last executing test programs: 32m28.458272464s ago: executing program 32 (id=207): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001a40)={0x4c, 0x0, &(0x7f0000001b40)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 27m23.489256176s ago: executing program 33 (id=1200): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001a80)="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", 0x2000, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 26m38.139120022s ago: executing program 34 (id=1278): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x8000000, 0x536, 0x280, 0x1b0, 0x370, 0x370, 0x370, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x84}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xb}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1}, {0x87}, 0xfffffffd}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x370}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0x0, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x4}}}, {{@ipv6={@private1, @local, [0xffffff00, 0xff, 0xff000000, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'veth0_to_bridge\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x3, 0x2, 0x50}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 14m45.199841868s ago: executing program 1 (id=3507): socket$alg(0x26, 0x5, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, 0x0, 0xc0) 14m39.810480287s ago: executing program 1 (id=3518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount$overlay(0x0, 0x0, 0x0, 0x2200408, &(0x7f0000000200)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '\x0e\x94\x95>\x95\xb4@\x12\xc9\xf3\xb4\n\x99\xd1A\xcd\xfa\xdc\xfa\x0e&zr\x94>88\x10L\xdc\xb2o\xc3\x02|\xb8m\xb2\xa7\x15\xed\x9eP\xbdi\xdb\xc1\x98F\xd0\xd9\x9d\xbd\x1bi\xe8\xe31C/e\x9e\xdc\xb0I\x9d\x92\xae\xd6\xb4\xe2\xea\x10LJy\a\xf2\x96\xf8\x13ti\xfb5;\xfax\xab\x85\xc9\xe4\xef\x84\x92?\xaco\xb0v\x94\x93\xd9\xd3U|\x88Un\xc4\x8d\xc0|\x80Q\xdf+\xcaEN\x1e\x05\x82$\x7f\xd1\x96\f\xc9\xfb\xfe(]MR#\xffcA\xc9Y3\b\xb57^\x9d'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 14m39.666525508s ago: executing program 4 (id=3520): remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0xcc, 0x100000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x4000004) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x92e5e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600}, 0x0) 14m39.597344591s ago: executing program 3 (id=3521): socket$inet_sctp(0x2, 0x1, 0x84) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r4, &(0x7f0000000080), 0x0}, 0x20) socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'dh\x00', 0x11, 0x3, 0x6a}, 0x2c) 14m38.743219911s ago: executing program 3 (id=3522): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000009f00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000fc0)="985e", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4", 0xc7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)="97e513fbe0c0430309000303fb5caff9f45461012231d14f4004ca6b336d792d0d4d099c8f9bee194ec3bff77f56c8dc9ff9dfbb0b1a03fd5d5cabd31ef40cd39617b16e8f9e0169db2f0bed8ac23f0879ffbb144336dd6c502cf530a9009ef400496c70b39e88566a2b5ab9e696", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000001040)="f65f3dd593fe183dc04a4b0cdab27b58951cc5d5047d2992682124e1aa5ac3edd4c7dc9d71ba7c78db492ce2f1d0e68c1104f0006f", 0x35}, {&(0x7f0000002040)="8833e6cab4614331", 0x8}, {&(0x7f0000000d00)="8a54d3875e9f74acc0ab2adb15e51a598edc1a368c9037c803d81006070b1f1a824a83c1bbb644b03f1ee437609dd00e549a10566136b7f6d04cda6220fda46898787a5d5d887c1a9edd6174d0ef8649b6a8cfe6f4715e2e79c058152072e22ce9b08b2f496761afbee085434ea6203a6955b3450649b9ce828fc3c2042f20806dfd7b15725d20ada98690a6f81f68487945a548e99449ad38b7bcce009f", 0x9e}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x7, 0x2090) 14m38.032095626s ago: executing program 1 (id=3524): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) ioctl$UI_DEV_DESTROY(r1, 0x5502) socket$inet6_sctp(0xa, 0x1, 0x84) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 14m37.640581996s ago: executing program 7 (id=3525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c084}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 14m37.640316852s ago: executing program 4 (id=3526): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0x4) 14m36.995878208s ago: executing program 5 (id=3528): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$search(0xa, 0x0, &(0x7f0000000200)='trusted\x00', 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x8, 0x22, 0x205, 0x831a, 0x1, "03000000cb0b0e000800feffffbcd6ff0100", 0x808, 0x7fff}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x478, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x0, 0x400, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0xec, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0x103, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x3, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x0, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0xff, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x8, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x1, 0x9, 0x401, 0x0, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x7c, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0xaa32, 0x2, 0x2, 0x4000008, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x2, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x10004, 0xb, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31c, 0xffff8001, 0x6, 0xff, 0xa, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x200, 0x1, 0x720a, 0xff7f, 0xfff, 0x9, 0x7fff, 0x8, 0x3ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff802, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0x0, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x5, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0xffff, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) 14m36.891977549s ago: executing program 1 (id=3529): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0xc2381, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x0, 0x7d7b465c1d30afba, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, r3) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x17b}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd83, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x48) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000001c0)="b69736ec6483aed50a1ae88a6a09c9d74fb0cef2d459b5db77fa9f55e79e1ee259", 0x21, r7}, 0x68) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x10001}], 0x1) io_uring_enter(r4, 0x4d10, 0x2, 0x2, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x8400, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r10) 14m36.254510038s ago: executing program 7 (id=3530): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0xfffffe15, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2e, 0xfffffffc, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x8b, 0x6}}, @qdisc_kind_options=@q_htb={{0x8}, {0x4c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0xffdffff9}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 14m36.168856656s ago: executing program 4 (id=3531): socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 14m36.023348611s ago: executing program 5 (id=3532): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex_waitv(&(0x7f0000001e40)=[{0x1edf, &(0x7f0000000440)=0x7, 0x2}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000"], 0x44}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 14m35.986285121s ago: executing program 7 (id=3533): connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tgkill(0x0, r0, 0x1a) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000200850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write(0xffffffffffffffff, &(0x7f0000000040)="0600", 0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000003c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x7, 0x0, &(0x7f00000002c0), 0x0, 0x2, 0xc, 0xfffffff8, 0x9, 0x3, &(0x7f0000000340)="c854c53d661e189ace66a2983e449accf74aa39127f391c633a8f529731e4f781c9d1f5cfdf13a4d0baeeb27cbc353bc7e92ad3aa035f45e648f50fad525125f6320fabc35d81bec232bbb6d855a8a6ee36347603542212b9f36"}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_create1(0x0) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) 14m35.748896648s ago: executing program 1 (id=3534): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000200000000200000008000000080000000700000000040000040000006cb600000800000061d9c9b931ea532c95b090e7c078ed81d4b938d99195bc4c78eb6e3b35773edfa3386fc0f9f01f7a8f7222e276356905dc9e49e9a1d49855b844763b48e80387d607bd5304caea268fce1d9e8a9e1ccc7e714059e690a2fce4feaa13a30ff2770b06bd51f39078ade44faf435f5987ff8f827af9692bd0ab5962a31007563823"]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, &(0x7f0000000000)="14", 0x1, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000020801090000000000000000035c7b06040004800900010073797a3000000040"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000000080300000000000000000000000000dd5388798a65c9f591648f46fc4aa083476c60149ca3763582a3bb78c4ef248a2ce57390d7902650d047c1ea3ebd573df987554dfe0eb5fe3d5a7742a22235861c43836d330fd83fa6ce1ce592868c3e1bd5f4282bad71e3b5b8b17e7fe81d45fcdcc7cb744057802c6fb7b9a30eb4b846d2581a901f09fd03284e8478391d491ffec77d832d4451060a61662527fba3021fb1d9f1bc2a5360"], 0x14}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) fadvise64(0xffffffffffffffff, 0x2, 0xc, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 14m34.911042452s ago: executing program 4 (id=3535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0xa001, 0x0) close(0xffffffffffffffff) lseek(0xffffffffffffffff, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, &(0x7f0000000300), 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = dup(r4) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005580)=@newtaction={0x14, 0x30, 0x300, 0x0, 0x25dfdbf9}, 0x14}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC]) openat$vcsu(0xffffff9c, &(0x7f0000000800), 0x2001, 0x0) fanotify_init(0xf00, 0x1000) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYRESDEC=r5], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 14m34.132707727s ago: executing program 5 (id=3536): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005500)=[{{0x0, 0x0, 0x0}, 0x5add}, {{&(0x7f00000007c0)=@ax25={{}, [@remote, @bcast, @null, @null, @netrom, @null, @remote, @rose]}, 0x80, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003f80)}, 0xb38b}], 0x3, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000025300)=""/102392, 0x18ff8) syz_io_uring_setup(0xb7f, &(0x7f0000000480)={0x0, 0x38ab, 0x2, 0x0, 0x1e6}, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x4004000) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) 14m33.579456019s ago: executing program 3 (id=3537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000400007e597bd700000000000037c"], 0x14}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r2) lseek(0xffffffffffffffff, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000300)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005580)=@newtaction={0x14, 0x30, 0x300, 0x0, 0x25dfdbf9}, 0x14}}, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC]) r8 = openat$vcsu(0xffffff9c, &(0x7f0000000800), 0x2001, 0x0) write$char_usb(r8, 0x0, 0x0) fanotify_init(0xf00, 0x1000) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYRESDEC=r7], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 14m32.244880859s ago: executing program 3 (id=3538): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x10, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) r4 = dup(r2) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, 0x0, 0x8903, 0x0) 14m31.541352101s ago: executing program 7 (id=3539): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) shutdown(r0, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x138}}, 0x20000800) splice(r0, 0x0, r2, 0x0, 0x7ffff000, 0x3) 14m31.485086956s ago: executing program 7 (id=3540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 14m30.190636885s ago: executing program 5 (id=3541): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 14m29.271441015s ago: executing program 4 (id=3542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x24, 0x4, 0x40, 0x9, 0xaf73, 0xfffffff9, "52bf85b5eb188b1e14ba76e8e06c0a486741e68481cb5107d83f410ac8cf1b2f6293f656"}}, 0x13c) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r4, 0x0, 0x0) socketpair(0x1d, 0x800, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 14m27.717359692s ago: executing program 5 (id=3543): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8}, 0x94) mmap(&(0x7f0000a8a000/0x1000)=nil, 0x1000, 0xd, 0x8010, 0xffffffffffffffff, 0x5cd1b000) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="2e6691bd012b88e7de3b21567e61752308e174e8cab616530a12b56e78527d1c89a20218e120d13c7490c2f880fc1b914fb5825c899b2068dadb03aac69071fe723ae739b65ba4523d4cb5d9fa7c933d6028aa99a0c5fd1abc7aa4fadc4c96d45bd0be1d722dfb771030f34a55131ff9fe7cb4533de4420a741cf82232b118c5d660ff5ab23899e78c1ced79a36974e6bd6606dbaa15df977c264d31d35c7b65d54e1fbc54e41638c1e075635f738f25bcc319b99e830f0467decb6668", 0xbd}], 0x1, &(0x7f00000025c0)=[@rights={{0x18, 0x1, 0x1, [r5, r6]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [r0, r5, r6, r2, r4, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}], 0x78, 0x20}}, {{&(0x7f0000002680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002840), 0x0, &(0x7f0000002a40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r3, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r3, r4]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xe8, 0x40688c4}}, {{&(0x7f0000002b80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003f40)=[{&(0x7f0000002c00)="97b01a98e734df17e4c4fd7afa48ee0deec8ab10271a904905c0e57e02051d588a66707e8b9bb84a3aee6b8c58b4322bf3577b77", 0x34}, {&(0x7f0000002c40)="472043e87485d0272f7700dd46a1154e7874e3f6da0aadb9cdac6fab72ac32d287405f8b7d7c206f7eceef8ede545d6f6fd27296cb64e60be35caeddce4d403a149b09ae4433fad4985add3a0c98a1b8b1993f7de72783952d7989ec659e4c443a345a31de361d5bf93b3c1f6636f512bb4c9573a9e345bf0944d95a4460682dd701abbf44d4a2e30802ff7896fe5cfdcc2f429ab43fe622b4afa5d14d2056d1072c94c04171135e4a612b78e0609e736eaa4ae0ab832751af83ab600a622b0ba39ff3c67ea177b3134edf114e0de287548b37b0091b", 0xd6}, {&(0x7f0000002d40)="5d511019bf8e56473fdafb1c1cc48d7290a405a055dab9e9848d6f8ef1ec3791b0d9713126f2f92e14c9f3b27f5e9da75f3d62e317cc71f3ef316ab4b88368f65148bc01d99abedb2d7a15ecc3eeeb8668aae3044c82ee0414351712e0d89a", 0x5f}, {&(0x7f0000002dc0)="5a05e3811fc0e630e31800adfa9662b9354ee201ec4724017b6b5a0ab1226bda8069de1064e777da6c894e2a94e1057026044617d02aecee4765c1e0465d2c4dd8ceb42a4b75848ce545fe4fe26f1a766ad820a120637a3a5dffab8633bab02e630dc6b3080cfc7adebe3a29a85724230c6124f4caf6db2fddd5d0b71ca6980feae3ecf39963d2f4efab40bb02f7665217b834ef20296803151ca990ce95f29ffe5111e6ce6e6e47fce94e607c6e3d2aefdbbe1a4dd19a886c40c0791705ef1bb850e74bab4cc50568b7d32a801feed55b8eb439f38fa900b317f3ac068c3729184a439eee3218cf92da94dfb700a66ce0a435b9b2a3a02af41034b2fbda4e14ba0b1fddcbf4c5f9b41a17fd3025a6eeb0e5a19ccc5aae51bd3ccd33d8eeeede316a5fb9490d8a0c75013b823a28224820217f2d88d9ca6eb4773608f84150b0e3d237199f1189776cc386315f154dba2c2c2c23991ee71b584a2b0a333f1ef845b7195bb5bb6c297f91f9801e8d97ea3afcaf7e65a24c79610541cf5622e01089abae682eff500d0e13f32cb157e3b87621d9feafe6f8469dd2f000c546d0c097782061c621d52748e9bf8c98d0956a35fcad0fb3feb009fc3cd071152b140e781031902179665ac9de541fc4793167fc18ee5bba5596a6b1ecde25da03cb4fe0bdb9bfdc93826f7f548fa6c0546c4978252dcbf27969c8d9adad2b3e1552b785a0338c00f17d9b4711d4c1248c7e54b40fe5d8c650813488a5064f8fe0fe171fd6d89acae023a1043c9a6bda382b50c24836d1ac393ff5c12d85a4788b71df4af9bc3e08b553e05a7865228f60eb34b43055261db447a1894c9c2072dd47a7c00fae4ce4804ecb3359f826a096f9534728b906a2dabce894da9baba289671854190c1466dc7db802b030d5b15b920615d0c27f921bee9872d0f3398adea4bb872a4b25743473de8c9c22d36fe0bd3b99b81940c5415c3327f46ff24649fff878fbb0b61caf798ec7366679c83a4f20709c04fc86fca943309a9670c65c881b4be90c88be8c498651f1a8e01c4056e20714addae94497988c28e55e3cb2f36a9a890cfc3961c166b2280e29997b40429344ba805e9b7aeadc078becc713a837a49c5b90258c56eaeb5bd0866f7db559a6d40fcb2a73e1d7b9f7e9a0f71262449a05e62403c508d1cf550c3ca51ff8518480b26ee1a8e048f18f2a61fcdd74a63fd30d201be2adfcbba14acc4519cbf88d61ac7aa692d20b07018cd1148e752abea6e202132de731e9d05cd6d3c5d28839d34694ed314a323039b92816020c76d94de962901c925a5cf801524ed798d1e8b34ee5435c4fcb28b8a656128ed802f2b213cffb326adcc420748e80de3439f4277a15586829da940806bd9ba84bd9cb1f0532fbd709b75723c747c8a915fe3d24e7bb6fb6d3e75942f26e27ec01ed5a287574fcbf6cdf814bb47d2ed11c29674799bffae96abda383992455ad8ab852c5d4dcfac4f644c830264f65f87aa44f93f815e5bc3207d7ca80aa8a3acd95175f93ec5eace3602b499da9f4635bda6ac7d1d99e6d8ee27f7d804b52f7d77ef2b70cb3605f442759c5514eed7a3129b624acd4709d1735a1c1f1d9ad4330ebcf65fb765aca34d648a16c670940de3773f4788f3b5322a85f6f74d56244a51c81f6114e4a4012a5aa965b48890236c0a62f740716d8bd1ca7f8197430967f59e0960032659127822421de46ec0be2202aacb8b6a9b81affb760cb1718e8f68852013ce1f2d5202c8bc4deb7182eaf60aa8e9e984eea6f7c874a5d51256d659c2989495cefe2955f837c16614ee4289aa574683bb559f293d3f13efbc72ec9942518fdb56f737832f309fc615ea4cdfa5557c25ad9a30826df5ea1ecaced14c68d5c1bb6a22f4284f980ab9debe01dd5a9c43a7d31f5446f8910a7d95ce8cef56477c40a3b5fd4400a8da71ac6923a6ac2ac376a4fda49202ee5b2196195b2d5c511b4d261c788029172486057639dd6c0df3125e93ca1eecd314164796b84793c5a187c544424f2fe6cac1af55a96299c3464f2f72a890335d4f75825fda87594b44f8feac3d479bef1c55f8dfc8f0cba8d10a7c4389d2f84b1f2f3d56136a0c60daecce391e904cf14379fdcea70305b999529123d07516544edf5b924a489ae93f02fb4e044cb75899dac28be3e4e50776e8cb83faebd172ad229f027e61a4db944646d1f35b7b4487fbfd9fb67bebc9f2d561d984e0d3bf9c6980aa97e99195a8abe31e25a5f4aa6a66996c1ec51ea75178b6d75179bc6ebeed28aecce78fd1f38373c9dd5c6bb3d8ed6ab7912363dfd36bef4a61d78c3a3b1fcc7504a8d309688322f451f125155341711dc3a0268be279a8e93ce5fcc121dd39a24f8b43653cb90d2cd9ccd386bdb36c7d446ef410d33b7e9e226a36f7fb7fe11ccd889e1a9e7c5523b51e2c88722e4d357265f9a4188c02c01f9763aafca72a3bde75e72b6036b71f90ee5d0f018fc33b498a9943e9cea1f063a497344e999e48207f1266de8df6a24e2b2e7c18d76f8efe54bb8229b060772fdebc48ffdcd43a8181fe451a9d41ee0c2d2def671be34d24711c7066fee1c881eed18805f97a7d083babff880202c3dc4dad21ab1dfc7ba0a2828b8f2d8a8a15fe1aaa8f7cbd6fc5e15db33d1076e02d59a18dc4d3db6b28773ec655bed902e31a8b8fa385504740e374e3ab2a6326dd81182c0050fa1954b9fe4f2f161d5376bfe70f342e10525a2c75e8474cacad117c7e078af09b3b8f9a27871d0fc86173c25dddf45381f96caaa6605186f16be23313116997e904c379a35191436a09c5c80c87ba0847a852dec714f13e987b4048ae8831022d54094a83da3dceda713e8dc1612549167b82dd504adbaf02f44f838b6205edef37baba4268b5fdf0af3271886df19b374a1657aff08b186cadcebbbdd89ee8ac9d2b4d3acf5f86e0cbb0f4683d1e946206b720e1e75d3537f068ded014f203c821700df545522935d348f2a1fbf0f6a046b43b8bc18e8a7b9ec6dd56a47541f8a144aaf8d49c089461cc0edc5ea053d659dcdd52c30c9c80dc6e6e5f137b912516c33cad77c91cf3e807a130b49580fb91f2e65fa6eb023443096b5a4165cd9a3f2778c3c7610e240e16cdeb3cf4a39f68230f6c2b0a80c9a5bdef8636cb6f0b132cd07a79dc40c153436e7d4e31361cfdbda6731be4b437bbfaeaed6fc92b161b48796ab98e9a27d5614d19d0556ab46cef4cbfb0933afba44e12047f2491c66ada86fe33864a4d256e768b86d1e70abcb048d4e0d51b21b5bd6f09fa9c3ec0a9b00ffbc87c9de87c452266ba8fc9148b1312789af616a681ba0df369ccd1dfab915064dba60f259b94f0132eae804be8a09274c3c358cb740e677ecac36085aeab7fcdb571fef1ab6d83164671598c8a2342f00361ede6a09ef9ee336a93a0fadaf94db9c1ee6512bb3fe6550cf60e2d427f2c3589cbd0d035b4c2dbc2920c9c348561eed4758c4a412405e9be233d5010852c00e7e7ee5157c84bb000d00eb7df51c5c1d9e383bcc0496f29cc2ba65bf691b425a43f67aed45b9a7daf3b4f61b7bbe5a2320217be7bd1ea118de98d7037be51a1f63b473951ef4494c0f096340716c3dcc06bac7f76abf008d2a69b331580e75fba77b63f687197e52ecafbce2663aa66244f14e78dc9e6b3f2e3e713888714ed07150938c4f3aa97ccad2d2dd596fca669d097d50f7b7f28b2d35d5288e19b408ab8f3752f2062190c9dc806a2e2fb3ac1b3f7fdf586d56065faaa9bf65b6048ddde9cc0672b6bb53f2de6b7c75e025f8a52b99794f7270cd7cc9a681bccd0aaeef9eecde19b44e868c5177e3b47b48e5ebfaf19c2e7a0c3d272d8c0d7c046f0695004531797c88b2bb6d4820b1959c8098c59ba503416fc13e739eb852224d26e6acff22b1f5cdabaf1327998a4098d3298277f401500200e9acd42580752d0a466551129d6235fef2818b4f90b85b2b02a396e073d1c39385058c9336341de5d9a115a5efcd2bb67edb9b803800ac3908bcaf9add5cfc92b3bb8b964997f9f2a6c0b1fc27b29bfef18ff2f9ce330a3872eea7a75dec40ff2710a1c6a85578fe16574e5f703fa93ba794e37d98725119ad7ee51fbaaa743f0074a885f77c3d045e379b56d0f8171af26a45a9bf213ecd6b65ad1e2cde5eb8e43a909ca4ff9087620d463a59850f3dea7783bb880a886aa149573cdf4c9f378a4adb810b01b77d72a33ad7141b26424581184309575c8ef6afb61e63dee49d4b83107c4fb1ccba5f02ce8a44e77718fc4d214d4c2ebe6c0c37d7b22017459d0b92e84e8b4e9834913786d2412f0d2b20b36f1c7c9e6374630b0a6352fbfd1831c78293a251c6d9a9e7b912652fd2d194708282b09352bc1e156d193be16aed71e49b049c7b5aef3082a9f5538536ef47a9d60655a3ba191321a86f1bc8cb7997c9936edee9536dede583c59ca73850098b511233e6227fb8dd4eb81e71cdd3a45bc53b8c0d6ef89410746d3839fc60efbc560ebf9edf82f6adaf77f43c38455864a2ce1b0ef2af1efff2fc59d65a298bb617ea0c6e662d90e05e3ef24c113c72c09f12d53d1333fad89c494200dc68130bb40ab1bfadd3bcf18393456a2186edef417df90de43a78c2b628d41f31d67cb600865c74aa72e5f87c1dfdb4b4f4e2a2cfdd1b56ddae0af916f1666f9dd2ee83759ccad434842e82d3b54c4d6c3459acc0eb20eba4f875a83d84e0dbaeb9857ae733293ed25f9e448cbc54d4f110443229d5a4feb938681d371e0e098d1900997d2645344f8472a777ab4556851f9c1ccf577c83ae017f653345d150c7bdfa221824273a14551183c6f797603abd55951f874651ccfb20ce823e8649274baf40dbfe3b384777b544aa51c935ccb01c7a53a0a6b8908542a7a9d72a903a29d54a5d70012647649dc5a74fe99ad5823a2c7dc03f856d7c84de3fce7d9c88b8d1553d38842756c0b1e0f857f4b740dcdcbc90ac87eec30c0b5848538b5c8414f03399009f37db509f26e1e30733d716110d53a486ecfb0c7f2c33d6a30cf19f6b655e58e8a3c17ff76235f53d06a6281cca05819d8151a627695ae7d07390b2b572efc9437d7a9aa82bc7a062c579f93c96f637e5f5f931616ccfd0a3cceded5e65807504636ac67040d0583654a698abe9e70974de69e0bbf879b8da5281a6d30c384bf5e0f8110d89c88640cf69f9857db6ba76ee13be3dca962b276a31cf2ed817d01a980dea118de8be20f037992f4a457879962877fa5e39fed600251359f381a94461d2a4a7ea16c59ff609d2f369b93c5a5493344a218b43f621eade0d8b3fb0a661042659d3975d404a702d149691ca45f220ebd1254d3090f1172f9933ca4f4a6670bab9bbd03c8fc3a1dc789201b40f92e7f94f91233ab9615c62cd29f75f13ec198ceddd6a2622b448645f0b783495fbd7bb5893ac78f61a6eba33d1d5b6404b550e97aafc9f52f1f97da2f6efe9d627b7f35d5f549bc0949cf6b03d1c53ab8f67df2ade8acc8558c0d0902e439bcce11175bf863237c7d426951c2185b1dda86298628fadc6054786db5393f859369ad86dba4a0da862ef88ee736db1dff9484db203c986eb00187b750257adbcced4d1760848acf7c7ad093832ac718aacc81a9b1f710a7f545c20c12f284afd2cf2625209da30e71567b403f50b8ee0766eaaa4b7111923a431df3f742c138501735d25f5dc121ea767961f6def95cd028d6ad52f7c7717655da134aaedd37008db", 0x1000}, {&(0x7f0000003dc0)="6392facccaed7727d60302da56f785bff6e10cd58ee3968e4ae937e481699e6b2cace7c2aa6d1aba9c43fc5bebbb899c50eaa03037f64b76c37d5ca404576066dffe88fbd605e9b03bf78f21b17756193e425bcf97aaad0403e1a240a79ce70b5e", 0x61}, {&(0x7f0000003e40)="76f72b36ee862b3e8d6009d7f57c703d6dfc436021a223332e4e8a01bc777e3996fa3c4d435c3bd6b135819881eb706ddbe8c5856aa496d5f27aaf1fd29a2ab7ed05d9db82cdb21f399a42b6d9a0e34b6d46b5211ab5e56916a8d593992ae4d2d602f3ce687440dd24046fdbd16170b67f603a81abc604ce8a2de76f4e3c408dd6010d178bfd2e1e0f5d6eb2dd9a320edf01c66ab2680e632b056434697a4d178b70fb272b9618d2db7f939e772831f1d69ce0e0e0135d576e8a41a64b3ad82dc06df122cefb9099e9a7c372038aec3232", 0xd1}], 0x6, 0x0, 0x0, 0x8010}}], 0x3, 0x40801) recvmmsg(r5, &(0x7f00000003c0)=[{{&(0x7f0000000440)=@generic, 0x80, &(0x7f0000002680), 0x0, &(0x7f0000002700)=""/197, 0xc5}}], 0x1, 0x80000060, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x5}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20044810) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r8, 0x5501) ioctl$UI_DEV_DESTROY(r8, 0x5502) 14m27.690178046s ago: executing program 3 (id=3544): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x20040084) 14m27.453575227s ago: executing program 7 (id=3545): socket(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14m27.213512067s ago: executing program 3 (id=3546): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000004c0)=0x40000079, 0x4) uname(&(0x7f00000000c0)=""/109) r1 = signalfd(r0, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000200000000200000008000000080000000700000000040000040000006cb600000800000061d9c9b931ea532c95b090e7c078ed81d4b938d99195bc4c78eb6e3b35773edfa3386fc0f9f01f7a8f7222e276356905dc9e49e9a1d49855b844763b48e80387d607bd5304caea268fce1d9e8a9e1ccc7e714059e690a2fce4feaa13a30ff2770b06bd51f39078ade44faf435f5987ff8f827af9692bd0ab5962a310075638234049bf3136e78d9818d108ac938fbf4a6eff539fc465146d582ae153ec"]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) add_key$user(0x0, 0x0, &(0x7f0000000000)="14", 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, 0x0, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000000080300000000000000000000000000dd5388798a65c9f591648f46fc4aa083476c60149ca3763582a3bb78c4ef248a2ce57390d7902650d047c1ea3ebd573df987554dfe0eb5fe3d5a7742a22235861c43836d330fd83fa6ce1ce592868c3e1bd5f4282bad71e3b5b8b17e7fe81d45fcdcc7cb744057802c6fb7b9a30eb4b846d2581a901f09fd03284e8478391d491ffec77d832d4451060a61662527fba3021fb1d9f1bc2a5360"], 0x14}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) fadvise64(0xffffffffffffffff, 0x2, 0xc, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 14m27.191926544s ago: executing program 5 (id=3547): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) 14m27.16631418s ago: executing program 1 (id=3548): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000400007e597bd700000000000037c00"], 0x14}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r2) lseek(0xffffffffffffffff, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000300)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005580)=@newtaction={0x14, 0x30, 0x300, 0x0, 0x25dfdbf9}, 0x14}}, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC]) r8 = openat$vcsu(0xffffff9c, &(0x7f0000000800), 0x2001, 0x0) write$char_usb(r8, 0x0, 0x0) fanotify_init(0xf00, 0x1000) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYRESDEC=r7], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 14m23.801800493s ago: executing program 4 (id=3549): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000140)=0x7, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock2(&(0x7f00006bb000/0x3000)=nil, 0x3000, 0x0) r1 = getpid() ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000180)={{}, 0x8}) r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000780), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, &(0x7f0000000440)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0xc048aeca, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14m8.165284782s ago: executing program 35 (id=3545): socket(0x10, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) recvmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14m6.662910387s ago: executing program 36 (id=3548): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000400007e597bd700000000000037c00"], 0x14}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r2) lseek(0xffffffffffffffff, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000300)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005580)=@newtaction={0x14, 0x30, 0x300, 0x0, 0x25dfdbf9}, 0x14}}, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC]) r8 = openat$vcsu(0xffffff9c, &(0x7f0000000800), 0x2001, 0x0) write$char_usb(r8, 0x0, 0x0) fanotify_init(0xf00, 0x1000) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYRESDEC=r7], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 14m6.318735102s ago: executing program 37 (id=3547): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) 14m5.936200617s ago: executing program 38 (id=3546): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000004c0)=0x40000079, 0x4) uname(&(0x7f00000000c0)=""/109) r1 = signalfd(r0, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000200000000200000008000000080000000700000000040000040000006cb600000800000061d9c9b931ea532c95b090e7c078ed81d4b938d99195bc4c78eb6e3b35773edfa3386fc0f9f01f7a8f7222e276356905dc9e49e9a1d49855b844763b48e80387d607bd5304caea268fce1d9e8a9e1ccc7e714059e690a2fce4feaa13a30ff2770b06bd51f39078ade44faf435f5987ff8f827af9692bd0ab5962a310075638234049bf3136e78d9818d108ac938fbf4a6eff539fc465146d582ae153ec"]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) add_key$user(0x0, 0x0, &(0x7f0000000000)="14", 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, 0x0, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000000080300000000000000000000000000dd5388798a65c9f591648f46fc4aa083476c60149ca3763582a3bb78c4ef248a2ce57390d7902650d047c1ea3ebd573df987554dfe0eb5fe3d5a7742a22235861c43836d330fd83fa6ce1ce592868c3e1bd5f4282bad71e3b5b8b17e7fe81d45fcdcc7cb744057802c6fb7b9a30eb4b846d2581a901f09fd03284e8478391d491ffec77d832d4451060a61662527fba3021fb1d9f1bc2a5360"], 0x14}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) fadvise64(0xffffffffffffffff, 0x2, 0xc, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 14m5.716584231s ago: executing program 39 (id=3549): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000140)=0x7, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock2(&(0x7f00006bb000/0x3000)=nil, 0x3000, 0x0) r1 = getpid() ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, &(0x7f0000000180)={{}, 0x8}) r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000780), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, &(0x7f0000000440)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0xc048aeca, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 32.832118159s ago: executing program 9 (id=6052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) socket(0x2a, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 31.698040742s ago: executing program 9 (id=6056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) socket(0x2a, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 30.780840722s ago: executing program 9 (id=6062): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="673aaa44fa73c2d18f929b3e0b096f9c4f483461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e513c58bba87aeb73c75144e4c3ed16c852112472af5d7ae09d2016a306c0ffd644c4d15", 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1200040, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706f6c3ee1c47dba3778f53620de656c6174697665"]) mmap(&(0x7f0000422000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, r0, 0x7fffffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x6a181, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) socket$kcm(0x11, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000ebc00)={0x3, [], 0x0, "d9af4779e483aa"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) 29.65667315s ago: executing program 9 (id=6064): openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r0 = syz_io_uring_complete(0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x27, &(0x7f0000000240)=[0x0], &(0x7f00000002c0), 0x0, 0x35, &(0x7f0000000500), 0x0, 0x10, &(0x7f0000000540), &(0x7f0000000600), 0x8, 0xa6, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@target_btf_id=r2}, 0x14) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000740), 0xc, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf25030000000800040006000000280001800800070074cb0819284ba203023a211258bca20b925e0dd34e43", @ANYRES32=r1, @ANYBLOB="14000400fc010000000000000000000000000000060005004e2300000500050007000000050005000b0000004c00068008000300acc2d7ee5c2614148d0d3f5e9d9e93e3bc6fb8ce4603db46db40d4890ac8609f97dd1b7efa99742055960bb39c0b374310f1deee9991a6f4f297e1fb34cc2e0ab39c582d58ac6cbff6bca543f1741f2db596e661b5865af785ab86f53e241e980dc68c4f4d4d46d24a322feadc7a6d5e44866eaaaaf9e2e3115fe758a8438d5389a908c997ca0772d45e0d166924c9bc6f9f3c4698a3522424f097c99f0e64ab29fbde142c9831", @ANYRES32, @ANYBLOB="08000300ac1414aa1400040000000000000000000000ffff0a01010214000400ff02000000000000000000000000000108000700", @ANYRES32=r1, @ANYBLOB="080004000400000008000300070000004800018014000400ff010000000000000000000000000001060001000200000008000700", @ANYRES64=r3, @ANYBLOB="08030000", @ANYRES32=r1, @ANYBLOB="060005004e2300000800060017000000060005004e2200000800040000000000"], 0x100}, 0x1, 0x0, 0x0, 0x805}, 0xa444) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800"/26], 0x0, 0x1a}, 0x28) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074495470fb70190c190c75a854ff048fa800b6c3f9", 0x3d}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0x3000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r8 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000340)=r8) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xcf}]}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x6f, &(0x7f00000001c0)=""/111}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000001"], 0x50) 27.964286685s ago: executing program 9 (id=6068): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x1000000, 0x0, 0xffffffff, 0xfa000, 0x1000000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x80040005, 0x0, 0x0, 0x40f00, 0x18}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getqdisc={0x34, 0x26, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x2, 0x8}, {0x2, 0x2}, {0xb, 0x1}}, [{0x4}, {0x4}, {}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20810}, 0x435f845ed65f6508) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xa, 0xb}, {0xffff, 0xffe0}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xb, 0x6, 0x4, 0x2, 0x0, 0x1d}}, {0x4}}, {{0x1c, 0x1, {0x2d, 0x33, 0x1, 0x400, 0x1, 0x8, 0x6}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) close(r7) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) 27.824501809s ago: executing program 9 (id=6069): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44002, 0x0) ioctl$PTP_PIN_GETFUNC(r5, 0xc0603d06, &(0x7f00000002c0)={'\x00', 0x7ff, 0x2}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000680)={r8, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, 0x0, 0x0, r10], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x3ffffffffffffe64}) sync() connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 22.815533703s ago: executing program 0 (id=6089): socket(0x10, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x100, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000003e6eeb295ef886e73a675585bc045bb704b1ce8f171563fa8bd81390148c2d51a61ad6e05456db27ae774d1d42f9a14abbbc6b7eb45f96db3abbd3faafe551b1d9344b1cb254b701f737c497e4dfd57cb21fee6182d3498fe0dcf9f7bf30b56d4b0a43d885fbb4b4ecf58e3c8cfc11b301000000000000008f0f2e0d310ba685f0563c465de992e392db03920b2716ab5289a1d5360ee995ff00b6ba1ee66e4da9430bb9cfacff2a00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8b6000, 0x40) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r7, 0xc008551b, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000008000000a8f8ffff05000000f8714e4e6eea78339cc1f967a2920eceac59e59284f778919a50d034e2a7bbcecfec2721503179beec649241061a2e6e86c054e6429d7241fe50346e3d98f0b0d188aefdec3003baa5ec54d41065c44e0541c0f36c28ba8cf14247c41bf4b90b544ad93a4434b598831e7f4fa5f3307130c9"]) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) 21.392988882s ago: executing program 0 (id=6092): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000280)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r2, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x32}) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x60) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x400c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f00000001c0)=0x5, 0x7c, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.672799961s ago: executing program 0 (id=6099): syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_request={0x14}}}}}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_io_uring_setup(0xbd9, 0x0, &(0x7f0000000dc0), &(0x7f0000000100)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004600)=""/102400, 0x19000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f0000000000), &(0x7f0000004880)=@udp=r2}, 0x20) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000300)=""/232) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000000040eadc568c2717100000000000000000a4d84a51f6392bdfa834ede5575d00009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x14}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80400000000009, 0xfffffffffffffa20, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x400, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x8080000, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x8, 0x4, 0x10}, {0xffff1000, 0xb000, 0xc, 0xfe, 0x0, 0x1, 0x0, 0x0, 0x3, 0x7}, {0x1, 0x5000, 0x10, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xf8}, {0x60000, 0xffff1000, 0x9, 0x0, 0x5, 0xff, 0x0, 0x2, 0xfc, 0x3c, 0x0, 0x1}, {0x0, 0x80a0000, 0xf, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfc, 0x0, 0x5, 0x7f}, {0x0, 0x100000, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x4, 0x0, 0x0, 0x1, 0x0, 0xcc, 0x26, 0x40}, {0x80a0000, 0x3}, {0xdddd1000, 0xe}, 0xddfdffc7, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 18.396230342s ago: executing program 0 (id=6102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) chdir(0x0) umount2(0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0xe0}}, 0x0) 18.12633093s ago: executing program 0 (id=6103): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x407) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) preadv2(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x8, 0x9, 0x33) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000007c0)="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", 0xc00) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$sock(r6, &(0x7f0000000780)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x1, 0x0, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0xc}}}, 0xfffffffffffffcd2, 0x0, 0x0, &(0x7f0000000040), 0x18}, 0x8081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004800010928bd700018dcdf250a000100", @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28009}, 0x8000002) 17.150884034s ago: executing program 0 (id=6108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="673aaa44fa73c2d18f929b3e0b096f9c4f483461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e513c58bba87aeb73c75144e4c3ed16c852112472af5d7ae09d2016a306c0ffd644c4d15", 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1200040, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706f6c3ee1c47dba3778f53620de656c6174697665"]) mmap(&(0x7f0000422000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, r0, 0x7fffffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x6a181, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) socket$kcm(0x11, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000ebc00)={0x3, [], 0x0, "d9af4779e483aa"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) 16.765260862s ago: executing program 40 (id=6108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="673aaa44fa73c2d18f929b3e0b096f9c4f483461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e513c58bba87aeb73c75144e4c3ed16c852112472af5d7ae09d2016a306c0ffd644c4d15", 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1200040, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706f6c3ee1c47dba3778f53620de656c6174697665"]) mmap(&(0x7f0000422000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, r0, 0x7fffffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='udf\x00', 0x1000040, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x6a181, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) socket$kcm(0x11, 0x2, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000ebc00)={0x3, [], 0x0, "d9af4779e483aa"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) 14.047748961s ago: executing program 6 (id=6114): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) syz_open_dev$video(0x0, 0x7f, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) sendto$unix(r1, &(0x7f00000008c0)='c', 0x1, 0x4008014, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 13.767639282s ago: executing program 6 (id=6116): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @empty, 0x6000000}}, 0x24) r1 = syz_open_dev$mouse(&(0x7f0000000640), 0x3ff, 0xe0200) sendmsg$TIPC_NL_LINK_GET(r1, 0xfffffffffffffffd, 0x20004010) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8e, 0xef, 0x6}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xfa, 0x3, 0xfd, 0x48, 0xe3}, 0x61, &(0x7f00000001c0)={0x5, 0xf, 0x61, 0x4, [@generic={0x3a, 0x10, 0x2, "105885b2928815f992752fa255ec2001f2f210efbb6e551ccc9accd85f9042b123a092f7185950c004128f2f28bfbdfa7a7222fd8238cc"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x3, 0x3, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x3, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "b9d5b8292e08462f4a3dcce0e15ee212"}]}, 0x8, [{0xd2, &(0x7f0000000240)=@string={0xd2, 0x3, "bf2e2c479934929c09d698f0642139639a55379a2d9e3f291ddb4ff677e23653ef215235b3c5d0be73f7534e6629f9589909083d99304924fecdf3885c7122555511b45eabe129d9e35c5235b76d83277c8fe443a812b6b4c3161a44c01b2e135fd9a697f1cef7f5562cf3799c8a42b00542137f1ee01b5d3959a161d0597bea04e18f4df7350b82881541faae03f703b571e0c137d8fce58028889e06bbe36e2d1c34afc3d27b4481ed195a12dd99f3a12f0abd0c7eb575a1a78b2010fba43ec7fe024e0b602e36dbdb3bd6a1b02ae0"}}, {0x37, &(0x7f0000000340)=@string={0x37, 0x3, "95661c11b552bf8db7ff39f1f75cf536efc6ad01908e143de47dc9ac928cc749d422b30e41d05d7f9f2da1e5b907c420f8de7fc80e"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x74, &(0x7f00000003c0)=@string={0x74, 0x3, "d0286b48eca29c0ec6ddeb00a9a2b31015adc0882010a786af4d1d555b92a5cd0cd875aa52ec3637c6799707b1d3ee96bc932e7ad09b71366ea433364c71cb6f5aefd27e819a2b677e40234b5860dd73893668aafc2ebcf4b12c9c29a7450cc6ced0d39e1cb85fd7049dda112fe1f1390693"}}, {0xa, &(0x7f0000000440)=@string={0xa, 0x3, "b88374ddd0d53d08"}}, {0x3b, &(0x7f0000000480)=@string={0x3b, 0x3, "07a52b0229814c43bd4d18bdcbc562e6bcc92323744d39f77fce0835747dd42a2e0884a838fef28ab8d1bcfb376b1e6a7347a54fb204d7ebd5"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x757fe43aaf5e40ee}}, {0x35, &(0x7f0000000500)=@string={0x35, 0x3, "5d4cc83b39d5ad3695c58ff9924057a7acaeb8f22c02e618638c0b9248ce69eea48095a06a3e89a520999427c59d70f81d3d99"}}]}) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1, "371fc8"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r2, 0x8d, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) vmsplice(r4, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_ep_write(r2, 0x2, 0xff, &(0x7f0000000000)="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") r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x4) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000600)) 13.447814293s ago: executing program 41 (id=6069): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44002, 0x0) ioctl$PTP_PIN_GETFUNC(r5, 0xc0603d06, &(0x7f00000002c0)={'\x00', 0x7ff, 0x2}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000680)={r8, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r9, 0x0, 0x0, r10], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x3ffffffffffffe64}) sync() connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 10.80509348s ago: executing program 6 (id=6128): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x0, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x6}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}]}}]}, 0x40}}, 0x24044094) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 10.120758108s ago: executing program 8 (id=6129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) socket(0x2a, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000640)='/selinux/status\x00', 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 9.161210956s ago: executing program 8 (id=6131): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x407) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) preadv2(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x8, 0x9, 0x33) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000007c0)="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", 0xc00) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$sock(r6, &(0x7f0000000780)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x1, 0x0, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0xc}}}, 0xfffffffffffffcd2, 0x0, 0x0, &(0x7f0000000040), 0x18}, 0x8081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004800010928bd700018dcdf250a000100", @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x28009}, 0x8000002) 8.376285276s ago: executing program 2 (id=6132): signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) syz_io_uring_setup(0x18a, &(0x7f0000000080)={0x0, 0x86d5, 0x10, 0x2, 0x2bc}, &(0x7f0000000180), &(0x7f0000000200)) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usbip_server_init(0x1) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5}) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') pread64(r8, &(0x7f0000002140)=""/17, 0x11, 0x0) 6.906448323s ago: executing program 8 (id=6133): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00031a0000001a01"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f00000001c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pwritev(r3, &(0x7f00000008c0)=[{&(0x7f0000000300)="6624d31a98d6fa4746ec44fee4c8ae0546c7c9dac7f0f21907ce81394e1e502430a067ad57e8e9d415c379fe91493059c24b07337f00bf0ab4048bab2dcbd15b71682e91545f111adeb239b9196d89b24c0ddb6607ef53d1daf6dfb6c6998857b401195a63ef498bd3358ecf4dc92637ab2c002320f92317589e8b2a27d12c7b446d8eaa4d5fdd9575b7af518e1143702c20d12c", 0x94}, {&(0x7f0000000500)="7e74a0dfa4d57bbabf7fb23267562018c30f6eb042f6f440e9511e23f957dd65a8d839b701b5bcff42db1e5ea6f6f794eec6c6f10e350a722b764ae8f994ec6f91487e536bbdfa000e655681be0879fb8a252ab12450b3e23e77e1270a1f4a8b27ae1f5e68f828d0ec5702fdf490dcb8e2a435ac0960b9ce274cf4c2623fb21a614d720f4dac33f52c2a3629442e851cbca65d424cf5777859210507c8e8eaf273bd84fd9eca232ac69ed5c797d122166cd5a939d4294a89c22e671230bfd8b8a3268bfef4be12d7", 0xc8}, {&(0x7f0000000480)}, {&(0x7f0000000600)="7b85365a9a98b2c2be7750fe2ec7ca832ed002125e96a4bf3525ea7f1246af08769624324391604761730a02eac5ba721cd2d389cf46696d5db5c9756b77b8d21828d70b4d7c0ff33941573ef8883ad0a71b2077a5fb1bcc8074fbb131e63a01003dfdace4a25a6916f8f2a33adef17902b3adb081814df827f963fda809eff96c14a8b07ca3fef502b52e7e7beb0073afa93e8ce5388aee7f787fe846c63e954ca8708db6c09c7267", 0xa9}, {&(0x7f00000006c0)="11fe7d3ca718bacd1bb34c29ceca83d1b9831766a54b0670fbf8c75fbaa556c270471bd6464c0ad91f9a34a87721d0a805b4ed4732d405308135f097f4aa659064dd925cebccf4d4d3f4da4effdef0e60282", 0x52}, {&(0x7f0000000740)="20ff906b8ae2bd6d181d8c7803bb9f9c958c04dbd3e6d113e3a8f065db1eb36c03e5c58b5d28eeef8ee8358645c6b0c7814b28bdeebf2b19bce472317c19198337b185c38860d7f71002d651d17ea825ea03ceeb0343a87b90f6595852eb291a32ee55057549e5f2b71f28b15507342418969b380fc92c95923d5f31e42c50569829655fd30f5f3c972583ced43821c2eb88488f21797ab0c135e0b1e242218c72b8ad3d272e7e2f69ca9e0c3f1e1bfbf581a944b8755972aa28", 0xba}, {&(0x7f0000000800)="f575d096df80be29e9579bfa40cdb9b21804d5379484c367b5c260c80aac442e4f94d2d172358b44ebe88ab598b2cf10d437d25a82258fe92d1867e102688d586d6f14ce702a81dc55941c262ae4a864c15d211c6e729fb83616b2994254b6bc3240bc593cea4728c95d496c05aef72ec309a5e0c169c22a284c18b62dbdfd1e17e8c63356f462921809b4dbeb4c84613cf2d2275e3c83b74772aebcbf2bca007afa2e5b449d669dc60120cb8e242022d519fa1c454dec", 0xb7}], 0x7, 0x200, 0x80000001) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x20) openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) fallocate(r4, 0x40, 0x5, 0x2) accept$alg(r4, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x5, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x5}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0xc000003d, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000100)) 6.886546567s ago: executing program 2 (id=6134): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) syz_open_dev$video(0x0, 0x7f, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) sendto$unix(r1, &(0x7f00000008c0)='c', 0x1, 0x4008014, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 6.776401206s ago: executing program 2 (id=6135): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000890090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000240)={0x7, 0x40, 0x6, 0x800}) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) r7 = getpgid(0x0) ptrace$peeksig(0x4209, r7, &(0x7f00000002c0)={0x3, 0x1, 0x8}, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}, {}]) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r9, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000005000f000006"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000006000000000000000800000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000059000000bf0900000000000055090100000000009500000000000000bf99000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0x8, 0x0, 0x10000}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000200)={0x0, r14}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r12, r13, 0x3, 0x3, 0x4, 0x18, {0x0, 0x5, 0x5, 0x6e8, 0x2, 0x9, 0x1, 0x8, 0x2, 0xd24, 0x5, 0x7, 0x2, 0xd, "6f4f1b1330d057a2f7d14a00b7445443c528a9be00"}}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000001c0)={0x4, 0x1, 0x7dff, 0x6, "a09fc910bb060bdc0d40cfcd10bf99f7a0f281ca7cbeb8216bef5c543cf861aa"}) 6.31995869s ago: executing program 8 (id=6136): signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) syz_io_uring_setup(0x18a, &(0x7f0000000080)={0x0, 0x86d5, 0x10, 0x2, 0x2bc}, &(0x7f0000000180), &(0x7f0000000200)) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usbip_server_init(0x1) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x3, 0xaf8, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5}) r8 = syz_open_dev$dri(0x0, 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) close_range(r4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') pread64(r9, &(0x7f0000002140)=""/17, 0x11, 0x0) 5.773611185s ago: executing program 8 (id=6137): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) fsopen(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) close(r1) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000100)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x18da8ad, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) 4.916453642s ago: executing program 6 (id=6138): openat$mice(0xffffff9c, &(0x7f00000002c0), 0x212240) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socket$kcm(0x10, 0x6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x4d6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, r2, 0xffffd000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = userfaultfd(0x80000) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000dd7000/0x4000)=nil, &(0x7f00001e2000/0x1000)=nil, 0x4000}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz1\x00', 0x3c}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 3.528457726s ago: executing program 6 (id=6139): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32], 0x50) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) write$sequencer(r6, 0x0, 0x10) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x7000000, 0x5, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x75, "804000"}, 0x0, 0x2, {}, 0x20800}) close_range(r0, 0xffffffffffffffff, 0x0) 3.253038519s ago: executing program 2 (id=6140): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32], 0x50) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) sched_setscheduler(r2, 0x5, &(0x7f00000000c0)=0x8175) write$sequencer(r6, 0x0, 0x10) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x75, "804000"}, 0x0, 0x2, {}, 0x20800}) close_range(r0, 0xffffffffffffffff, 0x0) 1.837243702s ago: executing program 8 (id=6141): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x6, &(0x7f0000000200)=0x407) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) preadv2(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x8, 0x9, 0x33) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000007c0)="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", 0xc00) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$sock(r6, &(0x7f0000000780)={&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x1, 0x0, {0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0xc}}}, 0xfffffffffffffcd2, 0x0, 0x0, &(0x7f0000000040), 0x18}, 0x8081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004800010928bd700018dcdf250a000100", @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x28009}, 0x8000002) 1.834773092s ago: executing program 6 (id=6142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c5411"], 0x50}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x48041}, 0x20050881) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x50) setreuid(0x0, 0x0) 1.300053226s ago: executing program 2 (id=6143): socket(0x10, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x100, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000003e6eeb295ef886e73a675585bc045bb704b1ce8f171563fa8bd81390148c2d51a61ad6e05456db27ae774d1d42f9a14abbbc6b7eb45f96db3abbd3faafe551b1d9344b1cb254b701f737c497e4dfd57cb21fee6182d3498fe0dcf9f7bf30b56d4b0a43d885fbb4b4ecf58e3c8cfc11b301000000000000008f0f2e0d310ba685f0563c465de992e392db03920b2716ab5289a1d5360ee995ff00b6ba1ee66e4da9430bb9cfacff2a00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x1}) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8b6000, 0x40) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r8, 0xc008551b, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000008000000a8f8ffff05000000f8714e4e6eea78339cc1f967a2920eceac59e59284f778919a50d034e2a7bbcecfec2721503179beec649241061a2e6e86c054e6429d7241fe50346e3d98f0b0d188aefdec3003baa5ec54d41065c44e0541c0f36c28ba8cf14247c41bf4b90b544ad93a4434b598831e7f4fa5f3307130c9"]) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) 0s ago: executing program 2 (id=6144): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) dup(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, 0x0, 0x28000080) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@mpls_getroute={0x16, 0x1a, 0x1}, 0x1c}}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) kernel console output (not intermixed with test programs): usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1905.872769][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1905.876049][T24941] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1905.925237][T24941] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1905.925342][T24903] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input92 [ 1905.945681][ T25] block nbd1: Possible stuck request ffff888028518000: control (read@0,1024B). Runtime 90 seconds [ 1905.968225][ T25] block nbd1: Possible stuck request ffff888028518200: control (read@1024,1024B). Runtime 90 seconds [ 1905.970433][T24941] usb 1-1: Manufacturer: syz [ 1906.007846][ T25] block nbd1: Possible stuck request ffff888028518400: control (read@2048,1024B). Runtime 90 seconds [ 1906.019696][ T25] block nbd1: Possible stuck request ffff888028518600: control (read@3072,1024B). Runtime 90 seconds [ 1906.047160][T24941] usb 1-1: config 0 descriptor?? [ 1906.049209][T24903] imon 10-1:0.0: iMON device (15c2:0041, intf0) on usb<10:38> initialized [ 1906.061601][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1906.243294][ C1] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1906.243686][T17807] usb 10-1: USB disconnect, device number 38 [ 1906.642468][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1906.995653][T28294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1907.004262][T28294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1907.155397][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1907.311923][T28294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1907.321609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1907.366562][T28327] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5522'. [ 1907.394060][T24941] usbhid 1-1:0.0: can't add hid device: -71 [ 1907.400796][T24941] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1908.407160][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1908.427336][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1908.429064][T24941] usb 1-1: USB disconnect, device number 71 [ 1908.678920][T28332] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5531'. [ 1908.862352][T28337] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5531'. [ 1909.293077][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1909.301938][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1909.377882][T28348] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5535'. [ 1909.595011][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1909.618375][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1909.710120][T28351] ./cgroup: Can't lookup blockdev [ 1909.800072][ T29] audit: type=1400 audit(5319667910.083:1635): avc: denied { write } for pid=28350 comm="syz.6.5537" path="socket:[107843]" dev="sockfs" ino=107843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1910.021857][ T29] audit: type=1400 audit(5319667910.167:1636): avc: denied { connect } for pid=28350 comm="syz.6.5537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1910.254778][T19318] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1910.420165][ T29] audit: type=1400 audit(5319667910.672:1637): avc: denied { execute_no_trans } for pid=28359 comm="syz.9.5540" path="/438/file0" dev="tmpfs" ino=2358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1910.457716][T19318] usb 3-1: Using ep0 maxpacket: 16 [ 1910.497885][T19318] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1910.540841][T19318] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1910.552558][ T29] audit: type=1400 audit(5319667910.672:1638): avc: denied { remount } for pid=28359 comm="syz.9.5540" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1910.591970][T19318] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1910.634493][T19318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.677620][T19318] usb 3-1: Product: syz [ 1910.704030][T19318] usb 3-1: Manufacturer: syz [ 1910.731907][T19318] usb 3-1: SerialNumber: syz [ 1910.777328][T19318] usb 3-1: config 0 descriptor?? [ 1911.025109][T19318] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input93 [ 1911.515130][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1911.859236][T19353] net_ratelimit: 1 callbacks suppressed [ 1911.859259][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1912.236079][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1912.742347][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1912.909278][T19318] rc_core: IR keymap rc-imon-pad not found [ 1912.922201][T19318] Registered IR keymap rc-empty [ 1912.938230][T19318] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1912.968044][T19318] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1913.040619][T28378] bridge0: port 3(netdevsim0) entered disabled state [ 1913.047520][T28378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1913.054740][T28378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1913.425307][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1913.475205][T19318] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1913.527641][T19318] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input94 [ 1913.578882][T19318] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:31> initialized [ 1913.626412][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1913.650934][T19318] usb 3-1: USB disconnect, device number 31 [ 1913.770032][T28381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5544'. [ 1913.936199][T28385] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5544'. [ 1914.830824][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1915.450818][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1915.574142][ T29] audit: type=1400 audit(5319667915.471:1639): avc: denied { write } for pid=28404 comm="syz.0.5551" name="file0" dev="tmpfs" ino=2006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1915.733678][T28407] block device autoloading is deprecated and will be removed. [ 1915.877357][ T29] audit: type=1400 audit(5319667915.471:1640): avc: denied { open } for pid=28404 comm="syz.0.5551" path="/370/file0" dev="tmpfs" ino=2006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1915.946167][ T29] audit: type=1400 audit(5319667915.565:1641): avc: denied { connect } for pid=28404 comm="syz.0.5551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1915.973885][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1916.560679][T28413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5552'. [ 1917.079005][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.144584][T28417] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 1917.151237][T28417] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1917.159135][T28417] vhci_hcd vhci_hcd.0: Device attached [ 1917.524719][T24941] usb 51-1: new low-speed USB device number 4 using vhci_hcd [ 1918.020849][T28418] vhci_hcd: connection reset by peer [ 1918.096551][T17334] vhci_hcd vhci_hcd.9: stop threads [ 1918.152076][T17334] vhci_hcd vhci_hcd.9: release socket [ 1918.188749][ T180] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1918.229166][T17334] vhci_hcd vhci_hcd.9: disconnect device [ 1918.596139][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1918.701530][T17807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1918.778430][T28430] netlink: 'syz.2.5557': attribute type 3 has an invalid length. [ 1918.796639][T28430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5557'. [ 1918.871424][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1920.031601][T17807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1920.044520][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1921.233352][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1922.311038][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1922.385674][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1923.903757][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1923.915645][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1923.959934][T24941] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 1924.740302][T17807] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1924.826213][T28499] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5579'. [ 1924.839603][T28499] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5579'. [ 1925.032960][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1925.192215][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1925.267426][T17807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1925.300641][T17807] usb 3-1: not running at top speed; connect to a high speed hub [ 1925.398810][ T29] audit: type=1400 audit(5319667923.692:1642): avc: denied { bind } for pid=28502 comm="syz.0.5577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1925.553425][T17807] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1925.570788][T24921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1925.764354][T17807] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1925.776395][T17807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.948900][T17807] usb 3-1: Product: syz [ 1925.953095][T17807] usb 3-1: Manufacturer: syz [ 1926.975511][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1926.984074][T17807] usb 3-1: SerialNumber: syz [ 1928.343420][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1928.460222][T17807] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1928.489178][T28519] tmpfs: Unknown parameter 'mpol>}7x6 elative' [ 1928.497735][T17807] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 1928.575339][T17807] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1928.585406][T17807] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 1928.610606][T17807] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1928.792425][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1928.942754][T17807] usb 3-1: USB disconnect, device number 32 [ 1929.476581][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1929.821159][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1929.901631][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1930.079596][ T29] audit: type=1400 audit(5319667928.070:1643): avc: denied { ioctl } for pid=28536 comm="syz.8.5592" path="/401/file0" dev="tmpfs" ino=2129 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1930.412232][T28535] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5587'. [ 1930.464007][T28535] xt_bpf: check failed: parse error [ 1930.486451][ T29] audit: type=1400 audit(5319667928.388:1644): avc: denied { accept } for pid=28522 comm="syz.9.5587" lport=60064 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1930.590610][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1930.614070][ T29] audit: type=1400 audit(5319667928.491:1645): avc: denied { read } for pid=28522 comm="syz.9.5587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1931.219078][ T29] audit: type=1400 audit(5319667929.089:1646): avc: denied { ioctl } for pid=28551 comm="syz.2.5596" path="socket:[108202]" dev="sockfs" ino=108202 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1931.228180][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1931.561604][ T29] audit: type=1400 audit(5319667929.464:1647): avc: denied { lock } for pid=28555 comm="syz.2.5598" path="socket:[108625]" dev="sockfs" ino=108625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1931.700185][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1932.042250][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1932.485094][T28572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5601'. [ 1932.547937][T28574] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5602'. [ 1932.709323][T28579] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.5602'. [ 1932.812478][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1933.240075][ T29] audit: type=1400 audit(5319667930.988:1648): avc: denied { mount } for pid=28578 comm="syz.6.5604" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1933.600843][ T29] audit: type=1400 audit(5319667931.007:1649): avc: denied { remount } for pid=28578 comm="syz.6.5604" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1933.781754][ T29] audit: type=1400 audit(5319667931.540:1650): avc: denied { unmount } for pid=19848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1933.924570][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1935.084414][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1935.292719][T24921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1935.978014][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1935.978606][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1936.017067][ T29] audit: type=1400 audit(5319667933.617:1651): avc: denied { write } for pid=28598 comm="syz.2.5609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1936.165411][ T29] audit: type=1326 audit(5319667933.766:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28601 comm="syz.8.5610" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6834d9c799 code=0x0 [ 1936.233049][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1936.326204][T28614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5613'. [ 1937.213034][ T29] audit: type=1400 audit(5319667934.739:1653): avc: denied { write } for pid=28619 comm="syz.9.5615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1937.237920][ T29] audit: type=1400 audit(5319667934.749:1654): avc: denied { read } for pid=28619 comm="syz.9.5615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1937.345589][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1937.356697][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1937.793925][T19318] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1937.986014][T19318] usb 1-1: Using ep0 maxpacket: 16 [ 1937.996212][T19318] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1938.010749][T19318] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1938.020377][T19318] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1938.033726][T19318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.052603][T19318] usb 1-1: Product: syz [ 1938.069356][T19318] usb 1-1: Manufacturer: syz [ 1938.081790][T28640] FAULT_INJECTION: forcing a failure. [ 1938.081790][T28640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1938.095646][T19318] usb 1-1: SerialNumber: syz [ 1938.106831][T19318] usb 1-1: config 0 descriptor?? [ 1938.120006][T28640] CPU: 1 UID: 0 PID: 28640 Comm: syz.6.5622 Tainted: G L syzkaller #0 PREEMPT(full) [ 1938.120034][T28640] Tainted: [L]=SOFTLOCKUP [ 1938.120040][T28640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1938.120050][T28640] Call Trace: [ 1938.120056][T28640] [ 1938.120063][T28640] dump_stack_lvl+0x100/0x190 [ 1938.120095][T28640] should_fail_ex.cold+0x5/0xa [ 1938.120119][T28640] _copy_from_iter+0x1f4/0x1690 [ 1938.120150][T28640] ? __asan_memset+0x23/0x50 [ 1938.120173][T28640] ? __pfx__copy_from_iter+0x10/0x10 [ 1938.120199][T28640] ? __pfx___alloc_skb+0x10/0x10 [ 1938.120228][T28640] netlink_sendmsg+0x808/0xda0 [ 1938.120253][T28640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1938.120273][T28640] ? __might_fault+0xc0/0x140 [ 1938.120307][T28640] ____sys_sendmsg+0x9e1/0xb70 [ 1938.120331][T28640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1938.120355][T28640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1938.120383][T28640] ? __pfx__kstrtoull+0x10/0x10 [ 1938.120409][T28640] ___sys_sendmsg+0x190/0x1e0 [ 1938.120435][T28640] ? __pfx____sys_sendmsg+0x10/0x10 [ 1938.120471][T28640] ? find_held_lock+0x2b/0x80 [ 1938.120510][T28640] __sys_sendmmsg+0x205/0x430 [ 1938.120532][T28640] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1938.120558][T28640] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1938.120589][T28640] ? fput+0x79/0x100 [ 1938.120605][T28640] ? ksys_write+0x1ac/0x250 [ 1938.120626][T28640] ? __pfx_ksys_write+0x10/0x10 [ 1938.120649][T28640] __x64_sys_sendmmsg+0x9c/0x100 [ 1938.120663][T28640] ? lockdep_hardirqs_on+0x78/0x100 [ 1938.120679][T28640] do_syscall_64+0x106/0xf80 [ 1938.120693][T28640] ? clear_bhb_loop+0x40/0x90 [ 1938.120710][T28640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1938.120725][T28640] RIP: 0033:0x7fb11599c799 [ 1938.120737][T28640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1938.120751][T28640] RSP: 002b:00007fb116931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1938.120765][T28640] RAX: ffffffffffffffda RBX: 00007fb115c15fa0 RCX: 00007fb11599c799 [ 1938.120775][T28640] RDX: 0000000000000001 RSI: 0000200000005200 RDI: 0000000000000003 [ 1938.120783][T28640] RBP: 00007fb116931090 R08: 0000000000000000 R09: 0000000000000000 [ 1938.120791][T28640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1938.120799][T28640] R13: 00007fb115c16038 R14: 00007fb115c15fa0 R15: 00007ffced9f1788 [ 1938.120818][T28640] [ 1938.478546][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.542198][T17807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.553872][T19318] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input95 [ 1938.714017][ T25] block nbd1: Possible stuck request ffff888028518000: control (read@0,1024B). Runtime 120 seconds [ 1938.725452][ T25] block nbd1: Possible stuck request ffff888028518200: control (read@1024,1024B). Runtime 120 seconds [ 1938.737235][ T25] block nbd1: Possible stuck request ffff888028518400: control (read@2048,1024B). Runtime 120 seconds [ 1938.749565][ T25] block nbd1: Possible stuck request ffff888028518600: control (read@3072,1024B). Runtime 120 seconds [ 1938.843945][T28649] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5623'. [ 1939.215489][T19318] rc_core: IR keymap rc-imon-pad not found [ 1939.231604][T19318] Registered IR keymap rc-empty [ 1939.289561][T19318] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1939.317757][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1939.470411][T19318] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1939.480865][T19318] imon:send_packet: packet tx failed (-71) [ 1940.457120][T24921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1940.488529][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1940.511839][T19318] imon 1-1:0.0: remote input dev register failed [ 1940.530680][T19318] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 1941.003924][T19318] imon 1-1:0.0: unable to initialize intf0, err 0 [ 1941.065459][T19318] imon:imon_probe: failed to initialize context! [ 1941.118185][T28670] overlayfs: failed to clone upperpath [ 1941.125810][T19318] imon 1-1:0.0: unable to register, err -19 [ 1941.136969][T28674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=28674 comm=syz.2.5633 [ 1941.178087][T28678] FAULT_INJECTION: forcing a failure. [ 1941.178087][T28678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1941.239198][T28678] CPU: 1 UID: 0 PID: 28678 Comm: syz.0.5634 Tainted: G L syzkaller #0 PREEMPT(full) [ 1941.239229][T28678] Tainted: [L]=SOFTLOCKUP [ 1941.239236][T28678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1941.239246][T28678] Call Trace: [ 1941.239252][T28678] [ 1941.239259][T28678] dump_stack_lvl+0x100/0x190 [ 1941.239286][T28678] should_fail_ex.cold+0x5/0xa [ 1941.239301][T28678] _copy_to_iter+0x1f3/0x1720 [ 1941.239319][T28678] ? seq_write+0xd7/0x150 [ 1941.239335][T28678] ? __pfx__copy_to_iter+0x10/0x10 [ 1941.239350][T28678] ? __up_read+0x2c5/0x700 [ 1941.239363][T28678] ? __pfx___up_read+0x10/0x10 [ 1941.239374][T28678] ? seq_read_iter+0xd33/0x1270 [ 1941.239383][T28678] ? seq_read_iter+0xd33/0x1270 [ 1941.239396][T28678] seq_read_iter+0xdab/0x1270 [ 1941.239411][T28678] ? __pfx_seq_read_iter+0x10/0x10 [ 1941.239422][T28678] vfs_read+0x825/0xb30 [ 1941.239441][T28678] ? __pfx_vfs_read+0x10/0x10 [ 1941.239465][T28678] ksys_read+0x12a/0x250 [ 1941.239484][T28678] ? __pfx_ksys_read+0x10/0x10 [ 1941.239504][T28678] do_syscall_64+0x106/0xf80 [ 1941.239516][T28678] ? clear_bhb_loop+0x40/0x90 [ 1941.239530][T28678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.239541][T28678] RIP: 0033:0x7fe9d0f9c799 [ 1941.239550][T28678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1941.239562][T28678] RSP: 002b:00007fe9d1ec9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1941.239573][T28678] RAX: ffffffffffffffda RBX: 00007fe9d1215fa0 RCX: 00007fe9d0f9c799 [ 1941.239580][T28678] RDX: 0000000000002020 RSI: 0000200000000740 RDI: 0000000000000003 [ 1941.239586][T28678] RBP: 00007fe9d1ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 1941.239592][T28678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1941.239599][T28678] R13: 00007fe9d1216038 R14: 00007fe9d1215fa0 R15: 00007ffc02e41318 [ 1941.239613][T28678] [ 1941.505226][T19318] usb 1-1: USB disconnect, device number 72 [ 1941.624812][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1941.808312][T24921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1941.955594][T17807] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1942.187325][T28689] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5636'. [ 1942.303687][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1943.018954][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1943.107531][T17807] usb 3-1: Using ep0 maxpacket: 32 [ 1943.298731][T17807] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1943.318176][T17807] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1943.332153][T17807] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1943.353686][T17807] usb 3-1: Product: syz [ 1943.374022][T17807] usb 3-1: Manufacturer: syz [ 1943.433003][T17807] usb 3-1: SerialNumber: syz [ 1943.463556][T17807] usb 3-1: config 0 descriptor?? [ 1943.473685][T28698] syzkaller0: entered promiscuous mode [ 1943.486481][T28701] binder: 28699:28701 ioctl c0306201 0 returned -14 [ 1943.502769][T28698] syzkaller0: entered allmulticast mode [ 1943.502822][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1943.509081][T28685] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1943.831306][T28698] 0: reclassify loop, rule prio 0, protocol 800 [ 1944.102810][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1944.253654][ T29] audit: type=1400 audit(5319667941.334:1655): avc: denied { read } for pid=28680 comm="syz.9.5635" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1944.278705][T28706] md: md2 stopped. [ 1944.301313][ T29] audit: type=1400 audit(5319667941.362:1656): avc: denied { open } for pid=28680 comm="syz.9.5635" path="/459/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1944.412608][ T29] audit: type=1400 audit(5319667941.362:1657): avc: denied { ioctl } for pid=28680 comm="syz.9.5635" path="/459/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1944.477447][T28717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5644'. [ 1944.647713][ T29] audit: type=1326 audit(5319667941.624:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28684 comm="syz.2.5637" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fb599c799 code=0x0 [ 1944.807377][T17807] usb 3-1: USB disconnect, device number 33 [ 1945.001723][T28718] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5644'. [ 1945.042172][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1945.214297][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1945.763731][T28733] tmpfs: Unknown parameter 'mpol>}7x6 elative' [ 1945.772948][T28733] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1945.782740][T28733] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1945.792680][T28733] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1945.800300][T28733] UDF-fs: Scanning with blocksize 512 failed [ 1945.806758][T28733] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1945.816420][T28733] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1945.825979][T28733] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1945.833801][T28733] UDF-fs: Scanning with blocksize 1024 failed [ 1945.840256][T28733] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1945.850123][T28733] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1945.859709][T28733] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1945.867370][T28733] UDF-fs: Scanning with blocksize 2048 failed [ 1945.873711][T28733] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1945.883323][T28733] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1945.892899][T28733] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1945.900652][T28733] UDF-fs: Scanning with blocksize 4096 failed [ 1945.906705][T28733] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 1946.208428][T28739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1946.326311][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1946.400998][T28748] binder: 28747:28748 ioctl c0306201 0 returned -14 [ 1947.409376][T28772] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1947.442866][ T29] audit: type=1400 audit(5319667944.318:1659): avc: denied { mount } for pid=28767 comm="syz.9.5658" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1947.468192][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1947.941341][T28778] tmpfs: Unknown parameter 'mpol>}7x6 elative' [ 1947.950613][T28778] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1947.960753][T28778] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1947.970339][T28778] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1947.978076][T28778] UDF-fs: Scanning with blocksize 512 failed [ 1947.984596][T28778] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1947.994322][T28778] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1948.003910][T28778] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1948.011554][T28778] UDF-fs: Scanning with blocksize 1024 failed [ 1948.018062][T28778] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1948.027750][T28778] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1948.037363][T28778] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1948.045223][T28778] UDF-fs: Scanning with blocksize 2048 failed [ 1948.053911][T28778] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1948.063641][T28778] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1948.073289][T28778] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1948.080987][T28778] UDF-fs: Scanning with blocksize 4096 failed [ 1948.087056][T28778] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 1948.143117][ T29] audit: type=1400 audit(5319667944.963:1660): avc: denied { unmount } for pid=19840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1948.619900][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1948.869529][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1948.935076][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1949.221908][T28788] netlink: 348 bytes leftover after parsing attributes in process `syz.9.5662'. [ 1949.665050][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1949.786570][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.259222][T19353] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1950.348473][T24921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.504707][T19353] usb 1-1: Using ep0 maxpacket: 32 [ 1950.521537][T19353] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1950.551968][T19353] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1950.574465][T19353] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1950.597773][T19353] usb 1-1: Product: syz [ 1950.614215][T19353] usb 1-1: Manufacturer: syz [ 1950.630951][T19353] usb 1-1: SerialNumber: syz [ 1950.658559][T19353] usb 1-1: config 0 descriptor?? [ 1950.681064][T28798] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1950.857900][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1951.027429][T28817] bridge0: port 3(syz_tun) entered blocking state [ 1951.036151][T28817] bridge0: port 3(syz_tun) entered disabled state [ 1951.044904][T28817] syz_tun: entered allmulticast mode [ 1951.065288][T28817] syz_tun: entered promiscuous mode [ 1951.642839][ T29] audit: type=1326 audit(5319667948.237:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28797 comm="syz.0.5667" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9d0f9c799 code=0x0 [ 1951.737729][T19353] usb 1-1: USB disconnect, device number 73 [ 1951.898654][T28821] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1951.971416][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1952.226590][T24921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1952.404472][ T5872] kworker/0:3 (5872) used greatest stack depth: 18104 bytes left [ 1952.470157][T28836] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5677'. [ 1952.594384][T28839] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1952.608642][T28839] overlayfs: overlapping lowerdir path [ 1952.958693][T28847] max out of range [ 1953.268315][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1953.503266][T28858] netlink: 'syz.0.5684': attribute type 1 has an invalid length. [ 1954.353102][T28866] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 1954.364441][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1954.450705][T17338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1954.905021][T28875] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5689'. [ 1954.951393][T28875] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5689'. [ 1955.143533][T28866] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1955.479195][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1955.487377][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1955.819199][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1956.224187][T24921] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1956.272569][ T29] audit: type=1400 audit(5319667952.577:1662): avc: denied { create } for pid=28893 comm="syz.8.5695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1956.395178][T24921] usb 1-1: Using ep0 maxpacket: 32 [ 1956.402636][T24921] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1956.422856][T24921] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1956.433718][T24921] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1956.442064][T24921] usb 1-1: Product: syz [ 1956.446507][T24921] usb 1-1: Manufacturer: syz [ 1956.455036][T24921] usb 1-1: SerialNumber: syz [ 1956.462615][T24921] usb 1-1: config 0 descriptor?? [ 1956.469082][T28889] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1956.535559][T28903] team0: entered allmulticast mode [ 1956.540974][T28903] team_slave_0: entered allmulticast mode [ 1956.553961][T28903] team_slave_1: entered allmulticast mode [ 1956.573841][T28903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1956.599857][T28903] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1956.600655][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.869111][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1958.255408][ T29] audit: type=1326 audit(5319667954.355:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28888 comm="syz.0.5693" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9d0f9c799 code=0x0 [ 1958.367686][T24903] usb 1-1: USB disconnect, device number 74 [ 1958.399976][T28928] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 1958.573156][T28928] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1958.725921][T24921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1958.982914][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.838071][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1959.874593][ T29] audit: type=1400 audit(5319667955.945:1664): avc: denied { audit_write } for pid=28944 comm="syz.8.5708" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1960.001875][T28948] 9p: Unknown Cache mode or invalid value 0;\n [ 1960.094436][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1960.604656][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1960.986087][T28968] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 1961.128922][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1961.214598][T24941] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1961.376308][T24941] usb 1-1: device descriptor read/64, error -71 [ 1961.444601][ T29] audit: type=1400 audit(5319668725.530:1665): avc: denied { getopt } for pid=28972 comm="syz.8.5717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1961.501523][T28974] overlayfs: missing 'lowerdir' [ 1961.506520][ T29] audit: type=1400 audit(5319668725.530:1666): avc: denied { ioctl } for pid=28972 comm="syz.8.5717" path="socket:[110340]" dev="sockfs" ino=110340 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1961.577673][T28974] xt_hashlimit: size too large, truncated to 1048576 [ 1961.638346][T24941] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1961.787231][T24941] usb 1-1: device descriptor read/64, error -71 [ 1961.824484][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1961.835385][T17807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1961.891143][T24941] usb usb1-port1: attempt power cycle [ 1962.238833][T24941] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1962.243329][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1962.272404][T24941] usb 1-1: device descriptor read/8, error -71 [ 1963.272907][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1963.566363][T24941] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1963.616622][T24941] usb 1-1: device descriptor read/8, error -71 [ 1963.738143][T24941] usb usb1-port1: unable to enumerate USB device [ 1963.836958][T28985] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 1963.843621][T28985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1963.851349][T28985] vhci_hcd vhci_hcd.0: Device attached [ 1964.099770][T19353] usb 45-1: new low-speed USB device number 5 using vhci_hcd [ 1964.517641][T28986] vhci_hcd: connection reset by peer [ 1964.530758][ T48] vhci_hcd vhci_hcd.6: stop threads [ 1964.536875][ T48] vhci_hcd vhci_hcd.6: release socket [ 1964.571147][ T48] vhci_hcd vhci_hcd.6: disconnect device [ 1964.729816][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1964.878910][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1964.950006][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1965.652851][T28995] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5720'. [ 1965.715859][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.697478][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1967.049207][T28991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5720'. [ 1967.206838][T29011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5726'. [ 1967.350361][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1967.440450][T29018] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5726'. [ 1967.527797][T29016] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 1967.574330][T29016] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1967.681295][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1967.833863][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1968.638715][T29020] mmap: syz.0.5729 (29020): VmData 25837568 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1968.671717][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1968.976755][T19353] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1969.282012][T29041] binder: 29039:29041 ioctl c0306201 0 returned -14 [ 1969.386468][T29043] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5736'. [ 1969.422231][T29043] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.5736'. [ 1969.591251][T24902] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1969.663282][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.747864][T24902] usb 3-1: Using ep0 maxpacket: 16 [ 1970.605606][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1970.645401][T24902] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1970.669389][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1970.739198][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1970.760629][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1970.770517][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1970.779087][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1970.793050][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1970.804913][ T25] block nbd1: Possible stuck request ffff888028518000: control (read@0,1024B). Runtime 150 seconds [ 1970.816091][ T25] block nbd1: Possible stuck request ffff888028518200: control (read@1024,1024B). Runtime 150 seconds [ 1970.829051][ T25] block nbd1: Possible stuck request ffff888028518400: control (read@2048,1024B). Runtime 150 seconds [ 1970.840508][ T25] block nbd1: Possible stuck request ffff888028518600: control (read@3072,1024B). Runtime 150 seconds [ 1970.852519][T24902] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1970.865516][T24902] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1970.875923][T24902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.408276][T24902] usb 3-1: Product: syz [ 1971.412543][T24902] usb 3-1: Manufacturer: syz [ 1971.417230][T24902] usb 3-1: SerialNumber: syz [ 1971.442427][T24902] usb 3-1: config 0 descriptor?? [ 1971.664812][T24902] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input98 [ 1971.721350][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1971.957525][T24902] rc_core: IR keymap rc-imon-pad not found [ 1971.965740][T24902] Registered IR keymap rc-empty [ 1971.971408][T24902] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1971.981756][T24902] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1972.010639][T29063] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 1972.238035][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1972.251480][T24902] imon:send_packet: packet tx failed (-71) [ 1972.274709][T29068] efs: device does not support 512 byte blocks [ 1972.281684][T29068] device does not support 512 byte blocks [ 1972.281684][T29068] [ 1972.291052][T24902] imon 3-1:0.0: remote input dev register failed [ 1972.298760][T24902] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1972.710573][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1972.788515][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1972.810015][T24902] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1972.952338][T24902] imon:imon_probe: failed to initialize context! [ 1972.962147][T29086] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5748'. [ 1972.968613][T24902] imon 3-1:0.0: unable to register, err -19 [ 1973.949105][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1974.017735][T29086] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5748'. [ 1974.569681][T24902] usb 3-1: USB disconnect, device number 34 [ 1974.590285][T29096] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 1974.596940][T29096] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1974.604652][T29096] vhci_hcd vhci_hcd.0: Device attached [ 1974.955839][T24903] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 1975.264141][T29097] vhci_hcd: connection reset by peer [ 1975.328833][T17334] vhci_hcd vhci_hcd.2: stop threads [ 1975.379845][T19318] net_ratelimit: 1 callbacks suppressed [ 1975.379865][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1975.445250][T17334] vhci_hcd vhci_hcd.2: release socket [ 1975.547989][T17334] vhci_hcd vhci_hcd.2: disconnect device [ 1976.247752][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1976.247979][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1976.267557][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1976.276737][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1976.369520][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1976.389345][T29104] binder: 29103:29104 ioctl c0306201 0 returned -14 [ 1976.691502][T29115] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 1976.934895][T24902] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1976.950600][T29115] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1977.138879][T24902] usb 3-1: Using ep0 maxpacket: 32 [ 1977.159211][T24902] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1977.190436][T24902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.223435][T24902] usb 3-1: Product: syz [ 1977.241755][T24902] usb 3-1: Manufacturer: syz [ 1977.278506][T24902] usb 3-1: SerialNumber: syz [ 1977.368775][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1977.665704][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1977.755466][T24902] usb 3-1: config 0 descriptor?? [ 1978.348901][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1978.358817][T24902] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1978.410283][T24902] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1978.452717][T24902] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1978.581792][T29142] FAULT_INJECTION: forcing a failure. [ 1978.581792][T29142] name failslab, interval 1, probability 0, space 0, times 0 [ 1978.594612][T29142] CPU: 0 UID: 0 PID: 29142 Comm: syz.6.5763 Tainted: G L syzkaller #0 PREEMPT(full) [ 1978.594647][T29142] Tainted: [L]=SOFTLOCKUP [ 1978.594651][T29142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1978.594658][T29142] Call Trace: [ 1978.594663][T29142] [ 1978.594668][T29142] dump_stack_lvl+0x100/0x190 [ 1978.594690][T29142] should_fail_ex.cold+0x5/0xa [ 1978.594704][T29142] should_failslab+0xc2/0x120 [ 1978.594717][T29142] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1978.594732][T29142] ? security_file_alloc+0x34/0x2c0 [ 1978.594746][T29142] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1978.594764][T29142] security_file_alloc+0x34/0x2c0 [ 1978.594779][T29142] init_file+0x95/0x480 [ 1978.594792][T29142] alloc_empty_file+0x73/0x1c0 [ 1978.594806][T29142] alloc_file_pseudo+0x13a/0x230 [ 1978.594820][T29142] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1978.594837][T29142] __anon_inode_getfile+0xe8/0x280 [ 1978.594852][T29142] ? kasan_save_track+0x14/0x30 [ 1978.594869][T29142] sync_file_alloc+0x65/0x160 [ 1978.594883][T29142] sync_file_merge.constprop.0+0x82/0x270 [ 1978.594898][T29142] ? __pfx_sync_file_merge.constprop.0+0x10/0x10 [ 1978.594912][T29142] ? find_held_lock+0x2b/0x80 [ 1978.594925][T29142] ? __fget_files+0x215/0x3d0 [ 1978.594937][T29142] ? __fget_files+0x215/0x3d0 [ 1978.594950][T29142] ? __fget_files+0x21f/0x3d0 [ 1978.594963][T29142] sync_file_ioctl+0xc68/0xf60 [ 1978.594978][T29142] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1978.594994][T29142] ? __pfx_sync_file_ioctl+0x10/0x10 [ 1978.595007][T29142] ? do_vfs_ioctl+0x226/0x13e0 [ 1978.595023][T29142] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1978.595039][T29142] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1978.595056][T29142] ? irqentry_exit+0x180/0x670 [ 1978.595073][T29142] ? selinux_file_ioctl+0x139/0x290 [ 1978.595086][T29142] ? selinux_file_ioctl+0xb4/0x290 [ 1978.595099][T29142] ? __pfx_sync_file_ioctl+0x10/0x10 [ 1978.595113][T29142] __x64_sys_ioctl+0x18e/0x210 [ 1978.595129][T29142] do_syscall_64+0x106/0xf80 [ 1978.595142][T29142] ? clear_bhb_loop+0x40/0x90 [ 1978.595155][T29142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1978.595167][T29142] RIP: 0033:0x7fb11599c799 [ 1978.595177][T29142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1978.595187][T29142] RSP: 002b:00007fb116910028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1978.595198][T29142] RAX: ffffffffffffffda RBX: 00007fb115c16090 RCX: 00007fb11599c799 [ 1978.595205][T29142] RDX: 00002000000000c0 RSI: 00000000c0303e03 RDI: 000000000000000b [ 1978.595211][T29142] RBP: 00007fb116910090 R08: 0000000000000000 R09: 0000000000000000 [ 1978.595218][T29142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1978.595224][T29142] R13: 00007fb115c16128 R14: 00007fb115c16090 R15: 00007ffced9f1788 [ 1978.595237][T29142] [ 1979.191410][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1979.341494][T29051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1980.313719][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1980.333347][T29051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1980.692016][T24903] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1980.818299][T24902] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 1980.842518][T24902] usb 3-1: USB disconnect, device number 35 [ 1980.912714][ T29] audit: type=1326 audit(5319668745.962:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29148 comm="syz.8.5766" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6834d9c799 code=0x0 [ 1981.323807][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1981.935564][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1982.147744][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1982.291748][T19318] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1982.334146][T29051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1982.688757][T29173] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5773'. [ 1982.958337][T19318] usb 3-1: Using ep0 maxpacket: 32 [ 1982.983796][T19318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1983.113248][T19318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1983.139987][T19318] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1983.149585][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1983.194011][T19318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.239187][T19318] usb 3-1: config 0 descriptor?? [ 1983.304489][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1983.364819][T29183] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1983.380773][T29183] team0: Port device batadv1 added [ 1983.515603][T29184] hub 9-0:1.0: USB hub found [ 1983.543647][T29184] hub 9-0:1.0: 1 port detected [ 1983.689135][T19318] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 1983.911002][T19318] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 1984.035245][T19318] ft260 0003:0403:6030.0011: chip code: 0000 0000 [ 1984.226899][T19318] ft260 0003:0403:6030.0011: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1984.292781][T29051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1984.735192][T19318] ft260 0003:0403:6030.0011: failed to retrieve status: -71, no wakeup [ 1984.755150][T19318] ft260 0003:0403:6030.0011: failed to retrieve status: -71 [ 1984.781198][T19318] ft260 0003:0403:6030.0011: failed to reset I2C controller: -71 [ 1984.844887][T19318] usb 3-1: USB disconnect, device number 36 [ 1985.054377][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1985.289370][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1986.138496][T29221] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5785'. [ 1986.325294][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1986.388491][T29234] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5789'. [ 1987.109936][T29249] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 1987.116609][T29249] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1987.124881][T29249] vhci_hcd vhci_hcd.0: Device attached [ 1987.343076][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1987.421790][ T58] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1987.434859][T10809] usb 45-1: new low-speed USB device number 6 using vhci_hcd [ 1987.798095][T29251] vhci_hcd: connection reset by peer [ 1987.850491][ T35] vhci_hcd vhci_hcd.6: stop threads [ 1987.907273][ T35] vhci_hcd vhci_hcd.6: release socket [ 1987.963753][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1987.992918][ T35] vhci_hcd vhci_hcd.6: disconnect device [ 1988.354523][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.064990][T14670] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1989.409960][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.511776][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.595137][T29269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.633362][T29269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.659008][T29273] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 1989.673492][T29269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1990.054346][T29278] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5802'. [ 1990.415614][T24903] net_ratelimit: 8 callbacks suppressed [ 1990.415633][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1990.475191][ T7047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1990.483863][T29051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1990.492489][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1991.426480][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1991.769362][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1991.782319][T29273] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1992.942629][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.959498][T10809] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1993.209677][T29303] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5807'. [ 1993.410975][T24941] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 1993.438897][T29310] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 1993.445570][T29310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1993.453427][T29310] vhci_hcd vhci_hcd.0: Device attached [ 1993.867212][T10809] usb 45-1: device descriptor read/64, error -110 [ 1993.953763][T29311] vhci_hcd: connection closed [ 1993.995686][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1994.029533][T17334] vhci_hcd vhci_hcd.6: stop threads [ 1994.034799][T17334] vhci_hcd vhci_hcd.6: release socket [ 1994.118637][T17334] vhci_hcd vhci_hcd.6: disconnect device [ 1994.154154][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1994.160546][T24941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1994.360914][T24921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1994.487450][T24941] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1994.499391][T24941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.518789][T24941] usb 1-1: Product: syz [ 1994.527185][T24941] usb 1-1: Manufacturer: syz [ 1994.532155][T24941] usb 1-1: SerialNumber: syz [ 1994.546237][T24941] usb 1-1: config 0 descriptor?? [ 1994.557314][T24941] imon_raw 1-1:0.0: IR endpoint missing [ 1994.737106][T24941] usb 1-1: USB disconnect, device number 79 [ 1994.960008][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1995.055740][T29339] netlink: 92 bytes leftover after parsing attributes in process `syz.8.5819'. [ 1995.572230][T29349] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5821'. [ 1995.952141][T29051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1996.891976][ T1108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1996.901834][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1996.913480][T14670] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1996.941151][T29051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1997.188099][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1997.252953][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1997.253498][T29362] max out of range [ 1997.407818][T29366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5827'. [ 1997.424537][T29366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5827'. [ 1997.436019][T29366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5827'. [ 1997.844093][T29376] SET target dimension over the limit! [ 1998.135386][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1998.388361][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1998.502308][T24903] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1998.654830][T24903] usb 10-1: Using ep0 maxpacket: 32 [ 1998.671382][T24903] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1998.711949][T24903] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1998.755587][T29398] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5836'. [ 1998.781012][T24903] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1998.815219][T24903] usb 10-1: Product: syz [ 1998.837574][T24903] usb 10-1: Manufacturer: syz [ 1998.850427][T24903] usb 10-1: SerialNumber: syz [ 1998.863143][T24903] usb 10-1: config 0 descriptor?? [ 1998.869767][T29401] FAULT_INJECTION: forcing a failure. [ 1998.869767][T29401] name failslab, interval 1, probability 0, space 0, times 0 [ 1998.883141][T29394] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1998.914926][T29401] CPU: 1 UID: 0 PID: 29401 Comm: syz.0.5837 Tainted: G L syzkaller #0 PREEMPT(full) [ 1998.914954][T29401] Tainted: [L]=SOFTLOCKUP [ 1998.914961][T29401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1998.914970][T29401] Call Trace: [ 1998.914975][T29401] [ 1998.914981][T29401] dump_stack_lvl+0x100/0x190 [ 1998.915013][T29401] should_fail_ex.cold+0x5/0xa [ 1998.915035][T29401] ? tomoyo_encode2+0xfb/0x3c0 [ 1998.915056][T29401] should_failslab+0xc2/0x120 [ 1998.915074][T29401] __kmalloc_noprof+0xe0/0x850 [ 1998.915097][T29401] ? d_absolute_path+0x136/0x1b0 [ 1998.915128][T29401] tomoyo_encode2+0xfb/0x3c0 [ 1998.915152][T29401] tomoyo_encode+0x29/0x50 [ 1998.915173][T29401] tomoyo_realpath_from_path+0x18c/0x690 [ 1998.915201][T29401] tomoyo_path_number_perm+0x23c/0x580 [ 1998.915219][T29401] ? tomoyo_path_number_perm+0x22e/0x580 [ 1998.915237][T29401] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1998.915277][T29401] ? find_held_lock+0x2b/0x80 [ 1998.915300][T29401] ? __fget_files+0x215/0x3d0 [ 1998.915316][T29401] ? hook_file_ioctl_common+0x146/0x410 [ 1998.915346][T29401] ? __fget_files+0x21f/0x3d0 [ 1998.915367][T29401] security_file_ioctl+0xd3/0x230 [ 1998.915389][T29401] __x64_sys_ioctl+0xb7/0x210 [ 1998.915415][T29401] do_syscall_64+0x106/0xf80 [ 1998.915433][T29401] ? clear_bhb_loop+0x40/0x90 [ 1998.915455][T29401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1998.915473][T29401] RIP: 0033:0x7fe9d0f9c799 [ 1998.915488][T29401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1998.915505][T29401] RSP: 002b:00007fe9d1ec9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1998.915523][T29401] RAX: ffffffffffffffda RBX: 00007fe9d1215fa0 RCX: 00007fe9d0f9c799 [ 1998.915549][T29401] RDX: 0000000000000000 RSI: 000000004001af84 RDI: 0000000000000003 [ 1998.915560][T29401] RBP: 00007fe9d1ec9090 R08: 0000000000000000 R09: 0000000000000000 [ 1998.915570][T29401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1998.915580][T29401] R13: 00007fe9d1216038 R14: 00007fe9d1215fa0 R15: 00007ffc02e41318 [ 1998.915605][T29401] [ 1998.915620][T29401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1999.153224][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1999.224685][T29407] max out of range [ 1999.267591][T29410] netlink: 'syz.0.5840': attribute type 1 has an invalid length. [ 1999.322446][T29410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1999.512942][T29416] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 1999.519592][T29416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1999.527282][T29416] vhci_hcd vhci_hcd.0: Device attached [ 1999.670164][ T25] block nbd1: Possible stuck request ffff888028518000: control (read@0,1024B). Runtime 180 seconds [ 1999.683011][ T25] block nbd1: Possible stuck request ffff888028518200: control (read@1024,1024B). Runtime 180 seconds [ 1999.696771][ T25] block nbd1: Possible stuck request ffff888028518400: control (read@2048,1024B). Runtime 180 seconds [ 1999.714544][ T25] block nbd1: Possible stuck request ffff888028518600: control (read@3072,1024B). Runtime 180 seconds [ 1999.760272][T19318] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 2000.150543][T29051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2000.159024][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2001.151841][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2001.363204][T29418] vhci_hcd: connection reset by peer [ 2001.399462][T17334] vhci_hcd vhci_hcd.0: stop threads [ 2001.404700][T17334] vhci_hcd vhci_hcd.0: release socket [ 2001.442678][T10809] usb 10-1: USB disconnect, device number 39 [ 2001.470499][T17334] vhci_hcd vhci_hcd.0: disconnect device [ 2002.123205][T14670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2002.133061][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2002.147134][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2002.155758][T29051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2002.164724][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2003.036268][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2003.134022][T29448] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5852'. [ 2003.188705][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2003.205148][T29453] binder: 29451:29453 ioctl c0306201 0 returned -14 [ 2003.221330][T29450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5851'. [ 2003.284328][T29452] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.5852'. [ 2003.300033][T29454] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5851'. [ 2003.754878][ T29] audit: type=1400 audit(5319668769.942:1668): avc: denied { watch watch_reads } for pid=29467 comm="syz.2.5859" path="/441/file0" dev="tmpfs" ino=2351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2004.174908][T29477] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 2004.181550][T29477] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2004.189460][T29477] vhci_hcd vhci_hcd.0: Device attached [ 2004.195412][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2004.205833][T29473] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5861'. [ 2004.483924][T24903] usb 51-1: new low-speed USB device number 5 using vhci_hcd [ 2004.511670][T29482] dvmrp9: entered allmulticast mode [ 2004.613014][T29479] vhci_hcd: connection reset by peer [ 2004.629359][T17334] vhci_hcd vhci_hcd.9: stop threads [ 2004.649101][T19318] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2004.660073][T17334] vhci_hcd vhci_hcd.9: release socket [ 2004.756065][T17334] vhci_hcd vhci_hcd.9: disconnect device [ 2005.182076][T29051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2005.932027][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2006.438451][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2006.767111][ T29] audit: type=1400 audit(5319668773.102:1669): avc: denied { create } for pid=29500 comm="syz.6.5867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2006.858633][ T29] audit: type=1400 audit(5319668773.102:1670): avc: denied { ioctl } for pid=29500 comm="syz.6.5867" path="socket:[113845]" dev="sockfs" ino=113845 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2006.921117][ T29] audit: type=1400 audit(5319668773.102:1671): avc: denied { bind } for pid=29500 comm="syz.6.5867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2007.071688][T29524] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5873'. [ 2007.494993][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2007.717558][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2007.732036][T29489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2007.741210][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2007.749682][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2007.758286][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2008.513440][T29553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8216 sclass=netlink_route_socket pid=29553 comm=syz.8.5882 [ 2008.882110][T24921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2008.896109][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.096376][ T29] audit: type=1400 audit(5319668775.548:1672): avc: denied { remove_name } for pid=29544 comm="syz.6.5881" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2009.313806][ T29] audit: type=1400 audit(5319668775.643:1673): avc: denied { unlink } for pid=29544 comm="syz.6.5881" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2009.457153][T24903] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 2009.782978][T29567] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5887'. [ 2009.895881][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2010.433489][T29580] netlink: 'syz.8.5891': attribute type 1 has an invalid length. [ 2010.810206][ T29] audit: type=1400 audit(5319668777.354:1674): avc: denied { append } for pid=29584 comm="syz.9.5893" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2010.888322][T29588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5892'. [ 2010.913800][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2011.647111][T29595] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5895'. [ 2011.656605][T29595] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5895'. [ 2011.690930][T29595] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5895'. [ 2011.799242][T24921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2011.828061][T29597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5897'. [ 2011.875233][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2011.945594][T29598] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5897'. [ 2012.365334][T29602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5900'. [ 2012.446163][T29605] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5900'. [ 2012.485957][ T7047] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2012.877820][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2013.022080][T14670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2013.031117][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2013.040580][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2013.051447][T19353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2013.436112][T29619] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2014.522128][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2015.319629][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2015.532794][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2015.775776][T29644] max out of range [ 2016.149697][T29645] binder: 29643:29645 ioctl c0306201 0 returned -14 [ 2016.523302][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2016.684855][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2017.174891][ T29] audit: type=1400 audit(5319668784.032:1675): avc: denied { connect } for pid=29646 comm="syz.0.5912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2017.543019][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2018.150311][T29489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2018.151905][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2018.224667][T24921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2018.259190][T29667] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.5918'. [ 2018.518613][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2018.542018][T17334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2018.554250][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2018.572189][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2019.077180][ T29] audit: type=1400 audit(5319668786.037:1676): avc: denied { unmount } for pid=19842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2019.111338][ T29] audit: type=1400 audit(5319668786.069:1677): avc: denied { map } for pid=29689 comm="syz.0.5925" path="/dev/vbi1" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2019.265358][T29685] Process accounting resumed [ 2019.961694][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2020.123108][T24921] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2020.899314][T24921] usb 3-1: Using ep0 maxpacket: 32 [ 2020.929074][T24921] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2020.944497][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2021.121451][T29708] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5932'. [ 2021.141199][T24921] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2021.172656][T24921] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2021.200569][T24921] usb 3-1: Product: syz [ 2021.209699][T24921] usb 3-1: Manufacturer: syz [ 2021.227937][T24921] usb 3-1: SerialNumber: syz [ 2021.240191][T24921] usb 3-1: config 0 descriptor?? [ 2021.252314][T29695] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2021.261745][ T29] audit: type=1400 audit(5319668788.326:1678): avc: denied { ioctl } for pid=29716 comm="syz.6.5935" path="socket:[113480]" dev="sockfs" ino=113480 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2021.574511][T29724] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 2021.654116][T29717] netlink: 'syz.6.5935': attribute type 6 has an invalid length. [ 2021.706700][T29726] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2021.818590][T29732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5937'. [ 2021.888378][T29733] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5937'. [ 2022.366175][T19318] net_ratelimit: 1 callbacks suppressed [ 2022.366188][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2022.424853][ T29] audit: type=1326 audit(5319668789.544:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29694 comm="syz.2.5926" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fb599c799 code=0x0 [ 2022.498313][T19318] usb 3-1: USB disconnect, device number 37 [ 2022.918862][T29749] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5943'. [ 2023.019663][ T180] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2023.265619][T29755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5945'. [ 2023.382466][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2023.543180][T14670] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2023.840654][T29489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2023.865502][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2023.880600][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2023.883136][T29768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5948'. [ 2023.900515][T29767] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5949'. [ 2023.982239][T29769] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.5949'. [ 2024.076177][T24921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2024.277830][T29772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5951'. [ 2024.376837][T29776] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5951'. [ 2024.879002][T24903] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 2025.847966][T24921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2025.874392][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2025.972601][T29786] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 2026.028382][T24903] usb 10-1: Using ep0 maxpacket: 32 [ 2026.235532][T24903] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2026.271277][T24903] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2026.281562][T24903] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2026.290740][T24903] usb 10-1: Product: syz [ 2026.304623][T24903] usb 10-1: Manufacturer: syz [ 2026.971659][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2026.984470][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2027.012644][T24903] usb 10-1: SerialNumber: syz [ 2027.029487][T24903] usb 10-1: config 0 descriptor?? [ 2027.045645][T29778] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2027.219499][T24903] usb 10-1: USB disconnect, device number 40 [ 2027.311041][T29804] max out of range [ 2027.705767][T29808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5959'. [ 2028.034479][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2028.052133][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.187327][T29814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5962'. [ 2028.207107][T29814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5962'. [ 2028.355135][ T25] block nbd1: Possible stuck request ffff888028518000: control (read@0,1024B). Runtime 210 seconds [ 2028.377202][ T25] block nbd1: Possible stuck request ffff888028518200: control (read@1024,1024B). Runtime 210 seconds [ 2028.388386][ T25] block nbd1: Possible stuck request ffff888028518400: control (read@2048,1024B). Runtime 210 seconds [ 2028.400211][ T25] block nbd1: Possible stuck request ffff888028518600: control (read@3072,1024B). Runtime 210 seconds [ 2028.442505][T29811] qnx4: unable to read the superblock [ 2028.791361][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.819731][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.828346][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.867260][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2029.636077][T24941] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2029.791055][T24941] usb 3-1: device descriptor read/64, error -71 [ 2029.858052][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2029.866291][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2030.047746][T24941] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2030.977849][T24941] usb 3-1: device descriptor read/64, error -71 [ 2031.012572][T29853] Process accounting resumed [ 2031.047416][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2031.181811][T24941] usb usb3-port1: attempt power cycle [ 2031.199659][ T29] audit: type=1400 audit(5319668798.752:1680): avc: denied { ioctl } for pid=29857 comm="syz.0.5974" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2031.733634][ T29] audit: type=1400 audit(5319668798.804:1681): avc: denied { read } for pid=29854 comm="syz.6.5973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2031.754548][ T29] audit: type=1326 audit(5319668799.266:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29858 comm="syz.8.5975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6834d9c799 code=0x0 [ 2032.114553][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2033.492160][ T1553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2033.504708][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2033.538426][T14670] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2034.356515][T29489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2034.442020][T29905] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5985'. [ 2034.471599][T29905] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.5985'. [ 2034.505476][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2034.935218][T29916] binder: 29915:29916 ioctl c0306201 0 returned -14 [ 2034.963053][ T1553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2034.983832][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2034.992841][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2035.002009][ T1553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2035.437916][T29924] wireguard0: entered promiscuous mode [ 2035.445721][T29924] wireguard0: entered allmulticast mode [ 2035.479851][T29929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2035.490669][T29929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2035.498514][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2035.821618][T29929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2035.829480][T29929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2036.194971][T29939] netlink: 'syz.0.5993': attribute type 39 has an invalid length. [ 2036.419765][ T1553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2036.486798][T24902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2036.515306][T24941] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2036.707964][T24941] usb 1-1: Using ep0 maxpacket: 8 [ 2036.719010][T24941] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 2036.746632][T24941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.782569][T24941] usb 1-1: Product: syz [ 2036.802790][T24941] usb 1-1: Manufacturer: syz [ 2036.823617][T24941] usb 1-1: SerialNumber: syz [ 2036.850052][T24941] usb 1-1: config 0 descriptor?? [ 2036.875325][T24941] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 2036.930015][T24941] pctv452e: pctv452e_power_ctrl: 1 [ 2036.930015][T24941] [ 2036.957950][T24941] usb 1-1: selecting invalid altsetting 3 [ 2036.981308][T24941] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2036.981308][T24941] [ 2037.026911][T24941] dvb-usb: bulk message failed: -22 (5/0) [ 2037.073424][T24941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2037.121016][T24941] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 2037.129497][T10809] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2037.141705][T29934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5993'. [ 2037.177720][T24941] usb 1-1: media controller created [ 2037.183457][T29934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5993'. [ 2037.203611][T24941] dvb-usb: bulk message failed: -22 (8/0) [ 2037.244538][T24941] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 2037.278862][T24941] dvb-usb: MAC address reading failed. [ 2037.296711][T10809] usb 3-1: Using ep0 maxpacket: 32 [ 2037.332082][T10809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2037.354731][T24941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2037.370823][T10809] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 2037.400969][T10809] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2037.464404][T10809] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2037.504437][T24941] DVB: Unable to find symbol stb0899_attach() [ 2037.515750][T10809] usb 3-1: config 128 has no interface number 0 [ 2037.525328][T24941] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 2037.545079][T10809] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 2037.586916][T29949] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5997'. [ 2037.666599][T10809] usb 3-1: config 128 interface 127 has no altsetting 0 [ 2037.782180][T29952] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5997'. [ 2037.935382][T10809] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2037.953224][T10809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.974891][T24941] rc_core: IR keymap rc-tt-1500 not found [ 2037.990520][T24941] Registered IR keymap rc-empty [ 2038.012763][T10809] usb 3-1: Product: syz [ 2038.032838][T24941] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 2038.045221][T10809] usb 3-1: Manufacturer: syz [ 2038.060747][T10809] usb 3-1: SerialNumber: syz [ 2038.085012][T24941] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input100 [ 2038.153658][T29945] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2038.176208][T24941] dvb-usb: schedule remote query interval to 100 msecs. [ 2038.194781][T24941] pctv452e: pctv452e_power_ctrl: 0 [ 2038.194781][T24941] [ 2038.219010][T24941] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 2038.277263][T24941] usb 1-1: USB disconnect, device number 80 [ 2038.368607][T24941] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 2038.488404][T10809] usb 3-1: USB disconnect, device number 41 [ 2038.518526][T20104] udevd[20104]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2038.638732][ T1553] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 2038.791874][ T1553] usb 10-1: device descriptor read/64, error -71 [ 2039.063776][ T1553] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 2039.229789][ T1553] usb 10-1: device descriptor read/64, error -71 [ 2039.232575][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2039.247606][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2039.378136][ T1553] usb usb10-port1: attempt power cycle [ 2040.220271][ T1553] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 2040.318082][ T1553] usb 10-1: device descriptor read/8, error -71 [ 2040.439895][T30005] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 2040.644292][T30009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2040.654393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2040.672027][ T1553] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 2040.737466][ T1553] usb 10-1: device descriptor read/8, error -71 [ 2040.858161][T30009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2040.866492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2040.867705][ T1553] usb usb10-port1: unable to enumerate USB device [ 2040.875195][T30009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2040.889413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2040.901357][T30009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2040.909849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2040.918917][T30009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2040.927295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2042.235772][T30020] Process accounting resumed [ 2042.359641][T30024] max out of range [ 2044.202276][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2044.296800][ T180] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2044.669354][T30050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6029'. [ 2044.836791][T30054] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6029'. [ 2045.420688][T19318] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2045.553980][T19318] usb 1-1: device descriptor read/64, error -71 [ 2045.791607][T19318] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2045.984278][T19318] usb 1-1: device descriptor read/64, error -71 [ 2046.163211][T19318] usb usb1-port1: attempt power cycle [ 2046.582946][T19318] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2046.611484][T19318] usb 1-1: device descriptor read/8, error -71 [ 2046.848798][T19318] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2046.879429][T19318] usb 1-1: device descriptor read/8, error -71 [ 2046.983658][T19318] usb usb1-port1: unable to enumerate USB device [ 2047.363372][T19318] usb 10-1: new low-speed USB device number 45 using dummy_hcd [ 2047.507855][T19318] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2047.519663][T19318] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 2047.530871][T19318] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2047.540876][T19318] usb 10-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2047.555358][T19318] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2047.565787][T19318] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 2047.577058][T19318] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2047.587003][T19318] usb 10-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2047.601028][T19318] usb 10-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 2047.611997][T19318] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 2047.623198][T19318] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2047.633234][T19318] usb 10-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2047.649352][T19318] usb 10-1: string descriptor 0 read error: -22 [ 2047.655681][T19318] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2047.664997][T19318] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.678595][T19318] adutux 10-1:168.0: interrupt endpoints not found [ 2047.874682][T30085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2047.884224][T30085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2047.893132][T24941] usb 10-1: USB disconnect, device number 45 [ 2047.998269][T30093] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6042'. [ 2048.010367][T30093] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.6042'. [ 2049.418982][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2049.592311][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2049.845029][T30125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6049'. [ 2050.417745][T19318] net_ratelimit: 2041 callbacks suppressed [ 2050.417766][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2050.432084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2050.690293][T30139] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6055'. [ 2051.125518][T24941] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2051.451328][T30151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6058'. [ 2051.637221][T19318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2051.645654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2051.707415][T24941] usb 1-1: Using ep0 maxpacket: 16 [ 2051.719522][T24941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2051.739770][T24941] usb 1-1: config 0 has no interfaces? [ 2051.756824][T24941] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 2051.772397][T24941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.788884][T24941] usb 1-1: Product: syz [ 2051.797037][T24941] usb 1-1: Manufacturer: syz [ 2051.801995][T24941] usb 1-1: SerialNumber: syz [ 2051.811610][T24941] usb 1-1: config 0 descriptor?? [ 2052.991565][T30164] tmpfs: Unknown parameter 'mpol>}7x6 elative' [ 2054.193637][ T29] audit: type=1326 audit(5319668822.900:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30169 comm="syz.9.6064" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe92ab9c799 code=0x0 [ 2054.220625][T24941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2054.221816][T24903] usb 1-1: USB disconnect, device number 85 [ 2054.804099][ T29] audit: type=1400 audit(5319668823.530:1684): avc: denied { mount } for pid=30188 comm="syz.9.6068" name="/" dev="hugetlbfs" ino=115312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 2055.078579][T14670] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2055.089531][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2055.702137][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2056.716577][T30217] tmpfs: Unknown parameter 'mpol>}7x6 elative' [ 2056.727237][T30217] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 2056.737468][T30217] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 2056.747079][T30217] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 2056.755051][T30217] UDF-fs: Scanning with blocksize 512 failed [ 2056.761499][T30217] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 2056.771248][T30217] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 2056.781075][T30217] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 2056.788788][T30217] UDF-fs: Scanning with blocksize 1024 failed [ 2056.795245][T30217] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 2056.804909][T30217] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 2056.814503][T30217] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 2056.822232][T30217] UDF-fs: Scanning with blocksize 2048 failed [ 2056.828654][T30217] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 2056.838401][T30217] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 2056.848019][T30217] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 2056.855691][T30217] UDF-fs: Scanning with blocksize 4096 failed [ 2056.861923][T30217] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 2056.967603][T30222] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.6075'. [ 2057.257365][T19318] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2057.412004][T19318] usb 1-1: Using ep0 maxpacket: 32 [ 2057.526087][T30233] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6080'. [ 2057.539116][T30233] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6080'. [ 2057.773975][ T25] block nbd1: Possible stuck request ffff888028518000: control (read@0,1024B). Runtime 240 seconds [ 2057.787315][ T25] block nbd1: Possible stuck request ffff888028518200: control (read@1024,1024B). Runtime 240 seconds [ 2057.798577][ T25] block nbd1: Possible stuck request ffff888028518400: control (read@2048,1024B). Runtime 240 seconds [ 2057.809693][ T25] block nbd1: Possible stuck request ffff888028518600: control (read@3072,1024B). Runtime 240 seconds [ 2057.825247][T19318] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2057.836810][T19318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.868842][T19318] usb 1-1: Product: syz [ 2057.873062][T19318] usb 1-1: Manufacturer: syz [ 2057.877674][T19318] usb 1-1: SerialNumber: syz [ 2057.894405][T19318] usb 1-1: config 0 descriptor?? [ 2057.905786][T19318] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2058.442731][T30220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2058.480146][T30220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2058.679060][T19318] gspca_ov534_9: reg_w failed -110 [ 2058.878237][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.886699][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2059.093842][T30252] tmpfs: Unknown parameter 'mpol>}7x6 elative' [ 2059.812109][T19318] gspca_ov534_9: Unknown sensor 0000 [ 2059.812162][T19318] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 2059.864448][T10809] usb 1-1: USB disconnect, device number 86 [ 2060.199413][T30266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2060.208217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2060.228767][T30266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2060.240449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2060.280460][T14670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2060.290104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2060.565193][T29489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2060.579038][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2061.417254][T30275] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 2061.621565][T10809] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2061.775542][T30275] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2061.840696][T10809] usb 1-1: Using ep0 maxpacket: 8 [ 2061.864505][T10809] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 2061.878857][T10809] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2061.901043][T10809] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2061.923705][T10809] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2061.936028][T10809] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2061.954796][T10809] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2061.983785][T10809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2062.223942][T10809] usb 1-1: GET_CAPABILITIES returned 0 [ 2062.269538][T10809] usbtmc 1-1:16.0: can't read capabilities [ 2062.471502][T10809] usb 1-1: USB disconnect, device number 87 [ 2062.660833][T30289] bond2: entered promiscuous mode [ 2062.683484][T30289] macvlan2: entered promiscuous mode [ 2062.694278][T30289] macvlan2: entered allmulticast mode [ 2062.701570][T30289] bond2: (slave macvlan2): Opening slave failed [ 2063.416181][T10809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2064.136064][ T29] audit: type=1400 audit(5319668833.336:1685): avc: denied { lock } for pid=30301 comm="syz.8.6100" path="socket:[116547]" dev="sockfs" ino=116547 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2064.222641][T24903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2064.230896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2064.971844][ T29] audit: type=1400 audit(5319668834.218:1686): avc: denied { create } for pid=30311 comm="syz.8.6104" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2064.995438][ T29] audit: type=1400 audit(5319668834.249:1687): avc: denied { mounton } for pid=30311 comm="syz.8.6104" path="/556/file0" dev="tmpfs" ino=2953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2065.338385][ T1108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2065.822302][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2066.051786][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2066.134430][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2066.146892][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2066.156563][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2066.167239][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2066.178739][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2066.527173][T27154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2066.541007][T27154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2066.548829][T27154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2066.560102][T27154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2066.572505][T27154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2066.593512][ T29] audit: type=1400 audit(5319668835.919:1688): avc: denied { mounton } for pid=30326 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2066.620708][ T1108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2067.072135][ T1108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2067.722477][ T1108] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2067.936246][T30326] chnl_net:caif_netlink_parms(): no params data found [ 2068.121124][ T1108] bridge_slave_1: left allmulticast mode [ 2068.126960][ T1108] bridge_slave_1: left promiscuous mode [ 2068.132723][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 2068.145547][ T1108] bridge_slave_0: left allmulticast mode [ 2068.152456][ T1108] bridge_slave_0: left promiscuous mode [ 2068.160715][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 2068.502393][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2068.567584][T27154] Bluetooth: hci0: command tx timeout [ 2068.672027][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2068.735622][ T1108] bond0 (unregistering): Released all slaves [ 2068.863227][ T1108] bond1 (unregistering): Released all slaves [ 2068.887470][ T1108] bond2 (unregistering): Released all slaves [ 2068.988122][T30326] bridge0: port 1(bridge_slave_0) entered blocking state [ 2069.026803][T30326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2069.031222][T30353] SELinux: security_context_str_to_sid (5S9q#) failed with errno=-22 [ 2069.034763][T30326] bridge_slave_0: entered allmulticast mode [ 2069.051588][T30355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6117'. [ 2069.068355][T30326] bridge_slave_0: entered promiscuous mode [ 2069.085111][T30326] bridge0: port 2(bridge_slave_1) entered blocking state [ 2069.093040][T30326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2069.120929][T30326] bridge_slave_1: entered allmulticast mode [ 2069.129268][T30326] bridge_slave_1: entered promiscuous mode [ 2069.146728][ T1108] tipc: Disabling bearer [ 2069.153489][ T1108] tipc: Left network mode [ 2069.153518][T30355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6117'. [ 2069.193884][T30355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6117'. [ 2069.204034][T30355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6117'. [ 2069.218026][T30355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6117'. [ 2069.981210][T30326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2070.048025][T30326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2070.219089][ T5817] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2070.237665][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2070.247822][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2070.267991][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2070.275549][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2070.372762][T30326] team0: Port device team_slave_0 added [ 2070.431125][T30326] team0: Port device team_slave_1 added [ 2070.443919][T30373] Bluetooth: MGMT ver 1.23 [ 2070.513554][T30326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2070.540668][T30326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2070.546155][ T5817] Bluetooth: hci0: command tx timeout [ 2070.618536][T30326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2070.740695][T30326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2070.756047][T30326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2070.841242][T30326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2070.903890][ T1108] hsr_slave_0: left promiscuous mode [ 2070.913338][ T1108] hsr_slave_1: left promiscuous mode [ 2070.922770][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2070.931035][ T7047] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2070.931193][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2070.952890][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2070.960731][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2070.975020][ T1108] veth1_macvtap: left promiscuous mode [ 2070.980513][ T1108] veth0_macvtap: left promiscuous mode [ 2071.027385][ T1108] pim6reg (unregistering): left allmulticast mode [ 2071.105718][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 2071.129623][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 2071.259341][T30326] hsr_slave_0: entered promiscuous mode [ 2071.290155][T30326] hsr_slave_1: entered promiscuous mode [ 2071.428030][ T1108] IPVS: stop unused estimator thread 0... [ 2071.537270][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2071.566270][T30367] chnl_net:caif_netlink_parms(): no params data found [ 2072.253119][ T5817] Bluetooth: hci1: command tx timeout [ 2072.556825][ T5817] Bluetooth: hci0: command tx timeout [ 2072.582583][T30367] bridge0: port 1(bridge_slave_0) entered blocking state [ 2072.614331][T30367] bridge0: port 1(bridge_slave_0) entered disabled state [ 2072.632266][T30367] bridge_slave_0: entered allmulticast mode [ 2072.639867][T30367] bridge_slave_0: entered promiscuous mode [ 2072.648250][T30367] bridge0: port 2(bridge_slave_1) entered blocking state [ 2072.655634][T30367] bridge0: port 2(bridge_slave_1) entered disabled state [ 2072.663062][T30367] bridge_slave_1: entered allmulticast mode [ 2072.670728][T30367] bridge_slave_1: entered promiscuous mode [ 2072.773037][T30367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2073.198112][T30367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2074.211128][ T5817] Bluetooth: hci1: command tx timeout [ 2074.510178][ T5817] Bluetooth: hci0: command tx timeout [ 2074.523259][T30441] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 2074.529895][T30441] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2074.537934][T30441] vhci_hcd vhci_hcd.0: Device attached [ 2074.792324][ T1553] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 2075.174269][T30442] vhci_hcd: connection reset by peer [ 2075.185751][T17334] vhci_hcd vhci_hcd.2: stop threads [ 2075.191880][T17334] vhci_hcd vhci_hcd.2: release socket [ 2075.233699][T17334] vhci_hcd vhci_hcd.2: disconnect device [ 2076.166453][T19318] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2076.194298][ T5817] Bluetooth: hci1: command tx timeout [ 2076.341941][T19318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2076.360511][T19318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2076.392030][T19318] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2076.403637][T19318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2076.413387][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2076.427505][T19318] usb 3-1: config 0 descriptor?? [ 2077.088610][T14670] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2077.833207][T30367] team0: Port device team_slave_0 added [ 2077.855966][T30367] team0: Port device team_slave_1 added [ 2077.989097][T30367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2078.015855][T30367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2078.066875][T30367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2078.129951][T30367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2078.138516][T30367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2078.165532][ T5817] Bluetooth: hci1: command tx timeout [ 2078.168069][T30367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2078.257865][T30367] hsr_slave_0: entered promiscuous mode [ 2078.272342][T30367] hsr_slave_1: entered promiscuous mode [ 2078.293765][T30367] debugfs: 'hsr0' already exists in 'hsr' [ 2078.309638][T30367] Cannot create hsr debugfs directory [ 2078.480712][T30326] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2078.515220][T30326] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2078.542468][T30326] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2078.565916][T30326] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2079.172052][T19318] usbhid 3-1:0.0: can't add hid device: -71 [ 2079.201580][T19318] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2079.327119][T19318] usb 3-1: USB disconnect, device number 42 [ 2079.399887][T30326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2079.668420][T30326] 8021q: adding VLAN 0 to HW filter on device team0 [ 2080.067772][ T1553] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 2080.137774][T29489] bridge0: port 1(bridge_slave_0) entered blocking state [ 2080.144900][T29489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2080.209637][T29489] bridge0: port 2(bridge_slave_1) entered blocking state [ 2080.216823][T29489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2080.783995][T30367] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2080.920425][T30367] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2081.228442][T30515] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6142'. [ 2081.364961][T30367] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2081.475148][T30367] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2081.900608][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2082.600361][ T7047] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2083.174525][T30367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2083.321290][T30367] 8021q: adding VLAN 0 to HW filter on device team0 [ 2083.354290][T30326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2083.404281][ T7047] bridge0: port 1(bridge_slave_0) entered blocking state [ 2083.411451][ T7047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2083.487419][ T7047] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.494538][ T7047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.655389][T30326] veth0_vlan: entered promiscuous mode [ 2084.763590][T30367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2084.882597][T30326] veth1_vlan: entered promiscuous mode [ 2085.234073][T30367] veth0_vlan: entered promiscuous mode [ 2085.295460][T30326] veth0_macvtap: entered promiscuous mode [ 2085.390386][T30326] veth1_macvtap: entered promiscuous mode [ 2085.455527][T30367] veth1_vlan: entered promiscuous mode [ 2085.571476][T30326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2085.636912][T30326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2085.724417][ T1108] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.782512][T30367] veth0_macvtap: entered promiscuous mode [ 2085.811634][ T1108] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.846933][ T1108] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.900580][ T1108] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2085.971485][T30367] veth1_macvtap: entered promiscuous mode [ 2086.103388][T30367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2086.264716][T30367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2086.414015][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2086.477304][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2086.495663][T17336] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.580838][T17336] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.626537][T17336] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.688052][T17336] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2086.746443][T17346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2086.779049][ T25] block nbd1: Possible stuck request ffff888028518000: control (read@0,1024B). Runtime 270 seconds [ 2086.793588][ T25] block nbd1: Possible stuck request ffff888028518200: control (read@1024,1024B). Runtime 270 seconds [ 2086.804874][ T25] block nbd1: Possible stuck request ffff888028518400: control (read@2048,1024B). Runtime 270 seconds [ 2086.815962][ T25] block nbd1: Possible stuck request ffff888028518600: control (read@3072,1024B). Runtime 270 seconds [ 2086.843235][T17346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2086.873866][ T29] audit: type=1400 audit(5319668857.201:1689): avc: denied { mounton } for pid=30326 comm="syz-executor" path="/root/syzkaller.dfgX6t/syz-tmp" dev="sda1" ino=2072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2087.027747][ T29] audit: type=1400 audit(5319668857.243:1690): avc: denied { mounton } for pid=30326 comm="syz-executor" path="/root/syzkaller.dfgX6t/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 2087.057434][T17346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2087.148096][T17346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2087.168523][ T29] audit: type=1400 audit(5319668857.243:1691): avc: denied { mounton } for pid=30326 comm="syz-executor" path="/root/syzkaller.dfgX6t/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=118756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2087.263371][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2087.271242][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2087.309588][ T29] audit: type=1400 audit(5319668857.274:1692): avc: denied { mounton } for pid=30326 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2087.398837][ T29] audit: type=1400 audit(5319668857.274:1693): avc: denied { mounton } for pid=30326 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2087.426680][ T29] audit: type=1400 audit(5319668857.484:1694): avc: denied { map } for pid=30610 comm="syz.7.6109" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2087.457325][ T29] audit: type=1400 audit(5319668857.495:1695): avc: denied { ioctl } for pid=30610 comm="syz.7.6109" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2087.997205][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2088.010681][T29489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2090.707773][ T5178] udevd[5178]: worker [25914] /devices/virtual/block/nbd1 timeout; kill it [ 2090.716694][ T5178] udevd[5178]: seq 31896 '/devices/virtual/block/nbd1' killed [ 2092.873016][T29489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2093.482865][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2097.750010][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2098.969392][T17336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2103.247461][T29489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2108.111681][T29489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2108.721516][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2113.608711][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2114.208624][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2114.210001][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2115.426785][ T25] block nbd1: Possible stuck request ffff888028518000: control (read@0,1024B). Runtime 300 seconds [ 2115.437633][ T25] block nbd1: Possible stuck request ffff888028518200: control (read@1024,1024B). Runtime 300 seconds [ 2115.448763][ T25] block nbd1: Possible stuck request ffff888028518400: control (read@2048,1024B). Runtime 300 seconds [ 2115.459801][ T25] block nbd1: Possible stuck request ffff888028518600: control (read@3072,1024B). Runtime 300 seconds [ 2118.398096][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2123.198447][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2128.227807][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2132.494706][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2133.723304][T17336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2137.980581][T17336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2139.201693][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2142.857463][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2144.085515][ T25] block nbd1: Possible stuck request ffff888028518000: control (read@0,1024B). Runtime 330 seconds [ 2144.096423][ T25] block nbd1: Possible stuck request ffff888028518200: control (read@1024,1024B). Runtime 330 seconds [ 2144.107610][ T25] block nbd1: Possible stuck request ffff888028518400: control (read@2048,1024B). Runtime 330 seconds [ 2144.118924][ T25] block nbd1: Possible stuck request ffff888028518600: control (read@3072,1024B). Runtime 330 seconds [ 2144.687750][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2147.733631][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2150.173973][T29489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2153.220226][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2155.658193][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2158.706622][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2161.144893][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2164.192181][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2166.021510][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2169.678673][T29489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2170.898193][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2172.739002][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2172.745602][ T25] block nbd1: Possible stuck request ffff888028518000: control (read@0,1024B). Runtime 360 seconds [ 2172.757341][ T25] block nbd1: Possible stuck request ffff888028518200: control (read@1024,1024B). Runtime 360 seconds [ 2172.768390][ T25] block nbd1: Possible stuck request ffff888028518400: control (read@2048,1024B). Runtime 360 seconds [ 2172.779452][ T25] block nbd1: Possible stuck request ffff888028518600: control (read@3072,1024B). Runtime 360 seconds [ 2175.164845][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2176.383816][T29489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2180.041601][T29489] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2181.869667][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2184.460164][T30970] Bluetooth: hci0: command 0x0406 tx timeout [ 2185.527121][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2186.746258][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2189.336701][T30970] Bluetooth: hci1: command 0x0406 tx timeout [ 2191.022756][T17336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2192.233832][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2196.499924][T17334] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2197.719195][T17346] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2200.767173][ T30] INFO: task syz.9.6069:30195 blocked for more than 143 seconds. [ 2200.774961][ T30] Tainted: G L syzkaller #0 [ 2200.781649][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2200.792398][ T30] task:syz.9.6069 state:D stack:26856 pid:30195 tgid:30192 ppid:19840 task_flags:0x400140 flags:0x00080002 [ 2200.804472][ T30] Call Trace: [ 2200.808987][ T30] [ 2200.811945][ T30] __schedule+0xfee/0x6120 [ 2200.816450][ T30] ? __lock_acquire+0x4a5/0x2630 [ 2200.821410][ T30] ? __pfx___schedule+0x10/0x10 [ 2200.826410][ T30] ? find_held_lock+0x2b/0x80 [ 2200.831113][ T30] ? schedule+0x2bf/0x390 [ 2200.835813][ T30] schedule+0xdd/0x390 [ 2200.839928][ T30] schedule_preempt_disabled+0x13/0x30 [ 2200.845919][ T30] __mutex_lock+0xc9a/0x1b90 [ 2200.850499][ T30] ? sync_bdevs+0x153/0x480 [ 2200.855035][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2200.860052][ T30] ? __pfx___schedule+0x10/0x10 [ 2200.865551][ T30] ? iput.part.0+0x1a0/0xf50 [ 2200.870137][ T30] ? sync_bdevs+0x153/0x480 [ 2200.875188][ T30] sync_bdevs+0x153/0x480 [ 2200.879509][ T30] ksys_sync+0xb0/0xf0 [ 2200.883631][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 2200.888396][ T30] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 2200.895765][ T30] ? do_syscall_64+0x95/0xf80 [ 2200.900569][ T30] __do_sys_sync+0xe/0x20 [ 2200.905481][ T30] do_syscall_64+0x106/0xf80 [ 2200.910161][ T30] ? clear_bhb_loop+0x40/0x90 [ 2200.914847][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2200.920851][ T30] RIP: 0033:0x7fe92ab9c799 [ 2200.925290][ T30] RSP: 002b:00007fe92b982028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 2200.934013][ T30] RAX: ffffffffffffffda RBX: 00007fe92ae16180 RCX: 00007fe92ab9c799 [ 2200.942087][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2200.950157][ T30] RBP: 00007fe92ae16180 R08: 0000000000000000 R09: 0000000000000000 [ 2200.958181][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2200.966418][ T30] R13: 00007fe92ae16218 R14: 00007fe92ae16180 R15: 00007fff610a6628 [ 2200.974397][ T30] [ 2200.977528][ T30] [ 2200.977528][ T30] Showing all locks held in the system: [ 2200.985325][ T30] 1 lock held by khungtaskd/30: [ 2200.990166][ T30] #0: ffffffff8e7e7620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2201.000123][ T30] 1 lock held by klogd/5167: [ 2201.005316][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 2201.015389][ T30] 1 lock held by udevd/25914: [ 2201.020063][ T30] #0: ffff888027f9d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 2201.029651][ T30] 2 locks held by getty/28019: [ 2201.034489][ T30] #0: ffff88803576b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2201.044280][ T30] #1: ffffc9000e2452f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 2201.054452][ T30] 5 locks held by kworker/u8:0/29489: [ 2201.059820][ T30] 1 lock held by syz.9.6069/30195: [ 2201.065018][ T30] #0: ffff888027f9d358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 2201.074863][ T30] [ 2201.077208][ T30] ============================================= [ 2201.077208][ T30] [ 2201.086125][ T30] NMI backtrace for cpu 1 [ 2201.086137][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2201.086152][ T30] Tainted: [L]=SOFTLOCKUP [ 2201.086156][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2201.086162][ T30] Call Trace: [ 2201.086166][ T30] [ 2201.086170][ T30] dump_stack_lvl+0x100/0x190 [ 2201.086191][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2201.086203][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2201.086220][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2201.086241][ T30] sys_info+0x141/0x190 [ 2201.086254][ T30] watchdog+0xd25/0x1050 [ 2201.086272][ T30] ? __pfx_watchdog+0x10/0x10 [ 2201.086286][ T30] ? __kthread_parkme+0x18c/0x230 [ 2201.086303][ T30] ? kthread+0x13a/0x450 [ 2201.086312][ T30] ? __pfx_watchdog+0x10/0x10 [ 2201.086325][ T30] kthread+0x370/0x450 [ 2201.086335][ T30] ? __pfx_kthread+0x10/0x10 [ 2201.086345][ T30] ret_from_fork+0x754/0xd80 [ 2201.086357][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2201.086369][ T30] ? __switch_to+0x7b4/0x1120 [ 2201.086382][ T30] ? __pfx_kthread+0x10/0x10 [ 2201.086393][ T30] ret_from_fork_asm+0x1a/0x30 [ 2201.086411][ T30] [ 2201.086415][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2201.213193][ C0] NMI backtrace for cpu 0 [ 2201.213210][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2201.213229][ C0] Tainted: [L]=SOFTLOCKUP [ 2201.213234][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2201.213243][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2201.213263][ C0] Code: e8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 f1 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2201.213276][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 2201.213289][ C0] RAX: 000000000ab2493d RBX: ffffffff8e4975c0 RCX: ffffffff8b8f9c75 [ 2201.213298][ C0] RDX: 0000000000000000 RSI: ffffffff8de7512b RDI: ffffffff8c1afca0 [ 2201.213308][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 2201.213317][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 2201.213326][ C0] R13: 0000000000000000 R14: ffffffff90d98410 R15: 0000000000000000 [ 2201.213335][ C0] FS: 0000000000000000(0000) GS:ffff888124345000(0000) knlGS:0000000000000000 [ 2201.213351][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2201.213360][ C0] CR2: 000055ce4c626660 CR3: 000000000e598000 CR4: 00000000003526f0 [ 2201.213369][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2201.213384][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2201.213393][ C0] Call Trace: [ 2201.213399][ C0] [ 2201.213404][ C0] default_idle+0x9/0x10 [ 2201.213420][ C0] default_idle_call+0x6c/0xb0 [ 2201.213436][ C0] do_idle+0x35b/0x4b0 [ 2201.213455][ C0] ? __pfx_do_idle+0x10/0x10 [ 2201.213474][ C0] cpu_startup_entry+0x4f/0x60 [ 2201.213491][ C0] rest_init+0x251/0x260 [ 2201.213507][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2201.213529][ C0] start_kernel+0x47f/0x480 [ 2201.213548][ C0] x86_64_start_reservations+0x24/0x30 [ 2201.213568][ C0] x86_64_start_kernel+0x12b/0x130 [ 2201.213587][ C0] common_startup_64+0x13e/0x148 [ 2201.213608][ C0] [ 2201.214275][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2201.214290][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2201.214312][ T30] Tainted: [L]=SOFTLOCKUP [ 2201.214318][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 2201.214327][ T30] Call Trace: [ 2201.214333][ T30] [ 2201.214340][ T30] dump_stack_lvl+0x100/0x190 [ 2201.214367][ T30] vpanic+0x552/0x970 [ 2201.214384][ T30] ? __pfx_vpanic+0x10/0x10 [ 2201.214401][ T30] ? rcu_is_watching+0x12/0xc0 [ 2201.214424][ T30] panic+0xd1/0xe0 [ 2201.214439][ T30] ? __pfx_panic+0x10/0x10 [ 2201.214458][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2201.214481][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2201.214503][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2201.214525][ T30] ? watchdog.cold+0x198/0x1ca [ 2201.214542][ T30] ? watchdog+0xd35/0x1050 [ 2201.214564][ T30] watchdog.cold+0x1a9/0x1ca [ 2201.214588][ T30] ? __pfx_watchdog+0x10/0x10 [ 2201.214609][ T30] ? __kthread_parkme+0x18c/0x230 [ 2201.214634][ T30] ? kthread+0x13a/0x450 [ 2201.214647][ T30] ? __pfx_watchdog+0x10/0x10 [ 2201.214666][ T30] kthread+0x370/0x450 [ 2201.214681][ T30] ? __pfx_kthread+0x10/0x10 [ 2201.214697][ T30] ret_from_fork+0x754/0xd80 [ 2201.214714][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2201.214732][ T30] ? __switch_to+0x7b4/0x1120 [ 2201.214751][ T30] ? __pfx_kthread+0x10/0x10 [ 2201.214767][ T30] ret_from_fork_asm+0x1a/0x30 [ 2201.214796][ T30] [ 2201.563431][ T30] Kernel Offset: disabled [ 2201.567732][ T30] Rebooting in 86400 seconds..