last executing test programs: 5m30.82076187s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x130) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xffffffffffffffff, 0x736c7b8c8dc8203d) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) r6 = syz_ublk_setup_io_uring(0x456e, &(0x7f0000000040)={0x0, 0xfffffffc, 0x8000, 0x3, 0x116}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) socket$inet_sctp(0x2, 0x0, 0x84) syz_ublk_setup_queues(r13, r11, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x400, 0x3, 0x259, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e35, 0x1000, 0x20, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x436d, 0x4, 0x1, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x3, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r10, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m29.646822393s ago: executing program 3 (id=9): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001000000170400000c000a00b7040000ff0100006a0af2fe00000000850000001a000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c13"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000086dd00010900040000"], 0x7a) 5m28.376453354s ago: executing program 3 (id=19): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x65241b42}}, './file0\x00'}) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000000c0)={0x400003c, &(0x7f0000000040)=[{0x28, '\x00', @data=0x1, 0x6}]}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x4001) setpgid(0x0, 0x0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(r0, &(0x7f0000000000)='./sys\x00', 0x1bf) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000001000)="fc4e2ba9", 0x4, 0x1000) pwrite64(r3, &(0x7f0000001004)="01000000", 0x4, 0x1004) pwrite64(r3, &(0x7f0000001008)="01000000", 0x4, 0x1008) pwrite64(r3, &(0x7f000000100c)='\b\x00\x00\x00', 0x4, 0x1060) pwrite64(r3, &(0x7f0000001010)="10000000", 0x4, 0x1080) pwrite64(r3, &(0x7f0000001018)='\n\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1088) pwrite64(r3, &(0x7f0000001020)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x9) pwrite64(r3, &(0x7f0000001028)="284f2ba9", 0x4, 0x10d8) pwrite64(r3, &(0x7f000000102c)='bitm', 0x4, 0x2000) pwrite64(r3, &(0x7f0000001030)="04000000", 0x4, 0x2004) pwrite64(r3, &(0x7f0000001034)="00020000", 0x4, 0x2034) pwrite64(r3, &(0x7f0000001038)="01000000", 0x4, 0x2038) pwrite64(r3, &(0x7f000000103c)='\x00\x00\x00\x00', 0x4, 0x203c) fsync(r3) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) 5m23.928440741s ago: executing program 3 (id=32): io_uring_setup(0x5c87, &(0x7f00000005c0)={0x0, 0x39d0, 0x8, 0x0, 0x17d}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x10010, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x3, &(0x7f0000000040)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x41, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) tee(r5, r4, 0x2000200000000, 0x3) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x19, 0x0, @void}, 0x30) setns(0xc9, 0x0) r11 = socket(0x2a, 0x2, 0x9) connect(r11, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80) write$nbd(r11, 0x0, 0x14) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r11) sendmsg$TIPC_NL_LINK_RESET_STATS(r11, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, r12, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x44000) syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x40183) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000010000104020440000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000a4b5f31a24001280110001006272696467655f736c617665000000000c00058005001c0001000000140003000000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 5m8.226198089s ago: executing program 32 (id=32): io_uring_setup(0x5c87, &(0x7f00000005c0)={0x0, 0x39d0, 0x8, 0x0, 0x17d}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x10010, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x3, &(0x7f0000000040)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x41, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) tee(r5, r4, 0x2000200000000, 0x3) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x19, 0x0, @void}, 0x30) setns(0xc9, 0x0) r11 = socket(0x2a, 0x2, 0x9) connect(r11, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80) write$nbd(r11, 0x0, 0x14) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r11) sendmsg$TIPC_NL_LINK_RESET_STATS(r11, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, r12, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x44000) syz_open_dev$loop(&(0x7f0000000040), 0x3, 0x40183) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000010000104020440000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000a4b5f31a24001280110001006272696467655f736c617665000000000c00058005001c0001000000140003000000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 4m44.552474606s ago: executing program 0 (id=158): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)='\x00\xdb\xf9}\x94\xd7\xe5\x1f\xab{\xd0E\xbc\x1f\xb5<\xe4f=\b\x00\x00\x00\x00\x00\x00\x00\xe2\xde\x8c\x10boj\xd3X\x86\v\x8clx=\xbc0F\x94k\x8d\xe0\xeeP\xa8\xa9\x10\xd4\x0f\x1eL!\x82\x8d\x80\xd0#\xca\xaf#\xf6\x95\xf4\xf2\xce\x8f\x8c\xa4\t\xac\x96\x13\x96\xf76\xc1', 0x53) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0xf5, 0x6, "0080ca6f"}, 0x6, 0x2, {0x0}}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x4, 0x8}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0x80ea45, 0x800000e, 0x1, 0x63, 0xffffffff, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001080, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x40000005, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x5ff, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x7, 0x0, 0xd8, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x9, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x2, 0xae3, 0x6, 0x7, 0xfffffffd, 0x9, 0xffff3f16, 0xa, 0x0, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffe7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x8, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x3, 0xc, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x7ffe, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x5, 0x0, 0xc, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x8000, 0x10, 0x1002, 0xc, 0x104, 0x8, 0x20000000, 0x8, 0x9, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x40, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) 4m43.993396272s ago: executing program 0 (id=160): socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x14, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40c1}, 0x2400c800) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$sock(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x2}, 0x2}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)="bbd311e0202d9b8b89c39705456f433a496b03943a9c052d449154ed95ca965cd8cd70e480d76d5f27896ebe05fd26bd0843f955f9", 0x35}, {&(0x7f0000000140)="96a482ef5124db79ef93f7208930b03f333684e643dad7cb47b3fe3751aff5e35b340b14b72e053bda6b583217df252f0b3ec756b7022e3e90e997b1af4bf47a464338046e4583be074ec11dd758d104b8460d7d2af7a5a2d29f5ffd8ff810deb05a8f34c9cadb3ac6f12ad53205af73abc496ef13315a8eec2211eedfb2821acf23f28cd5cea81ea88685bc30e5eda6881e218bfa6bca3e5619b62005a9367d", 0xa0}, {&(0x7f0000000200)="af26ea9298718cd7328a9979e8d1fd0c21d8a61e4659b879d63cad62114f44366412a482ae7725e04617b7bea877060fc363d27a5ffb87e30327006578fa47baa945cbfb064828cd5da35026ee504f2c64245859eeb29aebaf9642e2524d436597d620af13a57b1eaa490e5bc0216d7c35d6c73a9d04457c3d85765735edce660a000800bbcf489d36165ee823e1396c6fe3779288a976c7dd7b86bd23f84848a94384137bb9fe252ad9274731310db5a18559a6c3041e176b6cc8ff2ea7de2ebf5301e262931f8435e5fbf1ee185be7b133f66da8b86064fd9bd4a44b6b04d310ea8e8a684206c2", 0xe8}, {&(0x7f0000000400)="7a3a110a6b6cceb50fb4548982fa646cd334b390711e43ef000ebf8011ab648d424006c8dce1f3f72b0a5269dcf5c3c8c566c05a0e3e243c61bdacbfdcaae171bd7f8a53abeb049286d4b4accf153462619a12fd58254794f2407185d624e118c123fe576b5f3a81a2553316c503d036d13a78df5beb0fd5440156c9838e32c71b1a99b92654ac33177188062e3d30e0edd1a65d80af0684fdf5701625", 0x9d}], 0x4, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x48}, 0x8090) 4m43.492934609s ago: executing program 0 (id=161): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xb49, 0x0, 0xe3c}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00'}) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000240)=0x40, &(0x7f0000000280)=0x2) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xfff3}, {0xfff1, 0x8}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}]}, 0x38}}, 0x0) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x600}, {0xffffffffffffffff, 0x8040}], 0x3, 0xff) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x24, r3, 0x309, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20008080}}], 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 4m43.068288772s ago: executing program 0 (id=163): add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x12c0, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0x5}, {0x6, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1290, 0x2, [@TCA_FLOW_ACT={0x47c, 0x9, 0x0, 0x1, [@m_gact={0xa4, 0xf, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x10d2, 0x4}}]}, {0x69, 0x6, "00b9093108fd04ecacc36abf8ac7edcfebc96cf08ff46c2289aa718367d907abe42d7859e5d22bdd157428bfbde843557e2f82941e03fcf893d06b8e96dbb25568f95de33a0906bfffe15a7cec528762e18b0b64223009595b7fb02c0c3f27b293f744f3ee"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0xd8, 0xe, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_PARMS={0x18, 0x1, {0xf6c, 0x4, 0x1, 0x4, 0xed30}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x61, 0x6, "af27f84f902148d1e41d6e432b7dbd7b1c14bdfb7acc537988453cd731a83b2b954a026b321de4a9921b5d7b674cd2a202b1eb18a42198611a7057dd3e84c6ccefe0b3a1067df85aa73dd71944410354cdd1c1f24c63cdeef19024d1b3"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x180, 0xf, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7fff, 0x3, 0x2, 0xffffff7f}, 0xb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x1, 0x8, 0x7}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x47abf932, 0x38, 0x0, 0x9, 0x2}, 0x8000}}]}, {0xfc, 0x6, "e5984739a8d0bafa8465d8f73b4a6b5cfac03139e39906dce6b7d6bb5c1c3dacbb48780467e5a627a313c9a820e08f403ccf2e01d519f02152ddb3c098e9d3dd53a5b00f9baba2f5c71138b50849544eafa5d52d35c26bbb56638bcf087776506b7eb263d945d51d30edc6be8d5c89df1b4f965ae220193dd58372b80049346a9241e8051237554d769cc8f77813ac4f47bfa5f101f845f4abe00a21ed553bcbd126f31037619c025974640632606e06a49adcda20ee2b866a7693e5a93506d50233e7ae00ac0a8bdd57ef24b420f7eb4604714232bfd54a907bbb71a0b1654c1a081dbf1e5d635dbf48f1ea560379f384e72c7bf72bf382"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x134, 0x7, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x953e, 0x10, 0x2, 0x8, 0x763}, @private=0xa010100, @remote, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x5, 0x4, 0xffffffff}, @private=0xa010102, @loopback, 0xff}}]}, {0xbb, 0x6, "cee8a9da1549df36c9ba78d0ead48e5bb9c42bce30e850a5de05ae4135c724add1d3928b6dfff1a1244eb1f376400c1c639190eb3a31224691dead0f45e9c0123860b5714b852972228446da7bd2ba2d2346cd5b44521af7d8e06bfe6505d546324454a3f876743c0f95d0fcbfb8f307acd02ffc7f1b287d88d90b6934f021d8d323db91cd1341b0c33c259b1eb6b973227f45133353592eade1e8b3988cda88bb500b8bf5bcdfe861a5787a325addcba525c9e72e45b1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x48, 0x1a, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xf71}]}, {0xa, 0x6, "8266b458cfa7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x36400000}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0xc}}, @TCA_FLOW_MASK={0x8, 0x6, 0xfffeffff}, @TCA_FLOW_ACT={0x5dc, 0x9, 0x0, 0x1, [@m_pedit={0xe8, 0x7, 0x0, 0x0, {{0xa}, {0x4}, {0xba, 0x6, "a5f5bfc909dfb8defc2c25b45bdfc8301e54e80d1fd8941ec38de98b413ff8963ccf1c058e2a9c053290b6b7edf5d2d2099c05cd0da27c878320b06183df3b6bbfe967bd9095e6e65c38ba0d13ca245d3b74255e5f5c31d2766548db47cce84cf08a5eb14400de607dce90485743b231a11f62f4299ab3dd8f09f1f7b2bbd4c4a7af4c1344ee59c16c1858d14e89fb2b5f3780d204dc363a5baca5a9c0bbc83d92fce843075d7b6a2ceee88a2f413ff90f316be47903"}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}, @m_ctinfo={0x178, 0xe, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4d0, 0x39c3, 0x3, 0x4, 0x81}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x6, 0x7, 0x6, 0x16b6}}]}, {0xfb, 0x6, "5cbff753dcfa24b3f0138ec091660284b643e61f33584d5d4df8823bedffe6b7160b176c680602a9fe80308a1411b3d7fc3e2a3ff74bbd7ca81d443526a8996ff2539c2a35071e857af2390dd587061d97ad978b27484f75b63daf07221d4727e31fb2d608186cc1ad0711618e66b188a9e01999b0afc9133630c58b4465fdd908fb76eed70163f6217bcb98f6a63d0a03827ad4387125b2a80cbec434e72eff0e76dee7a675e3bff778d8b6dbe2f3a3ed08c11eddacdc8735f4ffc2b9c0e184512099ee6c5d0d8a5a3b671a6ac71b47e4ff6e08c16c5f6c28c0c6d430c964978e2fe63aad7768aff0c118737bbc246f0b1d0f9eeee044"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x130, 0x4, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xa}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1e}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x9, 0x4, 0x7, 0x8}, 0x2}}]}, {0xd3, 0x6, "98838f022aec9a22f8a3cb73f208efc10b3542d10124cbca52cf2b075fcb7868d46fefd1bab74bb27eb1af09656a255962be96db520c76ff98a9a585ace8f4ff8f93d4a8ce32a6253872cc02fed6ecdd486baef89a0a1b84c8959aa3709556b57630919b6062edeffb238d762f86e5cc9b33eea93e53295575c11d06b45a35907914e9c5eb8f6a0e9f04e3b3e2182a36713ec826a2f001fdd1168bd76957027b70916c4a5dc1bfbee566395abfc001330105d794be39aeac05e0cc1a12bd69311456d8411af7fd9e8cdb53df64826b"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xe4, 0x19, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="5287e0c0509a"}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}]}, {0x8b, 0x6, "ce77494c95f120024362426de5ed52d0032ba1437340ac607f564373dd33be4f0d60e334b40a1247b777f35ba53abf92fa20d3145f64bad3907bbc47b5fab1e0001478303a3d0007f48dc40c887b72f84cd7f2fc2a91069ff8f37d9d61aea1ab9874a7f1b3de25812963ec9f05ad2a3ef488f2eca0a0ce830efba7c602908ef4b16c663e8bdf62"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0xe0, 0x8, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x59, 0x6, {0xb, 'nat\x00', 0x5, 0x1, "30fc01d5030b4e32379c98fe8fa70e935b92274fe8d490c29e24dc8c1869a7191ef08727c01afdc26d29763e6cab39"}}]}, {0x59, 0x6, "0d63a2e0711bb6f8531cff49182c090d519ae84b14d875457ce243564636296367726b22ab01bb2fc6967ac4e1767d168ea396d6baa1e0f5c833635d6d12db032170ef15627ce1137f4c800c087443a9a3116ff6c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x3c, 0x1e, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x48, 0x1a, 0x0, 0x0, {{0x7}, {0x4}, {0x1e, 0x6, "b962c5c40f9649327a35392854de533d5187b0c009db8945e544"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FLOW_POLICE={0x814, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x5e, 0x0, 0x2, 0x3, 0x1, 0x0, 0x8, 0x1, 0x8, 0xf, 0x3, 0x2, 0x663d2c25, 0x10000, 0x1f, 0x1, 0x800, 0x8, 0xfffff13e, 0x796, 0xffffffff, 0x7, 0xbb, 0x0, 0x9, 0x1, 0x0, 0x1, 0x35, 0x6, 0xffffffff, 0xffffff07, 0xcd3, 0x0, 0xfffffffe, 0x2, 0x40, 0x8, 0x8b7, 0x9a, 0x1, 0x1000, 0x5, 0x4, 0x6, 0xe8, 0x1, 0x10000, 0x1, 0x0, 0x4, 0x10, 0xac9f, 0xfffffffe, 0x80000001, 0x9, 0x5, 0x80, 0x1, 0x3ff, 0x8, 0x92c, 0x8000, 0xfffffffe, 0xff, 0x7f, 0xf4d, 0xffff, 0x0, 0x1ff, 0x9, 0x9, 0x4f9, 0x7, 0x5, 0x2, 0xf29, 0x9, 0x1, 0x809, 0x80, 0x8, 0x5c3d, 0x5, 0xa, 0xc8, 0x2, 0x80000000, 0x6, 0x8827, 0x11f9542, 0x3, 0xffff5dd1, 0x7, 0x8, 0x0, 0x1, 0x7c69, 0x9, 0x10001, 0x1000, 0x2, 0x8, 0x3, 0x7fffffff, 0x3, 0x1c000000, 0x625, 0x1, 0x6, 0x2, 0x5, 0x2, 0x80, 0x5, 0x7, 0x2, 0xf1ab, 0x8, 0x6, 0x7, 0x8, 0x11, 0x5, 0x3, 0x2, 0x2, 0xc, 0x24000, 0xf19c, 0x9, 0x9, 0x7fffffff, 0x3, 0x11db, 0x6e, 0x6, 0x2, 0x9, 0xffff0000, 0xbc, 0x4, 0x3, 0x4, 0x6, 0x8, 0x4, 0x8001, 0x9, 0x8, 0x5, 0x1, 0x5, 0x9, 0x5, 0x719e000, 0x6, 0x1, 0x9, 0x0, 0x7, 0x9, 0x2, 0x10001, 0x5, 0x89c, 0x0, 0x8, 0x7f, 0x7, 0x7ff, 0x0, 0xc374, 0x2, 0x0, 0x53c3, 0x4, 0x1, 0x1ff, 0x200, 0x10, 0x6, 0x0, 0x6, 0x3, 0x7, 0x9, 0x0, 0x5, 0x3, 0x0, 0x1, 0x6632, 0x1, 0x80000000, 0x7ff, 0x400, 0x9, 0x1ff, 0x1, 0x318a, 0x6, 0x5, 0x0, 0x800, 0x9, 0x9, 0x3, 0x0, 0xffffffff, 0x2, 0xf7b2, 0x4, 0x0, 0x400, 0xf, 0x41b, 0x6, 0xfe9a, 0x5, 0xd40, 0x7, 0x8222, 0x6, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x6, 0x8, 0x7fffffff, 0x5, 0x7, 0x800, 0x0, 0x3c28, 0x5, 0xffff, 0x8, 0x4, 0x3, 0x83, 0x4, 0x10, 0x1, 0x6, 0x100, 0x5, 0x101, 0xe19, 0x6, 0x8, 0x3]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x9, 0x3, 0x5, 0x8, 0x8, 0x4, 0x7, 0x0, 0x2, 0x400, 0x4, 0x1, 0x1, 0x9, 0xc, 0xb, 0x2f00000, 0x9a, 0x1d9, 0x10, 0x10000, 0x3, 0xfffffff9, 0x8001, 0x7, 0x3c, 0x8, 0x6, 0x8, 0x80000001, 0x400, 0x8, 0x80000001, 0xfffffe01, 0x4, 0x4, 0x9, 0x2400, 0x6, 0x2000000, 0x4, 0x2d, 0xd5b, 0x8, 0xee, 0x9, 0x2, 0x0, 0x7f, 0x1000, 0x7, 0xfff, 0x589, 0x0, 0x14, 0x2, 0xffffffff, 0x401, 0xa, 0x8001, 0x0, 0x8, 0x1, 0x800, 0x0, 0xee2, 0x80, 0x7, 0x3907, 0x0, 0x5, 0xb617, 0x6, 0x6, 0x3, 0x7, 0x91ab, 0x400000, 0x4, 0x0, 0x7, 0x8, 0x1, 0x9, 0x10000, 0x2, 0x4, 0xffff, 0x10000, 0x3, 0x1, 0x2, 0xffff, 0x8, 0x6, 0xd1f0, 0x9fd, 0x1, 0x0, 0x2, 0xaf85, 0x8000, 0xffffffff, 0x3, 0x7fffffff, 0x8, 0x4, 0x6, 0x8000, 0x1, 0x3, 0xf2e, 0x9, 0xfffffff6, 0x9, 0x0, 0x67d, 0x2, 0x7fff, 0x4, 0x9, 0x3, 0x9, 0x0, 0x0, 0x8b66, 0x8, 0x1000, 0x7, 0x471, 0x9, 0x4, 0x2, 0x3, 0x80000001, 0x400, 0x7ff, 0x7ff, 0x51d, 0x2, 0x6662, 0x10000, 0x6, 0xec24, 0x890, 0x2, 0x7f, 0x37, 0x7fff, 0xfffff849, 0x10001, 0x9, 0x4, 0xffffffff, 0x8, 0x8ae1, 0x45, 0x7, 0x9, 0xff, 0x9, 0xffffff2c, 0x10001, 0xddc7ed2, 0x8, 0x7, 0x4cf, 0x2, 0x7, 0x7, 0xb3, 0x8, 0x6, 0x5, 0x7, 0x6, 0x1, 0x9b79, 0xffff0000, 0xf1ec, 0x0, 0xd, 0x8000, 0x4a9, 0xfffffff5, 0x3, 0x8, 0x3, 0x8, 0x3, 0x8, 0x2, 0x8, 0xd, 0x3, 0x3826, 0x3, 0x5, 0xdff, 0x1, 0x3, 0x1, 0xfffffff3, 0x0, 0xfffffffc, 0x0, 0x0, 0x61, 0x80000000, 0x7, 0xa60a, 0x886f, 0x0, 0x8, 0x8, 0xff, 0x882d, 0xa42, 0x1, 0x2, 0x6, 0x4, 0x8000, 0x3fe000, 0x3, 0xed35, 0x6, 0x8, 0x7820, 0x1, 0x7, 0xe48, 0x0, 0x7, 0x10000, 0x3, 0x2, 0x0, 0x1, 0x9, 0x2, 0x90000, 0x968e, 0x9, 0x8000, 0x930, 0x1, 0x8, 0x10, 0x3, 0x7, 0x9, 0x8, 0x8, 0x320]}]}]}}]}, 0x12c0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4m43.020540499s ago: executing program 0 (id=164): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbf}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049"], 0x104}}, 0x0) 4m42.931530629s ago: executing program 0 (id=165): inotify_rm_watch(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c0029aa4a1aae238f7024434d787bca000c1b59eaa2c8a56a5573c9f77784708fb2fe70a257a40e20c887d5ab2d6b3571b37bee9df6ba3c79a1c6dddb99c5dcfdf512b5bfe2a8eaaf955bfe567579ca81c8aa8211aff098614de2d029710f396090a7a1432a50e5e6b8a5f6167568650cb80bbd24c924314874e530e979120c5c4861e38442"]) write$P9_RVERSION(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES64], 0x15) sigaltstack(&(0x7f0000000200)={0x0, 0x80000001}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r8, &(0x7f0000000080)=ANY=[], 0xfffffee2) r9 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x1023, 0x1, @tid=r9}, &(0x7f0000000480)=0x0) timer_settime(r10, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) splice(r4, 0x0, r7, 0x0, 0x38f9, 0x0) splice(r6, 0x0, r5, 0x0, 0x7fffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 4m26.363447427s ago: executing program 33 (id=165): inotify_rm_watch(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c0029aa4a1aae238f7024434d787bca000c1b59eaa2c8a56a5573c9f77784708fb2fe70a257a40e20c887d5ab2d6b3571b37bee9df6ba3c79a1c6dddb99c5dcfdf512b5bfe2a8eaaf955bfe567579ca81c8aa8211aff098614de2d029710f396090a7a1432a50e5e6b8a5f6167568650cb80bbd24c924314874e530e979120c5c4861e38442"]) write$P9_RVERSION(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES64], 0x15) sigaltstack(&(0x7f0000000200)={0x0, 0x80000001}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r8, &(0x7f0000000080)=ANY=[], 0xfffffee2) r9 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x1023, 0x1, @tid=r9}, &(0x7f0000000480)=0x0) timer_settime(r10, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) splice(r4, 0x0, r7, 0x0, 0x38f9, 0x0) splice(r6, 0x0, r5, 0x0, 0x7fffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 3m28.583914326s ago: executing program 5 (id=327): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_io_uring_setup(0x6a50, &(0x7f0000000540)={0x0, 0x0, 0x10000, 0x0, 0x3cc}, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0267e90004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300"/28], 0x50) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r6) r7 = syz_clone(0x840000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r7, 0x8, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x200000, 0x0) 3m28.080054352s ago: executing program 5 (id=330): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000100)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x3d) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r6, &(0x7f0000000180)='1', 0x1) r7 = openat(0xffffffffffffff9c, 0x0, 0x2082, 0x0) write(r7, &(0x7f0000000240)='6', 0x1) pipe(&(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000440)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @device_a, {0x6, 0x1c}, @broadcast}, @random="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"}, 0x6aa) 3m26.838851199s ago: executing program 5 (id=335): write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x0, 0x1, {0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x8000, 0x100) r2 = openat(r1, &(0x7f0000000580)='./sys/file0\x00', 0xa2001, 0x81) write(r2, &(0x7f0000000400)='wwnn=0x3333333333333333', 0x17) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x202001, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1}) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x0, 0x14, 0x6c, {0x6c, 0x22, "d4371fd587b5b5793706450d585f0ac93a59dd3a822c49a9df46ed8f925769a86dd3902f468dd52e151600d554db6eefde3224639fca1893e5e8462bea2870696ed29fa880d88302adb97fbdf5ea51624b51e093678a0fb3343bcf7151d54ec2b73db5940410b7eb5d0f"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f00000002c0)={0x60, 0xc, 0xa3, "a1c1e5fc660b63a28b44ce6959f8d00df404f5db5d5205c68b11d3d3c664730d0e3cfedceb36ef71105870b9497838214038c683ca3b8b18014552da8d34ffe9dedab9df42ea7d281d0cddbb1d6ec8c1f50c17a7e5926ea4461df4bd497e419d15559ea64588de8f0f8422b0610dd0dd1e39194bc948e3f05e3a016d6f8dde7c4cf40c82d0e490db3c14f2911cca92a767c710228a35d2cb27847d3f41a6912cf0eb54"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xf9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x1, 0x3, 0x401, 0x80, 0x9, 0x7fff, 0x8, 0xd, 0x7, 0x101, 0x5, 0x3}}, &(0x7f0000000480)={0x20, 0x85, 0x4, 0x81}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0x81}, &(0x7f00000005c0)={0x20, 0x89, 0x2, 0x1}}) ioctl$EVIOCGMASK(r5, 0x5b03, 0x0) 3m20.4841702s ago: executing program 5 (id=351): munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0xa, 0x24132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a30000000006400048060"], 0x104}}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) 3m20.053404209s ago: executing program 5 (id=353): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000000000001000000c000000006000200861f", 0x1d, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001080900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r5}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000007c0), 0x101801, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01f717000000000000000c0000000c00000002000000000000040000000a0000ffffff7f00000000ed9a5ac5562e77ea0015"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r10, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r11, 0x4) r12 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f00000001c0)=0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1c, 0x27, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8000}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x10}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @alu={0x4, 0x1, 0x4, 0xa, 0x3, 0xffffffffffffffc0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ldst={0x2, 0x0, 0x0, 0x4, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe08}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x1000, 0xda, &(0x7f00000006c0)=""/218, 0x40f00, 0x4c, '\x00', r8, @fallback=0x1d, r9, 0x8, &(0x7f0000000800)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x6, 0x36, 0x5}, 0x10, r11, r12, 0x3, &(0x7f0000000980)=[r0, r2, r13, r0, r0, r0], &(0x7f00000009c0)=[{0x3, 0x3, 0x7, 0x9}, {0x2, 0x5, 0xa, 0x9}, {0x1, 0x3, 0x1, 0x3}], 0x10, 0xfffffffc}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector=0x11, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r14, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m17.129409189s ago: executing program 5 (id=359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getrlimit(0x6, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1d, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) listns(&(0x7f0000001140)={0x20, 0x0, 0x2, 0x8000000, 0x0, 0xa1b0}, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0000102, 0x0, 0xb}]}) ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7, 0x20, 0x3, 0x5, {{0x1c, 0x4, 0x2, 0x2e, 0x70, 0x64, 0x4, 0x7, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@ssrr={0x89, 0x23, 0xb1, [@multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x24}, @loopback, @broadcast, @private=0xa010102, @local, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x34, 0x36, 0x3, 0x5, [{@broadcast, 0x3}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x40}, {@broadcast, 0xff}, {@loopback, 0x824}, {@private=0xa010100, 0x3f}]}, @generic={0x7, 0x4, "a2b5"}]}}}}}) 3m1.643008323s ago: executing program 34 (id=359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getrlimit(0x6, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1d, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) listns(&(0x7f0000001140)={0x20, 0x0, 0x2, 0x8000000, 0x0, 0xa1b0}, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0000102, 0x0, 0xb}]}) ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7, 0x20, 0x3, 0x5, {{0x1c, 0x4, 0x2, 0x2e, 0x70, 0x64, 0x4, 0x7, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@ssrr={0x89, 0x23, 0xb1, [@multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x24}, @loopback, @broadcast, @private=0xa010102, @local, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x34, 0x36, 0x3, 0x5, [{@broadcast, 0x3}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x40}, {@broadcast, 0xff}, {@loopback, 0x824}, {@private=0xa010100, 0x3f}]}, @generic={0x7, 0x4, "a2b5"}]}}}}}) 2m43.480551193s ago: executing program 6 (id=423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x7f, 0x3, 0x7, 0x5, 0xfff, 0x4]}, &(0x7f0000000500)=0x50) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="090028bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) 2m42.268691189s ago: executing program 6 (id=429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100019e"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="50010001000000000000000200000000000000d800", @ANYRESDEC=r7], 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, 0x0, 0x4080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) 2m40.884795522s ago: executing program 6 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getrlimit(0x6, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1d, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x20) 2m39.188540195s ago: executing program 6 (id=434): memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)="aa", 0x1}], 0x1}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b87, &(0x7f0000000240)={0x0, 0x9b5, 0x40, 0x23, 0x2bc}, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r3, 0x2f, 0x0, 0x3ff, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)}, 0x40) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000000000)={0xfffffffa, 0x1}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) socket(0x2, 0x3, 0xff) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r6, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r7, 0x8001}}, 0x48) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m35.948720119s ago: executing program 6 (id=443): r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x11}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x4004, @dev={0xfe, 0x80, '\x00', 0xb}, 0x800006}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0xfffffffd) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r8, 0x16, 0x0, @void}, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$bt_BT_POWER(r9, 0x112, 0x9, &(0x7f0000000880)=0x1, 0x1) r10 = dup(r5) syz_ublk_setup_queues(r10, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x1, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m35.824570011s ago: executing program 6 (id=444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x102, 0x4) write(r1, &(0x7f0000000480)="33845662a193a4d32f1182bed19967f27947e16bc081", 0x16) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f0000000500)="f2e6599bc85c5d23920e48bde5bc1f7c86cf21be27a22121dc706c6eedbe7e09342b574ea3808cac244110d6bf906aa40601f1e92b611a2f7dc6a07ceb4f46a368b581ad7df32e06000000000000007567b5e82f1d3d64bf48aae08a1f727fd7debf436b6d15", 0x3}, {&(0x7f00000004c0)="8338a8533623f1eacc", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2ddc34215ed29cc6}}], 0x4, 0x4000081) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) shutdown(r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = epoll_create(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000500)={0x90000000}) write$cgroup_int(r6, &(0x7f0000000080)=0x4, 0xfffffe7d) close(0x4) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9800, &(0x7f0000000040)={0x100002, 0x70, 0x0, {r8}}, 0x20) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) 2m35.524379301s ago: executing program 35 (id=444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x102, 0x4) write(r1, &(0x7f0000000480)="33845662a193a4d32f1182bed19967f27947e16bc081", 0x16) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f0000000500)="f2e6599bc85c5d23920e48bde5bc1f7c86cf21be27a22121dc706c6eedbe7e09342b574ea3808cac244110d6bf906aa40601f1e92b611a2f7dc6a07ceb4f46a368b581ad7df32e06000000000000007567b5e82f1d3d64bf48aae08a1f727fd7debf436b6d15", 0x3}, {&(0x7f00000004c0)="8338a8533623f1eacc", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2ddc34215ed29cc6}}], 0x4, 0x4000081) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) shutdown(r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = epoll_create(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000500)={0x90000000}) write$cgroup_int(r6, &(0x7f0000000080)=0x4, 0xfffffe7d) close(0x4) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9800, &(0x7f0000000040)={0x100002, 0x70, 0x0, {r8}}, 0x20) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) 16.367319743s ago: executing program 2 (id=719): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x5, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r1, &(0x7f0000002b80)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[], 0x1001) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) 15.132446802s ago: executing program 7 (id=722): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d350887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d190890e0878f0e1ac6e7049b3366959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x5) r4 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x32) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923", 0x8}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) io_pgetevents(r5, 0x2, 0x5, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x0, 0x0) io_submit(r5, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_getevents(r5, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(r3, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500)={0x1, 0x0, [{0x0, 0x1004, &(0x7f0000001540)=""/4100}]}) r9 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r9}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1, r9}) 14.889145027s ago: executing program 2 (id=723): mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r0, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = userfaultfd(0x1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0100000003000000f4ab480a13d46ed73000"/28], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x6, r6, 0x4}, 0x38) write$uinput_user_dev(r4, &(0x7f00000001c0)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x6, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x10003, 0x0, 0xf250, 0x81, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x6, 0xc, 0x3, 0xba55, 0x8da8, 0x0, 0x202, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x10001, 0x6, 0x1000, 0x5, 0x3d, 0x34, 0xbbe676b2, 0x6], [0x7, 0x1e, 0x3, 0x8000, 0x0, 0x1, 0x0, 0x23, 0x7, 0x5, 0x8, 0x9, 0x72c, 0x1c32, 0x3, 0x5, 0xfffa, 0x6, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x3, 0x8000000, 0x3ff, 0x2000000, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffbfd, 0x7, 0x3f80000, 0x800000, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x43, 0x379, 0x9, 0x6, 0x5, 0x7, 0x6, 0x2, 0x0, 0x1, 0x80000001, 0x7, 0x200, 0x3], [0xac2, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x3ff, 0xc, 0x7, 0x9, 0xe88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1001, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x7f, 0x5, 0x4, 0x5, 0x200003, 0x5, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x80000000, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x5, 0x2f, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7, 0x8, 0x7, 0x84, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x5, 0x1000, 0x7f, 0x2, 0x3fa9, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x40, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f513f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0x80, 0x136, 0x6]}, 0x45c) r7 = openat(0xffffffffffffff9c, 0x0, 0xc142, 0x1a2) sendfile(r7, r7, 0x0, 0x8000000f3aa6ea) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e11011a04"], 0xe) ioctl$UI_DEV_CREATE(r4, 0x5501) read(r4, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f00007e6000/0x1000)=nil, 0x1000, 0x11, 0x200000005c831, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000004c0)=0x200000000) 13.717206736s ago: executing program 1 (id=727): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0xb9, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x5, 0x5}) 13.443673392s ago: executing program 1 (id=728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r1, &(0x7f00000001c0)="5cba91", 0x3) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) write(r3, &(0x7f0000000900)="5b026c7c84c906313302b74cffc27a06877c09dc61343ab65276f8fec7d70d600a4e16599c827105ac95a27e5d69965d6efcf10b548be2c2652136869bf33ebba0c83ceb383ae23d8de5c6a723a02371626ed111780e5753699f245bdaf68f90deb799a63358aaf3477cbdc040bbc446c98091e1672b61f8e2abfd421fb9eb1b5457e2baa3488e18a3e2dad9d4fa0ee235aa506f3bd63c", 0x97) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0x133) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000240), 0x8, 0xb8a43dc55acf21f) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000500)={0x2, 0x1, "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"}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 11.702423884s ago: executing program 2 (id=729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2007) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x0, 0x81, 0x0, 0x0, 0xb, 0x0, 0xfa, 0x12, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x0, 0x0, 0x3, 0x5, 0xff, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1000000000000000}, {0x6b, 0x7fc, 0x8, 0x3d, 0x0, 0xfe, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x57, 0x9}], 0x7}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$sock_int(r4, 0x1, 0x45, &(0x7f0000000240)=0x2, 0x4) close(0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r6 = syz_io_uring_setup(0x4ae5, &(0x7f0000000440)={0x0, 0x39c4, 0x2000, 0x2, 0x2ee}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r6, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES8=r4], 0x38}}, 0x4801) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000000206050400000000000000000a00000005000100070000000900020073797a30000000000d000300686173683a6e6574000000000500040000000000050005000a", @ANYRES64=r2, @ANYRES64=r3], 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000000906050000000000000000000a00000005000100070000000900020073797a30000400001c000780180001801400024000000000000002000000000000000000"], 0x44}}, 0x4880) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000040)={0x8, 0x981}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000080)={0x3, 0x0, [{0xa, 0x1c25, 0x2, 0x5, 0x8, 0x101, 0x80}, {0x1, 0x9, 0x1, 0x1ff, 0x7, 0x4, 0x1}, {0xa, 0x10001, 0x4, 0x7, 0x5}]}) 11.684186419s ago: executing program 4 (id=730): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x4, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x1}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r1, &(0x7f0000000080), 0x12) connect$x25(r1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) openat$panthor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) 11.584408026s ago: executing program 7 (id=731): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a107000003e700"/96, 0x60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000000)={'comedi_test\x00', [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe]}) 11.466788988s ago: executing program 1 (id=732): ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x3, 0x0, [{0x0, 0x0, 0x8e1e}, {0x368, 0x0, 0x1}, {0x300, 0x0, 0x5}]}) (async) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402e0c20070001000000010902190001010080320904000001ff00000007058103"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x5e) (async) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) (async) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff7, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xd, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xf3f, 0x70bd2a, 0x25dddbb9, {0x0, 0x0, 0x0, r2, {0xc, 0xe}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_EMATCHES={0x58, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0xd, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x2}, {0x4, 0x8, 0x0, 0x3}}}, @TCF_EM_CANID={0x2c, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5, 0x1, 0xe}, {0x9, 0xce28, 0x7fff, 0x3, 0xe, 0x2, 0x1}}}]}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20041089}, 0x4880) (async) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) (async) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x882) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0x8, 0x10, 0x0, 0x0, 0x1}, {0x1d, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x2, 0x1869d, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x80001400, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0x98f900, 0x105}) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000040)=0x7) (async, rerun: 32) rt_sigtimedwait(&(0x7f0000000000)={[0x7]}, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000303afffe8000000000000000000000000000bbff0200000000200000000000000004018800907805000000fe80000000000000000000000000002a02fc20c1e05659ae3f48e9296b2beda7add700385601f8910650f3889eb91e1c8808411c25c7be684ecab6e578fe592f41ee7c642ef20c3f778d8e2312e463dd511b7aca557bc61389ab13f606699ea4a1de709e9b"], 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400b59500000c00000000000ac0"], 0x18}}, 0x0) (async) r6 = socket$kcm(0x2d, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r7}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) 9.872579754s ago: executing program 7 (id=733): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x5, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x10040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_getparam(r1, &(0x7f0000002b80)) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$proc_mixer(r0, &(0x7f0000000080)=ANY=[], 0x1001) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) 9.405673439s ago: executing program 4 (id=734): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010700000000000000001c"], 0x28}, 0x1, 0x0, 0x0, 0x20044}, 0x0) recvfrom$inet_nvme(r2, &(0x7f0000000540)=""/49, 0x31, 0x20, &(0x7f0000000580)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="0100eefc", @ANYRES16=r4, @ANYBLOB="000326bd7000ffdbdf250d000000200001801400020070696d726567310000000000000000000800030002000000"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8040) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000025fe33eb0027dabbf90100000000000000002000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000400000000000000000000000181a0000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd20020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_ublk_setup_io_uring(0x7453, &(0x7f0000000040)={0x0, 0x30bf, 0x0, 0x1, 0x157}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r10 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r10}, &(0x7f0000000000)) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x1, 0x327, 0x0, 0x0, 0x1000, 0x7, r10, 0x0, 0xee}}}, 0xfffffffffffffffe) 9.261443703s ago: executing program 8 (id=735): socket$can_raw(0x1d, 0x3, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) io_setup(0x482, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 8.101820884s ago: executing program 2 (id=736): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f00000ec000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xf, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, r2, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5c9000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xf, 0x59032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fremovexattr(r6, &(0x7f00000003c0)=@known='user.incfs.metadata\x00') setresgid(0xee00, 0xee01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f00000002c0)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) r11 = dup2(r7, r7) faccessat2(r11, &(0x7f0000000880)='\x00', 0x1, 0x1100) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x4, 0x6, 0x0, 0x4, 0x68c6, 0xd, 0x8001, 0x4, 0x4, 0x2, 0x1, 0x6, 0x6, 0x8, 0x4, 0x20, {0xc, 0x5}, 0x0, 0x8}}) 8.024964769s ago: executing program 7 (id=737): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r3, 0x407, 0x0) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140)="84", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom$inet(r4, 0x0, 0x18, 0x40000001, 0x0, 0x50) fcntl$setpipe(r3, 0x407, 0x2000000) io_setup(0xde1, &(0x7f0000002500)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffb, 0x8000) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c000180"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xfff2, 0xfff1}}}, 0x24}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x6, 0x0, 0x35, @private1, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8000, 0x8, 0x8001, 0x4}}) 7.169403668s ago: executing program 4 (id=738): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010080020102081305052f"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 6.099463535s ago: executing program 8 (id=739): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) socket$tipc(0x1e, 0x5, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="8a", 0x1, 0x40000100, 0x1}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r1, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100027042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01"], 0x20}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 5.504871004s ago: executing program 1 (id=740): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) r4 = syz_ublk_setup_io_uring(0x80021, &(0x7f0000000580)={0x0, 0x136f, 0x2, 0x0, 0x38b}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000600)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x2, 0xa38, 0x0, 0x0, 0x1000, 0x8001, 0x0, 0x0, 0x100}}}, 0x0) r10 = syz_io_uring_complete(r5, r6) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x0, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, r9, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r14, 0x0, 0x0) splice(r13, 0x0, r15, 0x0, 0x4ffe6, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r11, &(0x7f0000000500)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r11, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r12, 0x2, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @private=0xa010100}}}, 0x118) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES16, @ANYRESDEC=r2, @ANYRES32=r16, @ANYBLOB="08002600851600000a00180000000000000000001c005a", @ANYRESOCT=r1, @ANYRESOCT=r10, @ANYRES8=0x0], 0x4c}}, 0x0) 5.207411523s ago: executing program 8 (id=741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100019e"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="50010001000000000000000200000000000000d800", @ANYRESDEC=r7], 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, 0x0, 0x4080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) 4.951079105s ago: executing program 7 (id=742): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='sys/class/net/bridge_slave_0/brport/multicast_to_unicast\x00', 0x141842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffe) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@local, 0x40}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0xc800, 0x48c900) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000400)=0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) sendfile(r0, r0, 0x0, 0x40040021) 4.82334824s ago: executing program 4 (id=743): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'local'}}}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x10, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x4005, 0x10d, 0xd9, 0x10}, {0xfc, 0x0, 0x5, 0x43, 0x1}, 0x7ff, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004041}, 0x800) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x2}]}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000140)=0x5) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x20, 0x0, 0x0, 0x20}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r8, 0x29, 0x15, &(0x7f0000000280)=""/212, &(0x7f0000000380)=0xd4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f00000005c0)='fd', 0x0, r9) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x2) fchdir(r11) r12 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$sock_inet6_udp_SIOCINQ(r12, 0x541b, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r13, 0x1, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) 3.95846713s ago: executing program 1 (id=744): r0 = syz_io_uring_setup(0xeff, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x83, 0x3ac}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000240)={0x1, 0x2, 0x6, 0xc0, 0x5, 0x20, 0xb}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xfffffffffffffd0b) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x0, 0x0, 0xfffffffffffffd2c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) poll(&(0x7f00000005c0)=[{r5, 0x84}], 0x1, 0x3) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405668, &(0x7f0000000280)={0x1b, 0x3, 0x2, 0x4000}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000280)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)='7*', 0x2}], 0x1}, 0x4008000) socket$inet(0x2, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002142, 0x0) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x900000, &(0x7f0000000380)={[{@verity_on}], [{@smackfstransmute={'smackfstransmute', 0x3d, '(#\v'}}, {@hash}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_eq={'euid', 0x3d, r2}}]}) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0xa8}}, 0x20004010) 3.858991647s ago: executing program 8 (id=745): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) (async) rt_sigqueueinfo(0x0, 0x80039, &(0x7f0000000000)={0x1d, 0xfffffff7, 0x68}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) (async) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) 2.687061756s ago: executing program 1 (id=746): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r3, 0x407, 0x0) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140)="84", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom$inet(r4, 0x0, 0x18, 0x40000001, 0x0, 0x50) fcntl$setpipe(r3, 0x407, 0x2000000) io_setup(0xde1, &(0x7f0000002500)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffb, 0x8000) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c000180"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xfff2, 0xfff1}}}, 0x24}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x6, 0x0, 0x35, @private1, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8000, 0x8, 0x8001, 0x4}}) 2.558166172s ago: executing program 2 (id=747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r6, &(0x7f0000001600), &(0x7f0000001700)=@udp=r5}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4c, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x1, &(0x7f0000000080)=0x10000a40, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000000001"], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000002000000000100000000006f1d308e6730ec40b7e4c83293912eb0767eac51c72cadfca1e47d95e73f734273c3473f8bace292c1e6307bea8c4a62b96e9e26fa15573edaece1f7988822d5e219155b53434f4a03f5197eea956504aeed596ae9f3434816b5ac0fe6c2702eeb576761e69c4bab688c4a10203a05371a87cb537fb2756d5ef95bf6b4fd99dd2d18eaf01c799d6a72"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r10}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) clock_adjtime(0x2, &(0x7f00000002c0)={0x1, 0xff, 0xfffffffffffffff7, 0xe1, 0x6, 0xa11, 0xac9b, 0x62800000000000, 0x6, 0xff, 0xfffffffffffffffc, 0x100, 0x0, 0x2, 0xff, 0xf34, 0x10000, 0x7, 0x0, 0x6, 0x7, 0x4, 0x0, 0x3, 0xfffffffffffffffe, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.45295011s ago: executing program 4 (id=748): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000004c0)=@ethtool_drvinfo={0x3, "1e7b534dc51b496df12d2eeb5221d10aed62064c9ef269655327cf83e16e92ad", "d352f19c55dd634c0498839a2e7a484a42ade30f4e96ebbb6bf0103eb9cc5b18", "ffabc3ab5d18e1e14b6cacaf85a54b0dd05e22e86c307d11f8fc7a068aa4fa32", "08ba4077a585d93e5743777a67fefe8e42b88b56c354da6b37e4a93d39224574", "7ed0d9c83c7389bada77d1961de264558198d6c47a372d0b42624da1bc7fc9b4", "45e71ff84c02010000365be6", 0x6, 0x15b, 0xa, 0x9, 0x5}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x4, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000004, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in, @in=@initdev}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000800)=0xe8) fstat(r2, 0x0) getresgid(&(0x7f0000000a00), 0x0, &(0x7f0000000a80)) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='2', 0x49) mount$9p_unix(0x0, 0x0, 0x0, 0x100800, &(0x7f0000000240)=ANY=[]) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.407977063s ago: executing program 8 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) getrlimit(0x6, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x20) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{0x0}], 0x1) 1.397682153s ago: executing program 7 (id=750): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x12, '\x00', @data=0x40007, 0x6a80}, {0x9, '\x00', @buffer={"d2924475164c68b3041fe3b52ba01baf16fea7028c9a9dd230a424fb21a0fd34", 0x20}, 0x1}, {0x6, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x0, @svalue=0x9}, {0x2, @svalue=0x6}, {0x2, @uvalue=0xd}]}, 0x1000}]}) (fail_nth: 4) 317.2163ms ago: executing program 8 (id=751): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) socket$tipc(0x1e, 0x5, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="8a", 0x1, 0x40000100, 0x1}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r1, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100027042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01"], 0x20}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 214.977118ms ago: executing program 4 (id=752): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1c06, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0xec, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xc1, 0xe4}}}}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xe}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4006}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}]}]}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x20008040}, 0x8c30) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89b1, &(0x7f0000000240)={'tunl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x26) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) open(0x0, 0x80242, 0x1df2a23c5997fa5f) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) close_range(r3, 0xffffffffffffffff, 0x2) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./config/nullb/rnullb0/memory_backed\x00', &(0x7f0000000180)={0x410240, 0x188}, 0x18) r6 = openat(r5, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x24001, 0x0) write(r6, &(0x7f00000003c0)="1000", 0x2) 0s ago: executing program 2 (id=753): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a2401010080020102081305052f"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): acks suppressed [ 279.862863][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 279.862899][ T5608] Bluetooth: hci2: command 0x0406 tx timeout [ 279.862954][ T5606] Bluetooth: hci1: command 0x0406 tx timeout [ 279.920147][ T7685] veth0_vlan: entered promiscuous mode [ 279.942643][ T5606] Bluetooth: hci3: command 0x0406 tx timeout [ 279.963684][ T7685] veth1_vlan: entered promiscuous mode [ 280.023239][ T5606] Bluetooth: hci6: command 0x0c1a tx timeout [ 280.086690][ T31] kauditd_printk_skb: 573 callbacks suppressed [ 280.086710][ T31] audit: type=1400 audit(1790753302.149:3921): avc: denied { create } for pid=8047 comm="syz.1.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.121291][ T31] audit: type=1400 audit(1790753302.189:3922): avc: denied { map_create } for pid=8049 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 280.123986][ T5606] Bluetooth: hci4: command 0x0c1a tx timeout [ 280.205483][ T31] audit: type=1400 audit(1790753302.269:3923): avc: denied { create } for pid=8047 comm="syz.1.507" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 280.206306][ T31] audit: type=1400 audit(1790753302.269:3924): avc: denied { ioctl } for pid=8047 comm="syz.1.507" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21075 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 280.207252][ T31] audit: type=1400 audit(1790753302.269:3925): avc: denied { ioctl } for pid=8047 comm="syz.1.507" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21075 ioctlcmd=0xaa05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 280.208146][ T31] audit: type=1400 audit(1790753302.269:3926): avc: denied { ioctl } for pid=8047 comm="syz.1.507" path="socket:[20253]" dev="sockfs" ino=20253 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 280.211842][ T31] audit: type=1400 audit(1790753302.269:3927): avc: denied { search } for pid=8055 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.211866][ T31] audit: type=1400 audit(1790753302.269:3928): avc: denied { search } for pid=8055 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.211886][ T31] audit: type=1400 audit(1790753302.269:3929): avc: denied { search } for pid=8055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.211912][ T31] audit: type=1400 audit(1790753302.269:3930): avc: denied { search } for pid=8055 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 280.628081][ T7685] veth0_macvtap: entered promiscuous mode [ 280.707046][ T7685] veth1_macvtap: entered promiscuous mode [ 281.051736][ T7685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.121972][ T7685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.232942][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.232978][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.233008][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.243252][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.941971][ T6298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.941985][ T6298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.105804][ T5606] Bluetooth: hci6: command 0x0c1a tx timeout [ 282.152646][ T5712] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 282.183313][ T5606] Bluetooth: hci4: command 0x0c1a tx timeout [ 282.250978][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8 [ 282.320375][ T5712] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 282.347602][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.347616][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.474218][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.474239][ T5712] usb 5-1: Product: syz [ 282.474253][ T5712] usb 5-1: Manufacturer: syz [ 282.474267][ T5712] usb 5-1: SerialNumber: syz [ 282.511457][ T5712] usb 5-1: config 0 descriptor?? [ 283.594556][ T5694] net_ratelimit: 179 callbacks suppressed [ 283.691120][ T5712] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate [ 283.691144][ T5712] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 283.712798][ T5712] usb 5-1: USB disconnect, device number 24 [ 284.122974][ T5713] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 284.314891][ T5713] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.352105][ T5713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.352201][ T5713] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 284.352254][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.408641][ T5713] usb 2-1: config 0 descriptor?? [ 284.472628][ T5713] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 284.637955][ T8091] sctp: [Deprecated]: syz.2.516 (pid 8091) Use of int in max_burst socket option. [ 284.637955][ T8091] Use struct sctp_assoc_value instead [ 285.312624][ T31] kauditd_printk_skb: 528 callbacks suppressed [ 285.312639][ T31] audit: type=1400 audit(1790753307.379:4459): avc: denied { create } for pid=8085 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 285.313959][ T31] audit: type=1400 audit(1790753307.379:4460): avc: denied { create } for pid=8085 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 285.430331][ T31] audit: type=1400 audit(1790753307.489:4461): avc: denied { read write } for pid=8093 comm="syz.8.445" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.457477][ T31] audit: type=1400 audit(1790753307.519:4462): avc: denied { read } for pid=5596 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.459050][ T31] audit: type=1400 audit(1790753307.519:4463): avc: denied { read write open } for pid=8093 comm="syz.8.445" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.460746][ T31] audit: type=1400 audit(1790753307.519:4464): avc: denied { read open } for pid=5596 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.461731][ T31] audit: type=1400 audit(1790753307.519:4465): avc: denied { ioctl } for pid=5596 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.465991][ T31] audit: type=1400 audit(1790753307.529:4466): avc: denied { read write } for pid=8085 comm="syz.1.514" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.480873][ T31] audit: type=1400 audit(1790753307.539:4467): avc: denied { read write open } for pid=8085 comm="syz.1.514" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.480912][ T31] audit: type=1400 audit(1790753307.539:4468): avc: denied { ioctl } for pid=8085 comm="syz.1.514" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.498731][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.519849][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.832941][ T5698] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 285.860047][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 286.002893][ T5698] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.045232][ T5698] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.045292][ T5698] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 286.045346][ T5698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.053543][ T5698] usb 9-1: config 0 descriptor?? [ 286.101913][ T5698] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 288.371970][ T5713] usb 2-1: USB disconnect, device number 18 [ 288.419133][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.419455][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.982543][ C1] net_ratelimit: 145 callbacks suppressed [ 289.874660][ T8124] FAULT_INJECTION: forcing a failure. [ 289.874660][ T8124] name failslab, interval 1, probability 0, space 0, times 0 [ 289.874691][ T8124] CPU: 1 UID: 0 PID: 8124 Comm: syz.4.522 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.874721][ T8124] Tainted: [L]=SOFTLOCKUP [ 289.874728][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 289.874741][ T8124] Call Trace: [ 289.874748][ T8124] [ 289.874757][ T8124] dump_stack_lvl+0x100/0x190 [ 289.874792][ T8124] should_fail_ex.cold+0x5/0xa [ 289.874817][ T8124] ? __pfx_audit_log_vformat+0x10/0x10 [ 289.874846][ T8124] should_failslab+0xc2/0x120 [ 289.874876][ T8124] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 289.874902][ T8124] ? sidtab_sid2str_get+0x84/0x670 [ 289.874933][ T8124] ? sidtab_sid2str_get+0x17a/0x670 [ 289.874966][ T8124] kmemdup_noprof+0x29/0x60 [ 289.874988][ T8124] sidtab_sid2str_get+0x17a/0x670 [ 289.875020][ T8124] security_sid_to_context_core+0x373/0x700 [ 289.875049][ T8124] avc_audit_post_callback+0x109/0x910 [ 289.875079][ T8124] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 289.875104][ T8124] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 289.875131][ T8124] ? skb_put+0x138/0x180 [ 289.875151][ T8124] ? audit_log_n_string+0x2a3/0x5a0 [ 289.875178][ T8124] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 289.875204][ T8124] common_lsm_audit+0x23f/0x2b0 [ 289.875230][ T8124] ? __pfx_common_lsm_audit+0x10/0x10 [ 289.875257][ T8124] ? avc_update_node.isra.0+0x578/0xb90 [ 289.875284][ T8124] ? psi_cgroup_restart+0x49b/0x6f0 [ 289.875316][ T8124] slow_avc_audit+0x186/0x210 [ 289.875348][ T8124] ? __pfx_slow_avc_audit+0x10/0x10 [ 289.875385][ T8124] ? avc_perm_nonode+0x164/0x180 [ 289.875415][ T8124] ? avc_perm_nonode+0xf8/0x180 [ 289.875450][ T8124] audit_inode_permission+0x1ea/0x2a0 [ 289.875485][ T8124] ? __pfx_audit_inode_permission+0x10/0x10 [ 289.875522][ T8124] ? avc_has_perm_noaudit+0x145/0x470 [ 289.875558][ T8124] selinux_inode_permission+0x7ed/0x1130 [ 289.875595][ T8124] ? devcgroup_check_permission+0x39/0x440 [ 289.875623][ T8124] ? __pfx_selinux_inode_permission+0x10/0x10 [ 289.875653][ T8124] ? find_held_lock+0x2b/0x80 [ 289.875684][ T8124] ? devcgroup_check_permission+0x174/0x440 [ 289.875711][ T8124] ? match_exception_partial+0x239/0x2d0 [ 289.875742][ T8124] security_inode_permission+0xda/0x250 [ 289.875770][ T8124] inode_permission+0x36c/0x620 [ 289.875794][ T8124] may_open+0x2b8/0x480 [ 289.875816][ T8124] path_openat+0x51f/0x2440 [ 289.875848][ T8124] ? __pfx_path_openat+0x10/0x10 [ 289.875885][ T8124] do_file_open+0x20e/0x430 [ 289.875916][ T8124] ? __pfx_do_file_open+0x10/0x10 [ 289.875963][ T8124] ? _raw_spin_unlock+0x28/0x50 [ 289.875993][ T8124] ? alloc_fd+0x471/0x7a0 [ 289.876029][ T8124] do_sys_openat2+0x10f/0x1e0 [ 289.876064][ T8124] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.876092][ T8124] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 289.876128][ T8124] __x64_sys_openat+0x12d/0x210 [ 289.876160][ T8124] ? __pfx___x64_sys_openat+0x10/0x10 [ 289.876200][ T8124] do_syscall_64+0x123/0x790 [ 289.876223][ T8124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.876244][ T8124] RIP: 0033:0x7f4a0c95e98e [ 289.876263][ T8124] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 289.876282][ T8124] RSP: 002b:00007f4a0d7ecea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 289.876311][ T8124] RAX: ffffffffffffffda RBX: 00007f4a0d7ef6c0 RCX: 00007f4a0c95e98e [ 289.876327][ T8124] RDX: 0000000000000002 RSI: 00007f4a0ca3440a RDI: ffffffffffffff9c [ 289.876343][ T8124] RBP: 00007f4a0ca3506b R08: 0000000000000000 R09: 0000000000000000 [ 289.876357][ T8124] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d [ 289.876370][ T8124] R13: 00002000000000c0 R14: 0000000000000000 R15: 00007ffed6fab4b8 [ 289.876401][ T8124] [ 290.079759][ T8133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.523'. [ 290.261250][ T5698] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 290.346270][ T31] kauditd_printk_skb: 214 callbacks suppressed [ 290.346284][ T31] audit: type=1400 audit(1790753312.409:4683): avc: denied { ioctl } for pid=8122 comm="syz.4.522" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 290.368675][ T1212] usb 9-1: USB disconnect, device number 2 [ 290.402847][ T5698] usb 5-1: device descriptor read/64, error -71 [ 290.440889][ T31] audit: type=1400 audit(1790753312.499:4684): avc: denied { search } for pid=8128 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.465604][ T31] audit: type=1400 audit(1790753312.509:4685): avc: denied { read } for pid=8128 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.465646][ T31] audit: type=1400 audit(1790753312.509:4686): avc: denied { read open } for pid=8128 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.482522][ T31] audit: type=1400 audit(1790753312.539:4687): avc: denied { search } for pid=8128 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.482560][ T31] audit: type=1400 audit(1790753312.539:4688): avc: denied { search } for pid=8128 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.482591][ T31] audit: type=1400 audit(1790753312.539:4689): avc: denied { search } for pid=8128 comm="cmp" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.494629][ T31] audit: type=1400 audit(1790753312.539:4690): avc: denied { read } for pid=8128 comm="cmp" name="resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=2690 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.512482][ T31] audit: type=1400 audit(1790753312.559:4691): avc: denied { read open } for pid=8128 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth4.ipv4ll" dev="tmpfs" ino=2690 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.512520][ T31] audit: type=1400 audit(1790753312.559:4692): avc: denied { getattr } for pid=8128 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.663021][ T5698] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 290.792690][ T5698] usb 5-1: device descriptor read/64, error -71 [ 290.913723][ T5698] usb usb5-port1: attempt power cycle [ 291.962905][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.7.515'. [ 291.992536][ T5698] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 292.018350][ T5698] usb 5-1: device descriptor read/8, error -71 [ 292.262660][ T5698] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 292.283609][ T1761] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 292.301119][ T5698] usb 5-1: device descriptor read/8, error -71 [ 292.451879][ T5698] usb usb5-port1: unable to enumerate USB device [ 292.485046][ T1761] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 292.519971][ T1761] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.519986][ T1761] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.520023][ T1761] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.040969][ T1761] usb 8-1: config 0 descriptor?? [ 293.043495][ T1761] usb 8-1: can't set config #0, error -71 [ 293.065084][ T1761] usb 8-1: USB disconnect, device number 3 [ 294.029294][ T8158] net_ratelimit: 46 callbacks suppressed [ 294.029313][ T8158] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 294.173387][ T1761] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 294.301522][ T8163] FAULT_INJECTION: forcing a failure. [ 294.301522][ T8163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.301552][ T8163] CPU: 1 UID: 0 PID: 8163 Comm: syz.4.531 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.301577][ T8163] Tainted: [L]=SOFTLOCKUP [ 294.301584][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 294.301596][ T8163] Call Trace: [ 294.301603][ T8163] [ 294.301611][ T8163] dump_stack_lvl+0x100/0x190 [ 294.301644][ T8163] should_fail_ex.cold+0x5/0xa [ 294.301671][ T8163] _copy_from_user+0x2e/0xd0 [ 294.301698][ T8163] copy_mount_options+0x76/0x190 [ 294.301723][ T8163] __x64_sys_mount+0x1ab/0x310 [ 294.301743][ T8163] ? __pfx___x64_sys_mount+0x10/0x10 [ 294.301769][ T8163] do_syscall_64+0x123/0x790 [ 294.301793][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.301812][ T8163] RIP: 0033:0x7f4a0c99e159 [ 294.301829][ T8163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.301848][ T8163] RSP: 002b:00007f4a0d7ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 294.301867][ T8163] RAX: ffffffffffffffda RBX: 00007f4a0cc25fa0 RCX: 00007f4a0c99e159 [ 294.301881][ T8163] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000200000000040 [ 294.301893][ T8163] RBP: 00007f4a0ca3506b R08: 00002000000001c0 R09: 0000000000000000 [ 294.301906][ T8163] R10: 0000000002000040 R11: 0000000000000246 R12: 0000000000000000 [ 294.301918][ T8163] R13: 00007f4a0cc26038 R14: 00007f4a0cc25fa0 R15: 00007ffed6fab4b8 [ 294.301943][ T8163] [ 294.306409][ T8163] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 294.326351][ T1761] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.335291][ T1761] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.335340][ T1761] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 294.335409][ T1761] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.348482][ T1761] usb 9-1: config 0 descriptor?? [ 294.410563][ T1761] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 294.412519][ T25] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 294.577116][ T25] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 294.594549][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 294.594571][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 294.627735][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.627760][ T25] usb 3-1: Product: syz [ 294.627774][ T25] usb 3-1: Manufacturer: syz [ 294.627789][ T25] usb 3-1: SerialNumber: syz [ 294.711371][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.725535][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.934470][ T25] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 295.481570][ T31] kauditd_printk_skb: 518 callbacks suppressed [ 295.481584][ T31] audit: type=1400 audit(1790753317.539:5211): avc: denied { create } for pid=8174 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 295.561582][ T31] audit: type=1400 audit(1790753317.619:5212): avc: denied { create } for pid=8174 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 295.585942][ T31] audit: type=1400 audit(1790753317.649:5213): avc: denied { create } for pid=8161 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 295.587523][ T31] audit: type=1400 audit(1790753317.649:5214): avc: denied { create } for pid=8174 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 295.723217][ T31] audit: type=1400 audit(1790753317.739:5215): avc: denied { read } for pid=8174 comm="syz.1.527" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 295.723454][ T31] audit: type=1400 audit(1790753317.739:5216): avc: denied { read open } for pid=8174 comm="syz.1.527" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 295.842952][ T31] audit: type=1400 audit(1790753317.809:5217): avc: denied { read write } for pid=8174 comm="syz.1.527" name="v4l-subdev0" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.842995][ T31] audit: type=1400 audit(1790753317.819:5218): avc: denied { read write open } for pid=8174 comm="syz.1.527" path="/dev/v4l-subdev0" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.843024][ T31] audit: type=1400 audit(1790753317.839:5219): avc: denied { ioctl } for pid=8174 comm="syz.1.527" path="/dev/v4l-subdev0" dev="devtmpfs" ino=939 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 295.843052][ T31] audit: type=1400 audit(1790753317.859:5220): avc: denied { prog_load } for pid=8174 comm="syz.1.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 296.655285][ T8187] jffs2: notice: (8187) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 296.851090][ T8187] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 297.189448][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.7.535'. [ 297.218680][ T1761] usb 9-1: USB disconnect, device number 3 [ 297.967168][ T8196] netlink: 32 bytes leftover after parsing attributes in process `syz.8.538'. [ 298.660572][ T5698] usb 3-1: USB disconnect, device number 16 [ 298.689872][ T5698] usblp0: removed [ 299.382743][ C0] net_ratelimit: 201 callbacks suppressed [ 299.487552][ T8206] netlink: 36 bytes leftover after parsing attributes in process `syz.2.541'. [ 300.426130][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.7.542'. [ 300.487695][ T31] kauditd_printk_skb: 112 callbacks suppressed [ 300.487707][ T31] audit: type=1400 audit(1790753321.609:5333): avc: denied { execmem } for pid=8207 comm="syz.7.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 300.487729][ T31] audit: type=1400 audit(1790753322.019:5334): avc: denied { read } for pid=8207 comm="syz.7.542" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 300.487750][ T31] audit: type=1400 audit(1790753322.019:5335): avc: denied { read open } for pid=8207 comm="syz.7.542" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 300.487771][ T31] audit: type=1400 audit(1790753322.169:5336): avc: denied { getopt } for pid=8207 comm="syz.7.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 300.487801][ T31] audit: type=1400 audit(1790753322.249:5337): avc: denied { read } for pid=8207 comm="syz.7.542" dev="nsfs" ino=4026533916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 300.487823][ T31] audit: type=1400 audit(1790753322.259:5338): avc: denied { read open } for pid=8207 comm="syz.7.542" path="net:[4026533916]" dev="nsfs" ino=4026533916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 300.487844][ T31] audit: type=1400 audit(1790753322.279:5339): avc: denied { create } for pid=8207 comm="syz.7.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.487864][ T31] audit: type=1400 audit(1790753322.479:5340): avc: denied { write } for pid=8207 comm="syz.7.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.487883][ T31] audit: type=1400 audit(1790753322.479:5341): avc: denied { read } for pid=8207 comm="syz.7.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.487903][ T31] audit: type=1400 audit(1790753322.489:5342): avc: denied { read } for pid=8207 comm="syz.7.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 301.670711][ T8215] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 301.670770][ T8215] block device autoloading is deprecated and will be removed. [ 303.813352][ T25] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 303.876414][ T8239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.197915][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 304.503044][ C1] net_ratelimit: 82 callbacks suppressed [ 304.566712][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.566746][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 304.566779][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.631043][ T25] usb 5-1: config 0 descriptor?? [ 304.651538][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 304.979272][ T8241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.980768][ T8241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.536847][ T31] kauditd_printk_skb: 528 callbacks suppressed [ 305.536879][ T31] audit: type=1400 audit(1790753327.549:5871): avc: denied { read write } for pid=8249 comm="syz.8.551" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 305.537018][ T31] audit: type=1400 audit(1790753327.559:5872): avc: denied { read write open } for pid=8249 comm="syz.8.551" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 305.537142][ T31] audit: type=1400 audit(1790753327.569:5873): avc: denied { mounton } for pid=8249 comm="syz.8.551" path="/7/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 305.537266][ T31] audit: type=1400 audit(1790753327.589:5874): avc: denied { mount } for pid=8249 comm="syz.8.551" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 305.717889][ T31] audit: type=1400 audit(1790753327.779:5875): avc: denied { remount } for pid=8249 comm="syz.8.551" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 305.742612][ T31] audit: type=1400 audit(1790753327.779:5876): avc: denied { search } for pid=8252 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.742665][ T31] audit: type=1400 audit(1790753327.779:5877): avc: denied { read } for pid=8252 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 305.742699][ T31] audit: type=1400 audit(1790753327.779:5878): avc: denied { read open } for pid=8252 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 305.742734][ T31] audit: type=1400 audit(1790753327.779:5879): avc: denied { getattr } for pid=8252 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1805 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 305.767694][ T31] audit: type=1400 audit(1790753327.829:5880): avc: denied { write } for pid=8249 comm="syz.8.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.252140][ T8261] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 306.265547][ T8264] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 306.265563][ T8264] block device autoloading is deprecated and will be removed. [ 306.799078][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.804091][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.753413][ T5698] usb 5-1: USB disconnect, device number 29 [ 307.920073][ T8276] FAULT_INJECTION: forcing a failure. [ 307.920073][ T8276] name failslab, interval 1, probability 0, space 0, times 0 [ 307.920105][ T8276] CPU: 1 UID: 0 PID: 8276 Comm: syz.2.555 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.920132][ T8276] Tainted: [L]=SOFTLOCKUP [ 307.920139][ T8276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 307.920152][ T8276] Call Trace: [ 307.920159][ T8276] [ 307.920168][ T8276] dump_stack_lvl+0x100/0x190 [ 307.920200][ T8276] should_fail_ex.cold+0x5/0xa [ 307.920227][ T8276] should_failslab+0xc2/0x120 [ 307.920255][ T8276] __kmalloc_cache_noprof+0x91/0x6d0 [ 307.920273][ T8276] ? xfd_validate_state+0x129/0x190 [ 307.920294][ T8276] ? do_epoll_create+0x62/0x540 [ 307.920316][ T8276] do_epoll_create+0x62/0x540 [ 307.920335][ T8276] __x64_sys_epoll_create1+0x30/0x40 [ 307.920355][ T8276] do_syscall_64+0x123/0x790 [ 307.920377][ T8276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.920397][ T8276] RIP: 0033:0x7f904859e159 [ 307.920413][ T8276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.920431][ T8276] RSP: 002b:00007f904948b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 307.920453][ T8276] RAX: ffffffffffffffda RBX: 00007f9048825fa0 RCX: 00007f904859e159 [ 307.920466][ T8276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 307.920478][ T8276] RBP: 00007f904863506b R08: 0000000000000000 R09: 0000000000000000 [ 307.920489][ T8276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.920500][ T8276] R13: 00007f9048826038 R14: 00007f9048825fa0 R15: 00007ffcea0d1138 [ 307.920526][ T8276] [ 309.632999][ C0] net_ratelimit: 61 callbacks suppressed [ 310.553508][ T31] kauditd_printk_skb: 186 callbacks suppressed [ 310.553524][ T31] audit: type=1400 audit(1790753332.619:6067): avc: denied { create } for pid=8306 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 310.638425][ T31] audit: type=1400 audit(1790753332.699:6068): avc: denied { execmem } for pid=8306 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 310.690176][ T31] audit: type=1400 audit(1790753332.749:6069): avc: denied { read write } for pid=8306 comm="syz.4.563" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 310.691272][ T31] audit: type=1400 audit(1790753332.749:6070): avc: denied { read write open } for pid=8306 comm="syz.4.563" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 310.745693][ T31] audit: type=1400 audit(1790753332.809:6071): avc: denied { mounton } for pid=8306 comm="syz.4.563" path="/126/file0" dev="tmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 310.786335][ T31] audit: type=1400 audit(1790753332.849:6072): avc: denied { read } for pid=8311 comm="syz.2.565" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 310.790067][ T31] audit: type=1400 audit(1790753332.849:6073): avc: denied { read write } for pid=8312 comm="syz.7.564" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.792823][ T31] audit: type=1400 audit(1790753332.849:6074): avc: denied { read open } for pid=8311 comm="syz.2.565" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 310.815434][ T31] audit: type=1400 audit(1790753332.859:6075): avc: denied { read write open } for pid=8312 comm="syz.7.564" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.815465][ T31] audit: type=1400 audit(1790753332.859:6076): avc: denied { write } for pid=8303 comm="syz.8.562" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 310.930479][ T8317] 9p: Bad value for 'wfdno' [ 310.951979][ T8304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=8304 comm=syz.8.562 [ 311.092669][ T5712] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 311.482717][ T5712] usb 8-1: Using ep0 maxpacket: 32 [ 311.571122][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.571164][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.616604][ T5712] usb 8-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 312.065684][ T5712] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 312.065743][ T5712] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.235654][ T1212] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 312.578952][ T1212] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 312.654273][ T5712] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.654290][ T5712] usb 8-1: Product: syz [ 312.654303][ T5712] usb 8-1: Manufacturer: syz [ 312.654316][ T5712] usb 8-1: SerialNumber: syz [ 312.693977][ T5712] usb 8-1: config 0 descriptor?? [ 312.737383][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.737402][ T1212] usb 5-1: Product: syz [ 312.737416][ T1212] usb 5-1: Manufacturer: syz [ 312.737431][ T1212] usb 5-1: SerialNumber: syz [ 312.744477][ T5712] keyspan 8-1:0.0: Keyspan 1 port adapter converter detected [ 312.781763][ T5712] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87 [ 312.781809][ T5712] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7 [ 312.800364][ T5712] keyspan 8-1:0.0: unsupported endpoint type 0 [ 312.800958][ T5712] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1 [ 312.801063][ T5712] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2 [ 312.801159][ T5712] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 85 [ 312.801236][ T5712] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5 [ 312.850877][ T5712] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 313.099729][ T8323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.100250][ T8323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.264987][ T5712] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 313.351399][ T30] usb 5-1: USB disconnect, device number 30 [ 314.352609][ T5712] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 314.353401][ T5712] ath9k_htc: Failed to initialize the device [ 314.390979][ T30] usb 5-1: ath9k_htc: USB layer deinitialized [ 314.662502][ C1] net_ratelimit: 54 callbacks suppressed [ 315.185049][ T5698] usb 8-1: USB disconnect, device number 4 [ 315.215978][ T5698] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 315.216333][ T5698] keyspan 8-1:0.0: device disconnected [ 315.848219][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.8.570'. [ 315.848270][ T8338] openvswitch: netlink: Flow actions attr not present in new flow. [ 315.874497][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.8.570'. [ 316.279372][ T31] kauditd_printk_skb: 320 callbacks suppressed [ 316.279387][ T31] audit: type=1400 audit(1790753337.459:6397): avc: denied { execmem } for pid=8336 comm="syz.8.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 316.279426][ T31] audit: type=1400 audit(1790753337.739:6398): avc: denied { read } for pid=8336 comm="syz.8.570" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 316.279465][ T31] audit: type=1400 audit(1790753337.739:6399): avc: denied { read open } for pid=8336 comm="syz.8.570" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 316.279505][ T31] audit: type=1400 audit(1790753337.889:6400): avc: denied { create } for pid=8336 comm="syz.8.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.279539][ T31] audit: type=1400 audit(1790753337.899:6401): avc: denied { create } for pid=8336 comm="syz.8.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 316.279574][ T31] audit: type=1400 audit(1790753337.909:6402): avc: denied { write } for pid=8336 comm="syz.8.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 316.279609][ T31] audit: type=1400 audit(1790753337.929:6403): avc: denied { write } for pid=8336 comm="syz.8.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.279643][ T31] audit: type=1400 audit(1790753337.929:6404): avc: denied { nlmsg_write } for pid=8336 comm="syz.8.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.279677][ T31] audit: type=1400 audit(1790753337.979:6405): avc: denied { read write } for pid=8336 comm="syz.8.570" name="video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 316.279713][ T31] audit: type=1400 audit(1790753337.979:6406): avc: denied { read write open } for pid=8336 comm="syz.8.570" path="/dev/video7" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 316.912763][ T5713] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 317.463020][ T5713] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.478477][ T5713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.478532][ T5713] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 317.478591][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.524421][ T5713] usb 2-1: config 0 descriptor?? [ 317.599973][ T5713] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 317.953771][ T8342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.954317][ T8342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.433675][ T8358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.573'. [ 319.630782][ T8370] syzkaller0: entered promiscuous mode [ 319.630796][ T8370] syzkaller0: entered allmulticast mode [ 319.702638][ C1] net_ratelimit: 43 callbacks suppressed [ 319.917823][ T8371] overlayfs: failed to create directory ./bus/index (errno: 11); mounting read-only [ 319.917837][ T8371] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 320.006290][ T5698] usb 2-1: USB disconnect, device number 19 [ 320.846203][ T8379] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input15 [ 321.058960][ T8390] netlink: 60 bytes leftover after parsing attributes in process `syz.8.579'. [ 321.180505][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 321.180525][ T8389] netlink: 'syz.1.580': attribute type 10 has an invalid length. [ 321.180534][ T8389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.580'. [ 321.283644][ T31] kauditd_printk_skb: 484 callbacks suppressed [ 321.283658][ T31] audit: type=1400 audit(1790753343.349:6891): avc: denied { ioctl } for pid=5596 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 321.290518][ T31] audit: type=1400 audit(1790753343.349:6892): avc: denied { search } for pid=8394 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.294712][ T31] audit: type=1400 audit(1790753343.359:6893): avc: denied { search } for pid=8394 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.296340][ T31] audit: type=1400 audit(1790753343.359:6894): avc: denied { search } for pid=8394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.296900][ T31] audit: type=1400 audit(1790753343.359:6895): avc: denied { search } for pid=8394 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 321.311235][ T31] audit: type=1400 audit(1790753343.369:6896): avc: denied { bpf } for pid=8388 comm="syz.1.580" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.311271][ T31] audit: type=1400 audit(1790753343.369:6897): avc: denied { perfmon } for pid=8388 comm="syz.1.580" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 321.361151][ T31] audit: type=1400 audit(1790753343.419:6898): avc: denied { read write } for pid=8393 comm="syz.4.581" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.373555][ T31] audit: type=1400 audit(1790753343.439:6899): avc: denied { read write open } for pid=8393 comm="syz.4.581" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.388498][ T31] audit: type=1400 audit(1790753343.449:6900): avc: denied { ioctl } for pid=8393 comm="syz.4.581" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 321.399032][ T8389] geneve2: entered promiscuous mode [ 321.399049][ T8389] geneve2: entered allmulticast mode [ 321.454055][ T55] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.464821][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.464852][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.464878][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.714831][ T8398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 322.548914][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.586'. [ 322.921760][ T8423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.588'. [ 324.082773][ T5712] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 324.300184][ T5712] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 324.405394][ T8441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=8441 comm=syz.1.592 [ 324.824036][ T5712] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.824092][ T5712] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 324.824144][ T5712] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.856421][ T5712] usb 9-1: config 0 descriptor?? [ 324.902610][ C0] net_ratelimit: 51 callbacks suppressed [ 324.997487][ T5712] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 325.222837][ T5698] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 325.326117][ T8431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.326672][ T8431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.402305][ T5698] usb 3-1: Using ep0 maxpacket: 32 [ 325.436672][ T5698] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 325.469226][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.491034][ T5698] usb 3-1: config 0 descriptor?? [ 325.819608][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.828669][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.006384][ T5698] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 326.052424][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 326.056125][ T5698] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 326.056155][ T5698] usb 3-1: media controller created [ 326.294488][ T31] kauditd_printk_skb: 472 callbacks suppressed [ 326.294501][ T31] audit: type=1400 audit(1790753348.359:7373): avc: denied { perfmon } for pid=8444 comm="syz.7.594" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.294537][ T31] audit: type=1400 audit(1790753348.359:7374): avc: denied { perfmon } for pid=8444 comm="syz.7.594" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.301665][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.304069][ T5712] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 326.307276][ T31] audit: type=1400 audit(1790753348.369:7375): avc: denied { perfmon } for pid=8444 comm="syz.7.594" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.316576][ T31] audit: type=1400 audit(1790753348.369:7376): avc: denied { ioctl } for pid=8452 comm="syz.1.596" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 326.326313][ T31] audit: type=1400 audit(1790753348.369:7377): avc: denied { ioctl } for pid=8452 comm="syz.1.596" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 326.338441][ T31] audit: type=1400 audit(1790753348.399:7378): avc: denied { perfmon } for pid=8444 comm="syz.7.594" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.338476][ T31] audit: type=1400 audit(1790753348.399:7379): avc: denied { perfmon } for pid=8444 comm="syz.7.594" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.342036][ T31] audit: type=1400 audit(1790753348.399:7380): avc: denied { ioctl } for pid=8452 comm="syz.1.596" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 326.384516][ T31] audit: type=1400 audit(1790753348.439:7381): avc: denied { bpf } for pid=8444 comm="syz.7.594" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 326.389656][ T31] audit: type=1400 audit(1790753348.439:7382): avc: denied { ioctl } for pid=8452 comm="syz.1.596" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 326.474335][ T5712] usb 2-1: Using ep0 maxpacket: 32 [ 326.487167][ T5712] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 326.547096][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.547119][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.547165][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.577766][ T5712] usb 2-1: config 0 descriptor?? [ 326.641056][ T5698] az6027: usb out operation failed. (-71) [ 326.644419][ T5698] az6027: usb out operation failed. (-71) [ 326.644430][ T5698] stb0899_attach: Driver disabled by Kconfig [ 326.644439][ T5698] az6027: no front-end attached [ 326.644439][ T5698] [ 326.646255][ T5698] az6027: usb out operation failed. (-71) [ 326.646266][ T5698] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 326.670434][ T5698] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 326.725533][ T5698] dvb-usb: schedule remote query interval to 400 msecs. [ 326.725546][ T5698] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 326.760546][ T5698] usb 3-1: USB disconnect, device number 17 [ 326.953811][ T30] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 327.105513][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 327.146625][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 327.146664][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 327.181012][ T30] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 327.181034][ T30] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 327.181051][ T30] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 327.181070][ T30] usb 5-1: config 128 has no interface number 0 [ 327.181120][ T30] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 327.181142][ T30] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.181187][ T30] usb 5-1: config 128 interface 127 has no altsetting 0 [ 327.254423][ T5712] cherry 0003:046A:0023.000B: item 0 4 0 11 parsing failed [ 327.269002][ T5712] cherry 0003:046A:0023.000B: probe with driver cherry failed with error -22 [ 327.288185][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.288204][ T30] usb 5-1: Product: syz [ 327.288219][ T30] usb 5-1: Manufacturer: syz [ 327.288233][ T30] usb 5-1: SerialNumber: syz [ 327.405183][ T5698] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 327.453351][ T25] usb 9-1: USB disconnect, device number 4 [ 327.513963][ T8454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.514512][ T8454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.526673][ T5712] usb 2-1: USB disconnect, device number 20 [ 328.436380][ T30] usb 5-1: USB disconnect, device number 31 [ 328.978971][ T8010] udevd[8010]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.913484][ T5698] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 330.107907][ T5698] usb 8-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 330.157701][ T5698] usb 8-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 330.203765][ T5712] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 330.238491][ T5698] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.238503][ T5698] usb 8-1: Product: syz [ 330.238511][ T5698] usb 8-1: Manufacturer: syz [ 330.238520][ T5698] usb 8-1: SerialNumber: syz [ 330.272500][ C0] net_ratelimit: 54 callbacks suppressed [ 330.313023][ T5698] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 330.313042][ T5698] dvb-usb: bulk message failed: -22 (3/0) [ 330.378344][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 330.383727][ T5698] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 330.383776][ T5698] usb 8-1: media controller created [ 330.409137][ T5712] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 330.423208][ T5712] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 330.423231][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.423249][ T5712] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 330.423305][ T5712] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.430411][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 330.430429][ T5712] usb 3-1: Product: syz [ 330.430444][ T5712] usb 3-1: Manufacturer: syz [ 330.529239][ T5712] cdc_wdm 3-1:1.0: skipping garbage [ 330.529251][ T5712] cdc_wdm 3-1:1.0: skipping garbage [ 330.579163][ T5712] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 330.579177][ T5712] cdc_wdm 3-1:1.0: Unknown control protocol [ 330.599373][ T8490] dvb-usb: bulk message failed: -22 (4/0) [ 330.631988][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 330.710287][ T5606] Bluetooth: hci4: unexpected event for opcode 0x200c [ 330.828925][ T5712] usb 3-1: USB disconnect, device number 18 [ 331.185949][ T5698] DVB: Unable to find symbol mt352_attach() [ 331.185957][ T5698] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 331.209495][ T5698] dvb-usb: bulk message failed: -22 (3/0) [ 331.224315][ T5698] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 331.252432][ T5698] usb 8-1: USB disconnect, device number 5 [ 331.322248][ T31] kauditd_printk_skb: 279 callbacks suppressed [ 331.322262][ T31] audit: type=1400 audit(1790753353.379:7662): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 331.381211][ T31] audit: type=1400 audit(1790753353.419:7663): avc: denied { ioctl } for pid=8494 comm="syz.2.607" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 331.381256][ T31] audit: type=1400 audit(1790753353.429:7664): avc: denied { read } for pid=7376 comm="syz-executor" name="loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.381297][ T31] audit: type=1400 audit(1790753353.429:7665): avc: denied { read open } for pid=7376 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.381336][ T31] audit: type=1400 audit(1790753353.429:7666): avc: denied { ioctl } for pid=7376 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 331.437154][ T31] audit: type=1400 audit(1790753353.499:7667): avc: denied { mounton } for pid=8507 comm="syz.1.609" path="/147/dev" dev="tmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 331.447776][ T31] audit: type=1400 audit(1790753353.509:7668): avc: denied { mount } for pid=8507 comm="syz.1.609" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 331.458856][ T5712] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 331.458912][ T31] audit: type=1400 audit(1790753353.519:7669): avc: denied { create } for pid=8507 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.479465][ T31] audit: type=1400 audit(1790753353.539:7670): avc: denied { write } for pid=8507 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.497423][ T31] audit: type=1400 audit(1790753353.559:7671): avc: denied { read } for pid=8507 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.631324][ T8508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.649613][ T5698] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 331.698838][ T5712] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 331.756512][ T5712] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 331.756534][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.756551][ T5712] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 331.756604][ T5712] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.877996][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 331.878015][ T5712] usb 3-1: Product: syz [ 331.878029][ T5712] usb 3-1: Manufacturer: syz [ 331.913134][ T5712] cdc_wdm 3-1:1.0: skipping garbage [ 331.913147][ T5712] cdc_wdm 3-1:1.0: skipping garbage [ 331.920296][ T5712] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 331.920311][ T5712] cdc_wdm 3-1:1.0: Unknown control protocol [ 332.068455][ T5606] Bluetooth: hci6: unexpected event for opcode 0x0c12 [ 332.724313][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 332.742857][ T5698] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 332.775380][ T8496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.607'. [ 332.859330][ T30] usb 3-1: USB disconnect, device number 19 [ 332.928856][ T5698] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.988778][ T5698] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.988813][ T5698] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 332.988844][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.024570][ T5698] usb 5-1: config 0 descriptor?? [ 333.065601][ T5698] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 333.352688][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.355219][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.895242][ T8552] db_root: cannot open: /dev/sequencer2 [ 334.895304][ T8552] db_root: not a directory: /dev/sequencer2 [ 335.605700][ T5713] usb 5-1: USB disconnect, device number 32 [ 335.702498][ C1] net_ratelimit: 196 callbacks suppressed [ 336.254951][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 336.323539][ T31] kauditd_printk_skb: 244 callbacks suppressed [ 336.323553][ T31] audit: type=1400 audit(1790753358.389:7916): avc: denied { view } for pid=8557 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 336.328075][ T31] audit: type=1400 audit(1790753358.389:7917): avc: denied { view } for pid=8557 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 336.328644][ T31] audit: type=1400 audit(1790753358.389:7918): avc: denied { view } for pid=8557 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 336.338767][ T31] audit: type=1400 audit(1790753358.399:7919): avc: denied { view } for pid=8557 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 336.362124][ T31] audit: type=1400 audit(1790753358.409:7920): avc: denied { view } for pid=8557 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 336.362151][ T31] audit: type=1400 audit(1790753358.419:7921): avc: denied { view } for pid=8557 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 336.362171][ T31] audit: type=1400 audit(1790753358.419:7922): avc: denied { view } for pid=8557 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 336.362191][ T31] audit: type=1400 audit(1790753358.419:7923): avc: denied { view } for pid=8557 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 336.395793][ T31] audit: type=1400 audit(1790753358.459:7924): avc: denied { read write } for pid=8563 comm="syz.7.624" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 336.435800][ T31] audit: type=1400 audit(1790753358.499:7925): avc: denied { read write open } for pid=8563 comm="syz.7.624" path="/dev/raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 336.437188][ T8565] 8250_pericom 0000:00:00.0: probe with driver 8250_pericom failed with error -12 [ 336.693040][ T5713] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 336.842524][ T5713] usb 8-1: Using ep0 maxpacket: 32 [ 336.854721][ T5713] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 336.892677][ T5713] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.896858][ T5713] usb 8-1: config 0 descriptor?? [ 337.300120][ T8564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.300480][ T8564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.356478][ T8573] IPVS: Unknown mcast interface: pim6reg [ 337.524977][ T5713] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 337.579698][ T5713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 337.583005][ T5713] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 337.583054][ T5713] usb 8-1: media controller created [ 337.708847][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.816384][ T6298] rpcbind: server 127.0.0.1 not responding, timed out [ 338.615685][ T5713] az6027: usb out operation failed. (-71) [ 338.620246][ T5713] az6027: usb out operation failed. (-71) [ 338.620255][ T5713] stb0899_attach: Driver disabled by Kconfig [ 338.620260][ T5713] az6027: no front-end attached [ 338.620260][ T5713] [ 338.620605][ T5713] az6027: usb out operation failed. (-71) [ 338.620612][ T5713] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 338.621589][ T5713] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input17 [ 338.683917][ T5713] dvb-usb: schedule remote query interval to 400 msecs. [ 338.683927][ T5713] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 338.715743][ T5713] usb 8-1: USB disconnect, device number 6 [ 339.759869][ T5713] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 340.795575][ T8595] syzkaller0: entered promiscuous mode [ 340.795590][ T8595] syzkaller0: entered allmulticast mode [ 341.003179][ T30] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 341.232499][ C0] net_ratelimit: 53 callbacks suppressed [ 341.923746][ T31] kauditd_printk_skb: 449 callbacks suppressed [ 341.923758][ T31] audit: type=1400 audit(1790753363.109:8375): avc: denied { execmem } for pid=8598 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 341.923781][ T31] audit: type=1400 audit(1790753363.399:8376): avc: denied { read } for pid=8598 comm="syz.2.631" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 341.923808][ T31] audit: type=1400 audit(1790753363.399:8377): avc: denied { read open } for pid=8598 comm="syz.2.631" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 341.923829][ T31] audit: type=1400 audit(1790753363.549:8378): avc: denied { write } for pid=8598 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 341.923848][ T31] audit: type=1400 audit(1790753363.559:8379): avc: denied { read } for pid=8598 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 341.923867][ T31] audit: type=1400 audit(1790753363.629:8380): avc: denied { listen } for pid=8598 comm="syz.2.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 342.043813][ T31] audit: type=1400 audit(1790753364.059:8381): avc: denied { ioctl } for pid=8597 comm="syz.1.632" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.043852][ T31] audit: type=1400 audit(1790753364.079:8382): avc: denied { sys_module } for pid=8594 comm="syz.4.629" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 342.043883][ T31] audit: type=1400 audit(1790753364.079:8383): avc: denied { module_request } for pid=8594 comm="syz.4.629" kmod="syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 342.045323][ T31] audit: type=1400 audit(1790753364.099:8384): avc: denied { prog_load } for pid=8602 comm="syz.7.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 342.174116][ T30] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.178883][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.178930][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 342.178978][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.184429][ T30] usb 2-1: config 0 descriptor?? [ 342.190048][ T30] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 342.506688][ T8599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.512345][ T8599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.386392][ T5712] usb 2-1: USB disconnect, device number 21 [ 344.467142][ T8640] netlink: 20 bytes leftover after parsing attributes in process `syz.7.640'. [ 346.592630][ C0] net_ratelimit: 225 callbacks suppressed [ 346.934472][ T31] kauditd_printk_skb: 491 callbacks suppressed [ 346.934485][ T31] audit: type=1400 audit(1790753368.999:8876): avc: denied { accept } for pid=8654 comm="syz.4.646" lport=41321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 346.980511][ T31] audit: type=1400 audit(1790753369.039:8877): avc: denied { wake_alarm } for pid=8655 comm="syz.8.645" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 347.004604][ T31] audit: type=1400 audit(1790753369.069:8878): avc: denied { wake_alarm } for pid=8655 comm="syz.8.645" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 347.007754][ T31] audit: type=1400 audit(1790753369.069:8879): avc: denied { map_create } for pid=8655 comm="syz.8.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 347.008877][ T31] audit: type=1400 audit(1790753369.069:8880): avc: denied { bpf } for pid=8655 comm="syz.8.645" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 347.009952][ T31] audit: type=1400 audit(1790753369.069:8881): avc: denied { map_create } for pid=8655 comm="syz.8.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 347.011810][ T31] audit: type=1400 audit(1790753369.069:8882): avc: denied { map_read map_write } for pid=8655 comm="syz.8.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 347.128343][ T31] audit: type=1400 audit(1790753369.189:8883): avc: denied { create } for pid=8655 comm="syz.8.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 347.128754][ T31] audit: type=1400 audit(1790753369.189:8884): avc: denied { read } for pid=8659 comm="syz.2.647" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 347.129760][ T31] audit: type=1400 audit(1790753369.189:8885): avc: denied { read open } for pid=8659 comm="syz.2.647" path="net:[4026532807]" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 347.692747][ T25] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 347.847500][ T25] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 347.865060][ T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.865080][ T25] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.898002][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 347.898023][ T25] usb 9-1: SerialNumber: syz [ 348.562881][ T5713] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 348.659048][ T25] usb 9-1: 0:2 : does not exist [ 348.659738][ T25] usb 9-1: unit 5: unexpected type 0x0b [ 348.721866][ T25] usb 9-1: USB disconnect, device number 5 [ 348.731264][ T5713] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.755230][ T5713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.755281][ T5713] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 348.755331][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.796642][ T5784] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 348.811851][ T5713] usb 2-1: config 0 descriptor?? [ 348.833878][ T5713] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 349.165502][ T8330] udevd[8330]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.219052][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.233165][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.302538][ T5698] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 350.452549][ T5698] usb 9-1: Using ep0 maxpacket: 32 [ 350.456909][ T5698] usb 9-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 350.494773][ T5698] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 350.494798][ T5698] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.494822][ T5698] usb 9-1: config 0 interface 0 has no altsetting 0 [ 350.494888][ T5698] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.536464][ T5698] usb 9-1: config 0 descriptor?? [ 351.301418][ T30] usb 2-1: USB disconnect, device number 22 [ 351.843478][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.843959][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.872488][ C0] net_ratelimit: 193 callbacks suppressed [ 351.953645][ T31] kauditd_printk_skb: 623 callbacks suppressed [ 351.953659][ T31] audit: type=1400 audit(1790753374.009:9509): avc: denied { write } for pid=8709 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 352.958660][ T31] audit: type=1400 audit(1790753374.059:9510): avc: denied { execmem } for pid=8718 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 352.958696][ T31] audit: type=1400 audit(1790753374.349:9511): avc: denied { read } for pid=8718 comm="syz.1.659" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 352.958726][ T31] audit: type=1400 audit(1790753374.349:9512): avc: denied { read open } for pid=8718 comm="syz.1.659" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 352.958755][ T31] audit: type=1400 audit(1790753374.519:9513): avc: denied { create } for pid=8718 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 352.958783][ T31] audit: type=1400 audit(1790753374.549:9514): avc: denied { prog_load } for pid=8718 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 352.958810][ T31] audit: type=1400 audit(1790753374.569:9515): avc: denied { bpf } for pid=8718 comm="syz.1.659" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 352.958841][ T31] audit: type=1400 audit(1790753374.599:9516): avc: denied { setopt } for pid=8718 comm="syz.1.659" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 352.958875][ T31] audit: type=1400 audit(1790753374.629:9517): avc: denied { prog_load } for pid=8718 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 352.958908][ T31] audit: type=1400 audit(1790753374.639:9518): avc: denied { bpf } for pid=8718 comm="syz.1.659" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.038964][ T8716] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 353.039269][ T8716] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 353.278823][ T5698] hid-alps 0003:044E:120B.000C: failed read register (-71) [ 353.278864][ T5698] hid-alps 0003:044E:120B.000C: failed U1_DEV_CTRL_1 (-71) [ 353.294939][ T5698] hid-alps 0003:044E:120B.000C: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.8-1/input0 [ 353.320807][ T8716] CIFS: VFS: Error connecting to socket. Aborting operation. [ 353.325329][ T5698] usb 9-1: USB disconnect, device number 6 [ 353.339742][ T8716] CIFS: VFS: cifs_mount failed w/return code = -111 [ 353.519901][ T8711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.536918][ T8711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.907269][ T8727] fido_id[8727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 354.022900][ T6295] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.282648][ T6294] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.282911][ T993] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.282943][ T993] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.333360][ T8732] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 354.333594][ T8732] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 354.333822][ T8732] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 354.334043][ T8732] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.334263][ T8732] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 354.334472][ T8732] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 355.486455][ T8755] program syz.2.668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.507925][ T8756] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 355.582815][ T5712] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 355.855880][ T5712] usb 5-1: unable to get BOS descriptor or descriptor too short [ 355.855919][ T5712] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 355.915383][ T5712] usb 5-1: config index 0 descriptor too short (expected 62866, got 69) [ 355.915407][ T5712] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.915424][ T5712] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 356.012243][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.012262][ T5712] usb 5-1: Product: syz [ 356.012277][ T5712] usb 5-1: Manufacturer: syz [ 356.012290][ T5712] usb 5-1: SerialNumber: syz [ 356.042152][ T5712] usb 5-1: config 0 descriptor?? [ 356.353766][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 356.353805][ T5608] Bluetooth: hci4: command 0x0c1a tx timeout [ 356.353833][ T5608] Bluetooth: hci6: command 0x0c1a tx timeout [ 356.353858][ T5608] Bluetooth: hci3: command 0x0406 tx timeout [ 356.353884][ T5608] Bluetooth: hci2: command 0x0406 tx timeout [ 356.353908][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 356.406931][ T5712] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 357.062502][ C0] net_ratelimit: 176 callbacks suppressed [ 357.409729][ T31] kauditd_printk_skb: 500 callbacks suppressed [ 357.409742][ T31] audit: type=1400 audit(1790753378.579:10019): avc: denied { execmem } for pid=8772 comm="syz.8.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 357.409778][ T31] audit: type=1400 audit(1790753378.869:10020): avc: denied { read } for pid=8772 comm="syz.8.671" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 357.409815][ T31] audit: type=1400 audit(1790753378.869:10021): avc: denied { read open } for pid=8772 comm="syz.8.671" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 357.409853][ T31] audit: type=1400 audit(1790753379.039:10022): avc: denied { create } for pid=8772 comm="syz.8.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 357.409885][ T31] audit: type=1400 audit(1790753379.059:10023): avc: denied { prog_load } for pid=8772 comm="syz.8.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.409906][ T31] audit: type=1400 audit(1790753379.069:10024): avc: denied { bpf } for pid=8772 comm="syz.8.671" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.409925][ T31] audit: type=1400 audit(1790753379.089:10025): avc: denied { setopt } for pid=8772 comm="syz.8.671" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 357.409945][ T31] audit: type=1400 audit(1790753379.109:10026): avc: denied { prog_load } for pid=8772 comm="syz.8.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.409964][ T31] audit: type=1400 audit(1790753379.119:10027): avc: denied { bpf } for pid=8772 comm="syz.8.671" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.409982][ T31] audit: type=1400 audit(1790753379.469:10028): avc: denied { ioctl } for pid=8751 comm="syz.4.667" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 357.431810][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.432380][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.444296][ T5712] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.509889][ T5712] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.509940][ T5712] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 357.509990][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.570052][ T5712] usb 3-1: config 0 descriptor?? [ 357.636410][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.636982][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.665122][ T5712] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 357.746961][ T5784] usb 5-1: USB disconnect, device number 33 [ 357.976473][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.977013][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.992751][ T5712] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 358.154606][ T5712] usb 2-1: Using ep0 maxpacket: 8 [ 358.168811][ T5712] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 358.207982][ T5712] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 358.208044][ T5712] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.208067][ T5712] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.208090][ T5712] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.208112][ T5712] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.208164][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.343977][ T5784] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 358.505051][ T5784] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 358.555944][ T5784] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 358.555978][ T5784] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 358.556003][ T5784] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 358.556025][ T5784] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 358.556092][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.687465][ T5712] usb 2-1: usb_control_msg returned -32 [ 358.687657][ T5712] usbtmc 2-1:16.0: can't read capabilities [ 359.124206][ T8754] FAULT_INJECTION: forcing a failure. [ 359.124206][ T8754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.124236][ T8754] CPU: 1 UID: 0 PID: 8754 Comm: syz.4.667 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.124265][ T8754] Tainted: [L]=SOFTLOCKUP [ 359.124272][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 359.124285][ T8754] Call Trace: [ 359.124292][ T8754] [ 359.124301][ T8754] dump_stack_lvl+0x100/0x190 [ 359.124337][ T8754] should_fail_ex.cold+0x5/0xa [ 359.124366][ T8754] _copy_to_user+0x32/0xd0 [ 359.124394][ T8754] raw_ioctl+0x11c4/0x2b80 [ 359.124425][ T8754] ? __pfx_raw_ioctl+0x10/0x10 [ 359.124447][ T8754] ? selinux_file_ioctl+0x13b/0x290 [ 359.124471][ T8754] ? selinux_file_ioctl+0xb6/0x290 ** 87 printk messages dropped ** ** 90 printk messages dropped ** ** 148 printk messages dropped ** ** 147 printk messages dropped ** ** 73 printk messages dropped ** ** 131 printk messages dropped ** ** 73 printk messages dropped ** ** 28 printk messages dropped ** ** 136 printk messages dropped ** ** 144 printk messages dropped ** ** 142 printk messages dropped ** ** 144 printk messages dropped ** ** 142 printk messages dropped ** ** 145 printk messages dropped ** ** 140 printk messages dropped ** ** 144 printk messages dropped ** ** 141 printk messages dropped ** ** 163 printk messages dropped ** ** 117 printk messages dropped ** ** 135 printk messages dropped ** ** 137 printk messages dropped ** ** 134 printk messages dropped ** ** 138 printk messages dropped ** ** 137 printk messages dropped ** ** 144 printk messages dropped ** ** 147 printk messages dropped ** ** 144 printk messages dropped ** ** 143 printk messages dropped ** ** 146 printk messages dropped ** ** 143 printk messages dropped ** ** 144 printk messages dropped ** ** 146 printk messages dropped ** ** 144 printk messages dropped ** ** 143 printk messages dropped ** ** 143 printk messages dropped ** ** 205 printk messages dropped ** ** 145 printk messages dropped ** ** 133 printk messages dropped ** ** 144 printk messages dropped ** ** 141 printk messages dropped ** ** 147 printk messages dropped ** ** 143 printk messages dropped ** ** 141 printk messages dropped ** ** 144 printk messages dropped ** ** 144 printk messages dropped ** ** 142 printk messages dropped ** ** 201 printk messages dropped ** ** 147 printk messages dropped ** ** 147 printk messages dropped ** ** 143 printk messages dropped ** ** 144 printk messages dropped ** ** 129 printk messages dropped ** ** 144 printk messages dropped ** ** 139 printk messages dropped ** ** 114 printk messages dropped ** ** 139 printk messages dropped ** ** 145 printk messages dropped ** ** 207 printk messages dropped ** ** 86 printk messages dropped ** ** 148 printk messages dropped ** [ 359.869707][ T30] usb 3-1: USB disconnect, device number 21 [ 359.891660][ T8768] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 360.576903][ T5784] ims_pcu 5-1:1.0: Failed to set line state, error: -71 [ 360.586144][ T5784] ims_pcu 5-1:1.0: probe with driver ims_pcu failed with error -71 [ 360.648397][ T5784] usb 5-1: USB disconnect, device number 34 [ 361.037348][ T30] usb 2-1: USB disconnect, device number 23 [ 361.783265][ T1761] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 361.829228][ T8800] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 361.829251][ T8800] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 361.831267][ T8800] vhci_hcd vhci_hcd.0: Device attached [ 361.836599][ T8802] vhci_hcd: connection closed [ 361.853132][ T6294] vhci_hcd vhci_hcd.7: stop threads [ 361.860837][ T6294] vhci_hcd vhci_hcd.7: release socket [ 361.860863][ T6294] vhci_hcd vhci_hcd.7: disconnect device [ 361.932487][ T1761] usb 9-1: Using ep0 maxpacket: 32 [ 361.940678][ T1761] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 361.953624][ T1761] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 361.953646][ T1761] usb 9-1: config 0 has no interface number 0 [ 361.953677][ T1761] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 361.953695][ T1761] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 361.953717][ T1761] usb 9-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 11621, setting to 1024 [ 361.953739][ T1761] usb 9-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 361.953758][ T1761] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.960578][ T1761] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.960593][ T1761] usb 9-1: Product: syz [ 361.960605][ T1761] usb 9-1: Manufacturer: syz [ 361.960617][ T1761] usb 9-1: SerialNumber: syz [ 362.038011][ T1761] usb 9-1: config 0 descriptor?? [ 362.040690][ T8794] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 362.085757][ T1761] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.119/input/input19 [ 362.102512][ C1] net_ratelimit: 103 callbacks suppressed [ 362.112606][ T4954] usb 9-1: BOGUS urb xfer, pipe 1 != type 3 [ 362.441930][ T31] kauditd_printk_skb: 274 callbacks suppressed [ 362.441942][ T31] audit: type=1400 audit(1790753384.499:10303): avc: denied { read } for pid=5597 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.443381][ T31] audit: type=1400 audit(1790753384.509:10304): avc: denied { unmount } for pid=7376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 362.482806][ T5784] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 362.505483][ T31] audit: type=1400 audit(1790753384.549:10305): avc: denied { read open } for pid=5597 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.505512][ T31] audit: type=1400 audit(1790753384.549:10306): avc: denied { ioctl } for pid=5597 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 362.538604][ T31] audit: type=1400 audit(1790753384.579:10307): avc: denied { ioctl } for pid=8801 comm="syz.2.676" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.538653][ T31] audit: type=1400 audit(1790753384.579:10308): avc: denied { ioctl } for pid=8801 comm="syz.2.676" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.538692][ T31] audit: type=1400 audit(1790753384.599:10309): avc: denied { ioctl } for pid=8801 comm="syz.2.676" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.602692][ T31] audit: type=1400 audit(1790753384.659:10310): avc: denied { ioctl } for pid=8801 comm="syz.2.676" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.673631][ T5784] usb 3-1: Using ep0 maxpacket: 16 [ 362.677503][ T5784] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 362.677620][ T31] audit: type=1400 audit(1790753384.739:10311): avc: denied { ioctl } for pid=8801 comm="syz.2.676" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.678459][ T31] audit: type=1400 audit(1790753384.739:10312): avc: denied { ioctl } for pid=8801 comm="syz.2.676" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 362.704841][ T5784] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.704864][ T5784] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.704882][ T5784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 362.704924][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.745873][ T5784] usb 3-1: config 0 descriptor?? [ 362.887799][ T8794] syzkaller0: entered promiscuous mode [ 362.887814][ T8794] syzkaller0: entered allmulticast mode [ 363.034353][ T30] usb 9-1: USB disconnect, device number 7 [ 363.274444][ T5784] mcp2221 0003:04D8:00DD.000D: unbalanced delimiter at end of report description [ 363.285599][ T5784] mcp2221 0003:04D8:00DD.000D: can't parse reports [ 363.285672][ T5784] mcp2221 0003:04D8:00DD.000D: probe with driver mcp2221 failed with error -22 [ 364.078614][ T30] usb 3-1: USB disconnect, device number 22 [ 364.215191][ T8819] sctp: [Deprecated]: syz.7.679 (pid 8819) Use of int in max_burst socket option. [ 364.215191][ T8819] Use struct sctp_assoc_value instead [ 366.273820][ T30] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 366.401762][ T8841] netlink: 64 bytes leftover after parsing attributes in process `syz.2.686'. [ 366.437982][ T30] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.461768][ T30] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.461802][ T30] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 366.461854][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.496537][ T30] usb 9-1: config 0 descriptor?? [ 366.535929][ T30] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 366.843439][ T8830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.844006][ T8830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.142494][ C1] net_ratelimit: 53 callbacks suppressed [ 367.486354][ T31] kauditd_printk_skb: 446 callbacks suppressed [ 367.486368][ T31] audit: type=1400 audit(1790753389.549:10759): avc: denied { ioctl } for pid=8845 comm="syz.2.687" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.542677][ T5784] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 367.547886][ T31] audit: type=1400 audit(1790753389.609:10760): avc: denied { ioctl } for pid=8845 comm="syz.2.687" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.561038][ T31] audit: type=1400 audit(1790753389.619:10761): avc: denied { ioctl } for pid=8845 comm="syz.2.687" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.611596][ T31] audit: type=1400 audit(1790753389.659:10762): avc: denied { ioctl } for pid=8845 comm="syz.2.687" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.611640][ T31] audit: type=1400 audit(1790753389.659:10763): avc: denied { sys_module } for pid=8844 comm="syz.1.688" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 367.639527][ T31] audit: type=1400 audit(1790753389.679:10764): avc: denied { ioctl } for pid=8845 comm="syz.2.687" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.660655][ T31] audit: type=1400 audit(1790753389.709:10765): avc: denied { module_request } for pid=8844 comm="syz.1.688" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 367.702604][ T31] audit: type=1400 audit(1790753389.759:10766): avc: denied { ioctl } for pid=8845 comm="syz.2.687" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.703791][ T5784] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 367.722032][ T31] audit: type=1400 audit(1790753389.779:10767): avc: denied { ioctl } for pid=8845 comm="syz.2.687" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.733239][ T31] audit: type=1400 audit(1790753389.799:10768): avc: denied { ioctl } for pid=8845 comm="syz.2.687" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 367.755160][ T5784] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.755190][ T5784] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 367.824140][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.824160][ T5784] usb 3-1: Product: syz [ 367.824173][ T5784] usb 3-1: Manufacturer: syz [ 367.824188][ T5784] usb 3-1: SerialNumber: syz [ 367.907948][ T5784] cdc_mbim 3-1:1.0: skipping garbage [ 368.162146][ T8860] use of bytesused == 0 is deprecated and will be removed in the future, [ 368.162160][ T8860] use the actual size instead. [ 368.309116][ T8848] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 368.553062][ T5712] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 368.708489][ T5712] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 368.749250][ T5712] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.749310][ T5712] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 368.749331][ T5712] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 368.749354][ T5712] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.749409][ T5712] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.864724][ T1212] usb 9-1: USB disconnect, device number 8 [ 369.095365][ T8848] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 369.113618][ T5784] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 369.150054][ T5784] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 369.267152][ T5784] wwan wwan0: port wwan0mbim0 attached [ 369.464867][ T5784] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, f2:13:1b:b6:49:57 [ 369.466560][ T8848] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 369.727354][ T1761] usb 3-1: USB disconnect, device number 23 [ 369.742324][ T1761] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 369.920068][ T1761] wwan wwan0: port wwan0mbim0 disconnected [ 371.052894][ T5698] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 371.382933][ T5698] usb 9-1: Using ep0 maxpacket: 32 [ 371.759237][ T5698] usb 9-1: unable to get BOS descriptor or descriptor too short [ 371.759385][ T5698] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 372.182497][ C0] net_ratelimit: 56 callbacks suppressed [ 372.593033][ T31] kauditd_printk_skb: 266 callbacks suppressed [ 372.593069][ T31] audit: type=1400 audit(1790753394.569:11035): avc: denied { read } for pid=8892 comm="cmp" name="resolv.conf.eth7.ipv4ll" dev="tmpfs" ino=2997 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 372.869559][ T31] audit: type=1400 audit(1790753394.929:11036): avc: denied { ioctl } for pid=8890 comm="syz.8.694" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 373.100884][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.159547][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.258893][ T31] audit: type=1400 audit(1790753395.319:11037): avc: denied { read open } for pid=8892 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth7.ipv4ll" dev="tmpfs" ino=2997 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 374.002366][ T31] audit: type=1400 audit(1790753396.059:11038): avc: denied { getattr } for pid=8892 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 374.044994][ T31] audit: type=1400 audit(1790753396.099:11039): avc: denied { ioctl } for pid=8890 comm="syz.8.694" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.049883][ T31] audit: type=1400 audit(1790753396.109:11040): avc: denied { getattr } for pid=8892 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth7.ipv4ll" dev="tmpfs" ino=2997 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 374.178588][ T31] audit: type=1400 audit(1790753396.239:11041): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 374.229424][ T5698] usb 9-1: unable to read config index 0 descriptor/all [ 374.229486][ T5698] usb 9-1: can't read configurations, error -71 [ 374.289728][ T31] audit: type=1400 audit(1790753396.349:11042): avc: denied { read } for pid=5597 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.289772][ T31] audit: type=1400 audit(1790753396.349:11043): avc: denied { read open } for pid=5597 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.292003][ T31] audit: type=1400 audit(1790753396.349:11044): avc: denied { ioctl } for pid=5597 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 374.316501][ T5712] gud 8-1:1.0: Failed to add properties (error=-71) [ 374.316525][ T5712] gud 8-1:1.0: probe with driver gud failed with error -71 [ 374.416293][ T5712] usb 8-1: USB disconnect, device number 7 [ 375.365820][ T8920] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 375.464047][ T1212] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 375.629836][ T1212] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 375.674272][ T1212] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.674329][ T1212] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 375.674382][ T1212] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.698745][ T1212] usb 8-1: config 0 descriptor?? [ 375.760126][ T1212] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 376.116125][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.116676][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.182599][ T30] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 376.342661][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 376.351464][ T30] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 376.382550][ T30] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 376.382610][ T30] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 376.382630][ T30] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 376.382651][ T30] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 376.382672][ T30] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 376.382723][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.641801][ T30] usb 3-1: usb_control_msg returned -32 [ 376.641835][ T30] usbtmc 3-1:16.0: can't read capabilities [ 376.903545][ T8941] bond1: Unable to set up delay as MII monitoring is disabled [ 376.922762][ T8941] bond1 (unregistering): Released all slaves [ 377.445030][ T8950] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 377.462490][ C0] net_ratelimit: 176 callbacks suppressed [ 377.669355][ T31] kauditd_printk_skb: 223 callbacks suppressed [ 377.669371][ T31] audit: type=1400 audit(1790753399.719:11268): avc: denied { read } for pid=5598 comm="syz-executor" name="loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 377.669398][ T31] audit: type=1400 audit(1790753399.729:11269): avc: denied { read open } for pid=5598 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 377.673296][ T31] audit: type=1400 audit(1790753399.739:11270): avc: denied { ioctl } for pid=5598 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 377.675073][ T31] audit: type=1326 audit(1790753399.739:11271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.1.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f4f9e159 code=0x7ffc0000 [ 377.676135][ T31] audit: type=1326 audit(1790753399.739:11272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.1.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f4f9e159 code=0x7ffc0000 [ 377.676955][ T31] audit: type=1326 audit(1790753399.739:11273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.1.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f60f4f9e159 code=0x7ffc0000 [ 377.676991][ T31] audit: type=1326 audit(1790753399.739:11274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.1.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f4f9e159 code=0x7ffc0000 [ 377.677024][ T31] audit: type=1326 audit(1790753399.739:11275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.1.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f4f9e159 code=0x7ffc0000 [ 377.677591][ T31] audit: type=1326 audit(1790753399.739:11276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.1.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f4f9e159 code=0x7ffc0000 [ 377.678542][ T31] audit: type=1326 audit(1790753399.739:11277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.1.706" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f4f9e159 code=0x7ffc0000 [ 378.132802][ T8953] db_root: cannot open: /dev/sequencer2 [ 378.132845][ T8953] db_root: not a directory: /dev/sequencer2 [ 378.732339][ T1212] usb 8-1: USB disconnect, device number 8 [ 378.866171][ T25] usb 3-1: USB disconnect, device number 24 [ 379.531020][ T5606] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 380.829830][ T6298] IPVS: starting estimator thread 0... [ 380.939239][ T8984] IPVS: using max 40 ests per chain, 96000 per kthread [ 382.512527][ C1] net_ratelimit: 44 callbacks suppressed [ 382.677069][ T31] kauditd_printk_skb: 553 callbacks suppressed [ 382.677078][ T31] audit: type=1400 audit(1790753404.739:11831): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 382.779323][ T31] audit: type=1400 audit(1790753404.839:11832): avc: denied { read } for pid=5597 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.783520][ T31] audit: type=1400 audit(1790753404.849:11834): avc: denied { read } for pid=5596 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.790788][ T31] audit: type=1400 audit(1790753404.849:11835): avc: denied { read open } for pid=5596 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.797349][ T31] audit: type=1400 audit(1790753404.849:11836): avc: denied { ioctl } for pid=5596 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.856264][ T31] audit: type=1400 audit(1790753404.839:11833): avc: denied { read open } for pid=5597 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.857320][ T31] audit: type=1400 audit(1790753404.919:11837): avc: denied { ioctl } for pid=5597 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=646 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 382.963357][ T31] audit: type=1400 audit(1790753405.029:11838): avc: denied { create } for pid=8989 comm="syz.4.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 382.985629][ T31] audit: type=1400 audit(1790753405.039:11839): avc: denied { allowed } for pid=8991 comm="syz.7.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 383.028336][ T31] audit: type=1400 audit(1790753405.089:11840): avc: denied { create } for pid=8991 comm="syz.7.716" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 383.262081][ T8997] db_root: cannot open: /dev/sequencer2 [ 383.262128][ T8997] db_root: not a directory: /dev/sequencer2 [ 385.187760][ T9014] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 385.378747][ T5606] Bluetooth: hci1: unexpected cc 0x041a length: 8 > 7 [ 385.378775][ T5606] Bluetooth: hci1: unexpected event for opcode 0x041a [ 385.449017][ T9009] input: syz1 as /devices/virtual/input/input21 [ 385.554232][ T9022] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 3 [ 385.774164][ T5713] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 385.970631][ T5713] usb 9-1: Using ep0 maxpacket: 8 [ 386.050406][ T5713] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 386.169579][ T5713] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 386.169608][ T5713] usb 9-1: config 0 has no interface number 0 [ 386.169749][ T5713] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 386.169778][ T5713] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 386.169807][ T5713] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 386.169835][ T5713] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 386.169974][ T5713] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.519996][ T5713] usb 9-1: config 0 descriptor?? [ 387.355044][ T5713] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 387.792614][ C0] net_ratelimit: 28 callbacks suppressed [ 387.823094][ T31] kauditd_printk_skb: 199 callbacks suppressed [ 387.823109][ T31] audit: type=1400 audit(1790753409.889:12040): avc: denied { read } for pid=9031 comm="syz.2.729" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 387.831753][ T31] audit: type=1400 audit(1790753409.889:12041): avc: denied { read open } for pid=9031 comm="syz.2.729" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 387.837666][ T31] audit: type=1400 audit(1790753409.899:12042): avc: denied { create } for pid=9032 comm="syz.4.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 387.897938][ T31] audit: type=1400 audit(1790753409.959:12043): avc: denied { ioctl } for pid=9031 comm="syz.2.729" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 387.910154][ T31] audit: type=1400 audit(1790753409.969:12044): avc: denied { read } for pid=9032 comm="syz.4.730" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 387.941104][ T31] audit: type=1400 audit(1790753409.979:12045): avc: denied { read open } for pid=9032 comm="syz.4.730" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 387.967452][ T31] audit: type=1400 audit(1790753410.029:12046): avc: denied { create } for pid=9031 comm="syz.2.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 388.087113][ T31] audit: type=1400 audit(1790753410.069:12047): avc: denied { execmem } for pid=9033 comm="syz.7.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 388.266121][ T9039] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 388.575624][ T31] audit: type=1400 audit(1790753410.309:12048): avc: denied { read write } for pid=9033 comm="syz.7.731" name="comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 388.575788][ T31] audit: type=1400 audit(1790753410.309:12049): avc: denied { read write open } for pid=9033 comm="syz.7.731" path="/dev/comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.682927][ T5713] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 389.719629][ T5712] usb 9-1: USB disconnect, device number 11 [ 389.723018][ T5712] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 389.743535][ T1212] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 389.859437][ T5713] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 389.899343][ T5713] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.899365][ T5713] usb 3-1: config 0 has no interface number 0 [ 389.899399][ T5713] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 389.899424][ T5713] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 389.899479][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.919470][ T1212] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 389.942968][ T5713] usb 3-1: config 0 descriptor?? [ 390.086346][ T1212] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.086597][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.129886][ T9054] db_root: cannot open: /dev/sequencer2 [ 390.129923][ T9054] db_root: not a directory: /dev/sequencer2 [ 390.191746][ T9044] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 390.699981][ T1212] metro_usb 2-1:1.0: Metrologic USB to Serial converter detected [ 390.753488][ T5713] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 390.799739][ T1212] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 390.870426][ T5713] usb 3-1: USB disconnect, device number 25 [ 392.775825][ T5713] usb 2-1: USB disconnect, device number 24 [ 392.796058][ T5713] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 392.796390][ T5713] metro_usb 2-1:1.0: device disconnected [ 392.822532][ T5698] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 392.832732][ T31] kauditd_printk_skb: 369 callbacks suppressed [ 392.832747][ T31] audit: type=1326 audit(1790753414.889:12419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.7.737" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff92339e159 code=0x7ffc0000 [ 392.837515][ T31] audit: type=1400 audit(1790753414.899:12420): avc: denied { ioctl } for pid=9077 comm="syz.4.738" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 392.840089][ T31] audit: type=1326 audit(1790753414.899:12421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.7.737" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92339e159 code=0x7ffc0000 [ 392.840115][ T31] audit: type=1326 audit(1790753414.899:12422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.7.737" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92339e159 code=0x7ffc0000 [ 392.878863][ T31] audit: type=1326 audit(1790753414.939:12423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.7.737" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92339e159 code=0x7ffc0000 [ 392.902475][ C1] net_ratelimit: 20 callbacks suppressed [ 392.914291][ T31] audit: type=1326 audit(1790753414.979:12424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.7.737" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff92339e159 code=0x7ffc0000 [ 392.937138][ T31] audit: type=1400 audit(1790753414.999:12425): avc: denied { ioctl } for pid=9077 comm="syz.4.738" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 392.953399][ T31] audit: type=1400 audit(1790753415.009:12426): avc: denied { ioctl } for pid=9077 comm="syz.4.738" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 392.959550][ T31] audit: type=1400 audit(1790753415.019:12427): avc: denied { ioctl } for pid=9077 comm="syz.4.738" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 392.991034][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 393.005883][ T31] audit: type=1400 audit(1790753415.069:12428): avc: denied { ioctl } for pid=9077 comm="syz.4.738" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 393.136651][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 393.136688][ T5698] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 393.179649][ T5698] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 393.179671][ T5698] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 393.179689][ T5698] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 393.179709][ T5698] usb 5-1: config 128 has no interface number 0 [ 393.179763][ T5698] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 393.179787][ T5698] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 393.179807][ T5698] usb 5-1: config 128 interface 127 has no altsetting 0 [ 393.258653][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.258671][ T5698] usb 5-1: Product: syz [ 393.258686][ T5698] usb 5-1: Manufacturer: syz [ 393.258701][ T5698] usb 5-1: SerialNumber: syz [ 393.830929][ T5698] usb 5-1: USB disconnect, device number 35 [ 393.879416][ T8903] udevd[8903]: setting mode of /dev/bus/usb/005/035 to 020664 failed: No such file or directory [ 393.879510][ T8903] udevd[8903]: setting owner of /dev/bus/usb/005/035 to uid=0, gid=0 failed: No such file or directory [ 394.219432][ T8904] udevd[8904]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.286855][ T9095] tmpfs: Bad value for 'mpol' [ 395.950771][ T9104] netlink: 'syz.1.744': attribute type 4 has an invalid length. [ 398.342434][ C0] net_ratelimit: 30 callbacks suppressed [ 398.596508][ T31] kauditd_printk_skb: 241 callbacks suppressed [ 398.596524][ T31] audit: type=1400 audit(1790753419.699:12670): avc: denied { execmem } for pid=9113 comm="syz.8.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 398.596563][ T31] audit: type=1400 audit(1790753420.029:12671): avc: denied { read } for pid=9113 comm="syz.8.749" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 398.596605][ T31] audit: type=1400 audit(1790753420.029:12672): avc: denied { read open } for pid=9113 comm="syz.8.749" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 398.596642][ T31] audit: type=1400 audit(1790753420.219:12673): avc: denied { create } for pid=9113 comm="syz.8.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 398.596676][ T31] audit: type=1400 audit(1790753420.309:12674): avc: denied { prog_load } for pid=9113 comm="syz.8.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 398.596715][ T31] audit: type=1400 audit(1790753420.309:12675): avc: denied { bpf } for pid=9113 comm="syz.8.749" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 398.596756][ T31] audit: type=1400 audit(1790753420.449:12676): avc: denied { setopt } for pid=9113 comm="syz.8.749" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 398.797965][ T31] audit: type=1400 audit(1790753420.859:12677): avc: denied { unmount } for pid=7376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 398.824358][ T31] audit: type=1400 audit(1790753420.889:12678): avc: denied { map_create } for pid=9111 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 398.826532][ T31] audit: type=1400 audit(1790753420.889:12679): avc: denied { map_create } for pid=9111 comm="syz.2.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 399.183586][ T9125] ================================================================== [ 399.183593][ T9125] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 399.183608][ T9125] Read of size 8 at addr ffff88802d648218 by task syz.7.750/9125 [ 399.183617][ T9125] [ 399.183624][ T9125] CPU: 0 UID: 0 PID: 9125 Comm: syz.7.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.183640][ T9125] Tainted: [L]=SOFTLOCKUP [ 399.183645][ T9125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 399.183651][ T9125] Call Trace: [ 399.183656][ T9125] [ 399.183660][ T9125] dump_stack_lvl+0x100/0x190 [ 399.183677][ T9125] print_report+0x13d/0x4b0 [ 399.183694][ T9125] ? __virt_addr_valid+0x239/0x430 [ 399.183706][ T9125] ? dvb_device_open+0x33f/0x3b0 [ 399.183716][ T9125] kasan_report+0xdf/0x1c0 [ 399.183732][ T9125] ? dvb_device_open+0x33f/0x3b0 [ 399.183743][ T9125] ? __pfx_dvb_device_open+0x10/0x10 [ 399.183754][ T9125] dvb_device_open+0x33f/0x3b0 [ 399.183765][ T9125] ? __pfx_dvb_device_open+0x10/0x10 [ 399.183776][ T9125] chrdev_open+0x234/0x6a0 [ 399.183791][ T9125] ? __pfx_chrdev_open+0x10/0x10 [ 399.183805][ T9125] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 399.183818][ T9125] do_dentry_open+0x6ab/0x14d0 [ 399.183831][ T9125] ? __pfx_chrdev_open+0x10/0x10 [ 399.183849][ T9125] vfs_open+0x82/0x3f0 [ 399.183865][ T9125] path_openat+0x19fa/0x2440 [ 399.183881][ T9125] ? __pfx_path_openat+0x10/0x10 [ 399.183897][ T9125] do_file_open+0x20e/0x430 [ 399.183913][ T9125] ? __pfx_do_file_open+0x10/0x10 [ 399.183936][ T9125] ? _raw_spin_unlock+0x28/0x50 [ 399.183953][ T9125] ? alloc_fd+0x471/0x7a0 [ 399.183971][ T9125] do_sys_openat2+0x10f/0x1e0 [ 399.183987][ T9125] ? __pfx_do_sys_openat2+0x10/0x10 [ 399.184003][ T9125] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 399.184019][ T9125] __x64_sys_openat+0x12d/0x210 [ 399.184036][ T9125] ? __pfx___x64_sys_openat+0x10/0x10 [ 399.184055][ T9125] do_syscall_64+0x123/0x790 [ 399.184067][ T9125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.184078][ T9125] RIP: 0033:0x7ff92335e98e [ 399.184087][ T9125] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 399.184098][ T9125] RSP: 002b:00007ff92420ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 399.184110][ T9125] RAX: ffffffffffffffda RBX: 00007ff92420b6c0 RCX: 00007ff92335e98e [ 399.184118][ T9125] RDX: 0000000000000002 RSI: 00007ff92420ac00 RDI: ffffffffffffff9c [ 399.184125][ T9125] RBP: 00007ff92420ac00 R08: 0000000000000000 R09: 0000000000000000 [ 399.184131][ T9125] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 399.184138][ T9125] R13: 00007ff923626038 R14: 00007ff923625fa0 R15: 00007ffebdaae138 [ 399.184149][ T9125] [ 399.184153][ T9125] [ 399.184156][ T9125] Allocated by task 1: [ 399.184161][ T9125] kasan_save_stack+0x30/0x50 [ 399.184175][ T9125] kasan_save_track+0x14/0x30 [ 399.184187][ T9125] __kasan_kmalloc+0xaa/0xb0 [ 399.184199][ T9125] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 399.184209][ T9125] dvb_register_device+0x1d6/0x1e20 [ 399.184219][ T9125] dvb_register_frontend+0x552/0x820 [ 399.184228][ T9125] vidtv_bridge_probe+0x44b/0xa30 [ 399.184241][ T9125] platform_probe+0x106/0x1d0 [ 399.184252][ T9125] really_probe+0x241/0xa60 [ 399.184265][ T9125] __driver_probe_device+0x210/0x460 [ 399.184279][ T9125] driver_probe_device+0x4a/0x140 [ 399.184292][ T9125] __driver_attach+0x21f/0x5b0 [ 399.184305][ T9125] bus_for_each_dev+0x13e/0x1d0 [ 399.184315][ T9125] bus_add_driver+0x305/0x5b0 [ 399.184326][ T9125] driver_register+0x1e2/0x360 [ 399.184341][ T9125] vidtv_bridge_init+0x52/0x80 [ 399.184357][ T9125] do_one_initcall+0x11c/0x6f0 [ 399.184368][ T9125] kernel_init_freeable+0x6ea/0x7b0 [ 399.184379][ T9125] kernel_init+0x21/0x1e0 [ 399.184391][ T9125] ret_from_fork+0x730/0xd60 [ 399.184402][ T9125] ret_from_fork_asm+0x1a/0x30 [ 399.184412][ T9125] [ 399.184415][ T9125] Freed by task 8996: [ 399.184420][ T9125] kasan_save_stack+0x30/0x50 [ 399.184432][ T9125] kasan_save_track+0x14/0x30 [ 399.184444][ T9125] kasan_save_free_info+0x3b/0x70 [ 399.184458][ T9125] __kasan_slab_free+0x5f/0x80 [ 399.184472][ T9125] kfree+0x22b/0x6d0 [ 399.184479][ T9125] dvb_device_put.part.0+0x57/0x90 [ 399.184489][ T9125] dvb_device_open+0x2ba/0x3b0 [ 399.184498][ T9125] chrdev_open+0x234/0x6a0 [ 399.184511][ T9125] do_dentry_open+0x6ab/0x14d0 [ 399.184522][ T9125] vfs_open+0x82/0x3f0 [ 399.184536][ T9125] path_openat+0x19fa/0x2440 [ 399.184549][ T9125] do_file_open+0x20e/0x430 [ 399.184563][ T9125] do_sys_openat2+0x10f/0x1e0 [ 399.184578][ T9125] __x64_sys_openat+0x12d/0x210 [ 399.184593][ T9125] do_syscall_64+0x123/0x790 [ 399.184603][ T9125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.184613][ T9125] [ 399.184615][ T9125] The buggy address belongs to the object at ffff88802d648200 [ 399.184615][ T9125] which belongs to the cache kmalloc-256 of size 256 [ 399.184624][ T9125] The buggy address is located 24 bytes inside of [ 399.184624][ T9125] freed 256-byte region [ffff88802d648200, ffff88802d648300) [ 399.184633][ T9125] [ 399.184636][ T9125] The buggy address belongs to the physical page: [ 399.184641][ T9125] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d648 [ 399.184651][ T9125] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 399.184659][ T9125] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 399.184669][ T9125] page_type: f5(slab) [ 399.184678][ T9125] raw: 00fff00000000040 ffff88801c031b40 dead000000000100 dead000000000122 [ 399.184687][ T9125] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 399.184697][ T9125] head: 00fff00000000040 ffff88801c031b40 dead000000000100 dead000000000122 [ 399.184706][ T9125] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 399.184715][ T9125] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 399.184724][ T9125] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 399.184730][ T9125] page dumped because: kasan: bad access detected [ 399.184735][ T9125] page_owner tracks the page as allocated [ 399.184738][ T9125] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8771581656 [ 399.184755][ T9125] post_alloc_hook+0xfd/0x120 [ 399.184764][ T9125] get_page_from_freelist+0x110d/0x35d0 [ 399.184774][ T9125] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 399.184785][ T9125] new_slab+0xa9/0x6e0 [ 399.184794][ T9125] refill_objects+0xe3/0x410 [ 399.184804][ T9125] __pcs_replace_empty_main+0x35e/0x650 [ 399.184814][ T9125] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 399.184823][ T9125] bus_add_driver+0x92/0x5b0 [ 399.184834][ T9125] driver_register+0x1e2/0x360 [ 399.184849][ T9125] usb_register_driver+0x21c/0x3e0 [ 399.184858][ T9125] do_one_initcall+0x11c/0x6f0 [ 399.184868][ T9125] kernel_init_freeable+0x6ea/0x7b0 [ 399.184880][ T9125] kernel_init+0x21/0x1e0 [ 399.184892][ T9125] ret_from_fork+0x730/0xd60 [ 399.184902][ T9125] ret_from_fork_asm+0x1a/0x30 [ 399.184913][ T9125] page_owner free stack trace missing [ 399.184917][ T9125] [ 399.184919][ T9125] Memory state around the buggy address: [ 399.184924][ T9125] ffff88802d648100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 399.184932][ T9125] ffff88802d648180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 399.184939][ T9125] >ffff88802d648200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.184944][ T9125] ^ [ 399.184950][ T9125] ffff88802d648280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 399.184960][ T9125] ffff88802d648300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 399.184967][ T9125] ================================================================== [ 399.187450][ T9125] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 399.941522][ T9125] CPU: 0 UID: 0 PID: 9125 Comm: syz.7.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 399.952255][ T9125] Tainted: [L]=SOFTLOCKUP [ 399.956561][ T9125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 399.966591][ T9125] Call Trace: [ 399.969844][ T9125] [ 399.972749][ T9125] dump_stack_lvl+0x100/0x190 [ 399.977411][ T9125] vpanic+0x553/0x970 [ 399.981362][ T9125] ? __pfx_vpanic+0x10/0x10 [ 399.985835][ T9125] ? dvb_device_open+0x33f/0x3b0 [ 399.990745][ T9125] panic+0xd1/0xe0 [ 399.994436][ T9125] ? __pfx_panic+0x10/0x10 [ 399.998822][ T9125] ? dvb_device_open+0x33f/0x3b0 [ 400.003733][ T9125] ? preempt_schedule_common+0x3c/0xb0 [ 400.009173][ T9125] check_panic_on_warn.cold+0x19/0x34 [ 400.014528][ T9125] end_report.part.0+0x3a/0x90 [ 400.019267][ T9125] kasan_report.cold+0xe/0x18 [ 400.023921][ T9125] ? dvb_device_open+0x33f/0x3b0 [ 400.028830][ T9125] ? __pfx_dvb_device_open+0x10/0x10 [ 400.034084][ T9125] dvb_device_open+0x33f/0x3b0 [ 400.038820][ T9125] ? __pfx_dvb_device_open+0x10/0x10 [ 400.044080][ T9125] chrdev_open+0x234/0x6a0 [ 400.048476][ T9125] ? __pfx_chrdev_open+0x10/0x10 [ 400.053394][ T9125] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 400.059693][ T9125] do_dentry_open+0x6ab/0x14d0 [ 400.064439][ T9125] ? __pfx_chrdev_open+0x10/0x10 [ 400.069351][ T9125] vfs_open+0x82/0x3f0 [ 400.073405][ T9125] path_openat+0x19fa/0x2440 [ 400.077985][ T9125] ? __pfx_path_openat+0x10/0x10 [ 400.082899][ T9125] do_file_open+0x20e/0x430 [ 400.087387][ T9125] ? __pfx_do_file_open+0x10/0x10 [ 400.092396][ T9125] ? _raw_spin_unlock+0x28/0x50 [ 400.097233][ T9125] ? alloc_fd+0x471/0x7a0 [ 400.101543][ T9125] do_sys_openat2+0x10f/0x1e0 [ 400.106197][ T9125] ? __pfx_do_sys_openat2+0x10/0x10 [ 400.111380][ T9125] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 400.117778][ T9125] __x64_sys_openat+0x12d/0x210 [ 400.122607][ T9125] ? __pfx___x64_sys_openat+0x10/0x10 [ 400.127958][ T9125] do_syscall_64+0x123/0x790 [ 400.132520][ T9125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.138386][ T9125] RIP: 0033:0x7ff92335e98e [ 400.142773][ T9125] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 400.162351][ T9125] RSP: 002b:00007ff92420ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 400.170746][ T9125] RAX: ffffffffffffffda RBX: 00007ff92420b6c0 RCX: 00007ff92335e98e [ 400.178693][ T9125] RDX: 0000000000000002 RSI: 00007ff92420ac00 RDI: ffffffffffffff9c [ 400.186634][ T9125] RBP: 00007ff92420ac00 R08: 0000000000000000 R09: 0000000000000000 [ 400.194576][ T9125] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 400.202518][ T9125] R13: 00007ff923626038 R14: 00007ff923625fa0 R15: 00007ffebdaae138 [ 400.210464][ T9125] [ 400.213564][ T9125] Kernel Offset: disabled [ 400.217862][ T9125] Rebooting in 86400 seconds..