing program 9 (id=1957): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xd) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) 4m21.860158227s ago: executing program 9 (id=1959): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000006c0)={'pcl818\x00', [0x140, 0x3, 0x3, 0x70000000, 0x8, 0x101, 0x3, 0x6, 0xffff2eaa, 0xf, 0x8, 0x76c28e09, 0xf8, 0x1100008, 0x7, 0x209e9c, 0x1101, 0x4, 0x9, 0x9, 0x40, 0x8, 0x5, 0x9, 0xffd, 0x200000, 0x0, 0x4, 0x746, 0x1000000, 0xc]}) 4m21.622416022s ago: executing program 9 (id=1961): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m21.48606393s ago: executing program 9 (id=1962): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x16f0d8, 0x0) mount$bind(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000640)='.\x00', &(0x7f0000000680)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000700)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0xc, "f39770"}, 0x6) mount$bind(&(0x7f0000000780)='.\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x211dcd8, 0x0) r0 = eventfd2(0x0, 0x1) r1 = epoll_create1(0x80000) unshare(0x4000900) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2000000a}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000080)=@filename='./file0/file0\x00', r2, &(0x7f0000000180)) umount2(&(0x7f0000000000)='./file0/file0\x00', 0xa) 4m21.252331881s ago: executing program 9 (id=1964): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000040)=0x3, 0x4) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000001140)=0x3) 4m16.689924371s ago: executing program 9 (id=1980): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@deltaction={0x14, 0x31, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000000700)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000980), 0x366, 0x10, &(0x7f00000009c0), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) lseek(r4, 0x8000000000000000, 0x4) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a40)={r2, r3, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000a80)=r5, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x517}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4901}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44004) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x2, &(0x7f00000000c0)=0x4) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mlockall(0x6) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r8, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r7, 0x0) 4m16.260280313s ago: executing program 39 (id=1980): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@deltaction={0x14, 0x31, 0x200, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000980), 0x366, 0x10, &(0x7f00000009c0), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) lseek(r4, 0x8000000000000000, 0x4) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a40)={r2, r3, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000a80)=r5, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x517}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4901}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44004) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x2, &(0x7f00000000c0)=0x4) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mlockall(0x6) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r8, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r7, 0x0) 2m52.908240048s ago: executing program 0 (id=2223): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x803, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000080)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000440), 0x40000000000009f, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x70, 0x3, "", [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x3, 0x4, 0x9b}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x3, 0x7f, 0x4, 0xff, 0x9}, 0x16, &(0x7f0000000480)={0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x38, 0x1, 0x12, 0x3, 0x9}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x0, 0x0}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x430}}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x1) 2m50.139552419s ago: executing program 0 (id=2231): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x7fffffff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) getrlimit(0xd, &(0x7f0000000140)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000002c0)) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000300)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000004c0)=@IORING_OP_POLL_ADD={0x6, 0x36, 0x0, @fd=r3, 0x0, 0x0, 0x8, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000540)=0x18) ioctl$TIOCGPTPEER(r2, 0x5441, 0xb3d) read$FUSE(r1, &(0x7f000001cd40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe4d) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="b000000000000000", @ANYRES64=0x3, @ANYBLOB="0000000000000000020000000000000006000000000000000000000000e0ea09ffff0000ff010000050000000000000001000000000000000600000000000000000000000000000007000000000000000700000000000000fdffffff010000000000000000600000b1590000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="050000000200000000000000010000000000000000000000000000000600000003000000736f757263650000c30547bfdf911303dba1927ab6dcf9691d4d2b95c82a5773e46287071d284c0dd539958cc2ec5b24a966f8c092f0f42bf200efe45144d12c65c686453d15503fa818fb1cfda74906f4efedd798af544f222390d29440fcc468b3cddea2b9599c780ad594d65a47a6df85b19cb212825ecd9a8a95b2895436d29c10055a061736ae"], 0xb0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f000001c480)={0x0, 0x0, 0x0}, &(0x7f000001c4c0)=0xc) sendmsg$netlink(r1, &(0x7f000001c540)={0x0, 0x0, &(0x7f0000019840)=[{&(0x7f000001c580)=ANY=[@ANYBLOB="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"], 0x79c}, {&(0x7f000001fc00)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x179c}], 0x2, &(0x7f000001c500)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7, r9}}}], 0x20}, 0x34314c261b32877a) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x4) r11 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r11, &(0x7f0000000740)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019740)=0x410000002) r12 = syz_open_dev$usbfs(&(0x7f0000019780), 0x205, 0x2581) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r13, 0x40f, &(0x7f0000000580)) r14 = fcntl$dupfd(r12, 0x0, r12) ioctl$USBDEVFS_SUBMITURB(r14, 0x8038550a, &(0x7f00000197c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000019800)={0x3, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0xfffffffc, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r14, 0x4004550c, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000fbcbdf250900020073797a3200000000080041007369770014003300766972745f77696669300000000000000a1278c81e49e0b622fc8470053a09a832ac40cfac0400000006af5629a404efbf120616e455b7e3f850633d5726af4a18b913f37e9babb65c847a3eb559fb2b30caa481d729a0e3b2d6302f9117dbe46c19ce7d51ea12cb0814e3581f57efa83f1ca0c2b639a052f5a5da3ab5415c05228e473d0e83090000000000"], 0x38}}, 0x0) 2m48.941121729s ago: executing program 0 (id=2233): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x6, 0x5, 0x0, 0x4, 0x1, 0x5640, 0x0, 0x10000101}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000002c0)={r0, &(0x7f0000000180)='bridge\x00', 0x1, &(0x7f00000001c0)={@_ha_fsid={[0x6, 0x8]}, {0xff9e, 0x7, 0x5}}, 0x400, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xd}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000300)={0xfd}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000380)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000003c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000400)=0x4003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) ptrace(0x11, r3) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000019500)=r4) r5 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r5, &(0x7f0000000480)=""/102392, 0x18ff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000019480)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f00000194c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) timer_create(0x4, &(0x7f0000019700)={0x0, 0x1b, 0x4, @thr={&(0x7f0000019580)="9b511d4ca71466c18716ac4e596f6c3751bb45b23fdef3fa2e11453018ef6dfa4b035c8d3a45b11a964e0f8b220ffcaa944a25cbdb70d97e2069e929209244bc6046c3a3d1ff260179970f9f94c239d98a0cf87fd39db8b81f52905a2f0c3e7cf77372f8846f5fdd0a40d236252f1522a5480309e6e59d88540d0c1e52527722a8dacba0a186de1fbda86f5f205c752ea175786a74ed67a3524418b80d07562db7ce90751adef6d9bb40fff60e75d0abdeb2251cfbfb2982266d195482c7738dac16dff688086131bee6", &(0x7f0000019680)="8a860e6e09b95de72cd6423080207654bf8d13a256ce3580998e609512c67e8dc91d78243c8d3964335f430214b503733dbeccaf4de137fc1bfb33e49d93d32f8e93f7ef90ba823331468969"}}, &(0x7f0000019740)=0x0) timer_gettime(r7, &(0x7f0000019780)) sendto$inet(r6, &(0x7f0000019500), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000019540)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000019840)={'ip6_vti0\x00', &(0x7f00000197c0)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x2c, 0x7, 0x28, @private0, @loopback, 0x20, 0x0, 0xb6a, 0x800}}) sendmsg$nl_route(r8, &(0x7f0000019880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 2m47.12600596s ago: executing program 0 (id=2238): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x1e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x3, 0x1, 0x1, 0x0, 0x1, 0xffffffff, 0x7, r4}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r1, 0x84, 0x85, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9d}}, 0xffffff7f}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r5, &(0x7f0000000540)}, 0x20) 2m43.014627616s ago: executing program 0 (id=2248): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./binfmt\x00', &(0x7f0000000140)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) write$nsim_bool(r0, 0x0, 0x0) 2m42.717419263s ago: executing program 0 (id=2251): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') syz_io_uring_setup(0x34bd, &(0x7f00000006c0)={0x0, 0x69ec, 0x40000, 0x5, 0x50}, &(0x7f0000000d80)=0x0, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)=0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000540)={0x9, 0xe, 0x2, 0x0, 0x5}) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000e40)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000080)={0x400000100002f}) r5 = io_uring_setup(0x2f4f, &(0x7f0000000780)={0x0, 0x10, 0x1, 0x0, 0xfb}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffbffffffffff, 0x180f81) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x40) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000003000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000a45fff606154c9a7bd0000000000000000000000000000000000008519b60736cbf873331e4ce45170ef2dd3b769bdb6c4fd701fbe9b2035029e2ee34a6828d2df664ba8b89bcb87afc2c9cbf52afd01c5213484245db84a79fd53a931b3e6f1deee6126920c96afabfbdc15fbbefb7761d717c34e0ed68bac88c94118c15516dd1ef08034833be946fbaaaca993f62e2afaf6b78af6eb6ed29200"/178], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80)={r8}, 0xc) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000ac0), 0x1, 0x0) pwrite64(r9, &(0x7f0000000b00)="5f9c92731817ec3f2264eb89526d1e4cabdf879bf5792f9681264b65134300", 0x1f, 0x6) r10 = syz_usb_connect(0x0, 0x32, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) syz_usb_ep_read(r10, 0x2, 0x28, &(0x7f0000000b80)=""/8) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f00000000c0)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x6, 0x100, 0xc776, 0x7, 0x7, 0xc, 0x9, 0x7, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x7dfe, 0x7, 0xa, 0x0, 0x9de, 0x1, 0xf82d, 0x80000000, 0x7, 0x2, 0x7fff, 0x9, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x4, 0x0, 0x3, 0x4, 0x9, 0x5, 0x6252, 0x2, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0xfff, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x4, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x800, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xc, 0x1, 0xfffffa93, 0xfa, 0x7, 0x9f9, 0x4, 0x1f, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x9, 0x5, 0xff], [0xfffffff5, 0x4, 0x0, 0xdd, 0x6, 0x0, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x8, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0x5, 0xcc, 0x7, 0x200, 0x8, 0x8, 0x6, 0x3, 0x10001, 0x4, 0x1, 0xfb, 0x2, 0x5, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x5, 0xff, 0x0, 0x6, 0x7ff, 0xd, 0x7, 0x3], [0x2e, 0x9, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x5, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x102, 0x0, 0x80000000, 0x9, 0x4, 0x41, 0x7, 0x2, 0x4, 0x80, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x6a, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10001, 0x1c0000, 0x8, 0xaa4, 0x38e4, 0x40000, 0x5, 0x2, 0x1, 0x0, 0x6, 0x4]}, 0x45c) socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000580)={'veth0\x00'}) r12 = socket(0x2, 0x3, 0x6) sendto$inet(r12, 0x0, 0x0, 0x50010, &(0x7f0000000740)={0x2, 0x4e21, @empty}, 0x10) 2m27.642235156s ago: executing program 40 (id=2251): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') syz_io_uring_setup(0x34bd, &(0x7f00000006c0)={0x0, 0x69ec, 0x40000, 0x5, 0x50}, &(0x7f0000000d80)=0x0, &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)=0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000540)={0x9, 0xe, 0x2, 0x0, 0x5}) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000e40)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000080)={0x400000100002f}) r5 = io_uring_setup(0x2f4f, &(0x7f0000000780)={0x0, 0x10, 0x1, 0x0, 0xfb}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000800), 0xfffffbffffffffff, 0x180f81) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x40) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000003000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000a45fff606154c9a7bd0000000000000000000000000000000000008519b60736cbf873331e4ce45170ef2dd3b769bdb6c4fd701fbe9b2035029e2ee34a6828d2df664ba8b89bcb87afc2c9cbf52afd01c5213484245db84a79fd53a931b3e6f1deee6126920c96afabfbdc15fbbefb7761d717c34e0ed68bac88c94118c15516dd1ef08034833be946fbaaaca993f62e2afaf6b78af6eb6ed29200"/178], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xd, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80)={r8}, 0xc) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000ac0), 0x1, 0x0) pwrite64(r9, &(0x7f0000000b00)="5f9c92731817ec3f2264eb89526d1e4cabdf879bf5792f9681264b65134300", 0x1f, 0x6) r10 = syz_usb_connect(0x0, 0x32, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502020002"], 0x0) syz_usb_ep_read(r10, 0x2, 0x28, &(0x7f0000000b80)=""/8) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, &(0x7f00000000c0)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x6, 0x100, 0xc776, 0x7, 0x7, 0xc, 0x9, 0x7, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x7dfe, 0x7, 0xa, 0x0, 0x9de, 0x1, 0xf82d, 0x80000000, 0x7, 0x2, 0x7fff, 0x9, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x4, 0x0, 0x3, 0x4, 0x9, 0x5, 0x6252, 0x2, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0xfff, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x4, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x800, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xc, 0x1, 0xfffffa93, 0xfa, 0x7, 0x9f9, 0x4, 0x1f, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x9, 0x5, 0xff], [0xfffffff5, 0x4, 0x0, 0xdd, 0x6, 0x0, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x8, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0x5, 0xcc, 0x7, 0x200, 0x8, 0x8, 0x6, 0x3, 0x10001, 0x4, 0x1, 0xfb, 0x2, 0x5, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x5, 0xff, 0x0, 0x6, 0x7ff, 0xd, 0x7, 0x3], [0x2e, 0x9, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x5, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x102, 0x0, 0x80000000, 0x9, 0x4, 0x41, 0x7, 0x2, 0x4, 0x80, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x6a, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10001, 0x1c0000, 0x8, 0xaa4, 0x38e4, 0x40000, 0x5, 0x2, 0x1, 0x0, 0x6, 0x4]}, 0x45c) socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000580)={'veth0\x00'}) r12 = socket(0x2, 0x3, 0x6) sendto$inet(r12, 0x0, 0x0, 0x50010, &(0x7f0000000740)={0x2, 0x4e21, @empty}, 0x10) 1m11.427520811s ago: executing program 2 (id=2487): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x14000) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000004c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xd, 0xc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000600)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000003c0)={0x20, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) ioctl$HIDIOCGDEVINFO(0xffffffffffffffff, 0x801c4803, 0x0) read$hiddev(r0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f00000000c0)={0x2, 0x0, 0x400, 0x2, 0x2}) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="307106092a864886f70d010702a0643062020101310f300d06097e86480165030402010500300b06092a864886f70d010701313f303d023014300f310d300b0603550403130454657374020101300d06096086481165030402010500300d06092a864886f70d01010105000404010203040000", 0x73, 0xffffffffffffffff) 1m7.541965731s ago: executing program 2 (id=2491): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./bus\x00', 0x42, 0x0) readv(r4, &(0x7f0000000940)=[{&(0x7f0000000980)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000a40)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) clock_gettime(0x3, 0x0) clock_settime(0x0, &(0x7f0000000a80)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000580)={0xa, 0x4e20, 0xfffffffb, @empty, 0x4}, 0x1c) connect$inet6(r6, &(0x7f00000005c0)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000600)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty=0xe0000001}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 1m5.503014918s ago: executing program 4 (id=2492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="0000fa9ebb900f30abbf1acd0024c6c93ae6dae98ce988160fc05dfdc0d993210ce8ee8e0bbb640bbc8ece262a7d0019134149dc26531deedf837472f02a274025c071ffc137c9f8b73a2194b205a51b5c6c42f6730d758f141baf6ef03a5b0cb3b85ddb21544d69e78725e6d360306afe2e7474e5777c5521fd1c7146cac7073313f721262a8c1cb961680fbc66ed1a4eac0d9839f8458e", @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf25030000000c0001800600010008000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) sendmsg$inet(r3, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000c40)={r3, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000c80)={r0}) r6 = memfd_secret(0x80000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000001000)=@assoc_value={0x0}, &(0x7f0000001040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000001080)={r8, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000010c0)={r8, 0xffffffff}, 0x8) r9 = add_key$keyring(&(0x7f0000000f80), &(0x7f0000000fc0)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000d40)='rxrpc_s\x00', &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)="ad33e048a9c1eedefe5b8b8a416d130ba99147b35d25b482b9596047984045414569d4646a5ffeeff1787b8a3c1872d11b2731f026fc83fea521f215458db2d62a1b851b16244fa8732bcbcf447b58b10990f44443052c4817ee8f484aafc97a87b4936d696e4171c00b0152f8e6996c1b4dbb65a7238b5fec71fba9dd6f467ee05d1311fe4bb006a768710e06fbd966408efa2d73f7b9fb88c40caa6865b54d81931fcac2477824c6cf8fa85a9033d22a483ba11c87daab4cc82c54deba742c535b97c5eff5242f0e7fb9c075c4ed49b25ec4d3838ecc12b77f803df8fbef", 0xdf, r9) pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000001140)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000001180)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000011c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000001200)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000001240)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r12, &(0x7f00000012c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f0000001300)=@gcm_128={{0x303}, "b7a41f2300", "0e0781ff0500", "3f02009b", "ecba06893bcdc493"}, 0x28) writev(r11, &(0x7f0000001340)=[{&(0x7f0000001380)="5dc25f", 0x3}], 0x1) splice(r11, 0x0, r10, 0x0, 0x2, 0x0) 1m4.954562651s ago: executing program 2 (id=2493): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x8fa7, 0x4) listen(r3, 0x10040) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup(r5, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 1m3.289825083s ago: executing program 4 (id=2496): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="ad00"/16, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x2800}, 0x2204804c) pselect6(0x40, &(0x7f00000007c0)={0x0, 0xfffffffffffffff8, 0x800000000000, 0x400, 0x800, 0x40006, 0x9}, 0x0, &(0x7f0000000800)={0x1f, 0x0, 0x381, 0x1000000009, 0x100000000000004, 0x9e22, 0x0, 0x1}, &(0x7f0000000840), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x105001, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000200)=[@nested_amd_set_intercept={0x181, 0x30, {0x1, 0xf, 0xe442}}, @wr_crn={0x67, 0x20, {0x3, 0x4000}}, @in_dx={0x69, 0x20, {0xf287}}, @set_irq_handler={0xc8, 0x20, {0x8b, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x652, 0x6, 0xfff, 0x3}}, @wr_crn={0x67, 0x20, {0x8, 0x40}}, @nested_load_syzos={0x136, 0x58, {0x0, 0x9, [@nested_load_syzos={0x136, 0x20, {0x1, 0x3}}, @nested_create_vm={0x12d, 0x18, 0x3}]}}, @nested_amd_stgi={0x17e, 0x10}, @in_dx={0x69, 0x20, {0xfe3d, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x46e, 0xb25, 0x4, 0x8d36}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x6, 0x7fff}}, @wr_drn={0x68, 0x20, {0x6, 0x5}}, @enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xfffffffffffffff8, 0x4}}, @rdmsr={0x66, 0x18, {0x82d}}, @nested_amd_invlpga={0x17d, 0x20, {0xfec00000, 0x4fc}}, @rdmsr={0x66, 0x18, {0x8b4}}, @out_dx={0x6a, 0x28, {0x95ce, 0x3, 0x7}}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x6}, @out_dx={0x6a, 0x28, {0x80000001, 0x6, 0x1000}}, @nested_load_syzos={0x136, 0x88, {0x0, 0xd, [@uexit={0x0, 0x18, 0x8000000000000001}, @cpuid={0x64, 0x18, {0x0, 0x8cf7}}, @cpuid={0x64, 0x18, {0x4, 0x9}}, @wr_drn={0x68, 0x20, {0x6, 0x3}}]}}], 0x3f8}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000640)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x2, 0x2, 0xa, 0x2, 0x8000}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wlan1\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x138) ioctl(r4, 0x8b32, &(0x7f00000008c0)) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[], [], 0x2f}) 1m2.346372339s ago: executing program 4 (id=2498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8002) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r2 = syz_open_dev$media(&(0x7f00000002c0), 0x88, 0x400) syz_open_dev$media(&(0x7f0000000300), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000001a0, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000440)={{0x80000000, 0x0, 0x3, [0x4c, 0x4]}, {0x80000000, 0x0, 0x3, [0x3, 0x3]}, 0x1, [0x6, 0x82]}) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x2) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000080)=""/38) syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8002) (async) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="03070000b5"], 0xc8) (async) write$binfmt_aout(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="03010000b5"], 0xc8) (async) syz_open_dev$media(&(0x7f00000002c0), 0x88, 0x400) (async) syz_open_dev$media(&(0x7f0000000300), 0x66, 0x180502) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000001a0, 0x0, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000440)={{0x80000000, 0x0, 0x3, [0x4c, 0x4]}, {0x80000000, 0x0, 0x3, [0x3, 0x3]}, 0x1, [0x6, 0x82]}) (async) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000080)=""/38) (async) syz_usb_connect(0x5, 0x4a, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], 0x0) (async) 1m0.270108534s ago: executing program 2 (id=2502): r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000191c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000019200)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000019240)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000019500)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000019540)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000019580)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000195c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000019600)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000019640)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000196c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000019700)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000019740)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000019780)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) write(r3, &(0x7f00000197c0)="580000001400010300000000000000001e000000ffffffff00"/83, 0x53) 1m0.205597587s ago: executing program 4 (id=2503): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x100}, 0x2400c8c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4011) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000008, 0x50, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x363, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x7, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="c8ed0ec2aff22b790000000000000000", 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x44800}, 0x4048000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000001640)={0x2, 0x4e22, @loopback}, 0x4d) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000001680)=0x80000000, 0x4) sendmmsg$inet(r5, &(0x7f00000016c0)=[{{&(0x7f0000001700)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}], 0x1, 0x20000004) 59.860465106s ago: executing program 2 (id=2505): syz_open_dev$vbi(0x0, 0x2, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) ptrace$setopts(0x4200, r1, 0x6, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000002600), 0x12) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000004740)=ANY=[@ANYBLOB="0213000004000000fa00", @ANYRES64, @ANYRESOCT=r1, @ANYRES32, @ANYRES8], 0x48) r5 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000100)) r6 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000002c0)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f00000004c0)}, 0x400000}) 58.997586281s ago: executing program 2 (id=2506): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000800)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000840)={0xa, 0x4e20, 0x2, @local}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000880), 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x143102) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) ioctl$OTPGETREGIONCOUNT(0xffffffffffffffff, 0x40044d0e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x18, 0x1, 0x1, [r4, r3]}}], 0x18}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8004002, 0xc1e6e71558eba5be, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fsopen(&(0x7f0000000380)='iso9660\x00', 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000901020073797a30000000000900010073797a3000000000140000001100010000000000000000000300000a"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(r6, r6, r6) restart_syscall() setfsuid(0x0) 58.76901351s ago: executing program 4 (id=2507): socket$inet_sctp(0x2, 0x5, 0x84) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$loop(0x0, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r3, &(0x7f0000000540)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000007ff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xb) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x44845}, 0x0) add_key(&(0x7f00000002c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="1d8b31be08c150489c27a3f1cbea184bfffa3aa27a2c8947a19dd0e1d2c3d517b1c4a87ab33d33b4488be0818ec9774f4dbe2c578fa13b5674510ac1e058972e5ef1da4ca55df62363da79c0e51fd713d1", 0xf2f9, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f00000003c0)=0xfff) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x3) 55.449718547s ago: executing program 4 (id=2512): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x8fa7, 0x4) listen(r3, 0x10040) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup(r5, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 43.530439815s ago: executing program 41 (id=2506): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000800)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000840)={0xa, 0x4e20, 0x2, @local}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000880), 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x143102) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) ioctl$OTPGETREGIONCOUNT(0xffffffffffffffff, 0x40044d0e, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x284182, 0x0) sendmmsg$unix(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x18, 0x1, 0x1, [r4, r3]}}], 0x18}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$llc(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8004002, 0xc1e6e71558eba5be, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fsopen(&(0x7f0000000380)='iso9660\x00', 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000901020073797a30000000000900010073797a3000000000140000001100010000000000000000000300000a"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(r6, r6, r6) restart_syscall() setfsuid(0x0) 40.030005053s ago: executing program 42 (id=2512): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x8fa7, 0x4) listen(r3, 0x10040) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup(r5, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) 8.70107283s ago: executing program 5 (id=2593): socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x777) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='1', 0x1) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) 8.190119218s ago: executing program 8 (id=2595): socket$inet6(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 8.085923758s ago: executing program 5 (id=2597): ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x0, 0x3, 0x20ff, 0x8, 0xe, 0x400, 0x9, 0x4, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 7.688570064s ago: executing program 8 (id=2598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002080), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000020c0)={0x0, 0xfffffffffffffd90, &(0x7f0000002100)={&(0x7f0000002140)={0x14, r1, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000240)="66f7", 0x2}, {0x0}], 0x3}], 0x1, 0x0) recvfrom(r2, &(0x7f00000021c0)=""/184, 0xb8, 0x2000, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0xaba00000) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, 0x0) 7.482130493s ago: executing program 5 (id=2600): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$P9_RGETLOCK(r2, 0x0, 0xffffff20) write(r2, &(0x7f0000000200), 0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x8044000) ioctl$TIOCPKT(r0, 0x5420, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='27', 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(&(0x7f00000006c0)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) close(r7) socket(0x2, 0x80805, 0x0) 6.607983311s ago: executing program 8 (id=2601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 6.225757926s ago: executing program 8 (id=2603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x5) r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000680)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000700)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000780)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d", 0x24) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f00000007c0)={'nat\x00', 0x0, [0x1c000000, 0x6, 0x200, 0x8, 0x1f9]}, &(0x7f0000000840)=0x54) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) bind$packet(r8, 0x0, 0x0) write(r8, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, 0x0, 0x0) 6.029559778s ago: executing program 5 (id=2605): r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145) symlinkat(&(0x7f0000000300)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357620012", 0x32}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) 4.515038536s ago: executing program 7 (id=2607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x2c, r1, 0x1, 0x70bd2f, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 3.923303002s ago: executing program 7 (id=2608): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x8a241, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x8000001, 0x0, 0x0, 0x1, 0x10000003}]}) 3.629096448s ago: executing program 7 (id=2609): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x11) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/psched\x00') 3.370049321s ago: executing program 7 (id=2610): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, r0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x3, 0x5, r0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x20000000, 0x6, 0x5f, 0x7, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x8, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0xffff, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000005, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x33, 0xe, 0x6, 0x7c, 0xea4, 0x0, 0x3, 0x7, 0x7fef, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x7, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x8001, 0xffff, 0xa620, 0x1, 0x788, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0x0, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0x80000000, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 881.530448ms ago: executing program 8 (id=2611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xa}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) 757.152528ms ago: executing program 5 (id=2612): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2f2e01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='numa_maps\x00') 683.741558ms ago: executing program 7 (id=2613): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 120.25467ms ago: executing program 5 (id=2614): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 108.738594ms ago: executing program 8 (id=2615): symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x1e6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x11f) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f00000003c0)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='sys_mnt\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000880)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f0000000440)="ff", 0x582f5, 0xfb2200) 0s ago: executing program 7 (id=2616): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): z.4.2329'. [ 811.962265][T15814] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2329'. [ 811.980857][T15791] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 812.701190][ T10] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 812.701207][ T10] usb 9-1: clock source 0 is not valid, cannot use [ 812.720316][ T10] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 812.729067][ T10] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 812.730564][ T10] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 812.791295][ T10] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 813.149400][ T10] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 813.179684][ T10] usb 9-1: USB disconnect, device number 51 [ 813.180620][T15829] ceph: No mds server is up or the cluster is laggy [ 813.207197][T15833] overlayfs: failed to clone upperpath [ 813.260525][T13591] udevd[13591]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 813.815810][T15699] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 813.840137][T15699] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.840535][T15699] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 813.866765][T15699] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 813.882956][T15699] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 813.900239][T15699] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 813.913669][T15699] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 813.920735][T15699] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 814.055517][T15859] netlink: 'syz.2.2332': attribute type 1 has an invalid length. [ 814.094060][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 814.094069][ T30] audit: type=1400 audit(1792308376.548:2481): avc: denied { write } for pid=15830 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.157945][T15859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 814.204054][T15863] bond1: (slave geneve2): making interface the new active one [ 814.210435][T15859] netlink: 'syz.2.2332': attribute type 1 has an invalid length. [ 814.210446][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2332'. [ 814.211287][T15863] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 814.285124][ T30] audit: type=1400 audit(1792308376.738:2482): avc: denied { write } for pid=15866 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.492854][ T30] audit: type=1400 audit(1792308376.938:2483): avc: denied { write } for pid=15868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.564579][ T30] audit: type=1400 audit(1792308377.018:2484): avc: denied { write } for pid=15879 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.779086][ T30] audit: type=1400 audit(1792308377.228:2485): avc: denied { unmount } for pid=14189 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 814.842824][T15699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.886003][T15699] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.907317][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.907361][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.932971][ T30] audit: type=1400 audit(1792308377.378:2486): avc: denied { write } for pid=15887 comm="syz.2.2338" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 814.964197][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.964240][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.964472][T15888] Invalid logical block size (4608) [ 815.347353][ T30] audit: type=1400 audit(1792308377.798:2487): avc: denied { write } for pid=15881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 815.764416][ T30] audit: type=1400 audit(1792308378.218:2488): avc: denied { write } for pid=15908 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 815.771414][ T30] audit: type=1400 audit(1792308378.218:2489): avc: denied { watch } for pid=15885 comm="syz.8.2337" path="/318/file0" dev="tmpfs" ino=1775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 815.771659][ T30] audit: type=1400 audit(1792308378.218:2490): avc: denied { watch_sb watch_reads } for pid=15885 comm="syz.8.2337" path="/318/file0" dev="tmpfs" ino=1775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 818.210484][ T4973] udevd[4973]: worker [13589] /devices/platform/dummy_hcd.9/usb10/10-1 timeout; kill it [ 818.210539][ T4973] udevd[4973]: seq 17312 '/devices/platform/dummy_hcd.9/usb10/10-1' killed [ 818.911858][ T4973] udevd[4973]: worker [13589] terminated by signal 9 (Killed) [ 818.911895][ T4973] udevd[4973]: worker [13589] failed while handling '/devices/platform/dummy_hcd.9/usb10/10-1' [ 819.033988][T15699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.075294][T15934] xt_cgroup: no path or classid specified [ 819.421903][ T30] audit: type=1400 audit(1792308381.868:2491): avc: denied { write } for pid=15918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.583426][ T5733] dvb-usb: did not find the firmware file 'dvb-usb-opera-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 819.583459][ T5733] opera1 10-1:1.80: probe with driver opera1 failed with error -22 [ 819.641331][ T5733] dvb-usb: found a 'Opera1 DVB-S USB2.0' in cold state, will try to load a firmware [ 819.641813][ T5733] usb 10-1: Direct firmware load for dvb-usb-opera-01.fw failed with error -2 [ 819.672076][ T5733] usb 10-1: Falling back to sysfs fallback for: dvb-usb-opera-01.fw [ 819.672627][ T30] audit: type=1400 audit(1792308382.118:2492): avc: denied { firmware_load } for pid=5733 comm="kworker/0:7" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 819.822598][ T30] audit: type=1400 audit(1792308382.268:2493): avc: denied { connect } for pid=15950 comm="syz.8.2348" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 819.849749][ T999] Bluetooth: (null): Invalid header checksum [ 819.865969][ T30] audit: type=1400 audit(1792308382.318:2494): avc: denied { write } for pid=15948 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.899850][ T30] audit: type=1400 audit(1792308382.348:2495): avc: denied { setopt } for pid=15950 comm="syz.8.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 819.936101][ T30] audit: type=1400 audit(1792308382.388:2496): avc: denied { write } for pid=15950 comm="syz.8.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 819.938706][ T999] Bluetooth: (null): Invalid header checksum [ 820.048244][ T50] Bluetooth: (null): Invalid header checksum [ 820.091515][T15699] veth0_vlan: entered promiscuous mode [ 820.123955][ T30] audit: type=1400 audit(1792308382.578:2497): avc: denied { setopt } for pid=15955 comm="syz.7.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 820.155059][T15699] veth1_vlan: entered promiscuous mode [ 820.177699][ T176] Bluetooth: (null): Invalid header checksum [ 820.251368][T15699] veth0_macvtap: entered promiscuous mode [ 820.276738][ T176] Bluetooth: (null): Invalid header checksum [ 820.277989][T15699] veth1_macvtap: entered promiscuous mode [ 820.331767][T15699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.360758][T15699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.387225][ T4379] Bluetooth: (null): Invalid header checksum [ 820.398550][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.398652][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.398738][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.398757][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.492629][ T176] Bluetooth: (null): Invalid header checksum [ 820.610639][ T59] Bluetooth: (null): Invalid header checksum [ 820.744908][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.744918][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.883202][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.883226][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.912907][ T30] audit: type=1400 audit(1792308383.358:2498): avc: denied { mounton } for pid=15699 comm="syz-executor" path="/root/syzkaller.ypc7SW/syz-tmp" dev="sda1" ino=2067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 820.940025][ T30] audit: type=1400 audit(1792308383.388:2499): avc: denied { mount } for pid=15699 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 820.971766][ T30] audit: type=1400 audit(1792308383.418:2500): avc: denied { name_bind } for pid=15965 comm="syz.8.2350" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 821.051530][T15956] FAULT_INJECTION: forcing a failure. [ 821.051530][T15956] name failslab, interval 1, probability 0, space 0, times 0 [ 821.051549][T15956] CPU: 0 UID: 0 PID: 15956 Comm: syz.7.2349 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.051565][T15956] Tainted: [L]=SOFTLOCKUP [ 821.051571][T15956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 821.051578][T15956] Call Trace: [ 821.051582][T15956] [ 821.051586][T15956] dump_stack_lvl+0x100/0x190 [ 821.051606][T15956] should_fail_ex.cold+0x5/0xa [ 821.051623][T15956] should_failslab+0xc2/0x120 [ 821.051640][T15956] __kmalloc_cache_noprof+0x91/0x6d0 [ 821.051653][T15956] ? sctp_auth_shkey_create+0x9e/0x210 [ 821.051674][T15956] sctp_auth_shkey_create+0x9e/0x210 [ 821.051693][T15956] sctp_auth_asoc_copy_shkeys+0x1f2/0x360 [ 821.051714][T15956] sctp_association_new+0x19ab/0x2990 [ 821.051731][T15956] sctp_connect_new_asoc+0x1a8/0x770 [ 821.051746][T15956] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 821.051765][T15956] sctp_sendmsg+0x1743/0x22e0 [ 821.051782][T15956] ? __pfx_sctp_sendmsg+0x10/0x10 [ 821.051795][T15956] ? sock_has_perm+0x25a/0x2f0 [ 821.051815][T15956] ? __pfx_sock_has_perm+0x10/0x10 [ 821.051828][T15956] ? lock_acquire+0x1d1/0x380 [ 821.051852][T15956] ? __pfx_sctp_sendmsg+0x10/0x10 [ 821.051866][T15956] inet_sendmsg+0x11c/0x140 [ 821.051883][T15956] ____sys_sendmsg+0x9c9/0xbe0 [ 821.051897][T15956] ? __pfx_inet_sendmsg+0x10/0x10 [ 821.051915][T15956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 821.051931][T15956] ? _kstrtoull+0x144/0x200 [ 821.051943][T15956] ? __pfx__kstrtoull+0x10/0x10 [ 821.051958][T15956] ___sys_sendmsg+0x190/0x1e0 [ 821.051974][T15956] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.051996][T15956] ? __fget_files+0x34/0x3d0 [ 821.052023][T15956] __sys_sendmmsg+0x20c/0x440 [ 821.052037][T15956] ? __pfx___sys_sendmmsg+0x10/0x10 [ 821.052049][T15956] ? ksys_write+0x190/0x250 [ 821.052081][T15956] __x64_sys_sendmmsg+0x9c/0x100 [ 821.052093][T15956] do_syscall_64+0x123/0x790 [ 821.052112][T15956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.052124][T15956] RIP: 0033:0x7f41ffb9e559 [ 821.052134][T15956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.052145][T15956] RSP: 002b:00007f4200ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 821.052156][T15956] RAX: ffffffffffffffda RBX: 00007f41ffe25fa0 RCX: 00007f41ffb9e559 [ 821.052164][T15956] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 821.052170][T15956] RBP: 00007f4200ac2090 R08: 0000000000000000 R09: 0000000000000000 [ 821.052177][T15956] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000001 [ 821.052184][T15956] R13: 00007f41ffe26038 R14: 00007f41ffe25fa0 R15: 00007ffffa014398 [ 821.052199][T15956] [ 822.454377][T15977] comedi comedi1: Minor 4 specified more than once! [ 822.664431][T15978] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2297'. [ 824.077211][T16016] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2362'. [ 825.157103][T16033] rxe_eth0 speed is unknown, defaulting to 1000 [ 825.235800][T16033] virt_wifi0 speed is unknown, defaulting to 1000 [ 825.309233][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 825.309244][ T30] audit: type=1400 audit(1792308387.748:2525): avc: denied { create } for pid=16032 comm="syz.4.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 825.509173][T16042] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2367'. [ 825.509229][T16042] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2367'. [ 825.670219][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2371'. [ 825.672694][ T30] audit: type=1400 audit(1792308388.118:2526): avc: denied { bind } for pid=16049 comm="syz.2.2372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 825.709482][ T30] audit: type=1400 audit(1792308388.158:2527): avc: denied { read } for pid=16048 comm="syz.8.2371" path="socket:[54396]" dev="sockfs" ino=54396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 825.771275][ T30] audit: type=1400 audit(1792308388.218:2528): avc: denied { ioctl } for pid=16048 comm="syz.8.2371" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=54403 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 826.066483][ T30] audit: type=1400 audit(1792308388.518:2529): avc: denied { write } for pid=16019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.366225][ T30] audit: type=1400 audit(1792308388.818:2530): avc: denied { write } for pid=16067 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.761501][T16075] openvswitch: netlink: Multiple metadata blocks provided [ 826.761610][T16075] openvswitch: netlink: Multiple metadata blocks provided [ 826.761709][T16075] openvswitch: netlink: Multiple metadata blocks provided [ 826.761793][T16075] openvswitch: netlink: Multiple metadata blocks provided [ 826.761886][T16075] openvswitch: netlink: Multiple metadata blocks provided [ 826.761976][T16075] openvswitch: netlink: Multiple metadata blocks provided [ 826.762057][T16075] openvswitch: netlink: Multiple metadata blocks provided [ 826.762154][T16075] openvswitch: netlink: Multiple metadata blocks provided [ 826.762246][T16075] openvswitch: netlink: Multiple metadata blocks provided [ 826.762348][T16075] openvswitch: netlink: Multiple metadata blocks provided [ 826.792419][ T30] audit: type=1400 audit(1792308389.238:2531): avc: denied { lock } for pid=16074 comm="syz.2.2376" path="socket:[54665]" dev="sockfs" ino=54665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 826.965558][ T30] audit: type=1400 audit(1792308389.418:2532): avc: denied { connect } for pid=16077 comm="syz.7.2366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 827.357132][ T30] audit: type=1400 audit(1792308389.808:2533): avc: denied { read write } for pid=16094 comm="syz.5.2381" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 827.357160][ T30] audit: type=1400 audit(1792308389.808:2534): avc: denied { open } for pid=16094 comm="syz.5.2381" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 827.426798][T16089] IPVS: Scheduler module ip_vs_sip not found [ 828.742490][T16111] ip6gretap1: entered promiscuous mode [ 831.506327][T16131] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2387'. [ 831.571241][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 831.571251][ T30] audit: type=1400 audit(1792308394.018:2537): avc: denied { search } for pid=16133 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.571471][ T30] audit: type=1400 audit(1792308394.018:2538): avc: denied { search } for pid=16133 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.571616][ T30] audit: type=1400 audit(1792308394.018:2539): avc: denied { search } for pid=16133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.606016][ T30] audit: type=1400 audit(1792308394.048:2540): avc: denied { map_create } for pid=16129 comm="syz.8.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 831.606042][ T30] audit: type=1400 audit(1792308394.048:2541): avc: denied { bpf } for pid=16129 comm="syz.8.2387" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 831.606062][ T30] audit: type=1400 audit(1792308394.048:2542): avc: denied { map_read map_write } for pid=16129 comm="syz.8.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 831.606081][ T30] audit: type=1400 audit(1792308394.058:2543): avc: denied { create } for pid=16129 comm="syz.8.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 831.606102][ T30] audit: type=1400 audit(1792308394.058:2544): avc: denied { setopt } for pid=16129 comm="syz.8.2387" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 831.774615][ T30] audit: type=1400 audit(1792308394.218:2545): avc: denied { recv } for pid=5591 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.235 dest=51706 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 831.828544][ T30] audit: type=1400 audit(1792308394.278:2546): avc: denied { read } for pid=8689 comm="syz-executor" name="loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 832.025917][T16136] FAULT_INJECTION: forcing a failure. [ 832.025917][T16136] name failslab, interval 1, probability 0, space 0, times 0 [ 832.025938][T16136] CPU: 0 UID: 0 PID: 16136 Comm: syz.8.2388 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.025956][T16136] Tainted: [L]=SOFTLOCKUP [ 832.025960][T16136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 832.025967][T16136] Call Trace: [ 832.025971][T16136] [ 832.025976][T16136] dump_stack_lvl+0x100/0x190 [ 832.025997][T16136] should_fail_ex.cold+0x5/0xa [ 832.026014][T16136] should_failslab+0xc2/0x120 [ 832.026031][T16136] __kmalloc_noprof+0xfc/0x840 [ 832.026046][T16136] ? nft_trans_alloc+0x1d/0x2d0 [ 832.026060][T16136] nft_trans_alloc+0x1d/0x2d0 [ 832.026071][T16136] nf_tables_newrule+0x1d56/0x2be0 [ 832.026088][T16136] ? nft_ct_set_zone_eval+0x530/0x570 [ 832.026105][T16136] ? __pfx_nf_tables_newrule+0x10/0x10 [ 832.026121][T16136] ? lock_acquire+0x1d1/0x380 [ 832.026135][T16136] ? net_generic+0x25/0x2a0 [ 832.026151][T16136] ? __nla_parse+0x40/0x60 [ 832.026168][T16136] nfnetlink_rcv_batch+0x1410/0x2880 [ 832.026190][T16136] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 832.026207][T16136] ? lock_acquire+0x1d1/0x380 [ 832.026220][T16136] ? avc_has_perm_noaudit+0x56/0x470 [ 832.026239][T16136] ? avc_has_perm_noaudit+0x145/0x470 [ 832.026266][T16136] ? __nla_parse+0x40/0x60 [ 832.026282][T16136] nfnetlink_rcv+0x3bd/0x440 [ 832.026296][T16136] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 832.026314][T16136] netlink_unicast+0x65f/0x950 [ 832.026327][T16136] ? __pfx_netlink_unicast+0x10/0x10 [ 832.026338][T16136] ? __pfx_sock_has_perm+0x10/0x10 [ 832.026356][T16136] netlink_sendmsg+0x8b0/0xda0 [ 832.026370][T16136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.026382][T16136] ? selinux_socket_sendmsg+0x198/0x2f0 [ 832.026401][T16136] ____sys_sendmsg+0xa4d/0xbe0 [ 832.026415][T16136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.026427][T16136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 832.026445][T16136] ? lock_acquire+0x1d1/0x380 [ 832.026458][T16136] ? get_pid_task+0x2a/0x250 [ 832.026475][T16136] ___sys_sendmsg+0x190/0x1e0 [ 832.026491][T16136] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.026507][T16136] ? get_pid_task+0x106/0x250 [ 832.026528][T16136] ? find_held_lock+0x2b/0x80 [ 832.026554][T16136] __sys_sendmsg+0x160/0x210 [ 832.026567][T16136] ? __pfx___sys_sendmsg+0x10/0x10 [ 832.026587][T16136] do_syscall_64+0x123/0x790 [ 832.026606][T16136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.026618][T16136] RIP: 0033:0x7ff513f9e559 [ 832.026627][T16136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.026639][T16136] RSP: 002b:00007ff514f23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.026650][T16136] RAX: ffffffffffffffda RBX: 00007ff514225fa0 RCX: 00007ff513f9e559 [ 832.026658][T16136] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 832.026664][T16136] RBP: 00007ff514f23090 R08: 0000000000000000 R09: 0000000000000000 [ 832.026671][T16136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.026678][T16136] R13: 00007ff514226038 R14: 00007ff514225fa0 R15: 00007fff63244ce8 [ 832.026694][T16136] [ 833.251723][T16143] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 833.251737][T16143] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 833.251746][T16143] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 833.251752][T16143] One or more global auth toks could not properly register; rc = [-22] [ 833.251774][T16143] Error validating options; rc = [-22] [ 833.367748][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 833.495016][ T9] usb 6-1: device descriptor read/64, error -71 [ 833.727711][T16157] sctp: [Deprecated]: syz.2.2384 (pid 16157) Use of int in maxseg socket option. [ 833.727711][T16157] Use struct sctp_assoc_value instead [ 834.845861][T16154] PKCS7: Unknown OID: [26] 3.6.840.1.101.3.4.2.1 [ 834.845878][T16154] PKCS7: Unsupported SignerInfo version [ 835.113735][ T5715] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 835.215925][T16173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2397'. [ 835.266281][ T5715] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 835.267206][ T5715] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 835.267225][ T5715] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 835.267246][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.272521][T16163] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 835.328266][ T5715] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 836.776371][ T5715] usb 3-1: USB disconnect, device number 30 [ 836.925311][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 836.925322][ T30] audit: type=1400 audit(1792308399.378:2606): avc: denied { create } for pid=16185 comm="syz.4.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 836.931957][ T30] audit: type=1400 audit(1792308399.378:2607): avc: denied { mount } for pid=16183 comm="syz.8.2399" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 836.988275][ T30] audit: type=1400 audit(1792308399.438:2608): avc: denied { write } for pid=16185 comm="syz.4.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 836.988302][ T30] audit: type=1400 audit(1792308399.438:2609): avc: denied { nlmsg_write } for pid=16185 comm="syz.4.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 837.108810][ T30] audit: type=1400 audit(1792308399.558:2610): avc: denied { unmount } for pid=8689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 837.141259][ T30] audit: type=1400 audit(1792308399.588:2611): avc: denied { write } for pid=16166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 837.220749][ T30] audit: type=1400 audit(1792308399.668:2612): avc: denied { create } for pid=16194 comm="syz.4.2402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 837.998081][ T30] audit: type=1400 audit(1792308400.448:2613): avc: denied { mount } for pid=16194 comm="syz.4.2402" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 838.793904][ T30] audit: type=1400 audit(1792308401.248:2614): avc: denied { perfmon } for pid=16197 comm="syz.8.2403" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 838.919145][ T30] audit: type=1400 audit(1792308401.368:2615): avc: denied { prog_run } for pid=16197 comm="syz.8.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 839.094161][ T5715] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 839.245899][ T5715] usb 9-1: Using ep0 maxpacket: 16 [ 839.251096][ T5715] usb 9-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 839.251118][ T5715] usb 9-1: too many configurations: 130, using maximum allowed: 8 [ 839.252471][ T5715] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 71 [ 839.252489][ T5715] usb 9-1: can't read configurations, error -22 [ 839.374174][ T5715] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 839.524355][ T5715] usb 9-1: Using ep0 maxpacket: 16 [ 839.524749][ T5715] usb 9-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 839.524770][ T5715] usb 9-1: too many configurations: 130, using maximum allowed: 8 [ 839.525509][ T5715] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 71 [ 839.525527][ T5715] usb 9-1: can't read configurations, error -22 [ 839.525678][ T5715] usb usb9-port1: attempt power cycle [ 840.772664][ T5715] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 840.797090][ T5715] usb 9-1: Using ep0 maxpacket: 16 [ 840.797495][ T5715] usb 9-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 840.797516][ T5715] usb 9-1: too many configurations: 130, using maximum allowed: 8 [ 840.798343][ T5715] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 71 [ 840.798361][ T5715] usb 9-1: can't read configurations, error -22 [ 840.833118][T16232] net_ratelimit: 57 callbacks suppressed [ 840.833127][T16232] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 840.933397][ T5715] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 841.051634][ T5715] usb 9-1: device descriptor read/8, error -71 [ 841.154774][ T5715] usb usb9-port1: unable to enumerate USB device [ 842.174224][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 842.174237][ T30] audit: type=1400 audit(1792308404.628:2665): avc: denied { map_create } for pid=16244 comm="syz.5.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 842.288481][ T30] audit: type=1400 audit(1792308404.738:2666): avc: denied { name_bind } for pid=16241 comm="syz.8.2413" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 842.288507][ T30] audit: type=1400 audit(1792308404.738:2667): avc: denied { node_bind } for pid=16241 comm="syz.8.2413" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 842.395947][ T30] audit: type=1400 audit(1792308404.848:2668): avc: denied { allowed } for pid=16244 comm="syz.5.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 842.395973][ T30] audit: type=1400 audit(1792308404.848:2669): avc: denied { sqpoll } for pid=16244 comm="syz.5.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 842.396123][ T30] audit: type=1400 audit(1792308404.848:2670): avc: denied { create } for pid=16244 comm="syz.5.2414" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 842.397386][ T30] audit: type=1400 audit(1792308404.848:2671): avc: denied { map } for pid=16244 comm="syz.5.2414" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=55299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 842.398301][ T30] audit: type=1400 audit(1792308404.848:2672): avc: denied { read write } for pid=16244 comm="syz.5.2414" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=55299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 842.566727][ T30] audit: type=1400 audit(1792308405.018:2673): avc: denied { egress } for pid=9 comm="kworker/0:0" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 842.566753][ T30] audit: type=1400 audit(1792308405.018:2674): avc: denied { sendto } for pid=9 comm="kworker/0:0" saddr=fe80::1c daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 842.776726][T16257] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 843.438918][T16257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=16257 comm=syz.5.2415 [ 843.439716][T16257] @0Ù: renamed from bond_slave_1 (while UP) [ 845.865270][T16283] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 847.330489][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 847.330512][ T30] audit: type=1400 audit(1792308409.778:2721): avc: denied { prog_load } for pid=16292 comm="syz.8.2425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 847.330808][ T30] audit: type=1400 audit(1792308409.778:2722): avc: denied { perfmon } for pid=16292 comm="syz.8.2425" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 848.118370][ T30] audit: type=1400 audit(1792308410.188:2723): avc: denied { egress } for pid=16297 comm="syz.2.2422" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 848.118401][ T30] audit: type=1400 audit(1792308410.188:2724): avc: denied { sendto } for pid=16297 comm="syz.2.2422" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 848.118423][ T30] audit: type=1400 audit(1792308410.548:2725): avc: denied { create } for pid=16293 comm="syz.2.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 848.118443][ T30] audit: type=1400 audit(1792308410.548:2726): avc: denied { read write } for pid=16293 comm="syz.2.2422" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 848.118464][ T30] audit: type=1400 audit(1792308410.548:2727): avc: denied { open } for pid=16293 comm="syz.2.2422" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 848.118499][ T30] audit: type=1400 audit(1792308410.548:2728): avc: denied { setopt } for pid=16293 comm="syz.2.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 848.118519][ T30] audit: type=1400 audit(1792308410.548:2729): avc: denied { read } for pid=16293 comm="syz.2.2422" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 848.118539][ T30] audit: type=1400 audit(1792308410.548:2730): avc: denied { open } for pid=16293 comm="syz.2.2422" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 849.221899][T16302] FAULT_INJECTION: forcing a failure. [ 849.221899][T16302] name failslab, interval 1, probability 0, space 0, times 0 [ 849.221922][T16302] CPU: 0 UID: 0 PID: 16302 Comm: syz.8.2428 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.221940][T16302] Tainted: [L]=SOFTLOCKUP [ 849.221945][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 849.221952][T16302] Call Trace: [ 849.221957][T16302] [ 849.221961][T16302] dump_stack_lvl+0x100/0x190 [ 849.221982][T16302] should_fail_ex.cold+0x5/0xa [ 849.222000][T16302] should_failslab+0xc2/0x120 [ 849.222018][T16302] __kmalloc_noprof+0xfc/0x840 [ 849.222033][T16302] ? tomoyo_encode2+0xfb/0x3c0 [ 849.222055][T16302] tomoyo_encode2+0xfb/0x3c0 [ 849.222074][T16302] tomoyo_encode+0x29/0x50 [ 849.222092][T16302] tomoyo_realpath_from_path+0x18c/0x690 [ 849.222107][T16302] tomoyo_path_number_perm+0x23c/0x580 [ 849.222123][T16302] ? tomoyo_path_number_perm+0x22e/0x580 [ 849.222140][T16302] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 849.222157][T16302] ? __pfx_futex_wait+0x10/0x10 [ 849.222174][T16302] ? __lock_acquire+0x5c0/0x1f40 [ 849.222195][T16302] ? __fget_files+0x34/0x3d0 [ 849.222212][T16302] ? find_held_lock+0x2b/0x80 [ 849.222229][T16302] ? hook_file_ioctl_common+0x140/0x440 [ 849.222245][T16302] ? __fget_files+0x21f/0x3d0 [ 849.222264][T16302] security_file_ioctl+0xd3/0x230 [ 849.222282][T16302] __x64_sys_ioctl+0xb7/0x210 [ 849.222297][T16302] do_syscall_64+0x123/0x790 [ 849.222316][T16302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.222328][T16302] RIP: 0033:0x7ff513f9e559 [ 849.222338][T16302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.222350][T16302] RSP: 002b:00007ff514f23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.222362][T16302] RAX: ffffffffffffffda RBX: 00007ff514225fa0 RCX: 00007ff513f9e559 [ 849.222370][T16302] RDX: 0000000000280000 RSI: 0000000000004c80 RDI: 0000000000000004 [ 849.222377][T16302] RBP: 00007ff514035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 849.222384][T16302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.222391][T16302] R13: 00007ff514226038 R14: 00007ff514225fa0 R15: 00007fff63244ce8 [ 849.222407][T16302] [ 849.222430][T16302] ERROR: Out of memory at tomoyo_realpath_from_path. [ 849.617705][T16305] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 849.617719][T16305] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 849.617727][T16305] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 849.617733][T16305] One or more global auth toks could not properly register; rc = [-22] [ 849.617750][T16305] Error validating options; rc = [-22] [ 849.680130][T16305] syz_tun: entered allmulticast mode [ 851.998361][T16324] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2434'. [ 852.002932][ T4973] udevd[4973]: worker [13617] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 852.058973][T16324] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 852.640791][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 852.640805][ T30] audit: type=1400 audit(1792308414.768:2761): avc: denied { read } for pid=16327 comm="syz.8.2435" dev="nsfs" ino=4026532958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 852.640829][ T30] audit: type=1400 audit(1792308414.768:2762): avc: denied { open } for pid=16327 comm="syz.8.2435" path="net:[4026532958]" dev="nsfs" ino=4026532958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 852.640851][ T30] audit: type=1400 audit(1792308414.768:2763): avc: denied { create } for pid=16327 comm="syz.8.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 852.640870][ T30] audit: type=1400 audit(1792308414.768:2764): avc: denied { mount } for pid=16327 comm="syz.8.2435" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 852.720351][ T30] audit: type=1400 audit(1792308415.168:2765): avc: denied { read } for pid=15699 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 852.720378][ T30] audit: type=1400 audit(1792308415.168:2766): avc: denied { open } for pid=15699 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 852.720398][ T30] audit: type=1400 audit(1792308415.168:2767): avc: denied { ioctl } for pid=15699 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 852.871133][ T30] audit: type=1400 audit(1792308415.198:2768): avc: denied { recv } for pid=16329 comm="dhcpcd-run-hook" saddr=10.128.0.169 src=30006 daddr=10.128.0.235 dest=51706 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 852.871162][ T30] audit: type=1400 audit(1792308415.198:2769): avc: denied { search } for pid=16329 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.871182][ T30] audit: type=1400 audit(1792308415.198:2770): avc: denied { search } for pid=16329 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.078960][T16349] trusted_key: encrypted_key: insufficient parameters specified [ 854.094968][T16350] trusted_key: encrypted_key: insufficient parameters specified [ 854.095642][T16349] GUP no longer grows the stack in syz.8.2439 (16349): 200000004000-20000000a000 (200000002000) [ 854.095674][T16349] CPU: 0 UID: 0 PID: 16349 Comm: syz.8.2439 Tainted: G L syzkaller #0 PREEMPT(full) [ 854.095690][T16349] Tainted: [L]=SOFTLOCKUP [ 854.095694][T16349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 854.095701][T16349] Call Trace: [ 854.095705][T16349] [ 854.095710][T16349] dump_stack_lvl+0x100/0x190 [ 854.095730][T16349] gup_vma_lookup.cold+0x83/0x96 [ 854.095747][T16349] __get_user_pages+0x252/0x2c30 [ 854.095766][T16349] ? lock_acquire+0x1d1/0x380 [ 854.095779][T16349] ? mtree_load+0xdc/0xb50 [ 854.095799][T16349] ? __pfx___get_user_pages+0x10/0x10 [ 854.095813][T16349] ? mtree_load+0x388/0xb50 [ 854.095829][T16349] ? mtree_load+0x388/0xb50 [ 854.095850][T16349] get_user_pages_remote+0x3d2/0xb10 [ 854.095866][T16349] ? mas_prev_setup.constprop.0+0x980/0x9e0 [ 854.095885][T16349] ? __pfx_get_user_pages_remote+0x10/0x10 [ 854.095907][T16349] __access_remote_vm+0x3bb/0x890 [ 854.095925][T16349] ? __pfx___access_remote_vm+0x10/0x10 [ 854.095938][T16349] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 854.095950][T16349] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 854.095967][T16349] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 854.095987][T16349] proc_pid_cmdline_read+0x552/0x9a0 [ 854.096005][T16349] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 854.096024][T16349] ? rw_verify_area+0xce/0x6d0 [ 854.096037][T16349] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 854.096054][T16349] vfs_readv+0x5d8/0x8d0 [ 854.096070][T16349] ? __pfx_vfs_readv+0x10/0x10 [ 854.096086][T16349] ? lock_acquire+0x1d1/0x380 [ 854.096099][T16349] ? __fget_files+0x34/0x3d0 [ 854.096121][T16349] ? __fget_files+0x21f/0x3d0 [ 854.096140][T16349] ? do_preadv+0x1ac/0x270 [ 854.096152][T16349] do_preadv+0x1ac/0x270 [ 854.096166][T16349] ? __pfx_do_preadv+0x10/0x10 [ 854.096182][T16349] do_syscall_64+0x123/0x790 [ 854.096200][T16349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.096212][T16349] RIP: 0033:0x7ff513f9e559 [ 854.096222][T16349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.096233][T16349] RSP: 002b:00007ff514f23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 854.096245][T16349] RAX: ffffffffffffffda RBX: 00007ff514225fa0 RCX: 00007ff513f9e559 [ 854.096253][T16349] RDX: 0000000000000001 RSI: 0000200000000880 RDI: 0000000000000005 [ 854.096260][T16349] RBP: 00007ff514035ab8 R08: 00000000fffffff9 R09: 0000000000000000 [ 854.096267][T16349] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 854.096273][T16349] R13: 00007ff514226038 R14: 00007ff514225fa0 R15: 00007fff63244ce8 [ 854.096288][T16349] [ 855.303359][ T969] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 855.385233][T16365] netlink: 'syz.5.2444': attribute type 10 has an invalid length. [ 855.426574][T16365] team0 (unregistering): Port device team_slave_0 removed [ 855.433153][T16365] team0 (unregistering): Port device team_slave_1 removed [ 855.466017][ T969] usb 3-1: Using ep0 maxpacket: 16 [ 855.466408][ T969] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 855.467152][ T969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.467177][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 855.467193][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 855.467207][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 855.467219][ T969] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 855.467240][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.468952][ T969] usb 3-1: config 0 descriptor?? [ 855.615172][T16369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2445'. [ 855.638619][T16367] nvme_fcloop: unknown parameter or missing value 'wwnn=' [ 855.641868][T16367] ip_tables: iptables: counters copy to user failed while replacing table [ 855.747657][ T969] rc_core: IR keymap rc-hauppauge not found [ 855.747668][ T969] Registered IR keymap rc-empty [ 855.747902][ T969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.766558][ T969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.785132][ T969] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 855.808389][ T969] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input45 [ 855.830034][ T969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.846694][ T969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.864087][ T969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.883389][ T969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 855.988642][ T969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 856.004083][ T969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 856.023533][ T969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 856.849014][T16381] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2447'. [ 856.855267][ T969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 856.873680][ T969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 856.893346][ T969] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 856.905290][T16381] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 856.922472][ T969] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 856.922489][ T969] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 856.962004][ T969] usb 3-1: USB disconnect, device number 31 [ 857.991078][T16386] binder: 16383:16386 ioctl 4018620d 0 returned -22 [ 858.060033][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 858.060044][ T30] audit: type=1400 audit(1792308420.438:2838): avc: denied { execmem } for pid=16383 comm="syz.5.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 858.060067][ T30] audit: type=1400 audit(1792308420.438:2839): avc: denied { read } for pid=16383 comm="syz.5.2448" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 858.060087][ T30] audit: type=1400 audit(1792308420.438:2840): avc: denied { open } for pid=16383 comm="syz.5.2448" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 858.060108][ T30] audit: type=1400 audit(1792308420.438:2841): avc: denied { ioctl } for pid=16383 comm="syz.5.2448" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 858.060130][ T30] audit: type=1400 audit(1792308420.438:2842): avc: denied { allowed } for pid=16383 comm="syz.5.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 858.060163][ T30] audit: type=1400 audit(1792308420.438:2843): avc: denied { create } for pid=16383 comm="syz.5.2448" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 858.060183][ T30] audit: type=1400 audit(1792308420.438:2844): avc: denied { map } for pid=16383 comm="syz.5.2448" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=55769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 858.060203][ T30] audit: type=1400 audit(1792308420.438:2845): avc: denied { read write } for pid=16383 comm="syz.5.2448" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=55769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 858.060223][ T30] audit: type=1400 audit(1792308420.468:2846): avc: denied { ioctl } for pid=16383 comm="syz.5.2448" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=55771 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 858.060244][ T30] audit: type=1400 audit(1792308420.478:2847): avc: denied { prog_load } for pid=16383 comm="syz.5.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 859.660437][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2453'. [ 861.274007][ T5715] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 861.423975][ T5715] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 861.425978][ T5715] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.426001][ T5715] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.426016][ T5715] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.426036][ T5715] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.427606][ T5715] usb 9-1: config 0 descriptor?? [ 862.119506][ T5715] usbhid 9-1:0.0: can't add hid device: -71 [ 862.119558][ T5715] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 862.120889][ T5715] usb 9-1: USB disconnect, device number 56 [ 863.341561][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 863.341574][ T30] audit: type=1400 audit(1792308425.458:2877): avc: denied { name_bind } for pid=16421 comm="syz.2.2458" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 863.341598][ T30] audit: type=1400 audit(1792308425.458:2878): avc: denied { node_bind } for pid=16421 comm="syz.2.2458" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 863.341619][ T30] audit: type=1400 audit(1792308425.758:2879): avc: denied { read } for pid=16421 comm="syz.2.2458" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 863.341640][ T30] audit: type=1400 audit(1792308425.758:2880): avc: denied { open } for pid=16421 comm="syz.2.2458" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 863.341674][ T30] audit: type=1400 audit(1792308425.778:2881): avc: denied { ioctl } for pid=16421 comm="syz.2.2458" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 863.584553][ T30] audit: type=1400 audit(1792308426.038:2882): avc: denied { execute } for pid=16425 comm="syz.4.2442" name="file0" dev="tmpfs" ino=3115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 863.585355][ T30] audit: type=1400 audit(1792308426.038:2883): avc: denied { execute_no_trans } for pid=16425 comm="syz.4.2442" path="/560/file0" dev="tmpfs" ino=3115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 863.801564][ T30] audit: type=1400 audit(1792308426.248:2884): avc: denied { mmap_zero } for pid=16440 comm="syz.2.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 863.918653][ T30] audit: type=1400 audit(1792308426.368:2885): avc: denied { create } for pid=16444 comm="syz.4.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 863.947898][ T30] audit: type=1400 audit(1792308426.398:2886): avc: denied { create } for pid=16444 comm="syz.4.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 864.033808][ T10] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 864.072491][T16449] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2465'. [ 864.164774][ T10] usb 9-1: device descriptor read/64, error -71 [ 864.411999][ T10] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 864.713532][ T10] usb 9-1: device descriptor read/64, error -71 [ 864.826071][ T10] usb usb9-port1: attempt power cycle [ 865.623321][ T10] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 865.647118][ T10] usb 9-1: device descriptor read/8, error -71 [ 865.933288][ T10] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 865.957280][ T10] usb 9-1: device descriptor read/8, error -71 [ 866.064056][ T10] usb usb9-port1: unable to enumerate USB device [ 868.621574][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 868.621587][ T30] audit: type=1400 audit(1792308431.068:2916): avc: denied { mount } for pid=16476 comm="syz.8.2476" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 869.404041][ T30] audit: type=1400 audit(1792308431.858:2917): avc: denied { getopt } for pid=16480 comm="syz.5.2478" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 869.643370][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 869.703303][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 869.804381][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 869.809785][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 869.809810][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 869.809824][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 869.809837][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 869.809850][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 869.809863][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 869.809876][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 869.809889][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 869.809902][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 869.809916][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 869.809928][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 869.809942][ T10] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 869.809954][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 11 endpoint descriptors, different from the interface descriptor's value: 14 [ 869.909786][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 869.929860][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 869.930640][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.930653][ T10] usb 3-1: Product: syz [ 869.930662][ T10] usb 3-1: Manufacturer: syz [ 869.930670][ T10] usb 3-1: SerialNumber: syz [ 869.942522][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 869.965128][T16483] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 869.965178][T16483] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 869.965225][T16483] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 869.965273][T16483] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 869.965317][T16483] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 869.965369][T16483] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 869.965416][T16483] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 869.965462][T16483] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 869.965508][T16483] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 869.965552][T16483] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 869.998878][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 869.998893][ T9] usb 6-1: Product: syz [ 869.998902][ T9] usb 6-1: Manufacturer: syz [ 869.998910][ T9] usb 6-1: SerialNumber: syz [ 870.015601][ T10] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 870.016152][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 870.215022][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 5 [ 870.216722][ T9] usb 6-1: config 0 descriptor?? [ 870.217253][T16484] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 870.222626][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 870.222640][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 870.274760][ T30] audit: type=1400 audit(1792308432.728:2918): avc: denied { module_request } for pid=16481 comm="syz.2.2479" kmod="char-major-188-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 870.279867][ T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 870.280737][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 870.280785][ T10] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 870.352949][ T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 870.436132][T16482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 870.436412][T16482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.147440][ T30] audit: type=1400 audit(1792308433.598:2919): avc: denied { read write } for pid=16486 comm="syz.7.2477" name="usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 871.147470][ T30] audit: type=1400 audit(1792308433.598:2920): avc: denied { open } for pid=16486 comm="syz.7.2477" path="/dev/usbmon6" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 871.147491][ T30] audit: type=1400 audit(1792308433.598:2921): avc: denied { read write } for pid=16486 comm="syz.7.2477" name="sg0" dev="devtmpfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 871.147512][ T30] audit: type=1400 audit(1792308433.598:2922): avc: denied { open } for pid=16486 comm="syz.7.2477" path="/dev/sg0" dev="devtmpfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 871.148615][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.148725][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.485668][ T10] usb 6-1: USB disconnect, device number 26 [ 872.956170][T16500] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2481'. [ 873.021568][ T30] audit: type=1400 audit(1792308435.468:2923): avc: denied { create } for pid=16498 comm="syz.4.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 873.021935][ T30] audit: type=1400 audit(1792308435.468:2924): avc: denied { create } for pid=16498 comm="syz.4.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 873.022258][ T30] audit: type=1400 audit(1792308435.468:2925): avc: denied { setopt } for pid=16498 comm="syz.4.2473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 873.047594][T16502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2473'. [ 874.435223][ T30] audit: type=1400 audit(1792308436.888:2926): avc: denied { unmount } for pid=8689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 874.569303][ T9] usb 3-1: USB disconnect, device number 32 [ 874.593083][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 874.761492][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 874.788019][ T9] keyspan 3-1:1.0: device disconnected [ 874.829020][T16511] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2485'. [ 875.013995][ T30] audit: type=1400 audit(1792308437.468:2927): avc: denied { write } for pid=16510 comm="syz.8.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 875.844684][T16521] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 875.844877][ T30] audit: type=1400 audit(1792308438.288:2928): avc: denied { map_create } for pid=16514 comm="syz.2.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 875.844901][ T30] audit: type=1400 audit(1792308438.288:2929): avc: denied { bpf } for pid=16514 comm="syz.2.2486" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 875.844921][ T30] audit: type=1400 audit(1792308438.288:2930): avc: denied { map_read map_write } for pid=16514 comm="syz.2.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 875.844940][ T30] audit: type=1400 audit(1792308438.298:2931): avc: denied { create } for pid=16514 comm="syz.2.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 875.844959][ T30] audit: type=1400 audit(1792308438.298:2932): avc: denied { setopt } for pid=16514 comm="syz.2.2486" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 876.004679][ T30] audit: type=1400 audit(1792308438.408:2933): avc: denied { recv } for pid=16514 comm="syz.2.2486" saddr=10.128.0.169 src=30006 daddr=10.128.0.235 dest=51706 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 876.097388][ T30] audit: type=1400 audit(1792308438.548:2934): avc: denied { read } for pid=14189 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 876.293307][ T30] audit: type=1400 audit(1792308438.738:2935): avc: denied { open } for pid=14189 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 876.586847][T16526] netlink: 296 bytes leftover after parsing attributes in process `syz.8.2488'. [ 876.621535][T16526] ip_tables: iptables: counters copy to user failed while replacing table [ 876.632540][T16526] ip_tables: iptables: counters copy to user failed while replacing table [ 879.193266][ T969] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 879.574105][ T969] usb 9-1: Using ep0 maxpacket: 16 [ 879.712968][ T969] usb 9-1: device descriptor read/all, error -71 [ 879.734404][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 879.734414][ T30] audit: type=1400 audit(1792308442.188:2955): avc: denied { egress } for pid=5615 comm="kworker/u9:4" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 879.734438][ T30] audit: type=1400 audit(1792308442.188:2956): avc: denied { sendto } for pid=5615 comm="kworker/u9:4" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 881.129226][ T30] audit: type=1400 audit(1792308443.578:2957): avc: denied { create } for pid=16530 comm="syz.8.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 881.130198][ T5733] dvb-usb: did not find the firmware file 'dvb-usb-opera-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 881.130230][ T5733] opera1 10-1:1.57: probe with driver opera1 failed with error -22 [ 881.204865][ T5733] dvb-usb: found a 'Opera1 DVB-S USB2.0' in cold state, will try to load a firmware [ 881.205397][ T5733] usb 10-1: Direct firmware load for dvb-usb-opera-01.fw failed with error -2 [ 881.205820][ T30] audit: type=1400 audit(1792308443.658:2958): avc: denied { firmware_load } for pid=5733 comm="kworker/0:7" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 881.273159][ T5733] usb 10-1: Falling back to sysfs fallback for: dvb-usb-opera-01.fw [ 881.321231][ T30] audit: type=1400 audit(1792308443.768:2959): avc: denied { create } for pid=16533 comm="syz.4.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 881.348205][ T30] audit: type=1400 audit(1792308443.798:2960): avc: denied { create } for pid=16534 comm="syz.2.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 881.404545][ T30] audit: type=1400 audit(1792308443.848:2961): avc: denied { write } for pid=16533 comm="syz.4.2489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 881.759215][ T30] audit: type=1400 audit(1792308444.198:2962): avc: denied { watch } for pid=16534 comm="syz.2.2491" path="/98/file0" dev="tmpfs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 881.759245][ T30] audit: type=1400 audit(1792308444.198:2963): avc: denied { watch_sb watch_reads } for pid=16534 comm="syz.2.2491" path="/98/file0" dev="tmpfs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 881.759272][ T30] audit: type=1400 audit(1792308444.198:2964): avc: denied { name_bind } for pid=16534 comm="syz.2.2491" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 884.433595][ T4973] udevd[4973]: worker [15835] /devices/platform/dummy_hcd.9/usb10/10-1 is taking a long time [ 884.776158][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 884.776169][ T30] audit: type=1400 audit(1792308447.228:2989): avc: denied { bind } for pid=16552 comm="syz.4.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 884.818351][ T30] audit: type=1400 audit(1792308447.268:2990): avc: denied { accept } for pid=16552 comm="syz.4.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 884.821025][ T30] audit: type=1400 audit(1792308447.268:2991): avc: denied { setopt } for pid=16552 comm="syz.4.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 884.823416][ T30] audit: type=1400 audit(1792308447.268:2992): avc: denied { write } for pid=16552 comm="syz.4.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 885.010177][ T30] audit: type=1400 audit(1792308447.458:2993): avc: denied { mounton } for pid=16552 comm="syz.4.2496" path="/566/file0" dev="tmpfs" ino=3149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 885.045198][ T30] audit: type=1400 audit(1792308447.498:2994): avc: denied { mount } for pid=16552 comm="syz.4.2496" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 885.049586][T16553] overlay: Unknown parameter '/' [ 885.233103][ T30] audit: type=1400 audit(1792308447.678:2995): avc: denied { create } for pid=16557 comm="syz.5.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 885.263431][ T30] audit: type=1400 audit(1792308447.718:2996): avc: denied { bind } for pid=16557 comm="syz.5.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 885.302809][ T30] audit: type=1400 audit(1792308447.748:2997): avc: denied { write } for pid=16557 comm="syz.5.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 885.336104][ T30] audit: type=1400 audit(1792308447.788:2998): avc: denied { read } for pid=16557 comm="syz.5.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 887.092592][ T969] libceph: connect (1)[c::]:6789 error -101 [ 887.093011][ T969] libceph: mon0 (1)[c::]:6789 connect error [ 887.291396][T16560] ceph: No mds server is up or the cluster is laggy [ 890.140297][T16591] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2508'. [ 890.379955][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 890.379966][ T30] audit: type=1400 audit(1792308452.828:3000): avc: denied { ioctl } for pid=16590 comm="syz.5.2508" path="socket:[56493]" dev="sockfs" ino=56493 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 890.802689][ T30] audit: type=1400 audit(1792308453.248:3001): avc: denied { write } for pid=16596 comm="syz.7.2509" name="video2" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 890.802716][ T30] audit: type=1400 audit(1792308453.248:3002): avc: denied { write } for pid=16590 comm="syz.5.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 890.862579][ T30] audit: type=1400 audit(1792308453.308:3003): avc: denied { read } for pid=16596 comm="syz.7.2509" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 890.862605][ T30] audit: type=1400 audit(1792308453.308:3004): avc: denied { open } for pid=16596 comm="syz.7.2509" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 891.129023][ T30] audit: type=1400 audit(1792308453.578:3005): avc: denied { mount } for pid=16600 comm="syz.7.2511" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 892.110475][T16605] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 892.156724][ T30] audit: type=1400 audit(1792308454.608:3006): avc: denied { read write } for pid=16600 comm="syz.7.2511" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 892.157502][ T30] audit: type=1400 audit(1792308454.608:3007): avc: denied { open } for pid=16600 comm="syz.7.2511" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 892.337235][ T30] audit: type=1400 audit(1792308454.788:3008): avc: denied { read } for pid=15699 comm="syz-executor" name="loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 892.342866][ T30] audit: type=1400 audit(1792308454.788:3009): avc: denied { recv } for pid=5591 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.235 dest=51706 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 894.023423][T16612] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2514'. [ 894.129291][T16614] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 896.147869][T16622] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2515'. [ 896.266591][T16623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 896.267076][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 896.267085][ T30] audit: type=1400 audit(1792308458.708:3049): avc: denied { map_create } for pid=16620 comm="syz.7.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 896.267108][ T30] audit: type=1400 audit(1792308458.708:3050): avc: denied { bpf } for pid=16620 comm="syz.7.2515" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 896.267136][ T30] audit: type=1400 audit(1792308458.708:3051): avc: denied { map_read map_write } for pid=16620 comm="syz.7.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 896.267155][ T30] audit: type=1400 audit(1792308458.718:3052): avc: denied { create } for pid=16620 comm="syz.7.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 896.267174][ T30] audit: type=1400 audit(1792308458.718:3053): avc: denied { setopt } for pid=16620 comm="syz.7.2515" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 896.493312][ T30] audit: type=1400 audit(1792308458.918:3054): avc: denied { recv } for pid=176 comm="kworker/u8:7" saddr=10.128.0.169 src=30006 daddr=10.128.0.235 dest=51706 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 896.729220][ T30] audit: type=1400 audit(1792308459.128:3055): avc: denied { read } for pid=8504 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 896.729249][ T30] audit: type=1400 audit(1792308459.178:3056): avc: denied { open } for pid=8504 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 896.729270][ T30] audit: type=1400 audit(1792308459.178:3057): avc: denied { ioctl } for pid=8504 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 897.863954][ T30] audit: type=1400 audit(1792308459.678:3058): avc: denied { execmem } for pid=16624 comm="syz.7.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 897.963086][T16627] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2517'. [ 899.486544][T16634] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 901.712697][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 901.712710][ T30] audit: type=1400 audit(1792308464.158:3086): avc: denied { read } for pid=16642 comm="syz.5.2522" dev="nsfs" ino=4026533951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 901.732067][ T30] audit: type=1400 audit(1792308464.178:3087): avc: denied { open } for pid=16642 comm="syz.5.2522" path="net:[4026533951]" dev="nsfs" ino=4026533951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 901.827103][ T30] audit: type=1400 audit(1792308464.278:3088): avc: denied { execmem } for pid=16639 comm="syz.2.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 901.827129][ T30] audit: type=1400 audit(1792308464.278:3089): avc: denied { mmap_zero } for pid=16639 comm="syz.2.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 902.010434][ T30] audit: type=1400 audit(1792308464.458:3090): avc: denied { create } for pid=16639 comm="syz.2.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 902.073682][ T30] audit: type=1400 audit(1792308464.528:3091): avc: denied { create } for pid=16642 comm="syz.5.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 902.220111][ T30] audit: type=1400 audit(1792308464.668:3092): avc: denied { bpf } for pid=16642 comm="syz.5.2522" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 903.079965][ T30] audit: type=1400 audit(1792308465.488:3093): avc: denied { read } for pid=16642 comm="syz.5.2522" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 903.079996][ T30] audit: type=1400 audit(1792308465.488:3094): avc: denied { open } for pid=16642 comm="syz.5.2522" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 903.925689][ T30] audit: type=1400 audit(1792308466.378:3095): avc: denied { read write } for pid=16649 comm="syz.8.2523" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 904.194095][ T10] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 904.353419][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 904.355779][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 904.355794][ T10] usb 9-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 904.363364][ T10] usb 9-1: config index 0 descriptor too short (expected 1853, got 61) [ 904.363379][ T10] usb 9-1: config 1 has too many interfaces: 106, using maximum allowed: 32 [ 904.363390][ T10] usb 9-1: config 1 has an invalid interface number: 212 but max is 105 [ 904.363402][ T10] usb 9-1: config 1 has an invalid interface number: 226 but max is 105 [ 904.363413][ T10] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 106 [ 904.363425][ T10] usb 9-1: config 1 has no interface number 0 [ 904.363434][ T10] usb 9-1: config 1 has no interface number 1 [ 904.363456][ T10] usb 9-1: config 1 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 904.363475][ T10] usb 9-1: config 1 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 904.363487][ T10] usb 9-1: config 1 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 95, changing to 4 [ 904.363500][ T10] usb 9-1: config 1 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 29247, setting to 1023 [ 904.363514][ T10] usb 9-1: config 1 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 904.363527][ T10] usb 9-1: config 1 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 904.363538][ T10] usb 9-1: config 1 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 904.363553][ T10] usb 9-1: config 1 interface 212 has no altsetting 0 [ 904.440718][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.440733][ T10] usb 9-1: Product: syz [ 904.440742][ T10] usb 9-1: Manufacturer: syz [ 904.440750][ T10] usb 9-1: SerialNumber: syz [ 904.689814][T16659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.690095][T16659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.806363][ T10] usb 9-1: USB disconnect, device number 63 [ 904.872639][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 904.884582][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 904.885448][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 904.886724][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 904.887307][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 906.620336][T16680] MTRR 1 not used [ 906.832082][ T176] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.868563][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 906.868573][ T30] audit: type=1400 audit(1792308469.318:3127): avc: denied { read write } for pid=16681 comm="syz.7.2528" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 906.871234][ T30] audit: type=1400 audit(1792308469.318:3128): avc: denied { open } for pid=16681 comm="syz.7.2528" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 906.945959][ T5616] Bluetooth: hci4: command tx timeout [ 906.960851][ T30] audit: type=1400 audit(1792308469.408:3129): avc: denied { ioctl } for pid=16681 comm="syz.7.2528" path="/dev/ptp0" dev="devtmpfs" ino=1264 ioctlcmd=0x3d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 906.998257][ T30] audit: type=1400 audit(1792308469.448:3130): avc: denied { read } for pid=16681 comm="syz.7.2528" name="oneway_spam_detection" dev="binder" ino=1048683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 906.998505][ T30] audit: type=1400 audit(1792308469.448:3131): avc: denied { ioctl } for pid=16681 comm="syz.7.2528" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=56747 ioctlcmd=0xaa08 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 906.999266][ T30] audit: type=1400 audit(1792308469.448:3132): avc: denied { open } for pid=16681 comm="syz.7.2528" path="/dev/binderfs/features/oneway_spam_detection" dev="binder" ino=1048683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 907.946138][ T30] audit: type=1400 audit(1792308470.398:3133): avc: denied { unmount } for pid=8689 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 908.070277][ T176] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.158532][ T30] audit: type=1400 audit(1792308470.608:3134): avc: denied { mount } for pid=16693 comm="syz.8.2531" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 908.188098][ T30] audit: type=1400 audit(1792308470.638:3135): avc: denied { mounton } for pid=16693 comm="syz.8.2531" path="/366/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 908.193190][ T30] audit: type=1400 audit(1792308470.638:3136): avc: denied { read } for pid=16693 comm="syz.8.2531" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 908.691733][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 908.702069][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 908.711103][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 908.712045][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 908.712634][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 908.795757][T16700] cougar: G6 mapped to F18 [ 909.068481][ T5616] Bluetooth: hci4: command tx timeout [ 909.267819][ T176] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.152442][T16710] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2525'. [ 910.238844][T16712] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 910.773479][ T5616] Bluetooth: hci3: command tx timeout [ 911.180971][ T5616] Bluetooth: hci4: command tx timeout [ 911.546704][T16718] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2534'. [ 912.653499][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 912.653512][ T30] audit: type=1400 audit(1792308474.018:3164): avc: denied { execmem } for pid=16720 comm="syz.5.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 912.653534][ T30] audit: type=1400 audit(1792308474.578:3165): avc: denied { read } for pid=16720 comm="syz.5.2535" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 912.653554][ T30] audit: type=1400 audit(1792308474.578:3166): avc: denied { open } for pid=16720 comm="syz.5.2535" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 912.653574][ T30] audit: type=1400 audit(1792308475.008:3167): avc: denied { prog_load } for pid=16716 comm="syz.7.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 912.900945][T16721] syz.5.2535 (16721): drop_caches: 2 [ 912.903953][ T5616] Bluetooth: hci3: command tx timeout [ 912.951121][ T30] audit: type=1400 audit(1792308475.398:3168): avc: denied { create } for pid=16716 comm="syz.7.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 912.966370][ T30] audit: type=1400 audit(1792308475.418:3169): avc: denied { write } for pid=16716 comm="syz.7.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 912.994783][ T30] audit: type=1400 audit(1792308475.448:3170): avc: denied { perfmon } for pid=16716 comm="syz.7.2534" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 913.072308][ T30] audit: type=1400 audit(1792308475.518:3171): avc: denied { create } for pid=16725 comm="syz.8.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 913.257347][ T5616] Bluetooth: hci4: command tx timeout [ 913.583314][ T30] audit: type=1400 audit(1792308476.028:3172): avc: denied { setopt } for pid=16725 comm="syz.8.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 913.583341][ T30] audit: type=1400 audit(1792308476.028:3173): avc: denied { getopt } for pid=16725 comm="syz.8.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 913.609162][ T176] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.076644][T16663] rxe_eth0 speed is unknown, defaulting to 1000 [ 914.933466][ T5616] Bluetooth: hci3: command tx timeout [ 915.528430][ T176] bridge_slave_1: left allmulticast mode [ 915.528618][ T176] bridge_slave_1: left promiscuous mode [ 915.529050][ T176] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.164315][ T176] bridge_slave_0: left allmulticast mode [ 916.164499][ T176] bridge_slave_0: left promiscuous mode [ 916.164926][ T176] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.013388][ T5616] Bluetooth: hci3: command tx timeout [ 917.869276][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 917.869288][ T30] audit: type=1400 audit(1792308480.318:3193): avc: denied { read write } for pid=16762 comm="syz.7.2547" name="vmci" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 917.869312][ T30] audit: type=1400 audit(1792308480.318:3194): avc: denied { open } for pid=16762 comm="syz.7.2547" path="/dev/vmci" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 917.950871][ T30] audit: type=1400 audit(1792308480.398:3195): avc: denied { ioctl } for pid=16762 comm="syz.7.2547" path="/dev/vmci" dev="devtmpfs" ino=696 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 918.050862][ T30] audit: type=1400 audit(1792308480.498:3196): avc: denied { mounton } for pid=16762 comm="syz.7.2547" path="/361/proc" dev="tmpfs" ino=1992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 918.050887][ T30] audit: type=1400 audit(1792308480.498:3197): avc: denied { mount } for pid=16762 comm="syz.7.2547" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 918.197631][ T30] audit: type=1400 audit(1792308480.648:3198): avc: denied { create } for pid=16762 comm="syz.7.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 918.245278][ T30] audit: type=1400 audit(1792308480.698:3199): avc: denied { accept } for pid=16762 comm="syz.7.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 918.296903][T16764] FAULT_INJECTION: forcing a failure. [ 918.296903][T16764] name failslab, interval 1, probability 0, space 0, times 0 [ 918.296929][T16764] CPU: 0 UID: 0 PID: 16764 Comm: syz.7.2547 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.296945][T16764] Tainted: [L]=SOFTLOCKUP [ 918.296949][T16764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 918.296956][T16764] Call Trace: [ 918.296960][T16764] [ 918.296965][T16764] dump_stack_lvl+0x100/0x190 [ 918.296986][T16764] should_fail_ex.cold+0x5/0xa [ 918.297003][T16764] should_failslab+0xc2/0x120 [ 918.297021][T16764] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 918.297037][T16764] ? alloc_inode+0x183/0x250 [ 918.297053][T16764] alloc_inode+0x183/0x250 [ 918.297067][T16764] iget_locked+0x1d9/0x6d0 [ 918.297081][T16764] ? __pfx_iget_locked+0x10/0x10 [ 918.297094][T16764] ? kernfs_root+0xee/0x2a0 [ 918.297105][T16764] ? kernfs_root+0xee/0x2a0 [ 918.297120][T16764] kernfs_get_inode+0x46/0x470 [ 918.297132][T16764] kernfs_iop_lookup+0x1a7/0x2d0 [ 918.297146][T16764] __lookup_slow+0x155/0x320 [ 918.297161][T16764] lookup_slow+0x50/0x70 [ 918.297174][T16764] path_lookupat+0x5e8/0xc40 [ 918.297188][T16764] ? __x64_sys_setxattr+0xc6/0x140 [ 918.297201][T16764] filename_lookup+0x202/0x590 [ 918.297219][T16764] ? __pfx_filename_lookup+0x10/0x10 [ 918.297247][T16764] ? find_held_lock+0x2b/0x80 [ 918.297265][T16764] ? __might_fault+0xc5/0x140 [ 918.297276][T16764] ? __might_fault+0xc5/0x140 [ 918.297291][T16764] filename_setxattr+0xa1/0x1d0 [ 918.297303][T16764] ? __pfx_filename_setxattr+0x10/0x10 [ 918.297317][T16764] ? do_getname+0x191/0x390 [ 918.297330][T16764] path_setxattrat+0x1ff/0x3b0 [ 918.297342][T16764] ? __pfx_path_setxattrat+0x10/0x10 [ 918.297356][T16764] ? ksys_write+0x190/0x250 [ 918.297370][T16764] ? ksys_write+0x190/0x250 [ 918.297396][T16764] ? xfd_validate_state+0x129/0x190 [ 918.297413][T16764] __x64_sys_setxattr+0xc6/0x140 [ 918.297424][T16764] ? do_syscall_64+0xae/0x790 [ 918.297441][T16764] ? lockdep_hardirqs_on+0x7d/0x110 [ 918.297458][T16764] do_syscall_64+0x123/0x790 [ 918.297475][T16764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.297487][T16764] RIP: 0033:0x7f41ffb9e559 [ 918.297498][T16764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.297510][T16764] RSP: 002b:00007f4200ac2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 918.297521][T16764] RAX: ffffffffffffffda RBX: 00007f41ffe25fa0 RCX: 00007f41ffb9e559 [ 918.297530][T16764] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000480 [ 918.297537][T16764] RBP: 00007f41ffc35ab8 R08: 0000000000000001 R09: 0000000000000000 [ 918.297545][T16764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.297552][T16764] R13: 00007f41ffe26038 R14: 00007f41ffe25fa0 R15: 00007ffffa014398 [ 918.297568][T16764] [ 919.293310][ T30] audit: type=1400 audit(1792308481.548:3200): avc: denied { write } for pid=16746 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 919.293340][ T30] audit: type=1400 audit(1792308481.548:3201): avc: denied { add_name } for pid=16746 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 919.293360][ T30] audit: type=1400 audit(1792308481.548:3202): avc: denied { create } for pid=16746 comm="dhcpcd-run-hook" name="resolv.conf.eth9.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 920.033449][ T176] bond1 (unregistering): (slave geneve2): Releasing active interface [ 920.387440][ T176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.473669][ T176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.518335][ T176] bond0 (unregistering): Released all slaves [ 920.570662][ T176] bond1 (unregistering): Released all slaves [ 920.665039][T16699] rxe_eth0 speed is unknown, defaulting to 1000 [ 920.682651][T16663] virt_wifi0 speed is unknown, defaulting to 1000 [ 920.696327][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 920.713302][T14835] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 920.863368][T14835] usb 6-1: Using ep0 maxpacket: 8 [ 920.867940][T14835] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 920.888057][T14835] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 920.888076][T14835] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 920.888090][T14835] usb 6-1: config 0 interface 0 has no altsetting 0 [ 920.888107][T14835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.892883][T14835] usb 6-1: config 0 descriptor?? [ 921.463190][T14835] input: HID 05ac:0265 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:0265.000A/input/input46 [ 921.971992][T14835] magicmouse 0003:05AC:0265.000A: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 05ac:0265] on usb-dummy_hcd.5-1/input0 [ 922.008464][T14835] usb 6-1: USB disconnect, device number 27 [ 922.539818][T16792] fido_id[16792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 922.901259][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 922.901283][ T30] audit: type=1400 audit(1792308485.348:3226): avc: denied { ioctl } for pid=16803 comm="syz.8.2559" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 923.017318][T16699] virt_wifi0 speed is unknown, defaulting to 1000 [ 923.375755][ T30] audit: type=1400 audit(1792308485.828:3227): avc: denied { read write } for pid=16813 comm="syz.5.2562" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 923.375786][ T30] audit: type=1400 audit(1792308485.828:3228): avc: denied { open } for pid=16813 comm="syz.5.2562" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 923.476500][ T30] audit: type=1400 audit(1792308485.928:3229): avc: denied { mount } for pid=16813 comm="syz.5.2562" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 923.607445][ T30] audit: type=1400 audit(1792308486.058:3230): avc: denied { unmount } for pid=15699 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 923.839412][T16819] @ÿ: renamed from veth0_vlan (while UP) [ 923.839475][T16819] FAULT_INJECTION: forcing a failure. [ 923.839475][T16819] name failslab, interval 1, probability 0, space 0, times 0 [ 923.839491][T16819] CPU: 0 UID: 0 PID: 16819 Comm: syz.8.2563 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.839507][T16819] Tainted: [L]=SOFTLOCKUP [ 923.839511][T16819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 923.839517][T16819] Call Trace: [ 923.839522][T16819] [ 923.839527][T16819] dump_stack_lvl+0x100/0x190 [ 923.839547][T16819] should_fail_ex.cold+0x5/0xa [ 923.839564][T16819] should_failslab+0xc2/0x120 [ 923.839582][T16819] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 923.839598][T16819] ? __pfx_sprintf+0x10/0x10 [ 923.839615][T16819] ? kstrdup_const+0x63/0x80 [ 923.839630][T16819] kstrdup+0x51/0xe0 [ 923.839643][T16819] kstrdup_const+0x63/0x80 [ 923.839655][T16819] kobject_rename+0x136/0x260 [ 923.839669][T16819] ? __pfx_kobject_rename+0x10/0x10 [ 923.839683][T16819] ? kernfs_put+0x3f/0x60 [ 923.839698][T16819] device_rename+0x130/0x250 [ 923.839715][T16819] netif_change_name+0x284/0x830 [ 923.839731][T16819] ? __pfx_netif_change_name+0x10/0x10 [ 923.839744][T16819] ? mark_held_locks+0x40/0x70 [ 923.839758][T16819] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 923.839777][T16819] ? full_name_hash+0xbc/0x100 [ 923.839789][T16819] dev_change_name+0xb2/0x260 [ 923.839804][T16819] dev_ifsioc+0x16bc/0x1f80 [ 923.839818][T16819] ? __pfx_dev_ifsioc+0x10/0x10 [ 923.839829][T16819] ? __pfx___mutex_lock+0x10/0x10 [ 923.839853][T16819] ? bpf_lsm_capable+0x9/0x10 [ 923.839868][T16819] dev_ioctl+0x223/0x10e0 [ 923.839882][T16819] sock_do_ioctl+0x1a0/0x280 [ 923.839903][T16819] ? __pfx_sock_do_ioctl+0x10/0x10 [ 923.839917][T16819] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 923.839936][T16819] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 923.839951][T16819] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 923.839971][T16819] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 923.839991][T16819] sock_ioctl+0x599/0x6b0 [ 923.840008][T16819] ? __pfx_sock_ioctl+0x10/0x10 [ 923.840028][T16819] ? selinux_file_ioctl+0x13b/0x290 [ 923.840044][T16819] ? selinux_file_ioctl+0xb6/0x290 [ 923.840061][T16819] ? __pfx_sock_ioctl+0x10/0x10 [ 923.840077][T16819] __x64_sys_ioctl+0x18e/0x210 [ 923.840092][T16819] do_syscall_64+0x123/0x790 [ 923.840111][T16819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.840123][T16819] RIP: 0033:0x7ff513f9e559 [ 923.840134][T16819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.840146][T16819] RSP: 002b:00007ff514f23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 923.840158][T16819] RAX: ffffffffffffffda RBX: 00007ff514225fa0 RCX: 00007ff513f9e559 [ 923.840166][T16819] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000007 [ 923.840173][T16819] RBP: 00007ff514035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 923.840180][T16819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.840187][T16819] R13: 00007ff514226038 R14: 00007ff514225fa0 R15: 00007fff63244ce8 [ 923.840202][T16819] [ 925.165718][ T30] audit: type=1400 audit(1792308487.618:3231): avc: denied { read append } for pid=16827 comm="syz.5.2565" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 925.165748][ T30] audit: type=1400 audit(1792308487.618:3232): avc: denied { open } for pid=16827 comm="syz.5.2565" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 925.262562][ T176] hsr_slave_0: left promiscuous mode [ 925.270049][ T176] hsr_slave_1: left promiscuous mode [ 925.282467][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.282564][ T176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.310249][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.310347][ T176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.392557][ T176] veth1_macvtap: left promiscuous mode [ 925.392826][ T176] veth0_macvtap: left promiscuous mode [ 925.407877][ T176] veth1_vlan: left promiscuous mode [ 925.408577][ T176] veth0_vlan: left promiscuous mode [ 925.418586][ T30] audit: type=1400 audit(1792308487.858:3233): avc: denied { write } for pid=16800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 926.340891][ T30] audit: type=1400 audit(1792308488.788:3234): avc: denied { mount } for pid=16834 comm="syz.7.2568" name="/" dev="configfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 926.550254][ T30] audit: type=1400 audit(1792308488.998:3235): avc: denied { search } for pid=16834 comm="syz.7.2568" name="/" dev="configfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 928.042909][T16845] loop0: detected capacity change from 0 to 4096 [ 928.043120][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 928.043129][ T30] audit: type=1400 audit(1792308490.488:3242): avc: denied { write } for pid=16844 comm="syz.7.2570" name="loop0" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 929.217507][ T30] audit: type=1400 audit(1792308491.668:3243): avc: denied { unlink } for pid=16850 comm="syz.7.2573" name="#c" dev="tmpfs" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 929.218920][ T30] audit: type=1400 audit(1792308491.668:3244): avc: denied { mount } for pid=16850 comm="syz.7.2573" name="/" dev="overlay" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 929.274876][ T176] team0 (unregistering): Port device team_slave_1 removed [ 929.364903][ T176] team0 (unregistering): Port device team_slave_0 removed [ 929.372353][ T30] audit: type=1400 audit(1792308491.818:3245): avc: denied { unmount } for pid=8504 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 930.056006][ T30] audit: type=1400 audit(1792308492.508:3246): avc: denied { create } for pid=16853 comm="syz.7.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 930.251076][ T30] audit: type=1400 audit(1792308492.698:3247): avc: denied { bind } for pid=16853 comm="syz.7.2574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 930.791683][ T30] audit: type=1400 audit(1792308493.238:3248): avc: denied { create } for pid=16856 comm="syz.7.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 930.819356][ T30] audit: type=1400 audit(1792308493.268:3249): avc: denied { mount } for pid=16856 comm="syz.7.2575" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 930.918852][ T30] audit: type=1400 audit(1792308493.368:3250): avc: denied { search } for pid=16856 comm="syz.7.2575" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 930.918880][ T30] audit: type=1400 audit(1792308493.368:3251): avc: denied { search } for pid=16856 comm="syz.7.2575" name="instances" dev="tracefs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 931.216368][T16858] Could not create tracefs 'set_event_pid' entry [ 931.261269][T16858] Could not create tracefs 'set_event_notrace_pid' entry [ 931.285336][T16858] Could not create tracefs 'events' directory [ 931.309355][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 931.432364][T16828] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 931.432509][T16828] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 932.426232][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.426346][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.677980][T16828] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 932.843477][T16828] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 932.843595][T16828] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 932.992640][T16828] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 933.022214][T16828] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 933.022330][T16828] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 933.057000][T16828] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 933.188859][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2577'. [ 933.306073][T16883] trusted_key: encrypted_key: insufficient parameters specified [ 933.313650][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 933.313660][ T30] audit: type=1400 audit(1792308495.768:3256): avc: denied { create } for pid=16881 comm="syz.5.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 933.362074][ T30] audit: type=1400 audit(1792308495.808:3257): avc: denied { bind } for pid=16881 comm="syz.5.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 933.398765][ T30] audit: type=1400 audit(1792308495.848:3258): avc: denied { write } for pid=16881 comm="syz.5.2579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 933.422977][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 933.654957][ T969] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 933.672226][ T176] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.672245][ T176] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 933.782706][ T30] audit: type=1400 audit(1792308496.228:3259): avc: denied { mounton } for pid=16886 comm="syz.5.2580" path="/55/file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 933.832112][ T969] usb 9-1: Using ep0 maxpacket: 16 [ 933.832716][ T969] usb 9-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 933.838873][ T969] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 933.838888][ T969] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.838899][ T969] usb 9-1: config 0 has no interface number 0 [ 933.838917][ T969] usb 9-1: config 0 interface 1 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 933.838932][ T969] usb 9-1: config 0 interface 1 has no altsetting 0 [ 933.838948][ T969] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.919401][ T969] usb 9-1: config 0 descriptor?? [ 933.947297][ T969] usbhid 9-1:0.1: couldn't find an input interrupt endpoint [ 934.375658][T16663] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.375872][T16663] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.376008][T16663] bridge_slave_0: entered allmulticast mode [ 934.377028][T16663] bridge_slave_0: entered promiscuous mode [ 934.419285][T16663] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.419492][T16663] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.419630][T16663] bridge_slave_1: entered allmulticast mode [ 934.422198][T16663] bridge_slave_1: entered promiscuous mode [ 934.527366][ T30] audit: type=1400 audit(1792308496.978:3260): avc: denied { create } for pid=16893 comm="syz.7.2581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 934.533001][ T30] audit: type=1400 audit(1792308496.978:3261): avc: denied { write } for pid=16864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 934.690967][ T176] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.690986][ T176] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 934.762014][T16898] FAULT_INJECTION: forcing a failure. [ 934.762014][T16898] name failslab, interval 1, probability 0, space 0, times 0 [ 934.762032][T16898] CPU: 0 UID: 0 PID: 16898 Comm: syz.8.2578 Tainted: G L syzkaller #0 PREEMPT(full) [ 934.762047][T16898] Tainted: [L]=SOFTLOCKUP [ 934.762052][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 934.762060][T16898] Call Trace: [ 934.762064][T16898] [ 934.762069][T16898] dump_stack_lvl+0x100/0x190 [ 934.762091][T16898] should_fail_ex.cold+0x5/0xa [ 934.762109][T16898] should_failslab+0xc2/0x120 [ 934.762127][T16898] kmem_cache_alloc_noprof+0x92/0x6a0 [ 934.762143][T16898] ? fib6_add+0xf49/0x1eb0 [ 934.762158][T16898] fib6_add+0xf49/0x1eb0 [ 934.762172][T16898] ? do_raw_spin_lock+0x128/0x260 [ 934.762189][T16898] ? __pfx_fib6_add+0x10/0x10 [ 934.762199][T16898] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 934.762215][T16898] ? __asan_memcpy+0x3c/0x60 [ 934.762231][T16898] ip6_route_add+0xf9/0x1d0 [ 934.762247][T16898] ipv6_route_ioctl+0x42d/0x5c0 [ 934.762262][T16898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.762278][T16898] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 934.762294][T16898] ? find_held_lock+0x2b/0x80 [ 934.762323][T16898] inet6_ioctl+0x26a/0x2b0 [ 934.762340][T16898] ? __pfx_inet6_ioctl+0x10/0x10 [ 934.762366][T16898] sock_do_ioctl+0x118/0x280 [ 934.762381][T16898] ? __pfx_sock_do_ioctl+0x10/0x10 [ 934.762395][T16898] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 934.762413][T16898] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 934.762426][T16898] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 934.762448][T16898] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 934.762468][T16898] sock_ioctl+0x599/0x6b0 [ 934.762485][T16898] ? __pfx_sock_ioctl+0x10/0x10 [ 934.762504][T16898] ? selinux_file_ioctl+0x13b/0x290 [ 934.762519][T16898] ? selinux_file_ioctl+0xb6/0x290 [ 934.762536][T16898] ? __pfx_sock_ioctl+0x10/0x10 [ 934.762556][T16898] __x64_sys_ioctl+0x18e/0x210 [ 934.762573][T16898] do_syscall_64+0x123/0x790 [ 934.762591][T16898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.762603][T16898] RIP: 0033:0x7ff513f9e559 [ 934.762613][T16898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.762624][T16898] RSP: 002b:00007ff514f02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 934.762637][T16898] RAX: ffffffffffffffda RBX: 00007ff514226090 RCX: 00007ff513f9e559 [ 934.762644][T16898] RDX: 0000200000000880 RSI: 000000000000890b RDI: 0000000000000005 [ 934.762651][T16898] RBP: 00007ff514035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 934.762658][T16898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.762665][T16898] R13: 00007ff514226128 R14: 00007ff514226090 R15: 00007fff63244ce8 [ 934.762680][T16898] [ 935.162206][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout [ 935.162235][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 935.643269][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 935.830615][ T30] audit: type=1400 audit(1792308498.278:3262): avc: denied { create } for pid=16904 comm="syz.5.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 935.867600][ T30] audit: type=1400 audit(1792308498.318:3263): avc: denied { write } for pid=16904 comm="syz.5.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 935.924862][T16663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.930880][ T30] audit: type=1400 audit(1792308498.368:3264): avc: denied { write } for pid=16903 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.039260][ T30] audit: type=1400 audit(1792308498.488:3265): avc: denied { create } for pid=16907 comm="syz.7.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 936.199347][T16663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.305840][T16913] netlink: 'syz.7.2584': attribute type 10 has an invalid length. [ 936.305852][T16913] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2584'. [ 936.440018][ T176] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.440038][ T176] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 936.494541][T16699] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.494758][T16699] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.494900][T16699] bridge_slave_0: entered allmulticast mode [ 936.497271][T16699] bridge_slave_0: entered promiscuous mode [ 936.537500][T16699] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.539166][T16699] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.539308][T16699] bridge_slave_1: entered allmulticast mode [ 936.570253][T16699] bridge_slave_1: entered promiscuous mode [ 936.631421][T16663] team0: Port device team_slave_0 added [ 936.808728][ T969] usb 9-1: USB disconnect, device number 64 [ 937.173538][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout [ 937.173561][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 937.375211][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11 [ 937.466410][T16663] team0: Port device team_slave_1 added [ 937.653403][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 938.228654][T16923] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 938.308989][ T176] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 938.309405][ T176] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.309423][ T176] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 938.456928][T16699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.458080][T16663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.458089][T16663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.458102][T16663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.541315][T16663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.541325][T16663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.541338][T16663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.665747][T16699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.897966][T16699] team0: Port device team_slave_0 added [ 938.992081][T16935] comedi comedi1: adq12b: I/O base address or length out of range [ 939.240593][T16663] hsr_slave_0: entered promiscuous mode [ 939.241825][T16663] hsr_slave_1: entered promiscuous mode [ 939.242635][T16663] debugfs: 'hsr0' already exists in 'hsr' [ 939.242646][T16663] Cannot create hsr debugfs directory [ 939.254726][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout [ 939.254745][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 939.300836][T16699] team0: Port device team_slave_1 added [ 939.535737][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 939.535747][ T30] audit: type=1400 audit(1792308501.988:3267): avc: denied { read } for pid=16944 comm="syz.7.2596" name="sg0" dev="devtmpfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 939.538962][ T30] audit: type=1400 audit(1792308501.988:3268): avc: denied { open } for pid=16944 comm="syz.7.2596" path="/dev/sg0" dev="devtmpfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 939.621757][ T30] audit: type=1400 audit(1792308502.068:3269): avc: denied { map } for pid=16944 comm="syz.7.2596" path="/dev/sg0" dev="devtmpfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 939.621785][ T30] audit: type=1400 audit(1792308502.068:3270): avc: denied { execute } for pid=16944 comm="syz.7.2596" path="/dev/sg0" dev="devtmpfs" ino=1164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 939.712936][T16699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.712945][T16699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.712959][T16699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.771321][T16699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.771330][T16699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.771343][T16699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.051663][ T30] audit: type=1400 audit(1792308502.498:3271): avc: denied { read write } for pid=16951 comm="syz.7.2599" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 940.051691][ T30] audit: type=1400 audit(1792308502.498:3272): avc: denied { open } for pid=16951 comm="syz.7.2599" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 940.943950][T16699] hsr_slave_0: entered promiscuous mode [ 940.951205][T16699] hsr_slave_1: entered promiscuous mode [ 940.951984][T16699] debugfs: 'hsr0' already exists in 'hsr' [ 940.951995][T16699] Cannot create hsr debugfs directory [ 941.016946][ T30] audit: type=1400 audit(1792308503.468:3273): avc: denied { read } for pid=16960 comm="syz.5.2600" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 941.016973][ T30] audit: type=1400 audit(1792308503.468:3274): avc: denied { open } for pid=16960 comm="syz.5.2600" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 941.127977][ T30] audit: type=1400 audit(1792308503.578:3275): avc: denied { write } for pid=16931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.159090][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2601'. [ 941.524146][ T176] bridge_slave_1: left allmulticast mode [ 941.524331][ T176] bridge_slave_1: left promiscuous mode [ 941.524761][ T176] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.530369][ T176] bridge_slave_0: left allmulticast mode [ 941.530550][ T176] bridge_slave_0: left promiscuous mode [ 941.530976][ T176] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.616158][ T176] batman_adv: batadv0: Interface deactivated: gretap1 [ 941.717727][ T30] audit: type=1400 audit(1792308504.168:3276): avc: denied { write } for pid=16976 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 942.013101][T16984] netlink: 'syz.5.2605': attribute type 10 has an invalid length. [ 942.125341][T16987] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2605'. [ 942.484885][ T5733] dvb-usb: did not find the firmware file 'dvb-usb-opera-01.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 942.484919][ T5733] opera1 10-1:1.67: probe with driver opera1 failed with error -22 [ 943.320184][ T5733] usb 10-1: USB disconnect, device number 32 [ 944.716992][ T176] batman_adv: batadv0: Removing interface: gretap1 [ 944.919584][ T176] geneve1 (unregistering): left promiscuous mode [ 945.136259][ T176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.178633][ T176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.228534][ T176] bond0 (unregistering): (slave bond1): Releasing backup interface [ 945.229433][ T176] bond0 (unregistering): Released all slaves [ 945.282104][ T176] bond1 (unregistering): Released all slaves [ 945.337989][ T176] bond2 (unregistering): Released all slaves [ 945.387793][ T176] bond3 (unregistering): Released all slaves [ 946.256240][T16984] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 946.258032][T16984] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 946.453832][T16987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.515303][T16987] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 946.563691][T16987] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 946.596496][T16987] bond0 (unregistering): Released all slaves [ 946.685810][ T5268] 8021q: adding VLAN 0 to HW filter on device eth12 [ 946.718724][ T176] tipc: Disabling bearer [ 946.718997][ T176] tipc: Left network mode [ 946.921499][T17006] FAULT_INJECTION: forcing a failure. [ 946.921499][T17006] name failslab, interval 1, probability 0, space 0, times 0 [ 946.921519][T17006] CPU: 0 UID: 0 PID: 17006 Comm: syz.5.2612 Tainted: G L syzkaller #0 PREEMPT(full) [ 946.921534][T17006] Tainted: [L]=SOFTLOCKUP [ 946.921539][T17006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 946.921546][T17006] Call Trace: [ 946.921550][T17006] [ 946.921555][T17006] dump_stack_lvl+0x100/0x190 [ 946.921576][T17006] should_fail_ex.cold+0x5/0xa [ 946.921594][T17006] should_failslab+0xc2/0x120 [ 946.921612][T17006] kmem_cache_alloc_noprof+0x92/0x6a0 [ 946.921628][T17006] ? __pfx_map_id_range_down+0x10/0x10 [ 946.921642][T17006] ? security_inode_alloc+0x3b/0x2c0 [ 946.921661][T17006] security_inode_alloc+0x3b/0x2c0 [ 946.921678][T17006] inode_init_always_gfp+0xc6f/0xfb0 [ 946.921698][T17006] alloc_inode+0x8e/0x250 [ 946.921711][T17006] new_inode+0x22/0x1c0 [ 946.921726][T17006] proc_pid_make_inode+0x22/0x160 [ 946.921738][T17006] proc_pid_make_base_inode.constprop.0+0x25/0x180 [ 946.921754][T17006] proc_task_instantiate+0x51/0x1e0 [ 946.921768][T17006] proc_task_lookup+0x4c2/0x5c0 [ 946.921782][T17006] __lookup_slow+0x155/0x320 [ 946.921797][T17006] lookup_slow+0x50/0x70 [ 946.921809][T17006] link_path_walk+0x1712/0x1cc0 [ 946.921836][T17006] path_openat+0x1ac/0x2450 [ 946.921856][T17006] ? __pfx_path_openat+0x10/0x10 [ 946.921881][T17006] do_file_open+0x20e/0x430 [ 946.921900][T17006] ? __pfx_do_file_open+0x10/0x10 [ 946.921924][T17006] ? __pfx_kfree_link+0x10/0x10 [ 946.921944][T17006] ? _raw_spin_unlock+0x28/0x50 [ 946.921959][T17006] ? alloc_fd+0x471/0x7a0 [ 946.921980][T17006] do_sys_openat2+0x10f/0x1e0 [ 946.921992][T17006] ? __pfx_do_sys_openat2+0x10/0x10 [ 946.922008][T17006] __x64_sys_openat+0x12d/0x210 [ 946.922020][T17006] ? __pfx___x64_sys_openat+0x10/0x10 [ 946.922037][T17006] do_syscall_64+0x123/0x790 [ 946.922056][T17006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.922068][T17006] RIP: 0033:0x7f2a78d5ed8e [ 946.922079][T17006] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 946.922091][T17006] RSP: 002b:00007f2a79ce9ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 946.922103][T17006] RAX: ffffffffffffffda RBX: 00007f2a79cea6c0 RCX: 00007f2a78d5ed8e [ 946.922111][T17006] RDX: 0000000000000002 RSI: 00007f2a79ce9f90 RDI: ffffffffffffff9c [ 946.922118][T17006] RBP: 00007f2a78e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 946.922125][T17006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.922132][T17006] R13: 00007f2a79026038 R14: 00007f2a79025fa0 R15: 00007ffc1f383168 [ 946.922147][T17006] [ 947.559748][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 947.559759][ T30] audit: type=1400 audit(1792308510.008:3285): avc: denied { mount } for pid=17009 comm="syz.8.2615" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 947.595340][ T32] INFO: task syz.0.2251:15510 blocked for more than 143 seconds. [ 947.595353][ T32] Tainted: G L syzkaller #0 [ 947.595360][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 947.595365][ T32] task:syz.0.2251 state:D stack:25784 pid:15510 tgid:15509 ppid:12136 task_flags:0x400140 flags:0x00080002 [ 947.595394][ T32] Call Trace: [ 947.595398][ T32] [ 947.595406][ T32] __schedule+0x1259/0x6920 [ 947.595423][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 947.595440][ T32] ? do_raw_spin_lock+0x128/0x260 [ 947.595460][ T32] ? __pfx___schedule+0x10/0x10 [ 947.595474][ T32] ? find_held_lock+0x2b/0x80 [ 947.595491][ T32] ? schedule+0x225/0x2c0 [ 947.595508][ T32] schedule+0xdd/0x2c0 [ 947.595523][ T32] schedule_preempt_disabled+0x13/0x30 [ 947.595538][ T32] __mutex_lock+0xccb/0x1bd0 [ 947.595554][ T32] ? usbdev_ioctl+0x1a7/0x3a90 [ 947.595575][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 947.595592][ T32] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 947.595608][ T32] ? kasan_quarantine_put+0x104/0x240 [ 947.595625][ T32] ? find_held_lock+0x2b/0x80 [ 947.595647][ T32] ? tomoyo_path_number_perm+0x28f/0x580 [ 947.595667][ T32] ? usbdev_ioctl+0x1a7/0x3a90 [ 947.595683][ T32] usbdev_ioctl+0x1a7/0x3a90 [ 947.595702][ T32] ? __pfx_usbdev_ioctl+0x10/0x10 [ 947.595722][ T32] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 947.595738][ T32] ? do_vfs_ioctl+0x226/0x13e0 [ 947.595753][ T32] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 947.595765][ T32] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 947.595784][ T32] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 947.595803][ T32] ? __fget_files+0x34/0x3d0 [ 947.595826][ T32] ? selinux_file_ioctl+0x13b/0x290 [ 947.595842][ T32] ? selinux_file_ioctl+0xb6/0x290 [ 947.595859][ T32] ? __pfx_usbdev_ioctl+0x10/0x10 [ 947.595877][ T32] __x64_sys_ioctl+0x18e/0x210 [ 947.595892][ T32] do_syscall_64+0x123/0x790 [ 947.595910][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.595922][ T32] RIP: 0033:0x7f7d4199e559 [ 947.595932][ T32] RSP: 002b:00007f7d427c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 947.595943][ T32] RAX: ffffffffffffffda RBX: 00007f7d41c25fa0 RCX: 00007f7d4199e559 [ 947.595951][ T32] RDX: 0000000000000000 RSI: 000000004008550c RDI: 0000000000000006 [ 947.595958][ T32] RBP: 00007f7d41a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 947.595965][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.595972][ T32] R13: 00007f7d41c26038 R14: 00007f7d41c25fa0 R15: 00007ffecfda75b8 [ 947.595988][ T32] [ 947.596000][ T32] [ 947.596000][ T32] Showing all locks held in the system: [ 947.596006][ T32] locks held by pr/ttyS0/31: 1, last CPU#0: [ 947.596015][ T32] #0: ffffffff8fdd88f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 947.596046][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 947.596054][ T32] #0: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 947.596441][ T32] locks held by kworker/u8:7/176: 6, last CPU#0: [ 947.596450][ T32] #0: ffff88801e2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 947.596476][ T32] #1: ffffc90002f7fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 947.596500][ T32] #2: ffffffff91cbd2c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 947.596527][ T32] #3: ffffffff91cd5e00 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x4d/0x360 [ 947.596556][ T32] #4: ffff888057560800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_stop+0xc5/0x2f0 [ 947.596582][ T32] #5: ffff8880835022f0 (&sb->s_type->i_mutex_key#3/1){+.+.}-{4:4}, at: start_dirop+0x4b/0xb0 [ 947.596632][ T32] locks held by dhcpcd/5268: 1, on CPU#0: [ 947.596645][ T32] #0: ffffffff91cd5e00 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x4a6/0x1bb0 [ 947.596672][ T32] locks held by getty/5359: 2, on CPU#0: [ 947.596680][ T32] #0: ffff88802c68b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 947.596709][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 947.596738][ T32] locks held by syz-executor/8504: 4, last CPU#0: [ 947.596746][ T32] #0: ffffffff8ff3ded0 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x5079/0x8430 [ 947.596773][ T32] #1: ffff88802abb7180 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 947.596804][ T32] #2: ffff88802ea61bc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 947.596835][ T32] #3: ffffffff8fdec5e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 947.596869][ T32] locks held by udevd/13617: 4, on CPU#0: [ 947.596877][ T32] #0: ffff8880a0da1758 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 947.596905][ T32] #1: ffff888054ea2080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 947.596935][ T32] #2: ffff8880738245a8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 947.596965][ T32] #3: ffff8880273301d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 947.596996][ T32] locks held by kworker/0:4/14018: 5, on CPU#0: [ 947.597003][ T32] #0: ffff888022eb2140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 947.597028][ T32] #1: ffffc9000623fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 947.597052][ T32] #2: ffff88802bb8c1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 947.597077][ T32] #3: ffff8880273301d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 947.597129][ T32] #4: ffff8880305a51a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 947.597155][ T32] locks held by syz.0.2251/15510: 1, on CPU#0: [ 947.597163][ T32] #0: ffff88802bb8c1d8 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x1a7/0x3a90 [ 947.597193][ T32] locks held by syz-executor/16663: 7, on CPU#0: [ 947.597201][ T32] #0: ffff88802e990460 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 947.597230][ T32] #1: ffff888079986080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 947.597257][ T32] #2: ffff88802b2052d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 947.597288][ T32] #3: ffffffff9123c1c0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 947.597317][ T32] #4: ffff88801d10f128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 947.597342][ T32] #5: ffff88801d109258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 947.597371][ T32] #6: ffffffff91cd5e00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x146/0x360 [ 947.597401][ T32] locks held by syz-executor/16699: 2, on CPU#0: [ 947.597409][ T32] #0: ffffffff9245b188 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 947.597437][ T32] #1: ffffffff91cd5e00 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 947.597465][ T32] [ 947.597468][ T32] ============================================= [ 947.597468][ T32] [ 947.597473][ T32] NMI backtrace for cpu 0 [ 947.597482][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 947.597497][ T32] Tainted: [L]=SOFTLOCKUP [ 947.597501][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 947.597507][ T32] Call Trace: [ 947.597511][ T32] [ 947.597516][ T32] dump_stack_lvl+0x100/0x190 [ 947.597533][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 947.597551][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 947.597565][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 947.597581][ T32] sys_info+0x141/0x190 [ 947.597592][ T32] watchdog+0xcb1/0x1030 [ 947.597608][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 947.597623][ T32] ? __pfx_watchdog+0x10/0x10 [ 947.597641][ T32] ? __kthread_parkme+0x18f/0x230 [ 947.597657][ T32] ? kthread+0x13a/0x450 [ 947.597671][ T32] ? __pfx_watchdog+0x10/0x10 [ 947.597684][ T32] kthread+0x373/0x450 [ 947.597699][ T32] ? __pfx_kthread+0x10/0x10 [ 947.597715][ T32] ret_from_fork+0x730/0xd60 [ 947.597729][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 947.597743][ T32] ? __switch_to+0x800/0x10f0 [ 947.597758][ T32] ? __pfx_kthread+0x10/0x10 [ 947.597775][ T32] ret_from_fork_asm+0x1a/0x30 [ 947.597793][ T32] [ 947.597800][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 948.387000][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 948.397642][ T32] Tainted: [L]=SOFTLOCKUP [ 948.401934][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 948.411957][ T32] Call Trace: [ 948.415207][ T32] [ 948.418108][ T32] dump_stack_lvl+0x100/0x190 [ 948.422761][ T32] vpanic+0x553/0x970 [ 948.426711][ T32] ? __pfx_vpanic+0x10/0x10 [ 948.431196][ T32] panic+0xd1/0xe0 [ 948.434897][ T32] ? __pfx_panic+0x10/0x10 [ 948.439284][ T32] ? nmi_cpu_backtrace+0x79/0x200 [ 948.444281][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 948.450402][ T32] ? watchdog.cold+0x1ec/0x234 [ 948.455137][ T32] watchdog.cold+0x1fd/0x234 [ 948.459699][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 948.465478][ T32] ? __pfx_watchdog+0x10/0x10 [ 948.470128][ T32] ? __kthread_parkme+0x18f/0x230 [ 948.475125][ T32] ? kthread+0x13a/0x450 [ 948.479340][ T32] ? __pfx_watchdog+0x10/0x10 [ 948.483987][ T32] kthread+0x373/0x450 [ 948.488031][ T32] ? __pfx_kthread+0x10/0x10 [ 948.492595][ T32] ret_from_fork+0x730/0xd60 [ 948.497157][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 948.502248][ T32] ? __switch_to+0x800/0x10f0 [ 948.506900][ T32] ? __pfx_kthread+0x10/0x10 [ 948.511464][ T32] ret_from_fork_asm+0x1a/0x30 [ 948.516214][ T32] [ 948.519240][ T32] Kernel Offset: disabled [ 948.523534][ T32] Rebooting in 86400 seconds..