last executing test programs: 18m11.975921873s ago: executing program 32 (id=478): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @broadcast, @empty}, &(0x7f00000006c0)=0xc) syz_open_dev$dvb_demux(0x0, 0x7a5966a2, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x7299, &(0x7f0000000640)={0x0, 0x42a9, 0x200, 0x0, 0x6}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) io_uring_setup(0x669, &(0x7f00000002c0)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e000503ed000000fedbdf2500000000"], 0x14}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000003c0)={r3}) r5 = dup(r3) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) 16m15.668737433s ago: executing program 33 (id=724): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @broadcast, @empty}, &(0x7f00000006c0)=0xc) syz_open_dev$dvb_demux(0x0, 0x7a5966a2, 0x100) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x7299, &(0x7f0000000640)={0x0, 0x42a9, 0x200, 0x0, 0x6}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) io_uring_setup(0x669, &(0x7f00000002c0)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e000503ed000000fedbdf2500000000"], 0x14}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000003c0)={r3}) r5 = dup(r3) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) 15m9.216726525s ago: executing program 2 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x3, 0x80000, 0xfffffffc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0xfc, 0x24, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0xa00, 0x99f7, 0x9}}}}, @qdisc_kind_options=@q_cbq={{0x8}, {0x7c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0xa32e, 0xfffffffc, 0x8, 0x10001}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7c, '\x00', 0xd2d5, 0x66, 0x7, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x9c71, 0x2, 0x8, 0x1ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x60, '\x00', 0x9, 0x2, 0xffffffff, 0x8000}}, @TCA_CBS_PARMS={0x18, 0x1, {0xf9, '\x00', 0x3, 0x81, 0x1ff, 0x6}}]}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0x0, 0x7}}}}]}, 0xfc}}, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x4, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x40000, 0x8, 0x5, 0x746f, 0x4, 0x5, 0x8, 0x0, 0x4, 0x7ffd]}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r7, @ANYBLOB="33c5386175a8f467e49f71fcb19c3af198df245ba3dbe4efa854e47f81c8b11a4f689b059bf36542dbb068cd907c9e3d24377b88891699fde9f5cbb77818365be896d81b8b19171d22ba59cb0c18732828bb4d316288"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, 0x0, 0x0) bind$inet(r9, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r9, &(0x7f0000000900)=[{{&(0x7f0000000280)=@nfc_llcp, 0x80, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/212, 0xd4}, {&(0x7f00000005c0)=""/32, 0x20}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000700)=""/235, 0xeb}], 0x4, &(0x7f0000000840)=""/146, 0x92}, 0xa65e}], 0x1, 0x45833af92e4b39ff, 0x0) 15m7.579400092s ago: executing program 2 (id=896): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x280, 0x1b0, 0x370, 0x370, 0x370, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x84}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xb}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1}, {0x87}, 0xfffffffd}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x370}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0x0, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x4}}}, {{@ipv6={@private1, @local, [0xffffff00, 0xff, 0xff000000, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'veth0_to_bridge\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x3, 0x2, 0x50}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) 15m5.431501704s ago: executing program 2 (id=900): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 15m4.389382163s ago: executing program 2 (id=905): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) unshare(0x2e020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfc, r1}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0xb, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) accept4$inet(r0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) unlinkat(r5, &(0x7f0000000180)='./file0\x00', 0x0) 15m1.748548666s ago: executing program 2 (id=909): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) 15m0.572528477s ago: executing program 2 (id=911): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @broadcast, @empty}, &(0x7f00000006c0)=0xc) syz_open_dev$dvb_demux(0x0, 0x7a5966a2, 0x100) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x7299, &(0x7f0000000640)={0x0, 0x42a9, 0x200, 0x0, 0x6}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) io_uring_setup(0x669, &(0x7f00000002c0)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e000503ed000000fedbdf2500000000"], 0x14}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000003c0)={r3}) r5 = dup(r3) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) 14m45.407625279s ago: executing program 34 (id=911): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @broadcast, @empty}, &(0x7f00000006c0)=0xc) syz_open_dev$dvb_demux(0x0, 0x7a5966a2, 0x100) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x7299, &(0x7f0000000640)={0x0, 0x42a9, 0x200, 0x0, 0x6}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) io_uring_setup(0x669, &(0x7f00000002c0)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e000503ed000000fedbdf2500000000"], 0x14}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000003c0)={r3}) r5 = dup(r3) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) 3m50.124979489s ago: executing program 5 (id=2773): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) readv(r4, &(0x7f0000000700)=[{&(0x7f0000000200)=""/200, 0xc8}], 0x1) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x2c, r2, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x58}}, 0x20008000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000ecffffffffff200000000500200000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getsa={0x68, 0x12, 0x100, 0x70bd2a, 0x25dfdbfd, {@in=@broadcast, 0x4d6, 0x2, 0x2b}, [@extra_flags={0x8, 0x18, 0x8}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@local}}, @offload={0xc, 0x1c, {r7, 0x3}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x804) 3m48.456237771s ago: executing program 5 (id=2776): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r8, 0x1, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) acct(0x0) fdatasync(r1) 3m46.177019469s ago: executing program 5 (id=2785): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x100102, 0x50) ioctl$DVB_DVR_DMX_REQBUFS(r0, 0xc0086f3c, &(0x7f0000000040)={0xff, 0x2000}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18af23010000", @ANYBLOB="c4c82775fddac06ea11c1427728ba33bab154e58b5edf0cb5760e86de861c0412d73c4d3ccda2ede0b354ac461801eb719e84c46e41048706154ec542493709c00096e97cb88542b7f8c570975d52096a0c5b83e795d65b641e1cc6e90672c6746aa", @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a0000008500000006"], &(0x7f0000000740)='GPL\x00', 0x3, 0x2a, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200620134000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000280)=0x4) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000000000ff"]) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x500000b, 0x204031, 0xffffffffffffffff, 0x47af3000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 3m42.619880288s ago: executing program 5 (id=2789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x9}, 'syz1\x00', 0x46}) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x9, 0x2, 0x818, 0x0, 0x0, 0x0, 0x2, 0x7, 0x9, 0x8, 0x0, 0x8001, 0x6, 0x9, 0x0, 0x3, [0x1, 0x6]}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000000b00000000000000000a2000000000ffffff7f00001a0000000007000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021140011800c000100636f756e74657200040002804c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c000080080003400000000210000780090001006c61737400ddfcc9ee32e3abaccc4dd0c865f4000000140000001000"], 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$inet(r0, &(0x7f0000001940)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000140)="12a09ecd8ee8e7af827f8c2b7ba21a1c0684f218c07cf4cc3b2148be0f89d6f59a8b90f32b15d5842843b642c7d43bfd8a20bb34a6f2e61258fe72e7a6860f2f7c6d404883a9beadad5d2fc491ae5fd344b3bf235ef217defbf45ccf8d0505ecb3572a9e093fc1ee60fd9a7519dec47bc1418ee5b0b6e25acad59a", 0x7b}, {&(0x7f00000001c0)="6759f1d3f3c3fa1244df9b2dab3ccb204d7fe6c95f", 0x15}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="17bd0c2fe86070fe8432b360e044a0a8504571ea2974d3dcadc74a54eacdfac15e9f2d6522b5817e463afac2bff25b7f14d6bdb211f323c31da630a01ec5f5842e762e576d0afe821b5e3bf73e45e2a4a6b86268d238ea1b470781265c9ce74305562e0a86786e6c4b37e64a9f309b9fa4ffd96512858b153f2d626a8dd5307a254f78dd304f50d902b68ddacea6c9d710fc580a65f889521a", 0x99}], 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="140000000000000000000000020000000d0000000000000011000000000000000000000001000000080000000000000014000000000000000000000001000000030000000000000011000000000000000000000001000000ff0000000000000098000000000000000000000007000000892bf00a010100e0000002ffffffffe0000002e0000001e0000001ac1414bbffffffffac1414bb0a010101831321ac1414bb0a010101e0000002ac1414aa9404010014d3d91038a5790b98a5eeab5923d9ffffffffac1414aa64010102ac141410ac1414bb640101020a01010200000000940400009404000044eda2f2a2329496e0d1c90b3b484d16ab14f363e0000001fffffbe5ac1e00010000000294040100000000"], 0xf8}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x4e23, 0x6, @mcast1, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', '', [], 0xa, "c9576b55c1a4bf3aacb137fb7721aae45b8484bb72fc9d0a303fc35346da39eab9201e7a5f09fabb5f9ac15a86ef4a234a45d7d38b77900cccf5412b0ea3f3bc2b8b635db2bc994e9976b4ac22f24607009285390d72bb4b08ece969bd086f15f3ab08de15819c43052caf7d9b696e81130b47be840fb20d9368a9018beecbb75784163e06d0b681b14f14c998bfc20b"}, 0x94) sendfile(r3, r5, &(0x7f0000000080)=0x5, 0xffff) write$proc_mixer(r5, &(0x7f0000000080)=[{'DIGITAL1', @val={' \'', 'Master Playback'}}, {'DIGITAL3', @void}], 0x39) 3m42.085087036s ago: executing program 5 (id=2791): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x2, @loopback}}, 0x1e) connect$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @empty}}, 0x1e) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f00000003c0)={{&(0x7f0000000040)=[{0x6c5a, 0x1aa, 0x7, {0x1, 0x9}, 0xc, 0x509, 0x80000001}, {0x4, 0x2, 0x8, {0x100000001, 0x6}, 0x95e1, 0x7, 0xb}, {0x1ff, 0x101, 0x7, {0x48800}, 0xa06, 0x8, 0x2}, {0x7, 0x2, 0x4, {0x5, 0x6}, 0x6, 0x6, 0x7}], 0x4, 0x40, 0xff, 0x63d}, {&(0x7f0000000180)=[{0x12, 0x53975d43}, {0x4, 0x200}, {0x8, 0xc2}, {0x0, 0x50000000}, {0x7, 0x1}, {0x8001, 0xa5}, {0xc14c, 0xcd3}, {0x9, 0xf269}, {0x3, 0x9}, {0xddc, 0x5}], 0xa, 0x10, 0x9, 0x4}, {0x0, 0x0, 0x8, 0xb, 0xffffffffffffffff}, {&(0x7f0000000300)=[{0xb707, 0x0, 0x4, 0x794, 0x1}], 0x1, 0x28, 0x9af, 0x6}, {&(0x7f0000000380)=[0x6, 0x2, 0x9, 0x3b7], 0x4, 0x8, 0x1, 0x2}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {0x3, 0x0, 0x0, 0x1}, 0x3e, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2b, 0x7, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c) syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004598002800020000fe06907800000000fffffffffffd4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) read$FUSE(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) 3m41.518348182s ago: executing program 5 (id=2793): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fsopen(0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write(r0, 0x0, 0x0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="fdffffff000000", @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000002c0)) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000200)={0x0, 0x1, 0x5f, "d6eb1c01d26ad63134136d8750636e532944e3af3b75f4b8b727cbb8a6208ed0fe9bbde89b4fc4262f4092f86c0d21bd4623e4de42e6bed8ea3f054b6d81005974613a96dd1d3249208f6b6bdaca41533d553b6646132531bf7f0a82970ba3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x3, 0x3}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000180)={0x2, @multicast1, 0x4e22, 0x1, 'lblc\x00', 0x4, 0x8, 0x1d}, 0x2c) 3m39.015691925s ago: executing program 35 (id=2793): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fsopen(0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write(r0, 0x0, 0x0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="fdffffff000000", @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000002c0)) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000200)={0x0, 0x1, 0x5f, "d6eb1c01d26ad63134136d8750636e532944e3af3b75f4b8b727cbb8a6208ed0fe9bbde89b4fc4262f4092f86c0d21bd4623e4de42e6bed8ea3f054b6d81005974613a96dd1d3249208f6b6bdaca41533d553b6646132531bf7f0a82970ba3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x3, 0x3}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000180)={0x2, @multicast1, 0x4e22, 0x1, 'lblc\x00', 0x4, 0x8, 0x1d}, 0x2c) 2m56.731378217s ago: executing program 4 (id=2902): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2m56.426935872s ago: executing program 4 (id=2903): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x7}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000400000004", @ANYRES32=0x1, @ANYBLOB="b4bfbd"], 0x50) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x8f00) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m54.6193279s ago: executing program 4 (id=2909): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x88}}, 0x0) write(r0, &(0x7f0000000000), 0x0) socket(0x2, 0x3, 0xff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f28290a9423debbb86f292c4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', &(0x7f00000001c0), 0x1000) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="f36245f6eba3b1e0287dd52a148762169ecbc0dc334b8f4b9a0e88846785ac15f005195018cbfe06f491cac33e4100ef8f861abc27578d87d7d7972ead1028c7d0702148617d53c0159acc77c35572c0b1139a5d0ef19816e8260615efd4806d356fc76e26f2bfefd461ad6a7a24d01be5b72487605498fdf733c31704717b2ade6b1dcbf6e3d5ea1ac10040e3f031421aa38b28e800d60e73470e4e53495f66982f2ec157b33fad1fe94f8621115ddaa652ad", 0xb3) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500005100028008000500010000000500250001000000050029000000000008000a00", @ANYRES32, @ANYRESHEX=r0], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000200)='bridge0\x00') 2m53.344468447s ago: executing program 4 (id=2911): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close_range(r0, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c4200416ec366166e031400000400458074f305"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000300)={0x20000000, 0x3, {0xffffffffffffffff}, {}, 0x7}) prlimit64(r3, 0xc, &(0x7f00000003c0)={0xff, 0x100000000}, &(0x7f00000004c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) io_setup(0x7, &(0x7f0000000280)=0x0) io_pgetevents(r8, 0x4, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xeffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000540)={"2c0844ead1f8326c6808c1a39c7faa149d2750373651fd2efcb4ef90604f78a2", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r10, 0xc0383e04, &(0x7f0000000680)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f00000005c0)=[{}, {}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x5, 0x8, 0x4fd}) 2m52.981496375s ago: executing program 4 (id=2912): r0 = fsopen(&(0x7f0000000640)='xfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x167) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='GPL\x00', 0xb47e, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000b00)={0x2, 0xc, 0xd7, 0xffff}, 0x10, 0x2be32, 0xffffffffffffffff, 0x2, &(0x7f0000000b40)=[r1, r1], &(0x7f0000000b80)=[{0x2, 0x4, 0xd}, {0x4, 0x1, 0x8, 0xa}], 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00'], 0x48) close(0x3) prctl$PR_SET_IO_FLUSHER(0x41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x13, 0x4, 0x8, 0x8, 0x10}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000680), 0x8, 0xdd, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x4, [@fwd={0xa}, @typedef={0x5, 0x0, 0x0, 0x8, 0x3}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @enum64={0x6, 0x9, 0x0, 0x13, 0x1, 0x8, [{0x9, 0x2, 0x1}, {0x7, 0x52b6, 0x4}, {0x8, 0x1, 0x5}, {0x3, 0xf, 0x8}, {0xd, 0x3, 0x6}, {0x7, 0xaf, 0x7}, {0xe, 0xe, 0x4}, {0x3, 0x90, 0x8000}, {0x5, 0xfff, 0x8}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0xc4, 0x0, 0x2}, 0x28) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x40000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'dvmrp1\x00', 0x1001}) io_setup(0x202, &(0x7f0000000200)) 2m52.079628643s ago: executing program 4 (id=2915): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffebf, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x6}, 0x57, 0x1000000000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m44.570713016s ago: executing program 8 (id=2933): socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000000c0)={0x0}) syz_emit_ethernet(0x71, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004004) r2 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x3, 'rr\x00', 0x30, 0x4, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 2m42.570967361s ago: executing program 8 (id=2937): syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0xdbcb74697ae56b0d, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xe, 0x20, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xdc, 0x3, 0x32, {0x7, 0x25, 0x1, 0x8, 0x8, 0x3fa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x9, 0x8, {0x7, 0x25, 0x1, 0x4, 0xc, 0x9}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x15}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0xfffffffe}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x1f7ff6, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000340), 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="7cc18893378bf594a09336655921692e5a9ff9ad9a36093b56de59aaa1d3d653f33f897abb716e8c8013d42c6d704b224cfec3a0eeaddb4fb34c4feca85a6e4b76124152f50d3770b06c87371a1899426ea84543e5667381e82904"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000003aebf6a900006301100000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5800009, 0x28011, r2, 0xffffe000) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) delete_module(0x0, 0x500) 2m40.038076759s ago: executing program 8 (id=2942): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001800)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)) fcntl$setflags(r0, 0x2, 0x1) lsetxattr$security_selinux(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x80000000, &(0x7f0000006680)) futimesat(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x5, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000100), 0x5, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x1, 0x8, 0x100, "546887fc040c07fce4a1570d0331475ba853c166e5139d825d76b08f87a42a49", 0x2f6e9e99}) getsockopt$MRT(r2, 0x0, 0xd0, 0x0, &(0x7f0000000100)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="73697a33f1d248c281512761dc6c7525653d74322c00"]) mount$bind(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2000800, 0x0) 2m37.874463191s ago: executing program 8 (id=2944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_ringparam={0x11, 0x401, 0x7ff, 0x0, 0xffff, 0x51c1, 0x5, 0x80, 0x8}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000480)={0xffffff27, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r7}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) unshare(0x24020400) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r11, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m36.621473653s ago: executing program 36 (id=2915): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffebf, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x6}, 0x57, 0x1000000000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m36.608001419s ago: executing program 8 (id=2947): mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='aio\x00', 0x0, 0x0) setregid(0xee00, 0xee00) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x200400, 0x80000000, 0x4, 0x4, 0xc0000000, 0xfffffffe}) syz_open_procfs(r1, &(0x7f0000000000)='fdinfo\x00') pipe2(&(0x7f0000002a00), 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) close(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x6}}, 0x20) 2m34.363524005s ago: executing program 8 (id=2953): r0 = fsopen(&(0x7f0000000100)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x74) 2m14.30281136s ago: executing program 37 (id=2953): r0 = fsopen(&(0x7f0000000100)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x74) 2m8.903991996s ago: executing program 9 (id=2985): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800002597618f60494e53000000f2a59e120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000005000000850000001b000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x3c, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4, r3}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103001, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) dup2(r6, r0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000540)=0x1) 2m8.244049058s ago: executing program 9 (id=2988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000540)={{r7, 0x3, 0x81, 0x3, 0xabb, 0x0, 0x200, 0x0, 0x1, 0x9d0, 0x81, 0x7, 0x1, 0xf99, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000009c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {}, {}, {r6}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r7}, {}, {}, {r6, r8}, {}, {}, {}, {r7, r8}, {}, {}, {}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}], 0x8, "979f7700000005"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000700)={0x0, r7, "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", "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"}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c"], 0x290}}, 0x0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r12, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) getsockopt$bt_hci(r13, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r11, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r12, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r11, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r14, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) 2m6.889200739s ago: executing program 9 (id=2990): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fchdir(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) request_key(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) writev(r3, &(0x7f0000000040), 0x2) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000001c0)={0x2c}, 0x8) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2m4.7079347s ago: executing program 9 (id=2995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x400a00}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d00)={'tunl0\x00', &(0x7f0000000c80)={'syztnl0\x00', r3, 0x1, 0x804f, 0xd, 0xe, {{0x16, 0x4, 0x2, 0x3f, 0x58, 0x66, 0x0, 0x9, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x22}, {[@timestamp={0x44, 0x2c, 0x93, 0x0, 0x0, [0x0, 0x10001, 0x5, 0x40, 0x3, 0x6, 0x1e, 0x9f3d, 0x7fffffff, 0x5]}, @timestamp={0x44, 0x18, 0x91, 0x0, 0x4, [0x1, 0x2a5b, 0x3, 0xfff, 0x81]}]}}}}}) r4 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r6, 0x1}}, 0x18) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x2, 0xaa, 0xfa11, 0xffffffff}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x8280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(r7) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r8, 0x80e85411, &(0x7f0000000400)) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000d40)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) 2m0.247890323s ago: executing program 9 (id=3011): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000000001, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x224000, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f00000000c0)='0\x00#\x00S\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x0, {}, {0x0, 0xff, 0x6}, 0xfd}], 0x20) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0/../file0/../file0/file0\x00', &(0x7f0000000080)='sysfs\x00', 0xa06040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') r6 = socket$kcm(0x21, 0x5, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24040045) r7 = io_uring_setup(0x10e0, &(0x7f0000000380)={0x0, 0x55a6, 0x10000, 0x2, 0x1dd, 0x0, r5}) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000500)="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", 0xfc}], 0x1) io_uring_enter(r7, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1f00, 0x54, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x12) 1m58.20302794s ago: executing program 9 (id=3015): r0 = socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f00000001c0)={0x8, 'vlan0\x00', {'batadv0\x00'}, 0x7}) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) capset(&(0x7f0000000140)={0x20071026, r1}, &(0x7f0000000180)={0x2678, 0x2, 0x8, 0x3, 0x2, 0x21}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc00) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2a50a08d86b3617814a27f04553834b34b76f8ff982ea6000000000000000000000000000000f767cbff8386fba85a529f91c7bbb9bceb32801629562222ba3e0dda78fff0dc280eb5d029a040d99cb5b2b6f0626b360d70468f1f78bba8565e28701ed24049afcacc3133049e5486ba5e91ae47f3f0b7b587ec27650fb74abb58bdaa53cfe46b948838ca551f0abf99609f2cdd084bb36740fdc52b9da8ce662ad4c5e7da86722b727b1d226a27f5a8dd6726424548ec131da0518f8e619addd84e32715c6d189b9e468cbfea11f43e85a0eedbfe2b58248ffd5cd36f414fc215ba06e61ab755cfb7e7888138a89965d8cf687bd0d92087b6cc605fc3c908d5224e1568be3b95413648aa5b", @ANYRES16=r8, @ANYRES16=r2, @ANYRES8=r2, @ANYRESHEX=r0], 0x50) write$P9_RGETLOCK(r5, &(0x7f0000000200)={0x1e, 0x37, 0x1, {0x1, 0xef67, 0xeb8ee40}}, 0x1e) io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) 1m43.072434672s ago: executing program 38 (id=3015): r0 = socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f00000001c0)={0x8, 'vlan0\x00', {'batadv0\x00'}, 0x7}) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) capset(&(0x7f0000000140)={0x20071026, r1}, &(0x7f0000000180)={0x2678, 0x2, 0x8, 0x3, 0x2, 0x21}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xc00) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYRES16=r2, @ANYRES8=r2, @ANYRESHEX=r0], 0x50) write$P9_RGETLOCK(r5, &(0x7f0000000200)={0x1e, 0x37, 0x1, {0x1, 0xef67, 0xeb8ee40}}, 0x1e) io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) 21.946104986s ago: executing program 0 (id=3213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_ringparam={0x11, 0x401, 0x7ff, 0x0, 0xffff, 0x51c1, 0x5, 0x80, 0x8}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000480)={0xffffff27, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r7}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) unshare(0x24020400) r9 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 20.751184762s ago: executing program 0 (id=3214): r0 = fsopen(&(0x7f00000000c0)='befs\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) shutdown(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000280)='L', 0x1) syz_usb_disconnect(r2) syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x2240c2) 18.658330787s ago: executing program 1 (id=3217): write(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b, 0x0, 0xee00}, {0x0, 0x7}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@loopback, 0x3506, 0x4, 0x1, 0x0, 0x81, 0x0, 0x20000}}, 0xe8) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x3, 0x0, 0x0, {0xa, 0x4e24, 0xffffffff, @mcast2}}}, 0x32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x161182) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="810000000008000000000000000000000000000000000000000000df7e574b4b219ea87051f3c8f1b624459ffdc2a99bc9d569c362eedfcbdfcee9be9a6d5e200d8e94e4f09cb6fbbd364ac781353d0a6e5064906be9e0c2820e"], 0x28}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 16.200277364s ago: executing program 6 (id=3220): syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb03"], 0x50}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) read$FUSE(0xffffffffffffffff, 0x0, 0x9d00) 15.479216854s ago: executing program 0 (id=3221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_ringparam={0x11, 0x401, 0x7ff, 0x0, 0xffff, 0x51c1, 0x5, 0x80, 0x8}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000480)={0xffffff27, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r7}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r11, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 14.167575241s ago: executing program 6 (id=3224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES16=r5, @ANYRESDEC=r4], 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000) ioctl$FE_GET_EVENT(r9, 0x80286f4e, &(0x7f0000000040)={0x0, {0x0, 0x0, @qam}}) read$FUSE(r8, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r13 = getpgid(r6) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x3, r7, r10, r12, 0x0, 0xa6, 0x8}, 0x0, 0x0, 0xffff, 0x5, 0x1, 0x48c, 0x8, 0x8, 0x800, 0x7, r6, r13}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000) r14 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203"], 0xfdef) r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000d146e0d149c83b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r17, 0x0, 0x2d, 0x0, @val=@netfilter={0x1, 0x0, 0x353a, 0x1}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r16, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x4003, &(0x7f00000006c0)=ANY=[@ANYRES16=r11, @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYRES8=r17, @ANYRES64=r14, @ANYBLOB=',cache=loose,noxattr,access=', @ANYRESDEC=r4, @ANYBLOB=',access=user,cache=fscache,cache=fscache,uid<', @ANYRESDEC=r15, @ANYBLOB=',\x00']) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13.612602914s ago: executing program 0 (id=3225): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000004cc00"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = userfaultfd(0x801) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fd25000000000000400000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r4, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40), &(0x7f0000000b80), 0x0, 0xac, 0x0, 0x0, 0x10, &(0x7f0000000c00), &(0x7f0000000340), 0x8, 0x71, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x36, 0x0, &(0x7f00000001c0)="c1dfb080cd21d398098ee68886ddfc30d80ce5ed88f6e9b83601f444ac505655d702cb0e4881a9fb5fbebe8f1e17d613fe24c2021a97", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)={{0x0, 0x3fffffff}, {0x0, 0x3fffffff}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_open_dev$dmmidi(&(0x7f0000000300), 0xa9, 0x141040) 12.939468458s ago: executing program 1 (id=3227): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x88}}, 0x0) write(r0, &(0x7f0000000000)="05000000010001", 0x7) socket(0x2, 0x3, 0xff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0x10, 0x10, 0x509}, 0x10}], 0x1}, 0x40040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', &(0x7f00000001c0), 0x1000) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="f36245f6eba3b1e0287dd52a148762169ecbc0dc334b8f4b9a0e88846785ac15f005195018cbfe06f491cac33e4100ef8f861abc27578d87d7d7972ead1028c7d0702148617d53c0159acc77c35572c0b1139a5d0ef19816e8260615efd4806d356fc76e26f2bfefd461ad6a7a24d01be5b72487605498fdf733c31704717b2ade6b1dcbf6e3d5ea1ac10040e3f031421aa38b28e800d60e73470e4e53495f66982f2ec157b33fad1fe94f8621115ddaa652ad", 0xb3) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500005100028008000500010000000500250001000000050029000000000008000a00", @ANYRES32, @ANYRESHEX=r0], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000200)='bridge0\x00') 8.249528279s ago: executing program 1 (id=3232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@code={0xa, 0x65, {"b9030100c00f32b904000000c461b9dd0764660f3882820058000066450ff7ecf044093966baf80cb86ab0d68d66bafc0c66edc421845ef366bad00466baf80cb8665abb89ef66bafc0c66ed430f01f86644def0"}}], 0x65}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001780)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4080000) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.438035467s ago: executing program 7 (id=3234): r0 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb03"], 0x50}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) read$FUSE(r0, 0x0, 0x9d00) 7.403913037s ago: executing program 6 (id=3235): r0 = socket$inet6(0xa, 0x6, 0x400040) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@redirect_dir_nofollow}, {@userxattr}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x7f, 0x584e4f53, 0x3, 0x2, 0x7, 0x7, 0x5, 0x1, 0x4, 0x2}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0xb, 0x148, 0x1e8, 0x148, 0x2e0, 0x240, 0x240, 0x2e0, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x31}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e21], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e951fea3909a03f93f0030000000b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x79, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@uncond, 0xec010000, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x7, 0x7, 0x4, 0xc, 0x2], 0x3, 0x2}, {0x3, [0x6, 0x4, 0x7, 0x6, 0x4, 0x2], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9259}, [@IFLA_IFNAME={0x14, 0x3, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x34683d02d3d8a783, 0x10, 0x1ff, 0x81, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x65, 0x0, 0x9, 0x29, 0x0, @private=0xa010100, @multicast2, {[@noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1c, 0x80, 0x7, 0x4, 0x0, r5, 0xa9b, '\x00', r6, r5, 0x4, 0x0, 0x3}, 0x50) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000100)={'nicvf0\x00'}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r8, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f0000000080), 0x2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) 7.262879498s ago: executing program 7 (id=3236): r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r6 = epoll_create1(0x80000) epoll_pwait(r6, 0x0, 0x0, 0xfffffffd, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7.002287618s ago: executing program 1 (id=3237): socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000000c0)={0x0}) syz_emit_ethernet(0x71, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20004004) r3 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x3, 'rr\x00', 0x30, 0x4, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 6.390710124s ago: executing program 3 (id=3238): r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r6 = epoll_create1(0x80000) epoll_pwait(r6, 0x0, 0x0, 0xfffffffd, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.261560479s ago: executing program 7 (id=3239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_ringparam={0x11, 0x401, 0x7ff, 0x0, 0xffff, 0x51c1, 0x5, 0x80, 0x8}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000480)={0xffffff27, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r7}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) unshare(0x24020400) r9 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.156395675s ago: executing program 3 (id=3240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r4, 0x0) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x10b929) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x181341, 0x0) pwrite64(r6, 0x0, 0x0, 0x3) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x20, 0x10, 0x7fff, 0x3, {{0x22, 0x4, 0x0, 0x33, 0x88, 0x65, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_addr={0x44, 0x34, 0x31, 0x1, 0x8, [{@private=0xa010101, 0x1}, {@local, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0xb93e}, {@broadcast, 0xbae7}, {@loopback, 0x7}]}, @ssrr={0x89, 0x13, 0x4a, [@remote, @multicast2, @local, @remote]}, @lsrr={0x83, 0x1b, 0x72, [@rand_addr=0x64010102, @private=0xa010100, @multicast2, @broadcast, @empty, @empty]}, @noop, @generic={0x7, 0x11, "4d374095b46a90bc50f915a9dbabf8"}]}}}}}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newtclass={0xfc, 0x28, 0x20, 0x170bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff2, 0xa}, {0x9, 0x1000d}, {0x5, 0xfff1}}, [@tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7ff, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7e, 0x1, 0x1b75}}, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x8, 0x6f2}}, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x8, 0x9}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x8, 0xa}}, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0x0, 0xdf0f}}, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0x5, 0xff7e}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xb3}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0x72, 0x6}}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x8}}, @TCA_RATE={0x6, 0x5, {0x3, 0x35}}, @TCA_RATE={0x6, 0x5, {0x6, 0xfa}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0xfc}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs/file0\x00', &(0x7f0000000500)=""/250, 0xfa) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f00000001c0)={"04dfc86351907bcbc9293982262169af775bedfb0a63cb8031ecdc5351097e022d45a9640a4a4b506dc328f61ac030dacac442d82b9e81e6847961e65610b8f6e25f9eaf1a9f48ac011b67d68f8725991345a1f8ed6450a11246c6424cd7837f6bfc47209662ba0d0f44149fcefbbf6fa5b40644bce6cf7210107f57b850d0c9af06c766af1c637aa057167a6910e2e185b8d972e49eeda481d9a58394ef43958ce7407e73d6460653fc672aa4ab6a26bd1a631fa3a0f2b025ba137b8e3f933af28e1ea9984bc0438ea00b5f5b16893a22bb83ff1c92407a946d4dc7d347d526db0e71bb38f873937ca7343fb7248867adf5decd52e74f05c768c3b1c8282b9b1b1bc0f7ae08917b2abe3d3305e32b8db562d19dd7c83fde6dbe03ef72aa7ddc00144895b2a1981105046a28ca0852521afbcd560c15cd9f33e36417a251af7100392b6cdb0bbed4670d746c45fb5589f279cfd594911cb11f2a7336af10b2332e731f2eec8287c735f2346449f1629fde95d6c78bed90645bb280e222976d5721ee6dd6068cfd6174d2382e524672a2656eed5cf34eff27c2974deebf2aa6226e3fa2f15ea8db5891a062d422607a450a32cfdfaaeadfb2498e79fe9e47089b2a8bbdbdcbb0768c189c8fdc6246c00a34176a1c46a924ab4c382e5816f366c7b384e9238b3ad6ac559d90e22170d6915c7150a1858eb3f20a1847642018840b49c335074496991fb3193914f5213846ff8bf5b389298d797dfdd4a1d116caec17f13152c9699caab72a96d364134266030e67ada0de8d2bb05091f7d855fe1c435574856b0f8de9dc6af14ce179e3c0b6b563ccb8e02900fa9412784b0e5fa71a6e4499fecd1343d289daeb929d0cbd96f9f4501bc9d6d9d0b4f462aaf2556ce92ae6438bb3e3aa258c8c4ba6646f99f5a3d4f14f6773538faee834613461239487bee1b53724eb28301420ced16a8110a868fdff9185f8eff65e2d48f95db7ad4f30d079a39a2286fb3df3472d330f6f11fc7d1939a923c50263b3e0314037ec808df7cec279df5785fa2124d1650563799defc378cb9506ee7142eb108b3f4125ade3d9a73646bfdac795c753895b2ad51d358eff496d1c1a885c30b85b50eca89bf14ee50ae3301805f1691b3a391d7575c9a0a514710ad3e590491c60bdab122222c66cbb155452a01cb9750d14ffdc77ad11d4495c53bf38c8185c769c1409eb0b1c613eac8101d6784c9510790dd1df8fa6f2b4dbdbde3bdcbf6bfc456f68b680f2595853178e89a32e9c56d66fd2210fb0fc0e3cda61e6980e16e47ae8071182af80950c43ba221fe072e6945107a6edcd38bfeb201a657969bf340960a67e30987e56c953a177404fdf679ad99bbc06d705a0fc9659336b458ea0d575ddfe59706738d1e65c50527200"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 5.12556313s ago: executing program 7 (id=3241): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r1, 0x0, &(0x7f0000000280)=@ocfs2_parent={0x18, 0x2, {{0x3, 0x80, 0x3}, {0x48001, 0x8001, 0x8}}}, &(0x7f00000002c0), 0x1400) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = dup2(r2, r2) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="60b93a", 0x61}], 0x1}, 0x2890) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x5c, @multicast1, 0x4e21, 0x2, 'rr\x00', 0x28, 0x4114, 0x69}, 0x2c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.277107196s ago: executing program 0 (id=3242): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs(0x0, 0x0) name_to_handle_at(r1, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=@ocfs2_parent={0x18, 0x2, {{0x3, 0x80, 0x3}, {0x48001, 0x8001, 0x8}}}, &(0x7f00000002c0), 0x1400) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = dup2(r2, r2) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="60b93a", 0x61}], 0x1}, 0x2890) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x5c, @multicast1, 0x4e21, 0x2, 'rr\x00', 0x28, 0x4114, 0x69}, 0x2c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.062713931s ago: executing program 1 (id=3243): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) read$msr(r6, &(0x7f0000025300)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f00008a9000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000a4e000/0x4000)=nil) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x3e3fb000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) 3.933768712s ago: executing program 3 (id=3244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa00000000000000000800120000000000030000000000000010000000000000000000000000000000020000020000000000"], 0xa0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r8, 0x1, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xfffe}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) acct(0x0) fdatasync(r1) 3.901837267s ago: executing program 6 (id=3245): r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r6 = epoll_create1(0x80000) epoll_pwait(r6, &(0x7f0000000040), 0x0, 0xfffffffd, 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.472204767s ago: executing program 6 (id=3246): r0 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb03"], 0x50}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) read$FUSE(r0, 0x0, 0x9d00) 2.471304503s ago: executing program 3 (id=3247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000540)={{r7, 0x3, 0x81, 0x3, 0xabb, 0x0, 0x200, 0x0, 0x1, 0x9d0, 0x81, 0x7, 0x1, 0xf99, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000009c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {}, {}, {r6}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r7}, {}, {}, {r6, r8}, {}, {}, {}, {r7, r8}, {}, {}, {}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}], 0x8, "979f7700000005"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000700)={0x0, r7, "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", "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"}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c"], 0x290}}, 0x0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r12, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) getsockopt$bt_hci(r13, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r11, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) 1.839548988s ago: executing program 7 (id=3248): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x1000000, 0x0, 0x0, 0x0, 0x0, 0x4], [0xfb, 0x0, 0x2]], '\x00', [{0x4}, {}, {}, {0x0, 0x1, 0x0, 0x1}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0x10000}, {}, {}, {}, {0x2}], '\x00', 0x8000}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/sync_on_suspend', 0x100102, 0x50) sendfile(r2, r2, 0x0, 0x6) mkdir(&(0x7f00000002c0)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) ioctl$TCFLSH(r0, 0x540b, 0x0) 1.076440167s ago: executing program 3 (id=3249): r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r6 = epoll_create1(0x80000) epoll_pwait(r6, 0x0, 0x0, 0xfffffffd, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x2000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.03191691s ago: executing program 6 (id=3250): socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000500)=""/4096, 0x1000, &(0x7f00000000c0)={0x0}) syz_emit_ethernet(0x71, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20004004) r3 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x4e20, 0x3, 'rr\x00', 0x30, 0x4, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 895.410545ms ago: executing program 7 (id=3251): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x88}}, 0x0) write(r0, &(0x7f0000000000)="05000000010001", 0x7) socket(0x2, 0x3, 0xff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xd0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f28290a9423debbb86f292c4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x4}]}, 0xd0}], 0x1}, 0x40040) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', &(0x7f00000001c0), 0x1000) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000480)="f36245f6eba3b1e0287dd52a148762169ecbc0dc334b8f4b9a0e88846785ac15f005195018cbfe06f491cac33e4100ef8f861abc27578d87d7d7972ead1028c7d0702148617d53c0159acc77c35572c0b1139a5d0ef19816e8260615efd4806d356fc76e26f2bfefd461ad6a7a24d01be5b72487605498fdf733c31704717b2ade6b1dcbf6e3d5ea1ac10040e3f031421aa38b28e800d60e73470e4e53495f66982f2ec157b33fad1fe94f8621115ddaa652ad", 0xb3) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500005100028008000500010000000500250001000000050029000000000008000a00", @ANYRES32, @ANYRESHEX=r0], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000200)='bridge0\x00') 267.191584ms ago: executing program 1 (id=3252): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 236.453475ms ago: executing program 0 (id=3253): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) prlimit64(0x0, 0xc, &(0x7f0000000180)={0xa6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7b132000) r1 = syz_clone(0x31000400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) setgroups(0x1, &(0x7f0000000000)=[0x0]) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x401, 0x0, 0x20, 0x3, 0xd, "3eccd8fd0000000000000010000000040100"}) r4 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000020000000000020100004c000480480001800a0001006d61746368000000380002800e000100636f6e6e62797465730000001c0003004cb4fc4ba7906e8f58c20508000000000000007521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000280)={0x0, 0x4, 0x2, 0x0, 0x8}) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') 0s ago: executing program 3 (id=3254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000085102000060000001800c80000e324e418007748fae975635dd7fe9bd1dd6636ee839ae920282ed119d652b59f94e06c7e716ec0762d16b3350ed14896c330cd70d12bcb24b7aa4fa28f5db8491ec490d2626f865cb89dea870ed0be260f0011b77d7cc21e171d02276a02de1ddaaded4f07f4d3e0ab186ba52aa05607b184691eca8ac62db48101f09171ba4af0e449e9ce934191b737d6eb936c3502702aa08319083c5f9656cbc1a1a629fa16764b2df28b4df34454c941dfbc2493eb37eb3c3ab5aad7e88063312cb0c6b486b95d2c58bf3adf5561753df02333032698d0a483b2a3d4d6c798005612eb64eb5cc467e0837c3b3d81483e7ed4b6302eb39470fbc90289f5dc0d7452ae5704a32598294926a44f7a464c6b3237", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000540)={{r7, 0x3, 0x81, 0x3, 0xabb, 0x0, 0x200, 0x0, 0x1, 0x9d0, 0x81, 0x7, 0x1, 0xf99, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000019c0)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f00000009c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {}, {}, {r6}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r7}, {}, {}, {r6, r8}, {}, {}, {}, {r7, r8}, {}, {}, {}, {}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}], 0x8, "979f7700000005"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000700)={0x0, r7, "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", "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"}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001006c"], 0x290}}, 0x0) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r12, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r11, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x1, 0x2ea473, 0x2eb80c}) kernel console output (not intermixed with test programs): 3 [ 1271.814923][T17876] team0: Port device team_slave_1 added [ 1271.833707][ T5802] usb 4-1: Product: syz [ 1271.840978][ T5802] usb 4-1: Manufacturer: syz [ 1271.854536][ T5802] usb 4-1: SerialNumber: syz [ 1271.874235][T17876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.884474][T17876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.911686][T17876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.924469][T17876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.932646][T17876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.963308][T17876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.023601][T17876] hsr_slave_0: entered promiscuous mode [ 1272.032612][T17876] hsr_slave_1: entered promiscuous mode [ 1272.044487][T17876] debugfs: 'hsr0' already exists in 'hsr' [ 1272.051579][T17876] Cannot create hsr debugfs directory [ 1272.195194][ T5802] usb 4-1: selecting invalid altsetting 0 [ 1272.263108][ T5802] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1272.286396][ T5802] uvcvideo 4-1:220.0: No valid video chain found. [ 1272.327230][T15759] Bluetooth: hci6: command tx timeout [ 1272.377740][ T5802] usb 4-1: selecting invalid altsetting 0 [ 1272.394217][ T5802] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1272.427185][ T5802] usb 4-1: USB disconnect, device number 50 [ 1273.001433][ T30] audit: type=1400 audit(2000000597.600:807): avc: denied { kexec_image_load } for pid=17945 comm="syz.3.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1273.021729][ T5728] net_ratelimit: 10 callbacks suppressed [ 1273.021746][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.322365][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.455559][T17952] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2988'. [ 1273.873318][T17953] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2988'. [ 1273.882363][T17953] netlink: 348 bytes leftover after parsing attributes in process `syz.9.2988'. [ 1273.891433][T17953] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2988'. [ 1273.900285][T17953] netlink: 348 bytes leftover after parsing attributes in process `syz.9.2988'. [ 1273.910231][T17953] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2988'. [ 1273.942296][ T30] audit: type=1400 audit(2000000598.180:808): avc: denied { ioctl } for pid=17949 comm="syz.9.2988" path="socket:[66566]" dev="sockfs" ino=66566 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1274.069841][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.330739][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.411971][T15759] Bluetooth: hci6: command tx timeout [ 1274.513764][ T30] audit: type=1400 audit(2000000599.120:809): avc: denied { write } for pid=17931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1275.162806][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.424532][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.424541][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.462346][ T30] audit: type=1400 audit(2000000600.000:810): avc: denied { read } for pid=17972 comm="syz.6.2992" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1275.543091][T11963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.552355][T11963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.631481][T17974] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.2990'. [ 1275.677911][T17974] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.2990'. [ 1275.691318][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.768755][ T30] audit: type=1400 audit(2000000600.090:811): avc: denied { open } for pid=17972 comm="syz.6.2992" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1275.879945][ T30] audit: type=1400 audit(2000000600.490:812): avc: denied { write } for pid=17979 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1276.094674][T17987] input input116: cannot allocate more than FF_MAX_EFFECTS effects [ 1276.496826][T15759] Bluetooth: hci6: command tx timeout [ 1277.176970][ T5802] IPVS: starting estimator thread 0... [ 1277.310120][T18009] IPVS: using max 65 ests per chain, 156000 per kthread [ 1277.546293][ T30] audit: type=1400 audit(2000000602.150:813): avc: denied { write } for pid=17988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.591322][T17876] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1277.631288][T17876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1277.650261][T18013] FAULT_INJECTION: forcing a failure. [ 1277.650261][T18013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1277.692209][T18013] CPU: 0 UID: 0 PID: 18013 Comm: syz.7.2999 Tainted: G L syzkaller #0 PREEMPT(full) [ 1277.692244][T18013] Tainted: [L]=SOFTLOCKUP [ 1277.692252][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1277.692265][T18013] Call Trace: [ 1277.692272][T18013] [ 1277.692281][T18013] dump_stack_lvl+0x100/0x190 [ 1277.692315][T18013] should_fail_ex.cold+0x5/0xa [ 1277.692346][T18013] _copy_from_user+0x2e/0xd0 [ 1277.692379][T18013] br_dev_read_uargs+0x141/0x3d0 [ 1277.692406][T18013] ? __pfx_br_dev_read_uargs+0x10/0x10 [ 1277.692426][T18013] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1277.692451][T18013] ? rcu_is_watching+0x12/0xc0 [ 1277.692488][T18013] br_dev_siocdevprivate+0xeb/0x1650 [ 1277.692513][T18013] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 1277.692541][T18013] ? do_raw_spin_lock+0x128/0x260 [ 1277.692573][T18013] ? find_held_lock+0x2b/0x80 [ 1277.692592][T18013] ? debug_mutex_remove_waiter+0xa8/0x320 [ 1277.692614][T18013] ? debug_mutex_remove_waiter+0xa8/0x320 [ 1277.692660][T18013] ? netdev_name_node_lookup+0x107/0x150 [ 1277.692690][T18013] ? __mutex_lock+0x838/0x1b10 [ 1277.692724][T18013] dev_ifsioc+0xc7a/0x1fc0 [ 1277.692760][T18013] ? __pfx_dev_ifsioc+0x10/0x10 [ 1277.692789][T18013] ? __pfx___mutex_lock+0x10/0x10 [ 1277.692828][T18013] ? dev_load+0x8e/0x240 [ 1277.692856][T18013] ? dev_load+0x8e/0x240 [ 1277.692893][T18013] dev_ioctl+0x70e/0x10e0 [ 1277.692926][T18013] sock_ioctl+0x494/0x6b0 [ 1277.692955][T18013] ? __pfx_sock_ioctl+0x10/0x10 [ 1277.692978][T18013] ? hook_file_ioctl_common+0x149/0x410 [ 1277.693026][T18013] ? selinux_file_ioctl+0x13b/0x290 [ 1277.693056][T18013] ? selinux_file_ioctl+0xb6/0x290 [ 1277.693082][T18013] ? __pfx_sock_ioctl+0x10/0x10 [ 1277.693110][T18013] __x64_sys_ioctl+0x18e/0x210 [ 1277.693136][T18013] do_syscall_64+0x10b/0xf80 [ 1277.693163][T18013] ? clear_bhb_loop+0x40/0x90 [ 1277.693189][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1277.693211][T18013] RIP: 0033:0x7fd08f59ce59 [ 1277.693229][T18013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1277.693248][T18013] RSP: 002b:00007fd09045c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1277.693269][T18013] RAX: ffffffffffffffda RBX: 00007fd08f815fa0 RCX: 00007fd08f59ce59 [ 1277.693282][T18013] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 1277.693289][T18013] RBP: 00007fd09045c090 R08: 0000000000000000 R09: 0000000000000000 [ 1277.693296][T18013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1277.693303][T18013] R13: 00007fd08f816038 R14: 00007fd08f815fa0 R15: 00007ffd5e2d5608 [ 1277.693320][T18013] [ 1278.135297][ T30] audit: type=1400 audit(2000000602.730:814): avc: denied { write } for pid=18023 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1278.179123][T18024] xt_hashlimit: invalid interval [ 1278.211214][T17876] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1278.233442][T17876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1278.252193][T17876] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1278.274157][T17876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1278.282205][T17876] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1278.305002][T17876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1278.503315][ T5802] net_ratelimit: 67 callbacks suppressed [ 1278.503334][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.643662][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.652620][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.745147][T18047] input input117: cannot allocate more than FF_MAX_EFFECTS effects [ 1278.745317][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.126737][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.475630][T18054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1279.547704][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.560277][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.602298][T17876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1279.695898][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.704442][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.837878][T17876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1279.860876][T11963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.867974][T11963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1279.940709][T18062] input input118: cannot allocate more than FF_MAX_EFFECTS effects [ 1280.273506][ T30] audit: type=1400 audit(2000000604.880:815): avc: denied { write } for pid=18029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1280.342394][T16235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.349582][T16235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1280.467989][ T30] audit: type=1400 audit(2000000605.070:816): avc: denied { write } for pid=18065 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1280.649641][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.777976][ T30] audit: type=1400 audit(2000000607.390:817): avc: denied { write } for pid=18077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.950117][T17876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1282.973085][ T30] audit: type=1400 audit(2000000607.570:818): avc: denied { write } for pid=18108 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1283.163835][T17876] veth0_vlan: entered promiscuous mode [ 1283.220519][T17876] veth1_vlan: entered promiscuous mode [ 1283.442810][T18122] netlink: 'syz.6.3016': attribute type 1 has an invalid length. [ 1284.165673][ T10] net_ratelimit: 18 callbacks suppressed [ 1284.165695][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.179532][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.179882][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.453814][T17876] veth0_macvtap: entered promiscuous mode [ 1284.491298][T17876] veth1_macvtap: entered promiscuous mode [ 1284.539773][T17876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.577526][T17876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.606791][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.732833][T18136] input input119: cannot allocate more than FF_MAX_EFFECTS effects [ 1285.120346][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.125106][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.138349][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.146784][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.160318][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.211340][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.221264][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.231702][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.285007][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.364706][T18142] xt_l2tp: unknown flags: 17 [ 1285.390119][ T30] audit: type=1400 audit(2000000610.000:819): avc: denied { write } for pid=18125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1285.611958][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.670193][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.683281][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.693466][ T30] audit: type=1400 audit(2000000610.300:820): avc: denied { write } for pid=18148 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1285.750811][T11963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.753752][T18147] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3021'. [ 1285.765011][T11963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.793008][T18147] bridge1: entered promiscuous mode [ 1285.802504][T18147] bridge1: entered allmulticast mode [ 1286.061698][ T30] audit: type=1400 audit(2000000610.670:821): avc: denied { write } for pid=18153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1286.136288][ T30] audit: type=1400 audit(2000000610.740:822): avc: denied { write } for pid=18167 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1286.186820][T14271] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1286.359888][T14271] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1286.385611][T14271] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.404102][T14271] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1286.438527][T14271] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.490490][T14271] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1286.520185][T18185] FAULT_INJECTION: forcing a failure. [ 1286.520185][T18185] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.538880][T14271] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1286.552579][T14271] usb 1-1: Product: syz [ 1286.558696][T14271] usb 1-1: Manufacturer: syz [ 1286.574042][T18185] CPU: 0 UID: 0 PID: 18185 Comm: syz.6.3025 Tainted: G L syzkaller #0 PREEMPT(full) [ 1286.574075][T18185] Tainted: [L]=SOFTLOCKUP [ 1286.574083][T18185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1286.574095][T18185] Call Trace: [ 1286.574103][T18185] [ 1286.574112][T18185] dump_stack_lvl+0x100/0x190 [ 1286.574145][T18185] should_fail_ex.cold+0x5/0xa [ 1286.574176][T18185] should_failslab+0xc2/0x120 [ 1286.574200][T18185] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1286.574231][T18185] ? key_alloc+0xc0f/0x1310 [ 1286.574257][T18185] ? __lock_acquire+0x4a5/0x2630 [ 1286.574289][T18185] key_alloc+0xc0f/0x1310 [ 1286.574327][T18185] ? __pfx_key_alloc+0x10/0x10 [ 1286.574352][T18185] ? __asan_memcpy+0x3c/0x60 [ 1286.574386][T18185] keyring_alloc+0x44/0xc0 [ 1286.574419][T18185] keyctl_get_persistent+0x779/0x8b0 [ 1286.574455][T18185] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 1286.574485][T18185] ? __fget_files+0x21f/0x3d0 [ 1286.574521][T18185] ? ksys_write+0x1ac/0x250 [ 1286.574544][T18185] ? __pfx_ksys_write+0x10/0x10 [ 1286.574572][T18185] __do_sys_keyctl+0x3b2/0x5a0 [ 1286.574598][T18185] do_syscall_64+0x10b/0xf80 [ 1286.574625][T18185] ? clear_bhb_loop+0x40/0x90 [ 1286.574651][T18185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.574672][T18185] RIP: 0033:0x7fd8a819ce59 [ 1286.574689][T18185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.574708][T18185] RSP: 002b:00007fd8a8f90028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1286.574728][T18185] RAX: ffffffffffffffda RBX: 00007fd8a8415fa0 RCX: 00007fd8a819ce59 [ 1286.574742][T18185] RDX: 000000003469f84d RSI: 0000000000000000 RDI: 0000000000000016 [ 1286.574755][T18185] RBP: 00007fd8a8f90090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.574767][T18185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.574780][T18185] R13: 00007fd8a8416038 R14: 00007fd8a8415fa0 R15: 00007fff3067b618 [ 1286.574809][T18185] [ 1286.593132][T14271] cdc_wdm 1-1:1.0: skipping garbage [ 1286.635923][ T30] audit: type=1400 audit(2000000611.220:823): avc: denied { write } for pid=18169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1286.756266][T14271] cdc_wdm 1-1:1.0: skipping garbage [ 1286.972381][T18191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3026'. [ 1287.023985][T18159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.032966][T18159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.081082][T14271] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1287.087282][T14271] cdc_wdm 1-1:1.0: Unknown control protocol [ 1287.342964][ T30] audit: type=1400 audit(2000000611.930:824): avc: denied { write } for pid=18196 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1287.429775][T18199] netlink: 'syz.6.3027': attribute type 1 has an invalid length. [ 1287.948110][T18202] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1287.956796][T18202] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1287.966789][T18202] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1288.134238][T14742] usb 1-1: USB disconnect, device number 12 [ 1289.366920][ T5720] net_ratelimit: 10 callbacks suppressed [ 1289.366940][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.659641][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.248624][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.601488][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.727710][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.851251][T18218] xt_recent: Unsupported userspace flags (000000de) [ 1290.864487][T18188] kexec: Could not allocate control_code_buffer [ 1291.027059][T18222] netlink: 'syz.0.3030': attribute type 2 has an invalid length. [ 1291.097798][T18223] netlink: 'syz.0.3030': attribute type 2 has an invalid length. [ 1291.289100][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.692970][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.783184][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.228057][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.286795][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.547463][ T30] audit: type=1400 audit(2000000618.110:825): avc: denied { write } for pid=18206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.719191][ T30] audit: type=1400 audit(2000000618.330:826): avc: denied { write } for pid=18240 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.749203][T18241] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3035'. [ 1293.766083][T18242] netlink: 'syz.7.3034': attribute type 10 has an invalid length. [ 1293.774110][T18242] netlink: 55 bytes leftover after parsing attributes in process `syz.7.3034'. [ 1294.013875][T18245] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1294.021429][T18245] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1294.589918][ T29] net_ratelimit: 4 callbacks suppressed [ 1294.589938][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.635847][T18241] bridge1: entered promiscuous mode [ 1294.691507][T18241] bridge1: entered allmulticast mode [ 1294.739446][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.428032][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.515461][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.640023][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.009714][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.327258][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.487113][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.647723][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.836749][ T29] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1297.112089][ T29] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1297.132752][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.252941][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1297.282015][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.283377][ T30] audit: type=1400 audit(2000000621.890:827): avc: denied { search } for pid=18274 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1297.294246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.777241][ T30] audit: type=1400 audit(2000000621.930:828): avc: denied { search } for pid=18274 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1297.833880][ T29] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1297.853823][ T30] audit: type=1400 audit(2000000621.930:829): avc: denied { search } for pid=18274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1297.855226][ T29] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1297.886677][ T29] usb 7-1: Product: syz [ 1297.890945][ T29] usb 7-1: Manufacturer: syz [ 1298.128357][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 1298.136844][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 1298.153460][ T29] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1298.165435][ T29] cdc_wdm 7-1:1.0: Unknown control protocol [ 1298.233629][ T30] audit: type=1400 audit(2000000621.930:830): avc: denied { search } for pid=18274 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1298.329080][ T30] audit: type=1400 audit(2000000621.940:831): avc: denied { recv } for pid=18271 comm="syz.0.3042" saddr=10.128.0.169 src=30006 daddr=10.128.0.57 dest=33266 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1298.390689][T18264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.399479][T18264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.413011][T18264] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1298.421338][T18264] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1298.430290][T18264] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1298.463972][ T30] audit: type=1400 audit(2000000621.990:832): avc: denied { create } for pid=18271 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1298.499665][ T29] usb 7-1: USB disconnect, device number 39 [ 1298.506040][ T30] audit: type=1400 audit(2000000621.990:833): avc: denied { setopt } for pid=18271 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1298.527980][ T30] audit: type=1400 audit(2000000621.990:834): avc: denied { ioctl } for pid=18271 comm="syz.0.3042" path="socket:[67513]" dev="sockfs" ino=67513 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1298.589760][ T4931] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1298.613695][ T4931] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1298.628561][ T30] audit: type=1400 audit(2000000621.990:835): avc: denied { write } for pid=18271 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1298.648433][ T30] audit: type=1400 audit(2000000621.990:836): avc: denied { create } for pid=18271 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1298.668091][ T30] audit: type=1400 audit(2000000622.000:837): avc: denied { bind } for pid=18271 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1298.687520][ T30] audit: type=1400 audit(2000000622.000:838): avc: denied { setopt } for pid=18271 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1298.708884][ T30] audit: type=1400 audit(2000000622.000:839): avc: denied { accept } for pid=18271 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1298.728919][ T4931] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1298.738680][ T30] audit: type=1400 audit(2000000622.000:840): avc: denied { write } for pid=18271 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1298.760934][ T4931] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1298.778408][ T4931] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1298.834958][ T30] audit: type=1400 audit(2000000622.000:841): avc: denied { read } for pid=18271 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1298.936686][ T30] audit: type=1400 audit(2000000622.010:842): avc: denied { allowed } for pid=18271 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1299.027841][ T30] audit: type=1400 audit(2000000622.030:843): avc: denied { sqpoll } for pid=18271 comm="syz.0.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1299.119897][ T30] audit: type=1400 audit(2000000622.040:844): avc: denied { create } for pid=18271 comm="syz.0.3042" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1299.550541][T18304] input input120: cannot allocate more than FF_MAX_EFFECTS effects [ 1299.849115][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.855515][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.961903][ T5728] net_ratelimit: 6 callbacks suppressed [ 1299.961923][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.976608][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.111157][ T5728] IPVS: starting estimator thread 0... [ 1300.257397][T18313] IPVS: using max 33 ests per chain, 79200 per kthread [ 1300.279028][T18312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3047'. [ 1300.297945][T18311] kvm: Disabled LAPIC found during irq injection [ 1300.331000][T18312] bridge1: entered promiscuous mode [ 1300.343358][T18312] bridge1: entered allmulticast mode [ 1300.357365][T18311] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3048'. [ 1300.886678][ T4931] Bluetooth: hci7: command tx timeout [ 1301.049701][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1301.770514][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.094422][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.136586][ T5728] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1302.150856][T18287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.158311][T18287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.165612][T18287] bridge_slave_0: entered allmulticast mode [ 1302.176277][T18287] bridge_slave_0: entered promiscuous mode [ 1302.184838][T18287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.192593][T18287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.200366][T18287] bridge_slave_1: entered allmulticast mode [ 1302.207498][T18287] bridge_slave_1: entered promiscuous mode [ 1302.247338][T18287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.260917][T18287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.320871][ T5728] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1302.335557][T18287] team0: Port device team_slave_0 added [ 1302.343640][ T5728] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.359693][T18287] team0: Port device team_slave_1 added [ 1302.366620][ T5802] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1302.366986][ T5728] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1302.406318][T18287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.413617][ T5728] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.424841][T18287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.451497][T18287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.463144][ T5728] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1302.473502][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1302.483285][T18287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1302.490538][ T5728] usb 4-1: Product: syz [ 1302.494742][T18287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.520787][ T5728] usb 4-1: Manufacturer: syz [ 1302.527043][T18287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1302.552050][ T5728] cdc_wdm 4-1:1.0: skipping garbage [ 1302.566942][ T5728] cdc_wdm 4-1:1.0: skipping garbage [ 1302.601053][ T5802] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1302.617040][ T5728] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1302.623962][ T5802] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.634658][ T5802] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1302.651745][ T5802] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.655272][ T5728] cdc_wdm 4-1:1.0: Unknown control protocol [ 1302.673026][ T5802] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1302.691789][ T5802] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1302.705311][ T5802] usb 7-1: Product: syz [ 1302.709811][ T5802] usb 7-1: Manufacturer: syz [ 1302.720989][ T5802] cdc_wdm 7-1:1.0: skipping garbage [ 1302.737459][ T5802] cdc_wdm 7-1:1.0: skipping garbage [ 1302.907899][T18287] hsr_slave_0: entered promiscuous mode [ 1302.971032][ T4931] Bluetooth: hci7: command tx timeout [ 1302.982744][ T5802] cdc_wdm 7-1:1.0: cdc-wdm1: USB WDM device [ 1303.112434][T18287] hsr_slave_1: entered promiscuous mode [ 1303.116928][ T5800] usb 4-1: USB disconnect, device number 51 [ 1303.122731][T18287] debugfs: 'hsr0' already exists in 'hsr' [ 1303.130729][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.132555][ T5802] cdc_wdm 7-1:1.0: Unknown control protocol [ 1303.148840][T18360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1303.158697][T18360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.179514][T18287] Cannot create hsr debugfs directory [ 1303.256410][ T5802] usb 7-1: USB disconnect, device number 40 [ 1303.266277][T18360] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1303.274554][T18360] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1303.283012][T18360] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1303.790893][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3060'. [ 1303.809522][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 1303.809540][ T30] audit: type=1400 audit(2000000628.410:932): avc: denied { write } for pid=18384 comm="syz.7.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1304.154572][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3060'. [ 1304.163523][T18389] netlink: 348 bytes leftover after parsing attributes in process `syz.7.3060'. [ 1304.173003][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3060'. [ 1304.181923][T18389] netlink: 348 bytes leftover after parsing attributes in process `syz.7.3060'. [ 1304.191031][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3060'. [ 1304.200530][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.255700][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3060'. [ 1304.266861][T18389] netlink: 348 bytes leftover after parsing attributes in process `syz.7.3060'. [ 1304.270961][ T30] audit: type=1400 audit(2000000628.500:933): avc: denied { ioctl } for pid=18384 comm="syz.7.3060" path="socket:[68753]" dev="sockfs" ino=68753 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1304.329742][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.369275][ T30] audit: type=1400 audit(2000000628.840:934): avc: denied { write } for pid=18385 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1304.477764][ T30] audit: type=1400 audit(2000000628.940:935): avc: denied { write } for pid=18394 comm="syz.3.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1304.600810][ T30] audit: type=1400 audit(2000000628.940:936): avc: denied { nlmsg_write } for pid=18394 comm="syz.3.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1304.819064][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.975649][ T30] audit: type=1400 audit(2000000629.010:937): avc: denied { create } for pid=18394 comm="syz.3.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1305.031113][ T30] audit: type=1400 audit(2000000629.030:938): avc: denied { prog_run } for pid=18394 comm="syz.3.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1305.054974][ T4931] Bluetooth: hci7: command tx timeout [ 1305.207971][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.409363][T18416] __nla_validate_parse: 4 callbacks suppressed [ 1305.409383][T18416] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3064'. [ 1305.809512][ T30] audit: type=1400 audit(2000000630.420:939): avc: denied { write } for pid=18406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.022180][ T30] audit: type=1400 audit(2000000630.630:940): avc: denied { write } for pid=18444 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.391736][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.434858][ T30] audit: type=1400 audit(2000000631.040:941): avc: denied { create } for pid=18442 comm="syz.0.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1306.479760][T18456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3067'. [ 1306.887026][ T29] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 1307.074623][ T29] usb 7-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.116882][ T29] usb 7-1: config 17 interface 0 has no altsetting 0 [ 1307.126750][ T4931] Bluetooth: hci7: command tx timeout [ 1307.146866][ T29] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1307.176675][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.260875][ T29] aiptek 7-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1307.498424][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.603437][T18416] bridge1: entered promiscuous mode [ 1307.611103][T18416] bridge1: entered allmulticast mode [ 1307.666752][T18446] vlan0: entered promiscuous mode [ 1307.857154][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.569278][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.101555][T18287] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1309.117035][T18287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1309.126102][T18287] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1309.151349][T18287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1309.161480][T18287] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1309.199458][T18287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1309.270970][T14271] usb 7-1: USB disconnect, device number 41 [ 1309.298090][T18287] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1309.365162][T18287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1309.389175][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1309.389187][ T30] audit: type=1400 audit(2000000634.000:956): avc: denied { write } for pid=18524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1309.462366][ T30] audit: type=1400 audit(2000000634.060:957): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1309.608308][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.638674][ T30] audit: type=1400 audit(2000000634.060:958): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1309.764886][T18287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.798926][ T30] audit: type=1400 audit(2000000634.300:959): avc: denied { write } for pid=18539 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1309.863186][T18287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.899628][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.906808][ T6151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.970276][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.977470][ T6151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1310.257350][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.634883][ T30] audit: type=1400 audit(2000000635.240:960): avc: denied { write } for pid=18546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1310.668970][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.737266][ T5720] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1310.889498][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.899199][ T5720] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1310.932628][ T5720] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.976864][ T5720] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1311.003258][ T5720] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.027083][T18287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.030027][ T5720] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1311.064653][ T5720] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1311.074399][ T30] audit: type=1400 audit(2000000635.670:961): avc: denied { write } for pid=18572 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1311.102919][T18575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3076'. [ 1311.116877][T18575] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3076'. [ 1311.122386][ T5720] usb 7-1: Product: syz [ 1311.131201][ T5720] usb 7-1: Manufacturer: syz [ 1311.155888][ T5720] cdc_wdm 7-1:1.0: skipping garbage [ 1311.169052][ T5720] cdc_wdm 7-1:1.0: skipping garbage [ 1311.189561][ T5720] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1311.190883][T18575] macsec2: entered promiscuous mode [ 1311.199866][ T5720] cdc_wdm 7-1:1.0: Unknown control protocol [ 1311.224003][T18575] dummy0: entered promiscuous mode [ 1311.236837][T18575] macsec2: entered allmulticast mode [ 1311.251736][T18575] dummy0: entered allmulticast mode [ 1311.339576][T18287] veth0_vlan: entered promiscuous mode [ 1311.358746][ T30] audit: type=1400 audit(2000000635.970:962): avc: denied { create } for pid=18578 comm="syz.0.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1311.365299][T18287] veth1_vlan: entered promiscuous mode [ 1311.408257][T18562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.417066][T18562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.420320][T18287] veth0_macvtap: entered promiscuous mode [ 1311.436086][T18287] veth1_macvtap: entered promiscuous mode [ 1311.462778][T18562] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1311.471299][T18562] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1311.479865][T18562] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1311.520136][ T5800] usb 7-1: USB disconnect, device number 42 [ 1311.554712][T18287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.631026][T18287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1311.665989][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.691886][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.708810][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.748404][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.779238][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.009791][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.018701][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.073124][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.264059][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.647038][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.694747][T16233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.705259][ T30] audit: type=1400 audit(2000000637.300:963): avc: denied { write } for pid=18581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.732924][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.737090][T16233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.810645][ T30] audit: type=1400 audit(2000000637.360:964): avc: denied { setopt } for pid=18603 comm="syz.0.3081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1312.884756][ T30] audit: type=1400 audit(2000000637.390:965): avc: denied { mounton } for pid=18287 comm="syz-executor" path="/root/syzkaller.L94FId/syz-tmp" dev="sda1" ino=2062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1313.027183][ T5800] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1313.588157][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.618074][ T5800] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 1313.626655][ T5800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.630717][ T5720] IPVS: starting estimator thread 0... [ 1313.638508][ T5800] usb 1-1: config 0 has no interfaces? [ 1313.668912][ T5800] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1313.707824][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.740850][ T5800] usb 1-1: config 0 descriptor?? [ 1313.769484][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.777890][T18619] IPVS: using max 39 ests per chain, 93600 per kthread [ 1313.911848][T18623] netlink: 'syz.6.3082': attribute type 2 has an invalid length. [ 1313.969330][T18624] netlink: 'syz.6.3082': attribute type 2 has an invalid length. [ 1314.248320][T11330] usb 1-1: USB disconnect, device number 13 [ 1315.329275][T11330] net_ratelimit: 4 callbacks suppressed [ 1315.329315][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.929582][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.943045][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.139467][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.166811][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.256202][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.674638][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.072856][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3086'. [ 1317.126919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.290911][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.299578][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.753795][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1317.753843][ T30] audit: type=1400 audit(2000000642.350:983): avc: denied { read } for pid=18644 comm="syz.0.3087" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1317.811940][ T30] audit: type=1400 audit(2000000642.350:984): avc: denied { open } for pid=18644 comm="syz.0.3087" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1317.997716][ T30] audit: type=1400 audit(2000000642.370:985): avc: denied { write } for pid=18622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1318.073278][ T30] audit: type=1400 audit(2000000642.490:986): avc: denied { mounton } for pid=18658 comm="syz.6.3089" path="/484/file0" dev="tmpfs" ino=2914 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1318.159662][ T30] audit: type=1400 audit(2000000642.680:987): avc: denied { map } for pid=18665 comm="syz.3.3090" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=69033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1318.269433][ T30] audit: type=1400 audit(2000000642.680:988): avc: denied { read write } for pid=18665 comm="syz.3.3090" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=69033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1318.301677][T18666] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 1318.339516][ T30] audit: type=1400 audit(2000000642.710:989): avc: denied { write } for pid=18663 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1318.550714][T18671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3091'. [ 1318.577412][T18671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3091'. [ 1318.624688][T18671] macsec1: entered promiscuous mode [ 1318.638226][T18671] dummy0: entered promiscuous mode [ 1318.655339][T18671] macsec1: entered allmulticast mode [ 1318.670822][ T30] audit: type=1400 audit(2000000643.280:990): avc: denied { unmount } for pid=9171 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1318.700414][T18671] dummy0: entered allmulticast mode [ 1320.015404][T11330] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1320.417528][ T29] net_ratelimit: 8 callbacks suppressed [ 1320.417549][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.431250][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.433708][ T96] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.450389][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.451721][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.722315][T11330] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1320.760361][T11330] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.838577][T11330] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1320.874394][T11330] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.906354][ T30] audit: type=1400 audit(2000000645.510:991): avc: denied { create } for pid=18701 comm="syz.1.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1320.959000][T11330] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1320.974996][T11330] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1320.996862][ T30] audit: type=1400 audit(2000000645.510:992): avc: denied { listen } for pid=18701 comm="syz.1.3099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1321.025158][T11330] usb 7-1: Product: syz [ 1321.035424][T11330] usb 7-1: Manufacturer: syz [ 1321.048462][T11330] cdc_wdm 7-1:1.0: skipping garbage [ 1321.069085][T11330] cdc_wdm 7-1:1.0: skipping garbage [ 1321.086085][T11330] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1321.097817][T11330] cdc_wdm 7-1:1.0: Unknown control protocol [ 1321.328358][T18680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.337203][T18680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.365460][T18680] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1321.374169][T18680] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1321.382672][T18680] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1321.446972][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.490081][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3101'. [ 1321.535436][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.850800][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.892962][T14742] usb 7-1: USB disconnect, device number 43 [ 1321.943662][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3101'. [ 1321.955036][T18720] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3101'. [ 1321.966063][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3101'. [ 1321.975189][T18720] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3101'. [ 1321.984466][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3101'. [ 1322.029907][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.248164][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.350461][T18734] netlink: 'syz.0.3105': attribute type 17 has an invalid length. [ 1322.358697][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3105'. [ 1323.279833][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1323.279852][ T30] audit: type=1400 audit(2000000647.530:999): avc: denied { ioctl } for pid=18744 comm="syz.0.3106" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1323.422996][ T30] audit: type=1400 audit(2000000647.540:1000): avc: denied { map } for pid=18744 comm="syz.0.3106" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1323.628397][ T30] audit: type=1400 audit(2000000647.540:1001): avc: denied { execute } for pid=18744 comm="syz.0.3106" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1323.653321][ T30] audit: type=1400 audit(2000000648.120:1002): avc: denied { open } for pid=18754 comm="syz.1.3108" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1323.679248][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3107'. [ 1324.249677][ T30] audit: type=1400 audit(2000000648.130:1003): avc: denied { write } for pid=18732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1324.293126][ T30] audit: type=1400 audit(2000000648.150:1004): avc: denied { ioctl } for pid=18754 comm="syz.1.3108" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1324.377263][ T30] audit: type=1400 audit(2000000648.380:1005): avc: denied { create } for pid=18754 comm="syz.1.3108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1325.347951][ T30] audit: type=1400 audit(2000000648.950:1006): avc: denied { write } for pid=18754 comm="syz.1.3108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1325.367709][ T30] audit: type=1400 audit(2000000648.960:1007): avc: denied { getopt } for pid=18754 comm="syz.1.3108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1325.422947][T14742] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 1325.451448][ T5802] net_ratelimit: 13 callbacks suppressed [ 1325.451465][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.529415][T16233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.568641][ T30] audit: type=1400 audit(2000000650.170:1008): avc: denied { write } for pid=18768 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1325.612262][T14742] usb 7-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1325.744198][T14742] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1325.753420][T14742] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.769263][T14742] aiptek 7-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1325.846930][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.369111][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.407574][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.662440][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.726849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.891606][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.047541][T18801] netlink: 'syz.0.3116': attribute type 2 has an invalid length. [ 1327.125941][T18802] netlink: 'syz.0.3116': attribute type 2 has an invalid length. [ 1327.200657][ T29] usb 7-1: USB disconnect, device number 44 [ 1327.206613][T14742] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1327.286699][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.586167][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1327.637642][T14742] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1328.412143][T14742] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.426452][T14742] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1328.436245][T14742] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.449029][T14742] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1328.458254][T14742] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1328.466279][T14742] usb 4-1: Product: syz [ 1328.470504][T14742] usb 4-1: Manufacturer: syz [ 1328.501838][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1328.501854][ T30] audit: type=1400 audit(2000000653.110:1014): avc: denied { connect } for pid=18805 comm="syz.6.3118" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1328.570624][T14742] cdc_wdm 4-1:1.0: skipping garbage [ 1328.605482][T14742] cdc_wdm 4-1:1.0: skipping garbage [ 1328.650037][T14742] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1328.672733][T14742] cdc_wdm 4-1:1.0: Unknown control protocol [ 1328.714589][ T30] audit: type=1400 audit(2000000653.150:1015): avc: denied { setopt } for pid=18805 comm="syz.6.3118" laddr=fe80::13 lport=58 faddr=fe80::a fport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1328.785440][T18798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.794170][T18798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.929178][T18813] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1328.937869][T18813] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1328.980369][ T30] audit: type=1400 audit(2000000653.150:1016): avc: denied { write } for pid=18805 comm="syz.6.3118" path="socket:[69237]" dev="sockfs" ino=69237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1329.018374][T18813] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1329.118671][T14271] usb 4-1: USB disconnect, device number 52 [ 1329.435176][ T30] audit: type=1400 audit(2000000653.300:1017): avc: denied { write } for pid=18811 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1331.034677][T15520] net_ratelimit: 9 callbacks suppressed [ 1331.034696][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.427833][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.433702][T16235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.505423][ T5802] libceph: connect (1)[c::]:6789 error -101 [ 1331.512553][ T5802] libceph: mon0 (1)[c::]:6789 connect error [ 1331.776928][T14742] libceph: connect (1)[c::]:6789 error -101 [ 1331.786763][T14742] libceph: mon0 (1)[c::]:6789 connect error [ 1331.877561][T18821] ceph: No mds server is up or the cluster is laggy [ 1331.896246][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.094268][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.397288][T14742] libceph: connect (1)[c::]:6789 error -101 [ 1332.404983][T14742] libceph: mon0 (1)[c::]:6789 connect error [ 1332.424038][ T30] audit: type=1400 audit(2000000657.030:1018): avc: denied { write } for pid=18815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1332.507848][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.756622][ T30] audit: type=1400 audit(2000000657.320:1019): avc: denied { write } for pid=18839 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1332.940027][ T30] audit: type=1400 audit(2000000657.550:1020): avc: denied { read write } for pid=18843 comm="syz.3.3122" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1333.130081][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.187437][ T30] audit: type=1400 audit(2000000657.550:1021): avc: denied { open } for pid=18843 comm="syz.3.3122" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1333.218869][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.228664][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.367712][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.431029][ T30] audit: type=1400 audit(2000000657.730:1022): avc: denied { create } for pid=18844 comm="syz.7.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1333.540671][ T30] audit: type=1400 audit(2000000658.080:1023): avc: denied { read append } for pid=18851 comm="syz.6.3125" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1335.679536][ T30] audit: type=1400 audit(2000000658.090:1025): avc: denied { sys_admin } for pid=18844 comm="syz.7.3123" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1335.734048][ T30] audit: type=1400 audit(2000000658.080:1024): avc: denied { open } for pid=18851 comm="syz.6.3125" path="/dev/usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1335.857137][ T30] audit: type=1400 audit(2000000660.460:1026): avc: denied { name_bind } for pid=18872 comm="syz.1.3127" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1336.247298][ T5802] net_ratelimit: 8 callbacks suppressed [ 1336.247315][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.261139][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.462535][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.567463][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.648420][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.658370][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.904328][ T30] audit: type=1400 audit(2000000661.510:1027): avc: denied { unmount } for pid=18287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1336.978343][ T96] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.067988][ T30] audit: type=1400 audit(2000000661.670:1028): avc: denied { ioctl } for pid=18896 comm="syz.1.3132" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1337.340352][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.659334][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.711816][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.796338][ T30] audit: type=1400 audit(2000000662.400:1029): avc: denied { write } for pid=18853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1338.092178][ T30] audit: type=1400 audit(2000000662.700:1030): avc: denied { write } for pid=18910 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1338.169027][T18914] overlayfs: missing 'lowerdir' [ 1338.427851][ T30] audit: type=1400 audit(2000000662.830:1031): avc: denied { execute } for pid=18882 comm="syz.3.3129" path="/44/bus/file1" dev="tmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1338.786761][T15520] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 1339.392040][T18933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3136'. [ 1339.431083][T15520] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 1339.475195][T15520] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.571047][T15520] usb 7-1: config 0 has no interfaces? [ 1339.662178][T15520] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1339.816184][T15520] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.869900][T14742] libceph: connect (1)[c::]:6789 error -101 [ 1339.917762][T14742] libceph: mon0 (1)[c::]:6789 connect error [ 1339.938438][T15520] usb 7-1: config 0 descriptor?? [ 1340.169176][T14742] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1340.192386][T11330] libceph: connect (1)[c::]:6789 error -101 [ 1340.198774][T18936] ceph: No mds server is up or the cluster is laggy [ 1340.209336][ T30] audit: type=1400 audit(2000000664.820:1032): avc: denied { write } for pid=18919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1340.700576][T11330] libceph: mon0 (1)[c::]:6789 connect error [ 1340.839456][ T5802] usb 7-1: USB disconnect, device number 45 [ 1340.870178][T14742] usb 2-1: Using ep0 maxpacket: 8 [ 1340.877133][T14742] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1340.901679][T14742] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1340.911950][T14742] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1340.935923][T14742] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12576, setting to 1024 [ 1340.947659][T14742] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1340.958083][T14742] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1340.971620][T14742] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1340.982545][T14742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.090180][ T30] audit: type=1326 audit(2000000665.700:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18953 comm="syz.3.3140" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faad1d9ce59 code=0x0 [ 1341.145456][ T30] audit: type=1400 audit(2000000665.730:1034): avc: denied { write } for pid=18952 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1341.569547][T14742] net_ratelimit: 22 callbacks suppressed [ 1341.569564][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.636354][ T30] audit: type=1400 audit(2000000666.230:1035): avc: denied { read } for pid=18939 comm="syz.1.3138" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1341.727042][T18966] binder: BINDER_SET_CONTEXT_MGR already set [ 1341.746171][T18966] binder: 18939:18966 ioctl 4018620d 200000000040 returned -16 [ 1341.766341][ T30] audit: type=1400 audit(2000000666.280:1036): avc: denied { open } for pid=18939 comm="syz.1.3138" path="/dev/binderfs/binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1341.836660][ T30] audit: type=1400 audit(2000000666.290:1037): avc: denied { ioctl } for pid=18939 comm="syz.1.3138" path="/dev/binderfs/binder0" dev="binder" ino=25 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1341.847078][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.870814][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.879629][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.969202][ T30] audit: type=1400 audit(2000000666.290:1038): avc: denied { set_context_mgr } for pid=18939 comm="syz.1.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1342.067312][ T30] audit: type=1400 audit(2000000666.330:1039): avc: denied { write } for pid=18939 comm="syz.1.3138" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1342.201022][ T30] audit: type=1400 audit(2000000666.330:1040): avc: denied { map } for pid=18939 comm="syz.1.3138" path="/dev/binderfs/binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1342.468589][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.579071][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.740017][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.887080][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.933776][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.942168][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.306021][ T30] audit: type=1400 audit(2000000667.910:1041): avc: denied { write } for pid=18958 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1345.230676][ T30] audit: type=1400 audit(2000000669.820:1042): avc: denied { write } for pid=18994 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1346.438107][ T30] audit: type=1400 audit(2000000670.400:1043): avc: denied { mount } for pid=18996 comm="syz.3.3146" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1346.733020][T15520] net_ratelimit: 19 callbacks suppressed [ 1346.733036][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.085664][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.099802][T18941] usbtmc 2-1:16.0: stb usb_control_msg returned -110 [ 1347.394768][ T5802] usb 2-1: USB disconnect, device number 11 [ 1347.531282][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.541223][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.549856][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.586611][T19013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.595436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.777915][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.787035][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.187443][T19017] No such timeout policy "syz0" [ 1348.577873][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.659774][ T30] audit: type=1400 audit(2000000673.270:1044): avc: denied { unmount } for pid=17326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1348.796561][T15520] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1348.959857][ T30] audit: type=1400 audit(2000000673.570:1045): avc: denied { write } for pid=19004 comm="syz.6.3147" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1348.968689][T15520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 1348.990221][T19005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50292 sclass=netlink_route_socket pid=19005 comm=syz.6.3147 [ 1349.156532][ T30] audit: type=1400 audit(2000000673.570:1046): avc: denied { open } for pid=19004 comm="syz.6.3147" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1349.188945][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3152'. [ 1349.213834][T15520] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 1349.346606][T15520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.347977][T19005] input: syz0 as /devices/virtual/input/input123 [ 1349.358487][ T30] audit: type=1400 audit(2000000673.600:1047): avc: denied { ioctl } for pid=19004 comm="syz.6.3147" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1349.392082][T15520] usb 2-1: config 0 descriptor?? [ 1349.401781][T19018] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1349.430019][ T30] audit: type=1400 audit(2000000673.600:1048): avc: denied { bind } for pid=19004 comm="syz.6.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1349.450359][ T30] audit: type=1400 audit(2000000673.600:1049): avc: denied { connect } for pid=19004 comm="syz.6.3147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1349.472094][ T30] audit: type=1400 audit(2000000674.030:1050): avc: denied { read } for pid=4965 comm="acpid" name="event4" dev="devtmpfs" ino=3845 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1349.534432][ T30] audit: type=1400 audit(2000000674.030:1051): avc: denied { open } for pid=4965 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3845 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1349.586943][T14742] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1349.758303][T14742] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1349.792377][T14742] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1349.818410][T15520] hid (null): unknown global tag 0xd [ 1349.823926][T14742] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1349.823959][T15520] hid (null): unknown global tag 0xc [ 1349.844654][T14742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.892404][T15520] hid (null): invalid report_size 1668165699 [ 1349.899200][T14742] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1349.946163][T15520] hid (null): unknown global tag 0xd [ 1349.975272][T15520] hid (null): unknown global tag 0xc [ 1349.990900][T15520] hid (null): unknown global tag 0xe [ 1350.002099][T15520] hid (null): report_id 0 is invalid [ 1350.009941][T15520] hid (null): report_id 38086 is invalid [ 1350.015619][T15520] hid (null): unknown global tag 0xca [ 1350.021181][ T5720] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1350.032033][T19016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.040906][T19016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.054943][T15520] hid_parser_main: 175 callbacks suppressed [ 1350.054963][T15520] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 1350.071811][T15520] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 1350.078824][T15520] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 1350.087700][T15520] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 1350.095353][T15520] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 1350.102904][T15520] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 1350.111943][T15520] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 1350.118953][T15520] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 1350.125865][T15520] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 1350.132899][T15520] wacom 0003:056A:5000.001C: unknown main item tag 0x0 [ 1350.141501][T15520] wacom 0003:056A:5000.001C: unknown global tag 0xd [ 1350.148313][T15520] wacom 0003:056A:5000.001C: item 0 4 1 13 parsing failed [ 1350.156114][T15520] wacom 0003:056A:5000.001C: parse failed [ 1350.162509][T15520] wacom 0003:056A:5000.001C: probe with driver wacom failed with error -22 [ 1350.178445][ T5720] usb 4-1: config 0 has no interfaces? [ 1350.186791][ T5720] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1350.196296][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.205021][ T5720] usb 4-1: Product: syz [ 1350.209450][ T5720] usb 4-1: Manufacturer: syz [ 1350.220396][ T5720] usb 4-1: SerialNumber: syz [ 1350.234533][ T5720] usb 4-1: config 0 descriptor?? [ 1350.514949][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1350.514965][ T30] audit: type=1400 audit(2000000675.120:1053): avc: denied { create } for pid=19031 comm="syz.3.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1350.637854][T19032] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.698251][T19032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1350.714759][T15520] usb 4-1: USB disconnect, device number 53 [ 1351.117444][ T5800] usb 2-1: USB disconnect, device number 12 [ 1351.938212][T14271] net_ratelimit: 22 callbacks suppressed [ 1351.938230][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.309658][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.318199][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.571157][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.068978][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.077657][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.115964][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.115974][T14742] usb 1-1: USB disconnect, device number 14 [ 1354.130943][ T5802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.139258][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.148035][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.337054][ T30] audit: type=1400 audit(2000000678.940:1054): avc: denied { create } for pid=19067 comm="syz.7.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1354.407510][ T30] audit: type=1400 audit(2000000678.950:1055): avc: denied { bind } for pid=19067 comm="syz.7.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1355.186624][T14742] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1355.346545][T14742] usb 7-1: Using ep0 maxpacket: 8 [ 1355.356265][T14742] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1355.374668][T14742] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.408098][T14742] usb 7-1: Product: syz [ 1355.424495][T14742] usb 7-1: Manufacturer: syz [ 1355.434169][T14742] usb 7-1: SerialNumber: syz [ 1355.447649][T14742] usb 7-1: config 0 descriptor?? [ 1355.464115][T14742] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1355.898212][ T30] audit: type=1400 audit(2000000680.510:1056): avc: denied { create } for pid=19075 comm="syz.6.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1356.482405][T14742] gspca_sonixj: reg_r err -110 [ 1356.493255][T14742] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 1356.584444][T14742] usb 7-1: USB disconnect, device number 46 [ 1356.650918][ T30] audit: type=1400 audit(2000000681.180:1057): avc: denied { ioctl } for pid=19075 comm="syz.6.3163" path="socket:[71605]" dev="sockfs" ino=71605 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1356.743958][ T30] audit: type=1400 audit(2000000681.190:1058): avc: denied { connect } for pid=19075 comm="syz.6.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1357.029849][T19106] No such timeout policy "syz0" [ 1357.400125][ T5729] net_ratelimit: 25 callbacks suppressed [ 1357.400143][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.400229][T19065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.406751][T15520] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1357.414022][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.491222][ T30] audit: type=1400 audit(2000000682.100:1059): avc: denied { unmount } for pid=9171 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1357.533733][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.542071][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.556664][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.728190][T15520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 1357.754081][T15520] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 1357.771943][T15520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.792901][T15520] usb 2-1: config 0 descriptor?? [ 1358.278610][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.294013][T19107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1358.327449][T15759] Bluetooth: hci4: command 0x0406 tx timeout [ 1358.358033][ T30] audit: type=1400 audit(2000000682.960:1060): avc: denied { write } for pid=19090 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1358.394966][T19120] overlayfs: missing 'lowerdir' [ 1358.409029][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.572092][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.581792][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1358.925788][T19104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.937888][T19104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.045664][T15520] hid (null): unknown global tag 0xd [ 1359.070725][T15520] hid (null): unknown global tag 0xc [ 1359.111593][T15520] hid (null): invalid report_size 1668165699 [ 1359.144683][T15520] hid (null): unknown global tag 0xd [ 1359.164020][T15520] hid (null): unknown global tag 0xc [ 1359.188281][T15520] hid (null): unknown global tag 0xe [ 1359.196819][T15520] hid (null): report_id 0 is invalid [ 1359.204265][T15520] hid (null): report_id 38086 is invalid [ 1359.220926][T15520] hid (null): unknown global tag 0xca [ 1359.281413][T15520] hid_parser_main: 175 callbacks suppressed [ 1359.281436][T15520] wacom 0003:056A:5000.001D: unknown main item tag 0x0 [ 1359.489763][T15520] wacom 0003:056A:5000.001D: unknown main item tag 0x0 [ 1359.498287][ T30] audit: type=1400 audit(2000000684.090:1061): avc: denied { write } for pid=19128 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1359.588646][T19134] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3171'. [ 1359.597824][T19134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3171'. [ 1359.958284][T15520] wacom 0003:056A:5000.001D: unknown main item tag 0x0 [ 1360.027554][T15520] wacom 0003:056A:5000.001D: unknown main item tag 0x0 [ 1360.486924][T15520] wacom 0003:056A:5000.001D: unknown main item tag 0x0 [ 1360.493875][ T30] audit: type=1400 audit(2000000684.190:1062): avc: denied { watch } for pid=19129 comm="syz.0.3171" path="/36/file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1360.526756][T15520] wacom 0003:056A:5000.001D: unknown main item tag 0x0 [ 1360.533668][T15520] wacom 0003:056A:5000.001D: unknown main item tag 0x0 [ 1360.544068][T15520] wacom 0003:056A:5000.001D: unknown main item tag 0x0 [ 1360.551286][ T30] audit: type=1400 audit(2000000684.190:1063): avc: denied { watch_sb watch_reads } for pid=19129 comm="syz.0.3171" path="/36/file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1360.586126][T15520] wacom 0003:056A:5000.001D: unknown main item tag 0x0 [ 1360.593863][T15520] wacom 0003:056A:5000.001D: unknown main item tag 0x0 [ 1360.607466][T15520] wacom 0003:056A:5000.001D: unknown global tag 0xd [ 1360.621584][T15520] wacom 0003:056A:5000.001D: item 0 4 1 13 parsing failed [ 1360.636082][T15520] wacom 0003:056A:5000.001D: parse failed [ 1360.652976][ T5275] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1360.706793][ T30] audit: type=1326 audit(2000000685.290:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19140 comm="syz.0.3174" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc92859ce59 code=0x0 [ 1361.318017][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.324582][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.433694][T15520] wacom 0003:056A:5000.001D: probe with driver wacom failed with error -22 [ 1362.567023][ T5729] net_ratelimit: 22 callbacks suppressed [ 1362.567042][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.966827][T19065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.047118][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.055565][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.117280][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.208750][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.217650][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.227164][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.250415][T15520] usb 2-1: USB disconnect, device number 13 [ 1363.299997][ T30] audit: type=1400 audit(2000000687.910:1065): avc: denied { accept } for pid=19151 comm="syz.7.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1363.333722][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.343133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.714264][T19159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3177'. [ 1364.180771][T19163] netlink: 'syz.3.3178': attribute type 2 has an invalid length. [ 1364.199282][T19160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3177'. [ 1364.208287][T19160] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3177'. [ 1364.217391][T19160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3177'. [ 1364.227047][T19160] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3177'. [ 1364.236663][T19160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3177'. [ 1365.124813][T19165] netlink: 'syz.3.3178': attribute type 2 has an invalid length. [ 1365.744266][T19173] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1366.003830][T19177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3180'. [ 1366.041053][T19177] bridge1: entered promiscuous mode [ 1366.046444][T19177] bridge1: entered allmulticast mode [ 1366.460375][T19186] input input125: cannot allocate more than FF_MAX_EFFECTS effects [ 1367.303590][T19190] No such timeout policy "syz0" [ 1367.871669][T14742] net_ratelimit: 42 callbacks suppressed [ 1367.871688][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.885696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.894452][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.905793][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.913922][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.914012][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.937442][ T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.150272][T19195] fuse: Unknown parameter '0xffffffffffffffff' [ 1368.176638][T15520] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1368.430770][T15520] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 1368.902214][T15759] Bluetooth: hci5: command 0x0406 tx timeout [ 1368.915869][T15520] usb 2-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 1368.935340][T15520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.954569][T15520] usb 2-1: config 0 descriptor?? [ 1368.965988][T19191] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1368.974663][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.985322][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.993906][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.385040][T15520] hid (null): unknown global tag 0xd [ 1369.394584][T15520] hid (null): unknown global tag 0xc [ 1369.404451][T15520] hid (null): invalid report_size 1668165699 [ 1369.415392][T15520] hid (null): unknown global tag 0xd [ 1369.452666][T15520] hid (null): unknown global tag 0xc [ 1369.458835][T19206] overlayfs: missing 'lowerdir' [ 1369.479562][T15520] hid (null): unknown global tag 0xe [ 1369.498136][T15520] hid (null): report_id 0 is invalid [ 1369.515746][T15520] hid (null): report_id 38086 is invalid [ 1369.536282][T15520] hid (null): unknown global tag 0xca [ 1369.575418][ T30] audit: type=1400 audit(2000000694.170:1066): avc: denied { mount } for pid=19207 comm="syz.0.3189" name="/" dev="ramfs" ino=72788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1369.599259][T19187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.616566][T15520] hid_parser_main: 175 callbacks suppressed [ 1369.616582][T15520] wacom 0003:056A:5000.001E: unknown main item tag 0x0 [ 1369.637747][T15520] wacom 0003:056A:5000.001E: unknown main item tag 0x0 [ 1369.646345][T15520] wacom 0003:056A:5000.001E: unknown main item tag 0x0 [ 1369.653718][ T30] audit: type=1400 audit(2000000694.210:1067): avc: denied { block_suspend } for pid=19207 comm="syz.0.3189" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1369.676569][T15520] wacom 0003:056A:5000.001E: unknown main item tag 0x0 [ 1369.683494][T15520] wacom 0003:056A:5000.001E: unknown main item tag 0x0 [ 1369.691024][T15520] wacom 0003:056A:5000.001E: unknown main item tag 0x0 [ 1369.699638][T15520] wacom 0003:056A:5000.001E: unknown main item tag 0x0 [ 1369.708354][T15520] wacom 0003:056A:5000.001E: unknown main item tag 0x0 [ 1369.715765][T15520] wacom 0003:056A:5000.001E: unknown main item tag 0x0 [ 1369.722886][T15520] wacom 0003:056A:5000.001E: unknown main item tag 0x0 [ 1369.732355][ T30] audit: type=1400 audit(2000000694.340:1068): avc: denied { ioctl } for pid=19207 comm="syz.0.3189" path="socket:[72790]" dev="sockfs" ino=72790 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1369.759039][T15520] wacom 0003:056A:5000.001E: unknown global tag 0xd [ 1369.767300][T15520] wacom 0003:056A:5000.001E: item 0 4 1 13 parsing failed [ 1369.774635][T19187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.785734][T15520] wacom 0003:056A:5000.001E: parse failed [ 1369.814466][T15520] wacom 0003:056A:5000.001E: probe with driver wacom failed with error -22 [ 1369.976644][ T5800] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1370.699910][ T5800] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1370.708771][ T5800] usb 1-1: config 0 has no interface number 0 [ 1370.717476][ T5800] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1370.727254][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.735321][ T5800] usb 1-1: Product: syz [ 1370.740106][ T5800] usb 1-1: Manufacturer: syz [ 1370.744787][ T5800] usb 1-1: SerialNumber: syz [ 1370.752535][ T5800] usb 1-1: config 0 descriptor?? [ 1370.785713][ T5800] usb 1-1: selecting invalid altsetting 1 [ 1370.792617][ T5800] dvb_ttusb_budget: ttusb_init_controller: error [ 1370.884256][T14742] usb 2-1: USB disconnect, device number 14 [ 1370.891312][ T5800] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1370.986818][ T30] audit: type=1400 audit(2000000695.590:1069): avc: denied { append } for pid=19207 comm="syz.0.3189" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1371.214572][ T30] audit: type=1400 audit(2000000695.620:1070): avc: denied { open } for pid=19207 comm="syz.0.3189" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1371.356303][ T5800] DVB: Unable to find symbol stv0299_attach() [ 1371.397952][ T5800] DVB: Unable to find symbol tda8083_attach() [ 1371.404088][ T5800] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1371.427103][ T5800] usb 1-1: USB disconnect, device number 15 [ 1372.136847][ T30] audit: type=1400 audit(2000000696.750:1071): avc: denied { ioctl } for pid=19229 comm="syz.6.3195" path="socket:[72812]" dev="sockfs" ino=72812 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1372.177573][T19231] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 1372.190955][T19231] CIFS: VFS: Malformed UNC in devname [ 1372.199295][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3195'. [ 1373.188983][T19065] net_ratelimit: 29 callbacks suppressed [ 1373.189002][T19065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.203064][T14742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.218902][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.222131][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.450772][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.460313][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.468618][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.478995][ T96] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.549580][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.558195][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.582697][ T30] audit: type=1400 audit(2000000698.190:1072): avc: denied { create } for pid=19241 comm="syz.7.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1373.604787][ T30] audit: type=1400 audit(2000000698.210:1073): avc: denied { recv } for pid=5598 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.57 dest=33266 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1373.669581][ T30] audit: type=1400 audit(2000000698.210:1074): avc: denied { setopt } for pid=19241 comm="syz.7.3198" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1373.690195][ T30] audit: type=1400 audit(2000000698.210:1075): avc: denied { write } for pid=19241 comm="syz.7.3198" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1374.702358][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1374.702375][ T30] audit: type=1400 audit(2000000699.310:1099): avc: denied { create } for pid=19249 comm="syz.3.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1374.731467][ T30] audit: type=1400 audit(2000000699.310:1100): avc: denied { write } for pid=19249 comm="syz.3.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1375.299999][ T30] audit: type=1400 audit(2000000699.310:1101): avc: denied { write } for pid=19249 comm="syz.3.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1375.333417][ T30] audit: type=1400 audit(2000000699.320:1102): avc: denied { read } for pid=19249 comm="syz.3.3201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1375.475211][T19252] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3199'. [ 1375.478844][ T30] audit: type=1400 audit(2000000699.340:1103): avc: denied { getopt } for pid=19247 comm="syz.0.3200" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1375.492516][T19252] bridge1: entered promiscuous mode [ 1375.545172][T19268] overlayfs: missing 'lowerdir' [ 1376.011892][T19252] bridge1: entered allmulticast mode [ 1376.038458][ T30] audit: type=1400 audit(2000000699.340:1104): avc: denied { create } for pid=19243 comm="syz.6.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1376.071673][ T30] audit: type=1400 audit(2000000699.370:1105): avc: denied { write } for pid=19243 comm="syz.6.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1376.247247][ T30] audit: type=1400 audit(2000000699.480:1106): avc: denied { ioctl } for pid=19249 comm="syz.3.3201" path="socket:[72904]" dev="sockfs" ino=72904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1376.784909][ T30] audit: type=1400 audit(2000000699.510:1107): avc: denied { name_bind } for pid=19243 comm="syz.6.3199" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1377.762749][ T30] audit: type=1400 audit(2000000699.520:1108): avc: denied { node_bind } for pid=19243 comm="syz.6.3199" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1378.275769][T14271] net_ratelimit: 26 callbacks suppressed [ 1378.275788][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.290597][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.316770][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.479149][T19293] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3206'. [ 1378.509535][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.519535][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.665509][T19296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.676197][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1378.998465][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.002830][T19293] bridge1: entered promiscuous mode [ 1379.032573][T19293] bridge1: entered allmulticast mode [ 1379.287026][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.391335][T14271] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1379.407031][ T5800] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1379.431950][T19311] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.108769][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1380.108788][ T30] audit: type=1400 audit(2000000704.310:1134): avc: denied { read write } for pid=19312 comm="syz.0.3213" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1380.148461][ T5800] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1380.159264][ T5800] usb 7-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 1380.168427][ T5800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.225608][ T5800] usb 7-1: Product: syz [ 1380.253954][ T5800] usb 7-1: Manufacturer: syz [ 1380.390769][ T5800] usb 7-1: SerialNumber: syz [ 1381.610398][ T30] audit: type=1400 audit(2000000704.310:1135): avc: denied { open } for pid=19312 comm="syz.0.3213" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1381.635263][ T30] audit: type=1400 audit(2000000704.370:1136): avc: denied { mount } for pid=19312 comm="syz.0.3213" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1381.658602][ T30] audit: type=1400 audit(2000000704.980:1137): avc: denied { unmount } for pid=17876 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1381.679976][ T30] audit: type=1400 audit(2000000705.770:1138): avc: denied { create } for pid=19297 comm="syz.6.3209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1381.701041][ T30] audit: type=1400 audit(2000000705.960:1139): avc: denied { connect } for pid=19297 comm="syz.6.3209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1381.760082][T14271] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 1381.770293][T14271] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.782495][T14271] usb 2-1: config 0 has no interfaces? [ 1381.790890][T14271] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1381.804170][T14271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.817390][T14271] usb 2-1: config 0 descriptor?? [ 1381.827392][ T30] audit: type=1400 audit(2000000706.440:1140): avc: denied { write } for pid=19324 comm="syz.3.3215" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1381.862677][ T30] audit: type=1400 audit(2000000706.470:1141): avc: denied { create } for pid=19324 comm="syz.3.3215" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1381.887207][ T30] audit: type=1400 audit(2000000706.500:1142): avc: denied { ioctl } for pid=19324 comm="syz.3.3215" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=72312 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1381.918350][ T30] audit: type=1400 audit(2000000706.500:1143): avc: denied { allowed } for pid=19324 comm="syz.3.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1382.006943][T11330] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1382.029864][T14271] usb 2-1: USB disconnect, device number 15 [ 1382.178311][T11330] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1382.187509][T11330] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.204852][T11330] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.225536][T11330] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1382.234271][T11330] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.243521][T11330] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.258577][T11330] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1382.266407][T11330] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.275841][T11330] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.301534][T11330] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1382.310886][T11330] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.320621][T11330] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.334107][T11330] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1382.342395][T11330] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.364354][T11330] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.378198][T11330] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1382.388301][T11330] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.397274][T11330] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.419703][T11330] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1382.429209][T11330] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.443765][T11330] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.453636][T19329] xt_hashlimit: size too large, truncated to 1048576 [ 1382.458366][T11330] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1382.476923][T19330] .: renamed from bridge_slave_1 [ 1382.483031][T11330] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.492634][T11330] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1382.507252][T11330] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1382.516739][T11330] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1382.526119][T11330] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1382.536282][T11330] usb 1-1: Product: syz [ 1382.540624][T11330] usb 1-1: Manufacturer: syz [ 1382.583154][T11330] usb 1-1: SerialNumber: syz [ 1382.615640][T11330] usb 1-1: config 0 descriptor?? [ 1382.662040][T11330] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1382.756143][ T5800] usb 7-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 1382.780226][ T5800] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1382.857828][T19334] netlink: 'syz.1.3217': attribute type 2 has an invalid length. [ 1382.955111][T19335] netlink: 'syz.1.3217': attribute type 2 has an invalid length. [ 1383.608845][T15520] net_ratelimit: 75 callbacks suppressed [ 1383.608863][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.627422][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.635724][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.644138][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.687511][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.896909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.907870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.958330][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.970425][T19065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.173028][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.429298][T11330] usb 1-1: USB disconnect, device number 16 [ 1385.749520][ T5800] usb 7-1: USB disconnect, device number 47 [ 1385.761059][T11330] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1385.811927][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1385.811944][ T30] audit: type=1400 audit(2000000710.420:1150): avc: denied { getopt } for pid=19344 comm="syz.7.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1385.917892][T18900] udevd[18900]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1386.989473][T19361] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3223'. [ 1387.004280][T19361] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3223'. [ 1388.656843][T14271] net_ratelimit: 26 callbacks suppressed [ 1388.656860][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.670844][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.679093][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.807089][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.829086][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.384192][ T30] audit: type=1400 audit(2000000713.980:1151): avc: denied { getopt } for pid=19366 comm="syz.3.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1389.616622][T11330] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1389.642948][T19375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3227'. [ 1389.668564][ T5800] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1389.681426][T19375] bridge1: entered promiscuous mode [ 1389.690399][T19375] bridge1: entered allmulticast mode [ 1389.697994][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.706265][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.714647][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.749536][ T30] audit: type=1400 audit(2000000714.360:1152): avc: denied { create } for pid=19365 comm="syz.0.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1389.790428][T11330] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1389.799085][T11330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.813298][T11330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1389.828417][T11330] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.840312][ T5800] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.856141][ T5800] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1389.868182][T11330] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1389.879573][T11330] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1389.890179][ T5800] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1389.902754][T11330] usb 4-1: Product: syz [ 1389.908802][ T5800] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1389.916957][T11330] usb 4-1: Manufacturer: syz [ 1389.931741][T11330] cdc_wdm 4-1:1.0: skipping garbage [ 1389.937120][ T5800] usb 7-1: SerialNumber: syz [ 1389.945119][T11330] cdc_wdm 4-1:1.0: skipping garbage [ 1389.959719][T11330] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1389.969439][T11330] cdc_wdm 4-1:1.0: Unknown control protocol [ 1390.261817][ T30] audit: type=1400 audit(2000000714.870:1153): avc: denied { ioctl } for pid=19364 comm="syz.6.3224" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=928 ioctlcmd=0x6f4e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1390.727152][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.743208][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.872570][ T30] audit: type=1400 audit(2000000715.480:1154): avc: denied { create } for pid=19366 comm="syz.3.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1390.874703][T19370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.902291][T19370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.957923][ T30] audit: type=1400 audit(2000000715.570:1155): avc: denied { setopt } for pid=19366 comm="syz.3.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1391.095338][T19065] usb 4-1: USB disconnect, device number 54 [ 1392.567203][ T30] audit: type=1400 audit(2000000717.180:1156): avc: denied { sys_module } for pid=19366 comm="syz.3.3226" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1393.399695][ T5800] usb 7-1: 0:2 : does not exist [ 1393.425650][T19402] FAULT_INJECTION: forcing a failure. [ 1393.425650][T19402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.447752][T19402] CPU: 1 UID: 0 PID: 19402 Comm: syz.3.3231 Tainted: G L syzkaller #0 PREEMPT(full) [ 1393.447785][T19402] Tainted: [L]=SOFTLOCKUP [ 1393.447792][T19402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1393.447805][T19402] Call Trace: [ 1393.447812][T19402] [ 1393.447820][T19402] dump_stack_lvl+0x100/0x190 [ 1393.447851][T19402] should_fail_ex.cold+0x5/0xa [ 1393.447882][T19402] _copy_to_user+0x32/0xd0 [ 1393.447914][T19402] simple_read_from_buffer+0xcb/0x170 [ 1393.447944][T19402] proc_fail_nth_read+0x1af/0x230 [ 1393.447969][T19402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1393.447995][T19402] ? rw_verify_area+0xce/0x6d0 [ 1393.448015][T19402] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1393.448041][T19402] vfs_read+0x1e4/0xb30 [ 1393.448068][T19402] ? __pfx_vfs_read+0x10/0x10 [ 1393.448090][T19402] ? __fget_files+0x215/0x3d0 [ 1393.448122][T19402] ? __fget_files+0x21f/0x3d0 [ 1393.448156][T19402] ksys_read+0x12a/0x250 [ 1393.448178][T19402] ? __pfx_ksys_read+0x10/0x10 [ 1393.448203][T19402] ? rcu_is_watching+0x12/0xc0 [ 1393.448238][T19402] do_syscall_64+0x10b/0xf80 [ 1393.448263][T19402] ? clear_bhb_loop+0x40/0x90 [ 1393.448287][T19402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.448307][T19402] RIP: 0033:0x7faad1d5d68e [ 1393.448323][T19402] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1393.448343][T19402] RSP: 002b:00007faad2b71fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1393.448361][T19402] RAX: ffffffffffffffda RBX: 00007faad2b726c0 RCX: 00007faad1d5d68e [ 1393.448375][T19402] RDX: 000000000000000f RSI: 00007faad2b720a0 RDI: 0000000000000004 [ 1393.448387][T19402] RBP: 00007faad2b72090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.448400][T19402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.448411][T19402] R13: 00007faad2016038 R14: 00007faad2015fa0 R15: 00007ffcb9900498 [ 1393.448440][T19402] [ 1393.662984][ T5800] usb 7-1: USB disconnect, device number 48 [ 1393.707684][T18893] udevd[18893]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1393.846788][ T29] net_ratelimit: 16 callbacks suppressed [ 1393.846805][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.935509][T16232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.015723][T19406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3233'. [ 1394.017406][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.043011][T19406] bridge1: entered promiscuous mode [ 1394.048860][T19406] bridge1: entered allmulticast mode [ 1394.086809][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.163538][T15759] Bluetooth: hci6: command 0x0406 tx timeout [ 1394.887331][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.916333][T19411] overlayfs: missing 'lowerdir' [ 1394.969592][T19411] macvtap0: entered allmulticast mode [ 1394.988708][T19411] veth0_macvtap: entered allmulticast mode [ 1395.102344][T15520] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1395.135512][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.083509][T19065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.083557][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.104269][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.198954][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1396.215118][T15520] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 1396.245727][T15520] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.279429][T15520] usb 2-1: config 0 has no interfaces? [ 1396.280045][ T30] audit: type=1400 audit(2000000720.890:1157): avc: denied { append } for pid=19433 comm="syz.3.3240" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1396.308258][T15520] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1396.308329][T15520] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.355699][T15520] usb 2-1: config 0 descriptor?? [ 1396.450613][ T30] audit: type=1400 audit(2000000720.960:1158): avc: denied { read } for pid=19433 comm="syz.3.3240" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1396.476450][ T30] audit: type=1400 audit(2000000720.960:1159): avc: denied { open } for pid=19433 comm="syz.3.3240" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1396.641809][ T5800] usb 2-1: USB disconnect, device number 16 [ 1396.665654][ T30] audit: type=1400 audit(2000000721.000:1160): avc: denied { map } for pid=19433 comm="syz.3.3240" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1396.718534][ T30] audit: type=1400 audit(2000000721.000:1161): avc: denied { ioctl } for pid=19433 comm="syz.3.3240" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1397.246679][ T30] audit: type=1400 audit(2000000721.850:1162): avc: denied { ioctl } for pid=19445 comm="syz.1.3243" path="socket:[73564]" dev="sockfs" ino=73564 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1397.387837][ T30] audit: type=1400 audit(2000000721.940:1163): avc: denied { create } for pid=19435 comm="syz.7.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1397.461377][ T30] audit: type=1400 audit(2000000721.940:1164): avc: denied { write } for pid=19435 comm="syz.7.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1397.537979][ T30] audit: type=1400 audit(2000000721.940:1165): avc: denied { setopt } for pid=19435 comm="syz.7.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1398.764885][ T30] audit: type=1400 audit(2000000723.370:1166): avc: denied { setopt } for pid=19445 comm="syz.1.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1399.169428][T11330] net_ratelimit: 10 callbacks suppressed [ 1399.169461][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.187253][T19065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.515974][T19466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3247'. [ 1399.927977][T15520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.969054][T14271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.980464][T16233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1399.983223][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.003769][T19467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3247'. [ 1400.012670][T19467] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3247'. [ 1400.021727][T19467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3247'. [ 1400.030799][T19467] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3247'. [ 1400.039924][T19467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3247'. [ 1400.077343][T19464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.087494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.177093][T19065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1400.197303][T11330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.117669][T19484] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3251'. [ 1401.140056][T19484] bridge1: entered promiscuous mode [ 1401.146317][T19484] bridge1: entered allmulticast mode [ 1401.188455][T11330] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 1401.309971][T19491] overlayfs: missing 'lowerdir' [ 1401.607256][ T31] INFO: task syz.8.2953:17751 blocked for more than 143 seconds. [ 1401.706792][T11330] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 1401.801140][ T31] Tainted: G L syzkaller #0 [ 1401.809764][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1401.818849][ T31] task:syz.8.2953 state:D stack:25912 pid:17751 tgid:17751 ppid:16827 task_flags:0x400040 flags:0x00080002 [ 1401.831314][ T31] Call Trace: [ 1401.834665][ T31] [ 1401.838582][ T31] __schedule+0x1295/0x67a0 [ 1401.842734][T11330] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.843185][ T31] ? __pfx___schedule+0x10/0x10 [ 1401.858481][ T31] ? find_held_lock+0x2b/0x80 [ 1401.864304][ T31] ? schedule+0x2bf/0x390 [ 1401.870470][ T31] schedule+0xdd/0x390 [ 1401.879446][ T31] schedule_preempt_disabled+0x13/0x30 [ 1401.890730][ T31] __mutex_lock+0xced/0x1b10 [ 1401.896602][T11330] usb 7-1: config 0 has no interfaces? [ 1401.903823][T11330] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1401.914751][T11330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.932950][T11330] usb 7-1: config 0 descriptor?? [ 1402.014382][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1402.022100][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1402.027726][ T31] ? net_generic+0xea/0x2a0 [ 1402.032351][ T31] ? net_generic+0xea/0x2a0 [ 1402.038761][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1402.044182][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1402.057810][ T31] nfsd_umount+0x3b/0x60 [ 1402.065047][ T31] deactivate_locked_super+0xc1/0x1b0 [ 1402.319833][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3254'. [ 1402.381195][ T31] deactivate_super+0xe7/0x110 [ 1402.386206][ T31] put_fs_context+0xac/0x9b0 [ 1402.392003][ T31] ? ima_file_free+0xc6/0x340 [ 1402.401218][ T31] ? __pfx_fscontext_release+0x10/0x10 [ 1402.540017][ T31] fscontext_release+0x47/0x60 [ 1402.562561][ T31] __fput+0x3ff/0xb50 [ 1402.827081][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1402.845279][ T31] task_work_run+0x150/0x240 [ 1402.850333][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1402.855545][ T31] ? rcu_is_watching+0x12/0xc0 [ 1402.860714][ T31] exit_to_user_mode_loop+0x107/0x4f0 [ 1402.872470][ T31] ? rcu_is_watching+0x12/0xc0 [ 1402.882178][T15520] usb 7-1: USB disconnect, device number 49 [ 1402.889877][ T31] do_syscall_64+0x706/0xf80 [ 1402.903707][ T31] ? clear_bhb_loop+0x40/0x90 [ 1402.912515][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.918564][ T31] RIP: 0033:0x7f0317f9ce59 [ 1402.922990][ T31] RSP: 002b:00007ffd2b04bc88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1402.931420][ T31] RAX: 0000000000000000 RBX: 00007f0318217da0 RCX: 00007f0317f9ce59 [ 1402.939953][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1402.948262][ T31] RBP: 00007f0318217da0 R08: 00007f0318216038 R09: 0000000000000000 [ 1402.956250][ T31] R10: 00000000003ffd9c R11: 0000000000000246 R12: 0000000000130db2 [ 1402.964723][ T31] R13: 00007f031821609c R14: 0000000000130b9d R15: 00007f0318216090 [ 1402.972805][ T31] [ 1403.029330][ T31] [ 1403.029330][ T31] Showing all locks held in the system: [ 1403.040585][ T31] 1 lock held by khungtaskd/31: [ 1403.049303][ T31] #0: ffffffff8e7e57a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1403.113100][ T31] 2 locks held by getty/5368: [ 1403.122870][ T31] #0: ffff8880389a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1403.132835][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1403.154646][ T31] 3 locks held by kworker/u8:7/16232: [ 1403.165116][ T31] #0: ffff888034060940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1403.187656][ T31] #1: ffffc900169ffd08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1403.200785][ T31] #2: ffffffff9060c9e0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1403.210337][ T31] 2 locks held by syz.4.2915/17490: [ 1403.215807][ T31] #0: ffffffff906baec8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1403.224217][ T31] #1: ffffffff8ec62d80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8ec/0x12b0 [ 1403.234598][ T31] 2 locks held by syz.8.2953/17751: [ 1403.240301][ T31] #0: ffff888077b860d8 (&type->s_umount_key#90){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1403.251082][ T31] #1: ffffffff8ec62d80 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1403.261474][ T31] 1 lock held by syz.9.3015/18121: [ 1403.266896][ T31] #0: ffff888077b860d8 (&type->s_umount_key#90){++++}-{4:4}, at: super_lock+0x320/0x3f0 [ 1403.276998][ T31] 2 locks held by syz.7.3251/19484: [ 1403.282214][ T31] #0: ffffffff90d9c8e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 1403.291931][ T31] #1: ffffffff9060c9e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 1403.301102][ T31] 2 locks held by syz.7.3251/19490: [ 1403.306370][ T31] #0: ffffffff905dc860 (br_ioctl_mutex){+.+.}-{4:4}, at: br_ioctl_call+0x34/0xa0 [ 1403.315650][ T31] #1: ffffffff9060c9e0 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x2af/0x4d0 [ 1403.325011][ T31] 2 locks held by syz.0.3253/19493: [ 1403.330441][ T31] #0: ffff88807bd424d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x35/0x140 [ 1403.341395][ T31] #1: ffffffff8e7f12e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1403.354779][ T31] [ 1403.361597][ T31] ============================================= [ 1403.361597][ T31] [ 1403.370093][ T31] NMI backtrace for cpu 0 [ 1403.370111][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1403.370140][ T31] Tainted: [L]=SOFTLOCKUP [ 1403.370147][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1403.370159][ T31] Call Trace: [ 1403.370166][ T31] [ 1403.370174][ T31] dump_stack_lvl+0x100/0x190 [ 1403.370204][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1403.370232][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1403.370259][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1403.370286][ T31] sys_info+0x141/0x190 [ 1403.370316][ T31] watchdog+0xcb1/0x1030 [ 1403.370346][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1403.370373][ T31] ? __pfx_watchdog+0x10/0x10 [ 1403.370399][ T31] ? __kthread_parkme+0x18c/0x230 [ 1403.370424][ T31] ? kthread+0x13a/0x450 [ 1403.370447][ T31] ? __pfx_watchdog+0x10/0x10 [ 1403.370470][ T31] kthread+0x370/0x450 [ 1403.370493][ T31] ? __pfx_kthread+0x10/0x10 [ 1403.370518][ T31] ret_from_fork+0x72b/0xd50 [ 1403.370544][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1403.370571][ T31] ? __switch_to+0x800/0x1100 [ 1403.370602][ T31] ? __pfx_kthread+0x10/0x10 [ 1403.370628][ T31] ret_from_fork_asm+0x1a/0x30 [ 1403.370669][ T31] [ 1403.370676][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1403.502758][ C1] NMI backtrace for cpu 1 [ 1403.502778][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1403.502804][ C1] Tainted: [L]=SOFTLOCKUP [ 1403.502810][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1403.502822][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1403.502852][ C1] Code: c6 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 e1 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1403.502870][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 1403.502885][ C1] RAX: 000000000686164d RBX: ffff88801e2fa500 RCX: ffffffff8b8ab095 [ 1403.502898][ C1] RDX: 0000000000000000 RSI: ffffffff8df21e52 RDI: ffffffff8c1c3800 [ 1403.502909][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 1403.502920][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 1403.502931][ C1] R13: ffffed1003c5f4a0 R14: 0000000000000001 R15: ffffffff90d7c150 [ 1403.502943][ C1] FS: 0000000000000000(0000) GS:ffff888124470000(0000) knlGS:0000000000000000 [ 1403.502960][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1403.502972][ C1] CR2: 00007f20467ea2f8 CR3: 000000007280b000 CR4: 00000000003526f0 [ 1403.502984][ C1] Call Trace: [ 1403.502990][ C1] [ 1403.502997][ C1] default_idle+0x9/0x10 [ 1403.503023][ C1] default_idle_call+0x6c/0xb0 [ 1403.503038][ C1] do_idle+0x464/0x590 [ 1403.503058][ C1] ? __pfx_do_idle+0x10/0x10 [ 1403.503074][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 1403.503097][ C1] cpu_startup_entry+0x4f/0x60 [ 1403.503115][ C1] start_secondary+0x21d/0x2d0 [ 1403.503137][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1403.503161][ C1] common_startup_64+0x13e/0x148 [ 1403.503194][ C1] [ 1403.683466][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1403.690312][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1403.700959][ T31] Tainted: [L]=SOFTLOCKUP [ 1403.705255][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1403.715283][ T31] Call Trace: [ 1403.718541][ T31] [ 1403.721450][ T31] dump_stack_lvl+0x100/0x190 [ 1403.726106][ T31] vpanic+0x552/0x970 [ 1403.730061][ T31] ? __pfx_vpanic+0x10/0x10 [ 1403.734536][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1403.740666][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1403.746795][ T31] panic+0xd1/0xe0 [ 1403.750489][ T31] ? __pfx_panic+0x10/0x10 [ 1403.754879][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1403.761010][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1403.767137][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1403.773264][ T31] ? watchdog.cold+0x1ec/0x234 [ 1403.778011][ T31] ? watchdog+0xcc1/0x1030 [ 1403.782405][ T31] watchdog.cold+0x1fd/0x234 [ 1403.786974][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1403.792764][ T31] ? __pfx_watchdog+0x10/0x10 [ 1403.797416][ T31] ? __kthread_parkme+0x18c/0x230 [ 1403.802415][ T31] ? kthread+0x13a/0x450 [ 1403.806634][ T31] ? __pfx_watchdog+0x10/0x10 [ 1403.811287][ T31] kthread+0x370/0x450 [ 1403.815329][ T31] ? __pfx_kthread+0x10/0x10 [ 1403.819896][ T31] ret_from_fork+0x72b/0xd50 [ 1403.824465][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1403.829551][ T31] ? __switch_to+0x800/0x1100 [ 1403.834205][ T31] ? __pfx_kthread+0x10/0x10 [ 1403.838772][ T31] ret_from_fork_asm+0x1a/0x30 [ 1403.843522][ T31] [ 1403.846948][ T31] Kernel Offset: disabled [ 1403.851254][ T31] Rebooting in 86400 seconds..