last executing test programs: 13m52.194360088s ago: executing program 2 (id=557): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/clockevents/clockevent1/unbind_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='lapic\n', 0x6) (fail_nth: 1) 13m51.769117034s ago: executing program 2 (id=560): syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d00010100803209040000020300000009211101000122230009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d00010100803209040000020300000009211101000122230009058103"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r5, 0x1, 0x70bd2b, 0x237}, 0x14}}, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) io_setup(0x3ff, 0x0) (async) io_setup(0x3ff, 0x0) eventfd2(0x0, 0x80000) io_submit(0x0, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f00000008c0)={&(0x7f0000000600)=@name={0x1e, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4085}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000000)='ecryptfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x100, 0x200000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) fchmod(r8, 0x20049549e2a2d659) recvmmsg(r6, &(0x7f0000005980)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/211, 0xd3}, {&(0x7f0000001c00)=""/154, 0x9a}], 0x4, &(0x7f0000001d00)=""/4096, 0x1000}, 0x403d000}, {{&(0x7f0000002d00)=@x25, 0x80, &(0x7f0000004240)=[{&(0x7f0000002d80)=""/65, 0x41}, {&(0x7f0000002e00)=""/59, 0x3b}, {&(0x7f0000002e40)=""/128, 0x80}, {&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/211, 0xd3}, {&(0x7f0000003fc0)=""/207, 0xcf}, {&(0x7f00000040c0)=""/105, 0x69}, {&(0x7f0000004140)=""/11, 0xb}, {&(0x7f0000004180)=""/177, 0xb1}], 0x9, &(0x7f0000004300)=""/118, 0x76}, 0x6}, {{&(0x7f0000004380)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004400)=""/66, 0x42}, {&(0x7f0000004480)=""/153, 0x99}], 0x2, &(0x7f0000004580)=""/63, 0x3f}, 0x3}, {{&(0x7f00000045c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000005880)=[{&(0x7f0000004640)=""/237, 0xed}, {&(0x7f0000004740)=""/183, 0xb7}, {&(0x7f0000004800)=""/92, 0x5c}, {&(0x7f0000004880)=""/4096, 0x1000}], 0x4, &(0x7f00000058c0)=""/160, 0xa0}, 0x5}], 0x4, 0x120, &(0x7f0000005a80)={0x0, 0x989680}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) 13m45.403461965s ago: executing program 2 (id=567): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/node/node0/reclaim\x00', &(0x7f0000000140)={0x42, 0x14, 0x1}, 0x18) r0 = fanotify_init(0x8, 0x40000) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r0, 0x1, 0x100018, r1, 0x0) mkdirat(r1, &(0x7f0000000000)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write$cgroup_pid(r2, &(0x7f0000000180)=0xffffffffffffffff, 0x12) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x23f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x17, 0x20, 0x5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0xf, {0x9, 0x21, 0x80, 0xd, 0x1, {0x22, 0xf2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x4, 0x74}}}}}]}}]}}, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x10000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 13m42.157087866s ago: executing program 2 (id=577): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 13m37.734513582s ago: executing program 2 (id=589): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0xff}, 0x2}, 0x18) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') r3 = openat(r2, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000300), 0x1000) 13m35.838918836s ago: executing program 2 (id=596): openat$dsp(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r2 = io_uring_setup(0x1cf5, &(0x7f0000000040)={0x0, 0xc8a5, 0xc000, 0x2000008, 0x289}) pselect6(0x40, &(0x7f0000000380)={0xff, 0x0, 0x0, 0x8000000000008, 0x0, 0x0, 0x8000000000004, 0x1}, &(0x7f0000000000)={0x2100000001f, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = open$dir(0x0, 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) 13m35.287991809s ago: executing program 32 (id=596): openat$dsp(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r2 = io_uring_setup(0x1cf5, &(0x7f0000000040)={0x0, 0xc8a5, 0xc000, 0x2000008, 0x289}) pselect6(0x40, &(0x7f0000000380)={0xff, 0x0, 0x0, 0x8000000000008, 0x0, 0x0, 0x8000000000004, 0x1}, &(0x7f0000000000)={0x2100000001f, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = open$dir(0x0, 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) 11m51.415313607s ago: executing program 5 (id=988): r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0108fcfffffffedbdf250b00000008000300", @ANYRES32=r4, @ANYBLOB="1c005080050002000200000009633aa404000000e5d52ffd00000004000400"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES32, @ANYBLOB="0504"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040094) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, &(0x7f0000000180)={0x20, 0x11, 0x3d, {0x3d, 0x4, "c3957929c2c9a37f91c17e746e991dc716b8ae5863e4d1b1b46be9d9b864c1b4fb3ea8fe130d4de8df0abf9b955764a3990e83fbb47cc4ba15e1af"}}, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x7a8}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="20302b00000069c7297af972228a5360a7"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x1, 0x24, "a3fe948c1c0c98d6250e159707d3d8f7d9d7ed42c58122b9bb2134901189e0f679d661ee"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x8}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0xffef, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x4004804) fsetxattr$security_evm(r6, &(0x7f0000000080), &(0x7f00000001c0)=@md5={0x1, "0a08e3078bd8565a3444fae0130a9596"}, 0x11, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x40, 0x7fff0000}]}) syz_emit_ethernet(0x2a, &(0x7f0000002600)=ANY=[@ANYBLOB="aaaa696b00c10d275f1e00000800450c001c000000020011907800000000000000004e234e2400089078"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x36, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) ptrace(0x10, r7) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xd1) open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x89901) 11m47.955210724s ago: executing program 5 (id=1007): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x20a, 0x40a, 0x3}}], 0x20}], 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newsa={0x144, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, {@in=@broadcast, 0x0, 0x33}, @in=@private=0xa010101, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}, {0x0, 0x1}, {0x81, 0x0, 0x1}, 0x0, 0x0, 0xa, 0x1}, [@sa_dir={0x5, 0x21, 0x1}, @algo_auth={0x48, 0x1, {{'sha512-arm64\x00'}}}, @iptfs_dont_frag={0x4}]}, 0x144}}, 0x40) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) socket(0x10, 0x803, 0x0) syz_open_dev$I2C(&(0x7f0000001940), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/memory/auto_online_blocks\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYRES64=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x702, 0x36, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547f2cbfad47001bd34d04351caf1f9a07be047c25d7670ea4a41b8a6800c0de87b6f8e6a7256", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r4, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 11m47.316001671s ago: executing program 5 (id=1016): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x7}, 0x1c) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='!.#:\xc4\x00', &(0x7f0000000200)='GPL\x00', 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000000000)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a3", 0x1}], 0x1}}], 0x2, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002100)=0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x2, 0x5, 0x0, 0x5}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r6, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x80, 0x0}, 0x80) recvmmsg(r6, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2020, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x15, 0x301, 0x70bd25, 0x25dfdbfb, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 11m45.975659583s ago: executing program 5 (id=1022): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x12c5c59, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 11m45.858697627s ago: executing program 5 (id=1024): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x2b, 0x805, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, 0x0) 11m45.808991498s ago: executing program 3 (id=1025): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x5, 0x9, 0x20ffd}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}) syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000100)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='ext4\x00', 0x800000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000580)={0x4, 0xb, 0x1, "8940aa244d9e0ddf4bae49023188b828468153df7b3e2ef4d9cc9a02ebafa89b", 0x56555959}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='addr=127.0.0.1,soft,timeo=1,retrans=1,sec=krb5,\x00h']) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r3, 0x2}) 11m45.369589887s ago: executing program 5 (id=1027): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x5, 0x9, 0x20ffd}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3dba, 0x81, 0x0, 0x5}]}) syz_open_dev$swradio(&(0x7f0000002300), 0x1, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 11m45.367145764s ago: executing program 3 (id=1028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0xcb) mount(&(0x7f00000000c0)=@filename='./lower\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='ecryptfs\x00', 0x0, &(0x7f0000000180)='ecryptfs_sig=0123456789abcdef\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@restrict={0x2, 0x0, 0x0, 0xb, 0x2}, @restrict={0xb, 0x0, 0x0, 0xb, 0x1}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x61, 0x0, 0x0, 0x5f]}}, &(0x7f0000000300)=""/51, 0x42, 0x33, 0x0, 0x31db}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@target_btf_id=r3}, 0x14) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000000)={0x1, 0x200, 0x800, 0x76f, 0x96c}) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) 11m44.75047831s ago: executing program 33 (id=1027): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x5, 0x9, 0x20ffd}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3dba, 0x81, 0x0, 0x5}]}) syz_open_dev$swradio(&(0x7f0000002300), 0x1, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 11m44.372747443s ago: executing program 3 (id=1033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x100, {0x3, 0x7ff, 0xffff, 0x5}}}]}, 0x38}}, 0xc00) prctl$PR_GET_NAME(0x10, &(0x7f00000001c0)=""/86) 11m43.96000078s ago: executing program 3 (id=1035): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x12c5c59, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 11m43.793009815s ago: executing program 3 (id=1036): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x5, 0x9, 0x20ffd}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}) syz_open_dev$swradio(&(0x7f0000002300), 0x1, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000100)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='ext4\x00', 0x800000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000580)={0x4, 0xb, 0x1, "8940aa244d9e0ddf4bae49023188b828468153df7b3e2ef4d9cc9a02ebafa89b", 0x56555959}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='addr=127.0.0.1,soft,timeo=1,retrans=1,sec=krb5,\x00h']) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r3, 0x2}) 11m43.40397343s ago: executing program 3 (id=1039): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x5, 0x9, 0x20ffd}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3dba, 0x81, 0x0, 0x5}]}) syz_open_dev$swradio(&(0x7f0000002300), 0x1, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 11m42.679006175s ago: executing program 34 (id=1039): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x5, 0x9, 0x20ffd}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3dba, 0x81, 0x0, 0x5}]}) syz_open_dev$swradio(&(0x7f0000002300), 0x1, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 5m0.081896686s ago: executing program 4 (id=2158): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000403810101400000000000109022400010000000009040000030300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r3, &(0x7f0000000240)=ANY=[@ANYRES16=r5], 0x18f) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0d9255"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m54.822232727s ago: executing program 4 (id=2172): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000040)={0x2, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x1000, 0x7, 0x8, 0xfffffff9}, {0xc307, 0x4, 0xe, 0xffffffff}]}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000100)={@hyper}) fallocate(r0, 0x10, 0x390, 0x9) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) mount$nfs(&(0x7f0000000140)=':/^#Q[,\xb8#\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x100835, &(0x7f0000000300)={[{'-@\xa5-*'}, {'.*\xa7'}, {'\x00'}, {}, {'\\(/%#\\\'&M\x12.'}, {'@&+'}, {'\x00'}, {}], [{@euid_eq={'euid', 0x3d, r2}}, {@subj_user={'subj_user', 0x3d, '['}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/^.!'}}, {@fsname={'fsname', 0x3d, '{}]:.$#]!)$'}}, {@euid_lt={'euid<', 0xee00}}, {@audit}, {@uid_eq={'uid', 0x3d, r4}}]}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f00000003c0)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000440)={0x0, 0x8, '\x00', 0x0, &(0x7f0000000400)=[0x0]}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8982, &(0x7f0000000480)={0x8, 'batadv_slave_1\x00', {'veth0\x00'}, 0x8}) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000500)={0x0, 0x80, 0x3}) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000900)={{r3}, {@val={r8}, @actul_num={@val=0x2d, 0xffffffff80000000, 0x6b}}}) ioctl$EXT4_IOC_GETFSUUID(r6, 0x8008662c, &(0x7f0000000940)) recvfrom(r3, &(0x7f0000000980)=""/254, 0xfe, 0x2100, &(0x7f0000000a80)=@nl=@unspec, 0x80) syz_emit_ethernet(0x96, &(0x7f0000000b00)={@random="feb2bf93046c", @multicast, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@generic={0x867, "3f6e42710dc147275c95132566f1edf64ab6cb2e9703063c7fb487ad65681f43b6abb9c9d0b2133de32c110cba1a412dadf5732b50ac0cf1f1bb467d147826d1a638d4a74e705c5b9f1955a3d68d64814067e2bde17ebd04395c4ce51403d65e0e0d530bf5d1307b46f884b6c4ff535a58c2553cc1558458eb517119831b6065c58d753d"}}}, &(0x7f0000000bc0)={0x992, 0x2, [0xc09, 0x180, 0x142, 0xee3]}) read$FUSE(r7, &(0x7f0000000c00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000002c40)={0x150, 0x0, r9, [{{0x1, 0x3, 0xd, 0x7de6, 0x100, 0x6, {0x0, 0x1, 0x8, 0x6, 0x5, 0xa2, 0x6, 0xb82b, 0x3, 0x1000, 0xb61b, r4, r5, 0x81, 0x6}}, {0x3, 0x7fd, 0x1, 0x97b, '-'}}, {{0x1, 0x1, 0x0, 0xfffffffffffff800, 0x0, 0xb5, {0x3, 0xfff, 0x7, 0x9, 0x0, 0x6d8, 0x80000000, 0x2, 0x7fff, 0x1000, 0x2, r2, 0xffffffffffffffff, 0x7, 0x7ff}}, {0x1, 0x7f, 0x6, 0x400, '!@!.^.'}}]}, 0x150) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002dc0), 0x200000, 0x0) setsockopt$inet6_int(r11, 0x29, 0x9, &(0x7f0000002e00)=0x7, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000002e80), 0x0, 0x0) ioctl$EVIOCGNAME(r12, 0x80404506, &(0x7f0000002ec0)=""/157) prctl$PR_SCHED_CORE(0x3e, 0x0, r10, 0x1, &(0x7f0000002f80)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000002fc0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000003040)={{0x1, 0x5, 0xfffffff9, 0xffffad4a, '\x00', 0x4}, 0x4, 0x20, 0x460, r13, 0x4, 0x5, 'syz0\x00', &(0x7f0000003000)=['smackfstransmute', '-,*:\x00', 'euid<', '.[%,\x12\xb8\x00'], 0x21}) socket(0x29, 0x0, 0x7e3ea732) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000032c0)={&(0x7f0000003280)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x6}) 4m54.666653978s ago: executing program 4 (id=2173): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x6, 0x72}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x0, 0xe, 0x62, {0x62, 0xb, "a5754f079a381773f93bbbdb95e1c1e9c70d8cbfb34a12c3120883586704ba088e2d03a0bb44d8f147dc3ba82eca26ff4a7fd53a84c1622c456d605ed90ccfb9aa1f909d53cb2d34197b4999259a82b09d3ee08db39c410c2118b92ca75c0a57"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x17, 0x6c, "61d390519235de2870b6aa37e002226feed5910ae425732c46af1dbb9e3dc931ec74dda94b803f1c673cc6b52e5d4c69339a2cdb8a3027c41aa6b8c7e4c1ab4222b06018f14000c62400066e0fd4a9ff248af738b9d61dabbb7d00487ca1a7e029c2168966d0eb05e38931c0"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000340)={0xc0, 0x5, 0x6, "6024d9e35b6d"}, &(0x7f0000000380)={0x40, 0x5, 0x4, "9aa99c8a"}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m52.63043536s ago: executing program 4 (id=2178): mount(0x0, 0x0, 0x0, 0x200004, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000b40)={0x2020}, 0x2020) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './proc'}, 0xa) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f0000000400)='./proc/sys/kernel/printk_devkmsg/file0\x00', 0x6) listen(r0, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}}, 0x28) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="01", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001a01000001"], 0x18}, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/83, 0x53}], 0x1}, 0x2) 4m50.609194866s ago: executing program 4 (id=2184): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8c40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r3, 0x0}) openat$sw_sync_info(0xffffff9c, &(0x7f0000000240), 0x690000, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000200)={0x0, r4, 0xe, 0x3, 0x1}) write$cgroup_int(r2, &(0x7f0000000040)=0x8000000001cb, 0x12) openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000019140)='net/ip6_mr_vif\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x8) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000019080)=@id, &(0x7f0000000040)=0x10, 0x180000) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 4m50.480644028s ago: executing program 4 (id=2185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x80049370, 0x1000000000000) 4m50.01694332s ago: executing program 35 (id=2185): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x80049370, 0x1000000000000) 2m3.470039638s ago: executing program 7 (id=2666): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@delqdisc={0x138, 0x25, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xd, 0x8}, {0x5, 0xb}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x4c850) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ustat(0x90000000000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) epoll_create1(0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) inotify_init1(0x800) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x6, 0xfffffffffffffffc, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000, 0xffffffff, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r0, r0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000180)) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) 2m2.481610081s ago: executing program 7 (id=2669): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x100c803, 0x0) syz_open_procfs(r1, &(0x7f0000009b40)='pagemap\x00') syz_usb_disconnect(0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in=@multicast2}}]}, 0xcc}}, 0x0) pread64(r3, &(0x7f00000020c0)=""/172, 0xac, 0x98) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000880)=@deltfilter={0x16d8, 0x2d, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x2, 0xfff1}, {0xb, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x98a43dce}, @TCA_RATE={0x6, 0x5, {0x7f, 0x7}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_matchall={{0xd}, {0x167c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x2}}, @TCA_MATCHALL_ACT={0x1660, 0x2, [@m_ife={0x1064, 0x9, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffe}, @TCA_IFE_TYPE={0x6, 0x5, 0x401}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x400, 0x1, 0x8, 0x4, 0x5}, 0x1}}]}, {0x1004, 0x6, "6169e013274e4161d597fda4b55c65faeccc6933e356d16227d573be3143691229003c6f265157f3fe091d52b136f93303a1f882365dc82b25736c4373dc45d51641b73df81e2df4e047cf7663980507b69c88b6bd1c1bd9264a3d6cf50ca1f3c2c172d531930e3a10b487293c26e5a88fbc9f24fb665e3eef46d4f1dbd980c0b8db0d80036b723239757d56073f7223b25157f5571973c24a0d06783b106bc3ae0b4c656d44b67c907cd29eb781b923464266a4c0db85b119f0fc7aad5a9003d552d09d2a3a56b2a3fd9fcd5c01ddf808c1dd3245c0eb793f07e4e4a2ddef9c690efda01e050719e3cb89b98ff319449e303ae5939eee18ee433360891419b71e6bc5af8de834863eab85db90a4dd6c71af592b08b71dcf5f2a629b45bd9a2075b4f8bd86d1359f38d061a7fc60a6b9145e5ad086e2a0a0617ba65d7420595769d5dfefdb68e50c545271cadea6af0f1f0194a5c3a35fd26ee146e4db34e9aa2bba0696813132fd5cbca05f01988ed2d95a055948ab7a1a76bd6299763789433f2497fb8917746b2c24c9ed8429872d6a43e6c1eece8ca9f225ce5e2061c1772d0bbf52a421021c36187139f4e28d1c94fc77cd9ae478e23ec16a81ce084dc5a25fdd4c0ca3c13ce4942fcd6421d20d6bbbb8a0edf77061822b3f80e78276ca08f239770f10b430fda4dd295c024ffff66d9da2aaf42a04327237cb858022924558d693e2a9f3bb9ad9bfc3e20ee957b1f0a249cf436ed8deafffeec22db633faf54378dda51aa0d31318100b91dafda5000fc46df32f98785193666733be63f794cfd223bb2e3a1597c27e1454120b5e0531971c0146abbddf076876ccdd1178ff14bcf4050435696b85fb41412fd57694ede9ed53935ad2cf7ad2a36babb7d216ca2bab9f9f7823931013cf6f6b8ce438a6cd5851429adf98673cc9c9ff9e6f2280dee01bc26cf0c19b32f725687814b6c17c6fc0fa28667384664695d550de06d2a861a81f8897c6eaa7a7b4b1dd814184d8b26ae2b083b8850aa7e4e18ae9783cbc0c602aaad7ff8246bf59a6291b60e8919083d3fe3e031d1839c8c5fe0b42d30ae66170bb810410ef4c3ea468d4abfc966e685b0dab97536c1d7211beaa828dcd8426f611d57d7c5cf09f25bff5d8288838c81e5aa7b7f8bbeefb2e440ba2a02dca750d1364010b225a80785d93317a637012d41d7e48f84b932d0b317723b4bf7f5188855643ba980c53384fc0d22b1d7311d46460cc06cbb9dc62a48a6e5274ba22f2cc2a337776324924bf162ce6500e4b4000f3c9f1843428c7d461c42782353e5e96ec516246e279d91e9f04c7438240ed304d36a57767e0d094321a4c43ada1bd57e507d286fed467afaae3601b54dbc39546f95f60de30f8f001183d0def26d60ed54ca50a342e124ccdcf392a8a98091ccfa65ea2a880d1d334dab28cb392a00916af3d11fbc7e45afa82106eee5e44af7cec85dff79a0346c8b1f7083a30a43fa1da64b78eef807d7a63227bc5f588783d15fd64de676a2eb12f4f3899edf91bfe85e154bd3efb24b2a9444b21f57a3f859bcd90a27c12bdb569c45d0d64cd6ef63d0bdb5a7c85bd211a6d8303ed29673556327dc5c3863344034a09c28eb2a77879dc125c94d907a59933c068eabb6b1dbe9adeaaf0ad1c53e5fe090b3c865598b64805d9463425d9935b44847ce91c75f4b9d912bf8a511eb4c0bb498676579cd332e6b896b5462820043a9741fb902760d976f1a98c39c5740f0bbaf454e629560d2fcf4abddc28a8e5965f32c0b5a73c886fd333cc826f4eae1a454d05f9de6bd855c810f9e68af657214daebb077c9b1584a6d117c260cd2b71170ee6dc7566932c93a87885884c8aaa731ce027f727e40b9c6f7a69f5b61f2fdbf09f5f78c05cbdbe8590858f99c1dfbb6deb371f1c9e1b1c833c066786b32bad92b0fb43958b1acf46e5e769b20033c5687278054aaa284e6c3a3040afe7f1a9f9ffffe4b1b3221ceb827c0b6c8c83d1e1e8595f7034ca0e8ad8e5aa46c6fe3575fd1f6d29e0f45f224e414dce496f1ce05a049e9101db33e478ab488e52db960c024060308cc62c4b0f4a244ad234cd1debd623a29eecc21b3b3fb57b94bf5d890d26c49ed60cc01668a265acc41e56fbf548af1adb4158961e1ea1502a1bd5bdc8ad070a836ae8ac526c863692305a337e533083e2403598a52b01d73a04c30a06a00e4f2114580d81c2a6c0e87f4ddaa32dd5d4c7725d8c99799dc55a7ad1492bb6749d31193aafbc48392fe0aac7e50c6f05d663043d9059c55f412674725b7602e65d2e99e301dd378878f4a28af2412de7c97482b5d38dad9960bb3a636aa714526a023818cee9b493632aace731723d15e215928a861a34ab5aa42670cafde7df40c4f20809af8a8eef92e8f3afb483bb3bb9837072df03ab122b56d4e94e5142aa6c5c57b9a29ac6b61255c9c073379792ad5189b37f534e6f5395c37fc56350ffb5fb809c22e1d9e93bfda918f52ae45f7d81fd6d32bc8863b6d05add518dfef71fb4888cbcf8b2fd95af98bed93ea1c0e3952a73fe702147f2dbb7d08a1a27636a9bd6ebdfcd4b0511d145bf9b2d00e8c513bde5474636b6cca374a1c0cc84e30496bc1a69c222835cb9ac92ffd2f3fc0d054d07312b96e74a25f7cddeebdade2b2b143676e3bbb66373222e63f29efce1d46bfbc43e04b4ea0cb071ceb7937bf6082b2d5815fa240b2e5644929f3b37769ea89337df6bb292069c8691eafd719fd3171a0ca9ce6c3a60935c021c047d5ce176450f1610421b407aa3abf819475588c9555a49b5ab45f1be4662549becd3bac892e9e249ada8bc4fc8bf58e94ab5ca3d0c2f8ac0daf22576abd924d384cac3855882cd289fe77172a7386353c454dda34bae808bd2d3d2b0b5e1ef1fffd253990138058705d82cbb9bff3a6e2d870fe139bd23bbf47cc0f8a2a7adbdc64f2db6122b9449e0c46e5b53e560ccd7f486292688acf2fbd4229e69e970e75f255c2ddb390a134c9e3177753f06dd7667f6b19f74b8622818a45875210f6fbd1f61c4ba6277baf6bb267e28cf7142bf103ae2ecbd6affed3337e6549ea38b5bed5395c4a7f5db549edc7782fa063d6c51b04d64db710f4b5d5aeba9f697c06075dd6470df6beaf4e1adbc095fe97932173fe2547c988e05e5a532bcd093c18dc90b5c5703f3a970e5a85c665ab4be9e24eb89b2477c4574598feec105d53affdc3f505740dae5640163f07493b8659776d3cc34e311bdba88da21272bf49e0d48c450834f5992b728a7bbff06249a8c5c2a0c3c9bfebb995aa1ec2fd396cc1c7f10c2608d0b920e893f3fbe05f7ad72c2cfcad9f3047e85dd6e87517dcabf4958f2f35ce31110a8cc2f00f0f7e7670614aee8e9d3ec07a9fb37f050b4e0c7c10c9269b01096ff5504cf75e38f4972da58f54da387ae7dcbc701e51a56cf5908d2ce1f2933f421cb90a7d9a720228690f2a96efe87c978370e4b6e7655ed034a719eb77f8f72585a715428ca94d076ec8c8a13da539b224e6804dc1ffcfde55b07823aa692814c781196160073640eb796f539b46cfd18b59e3cecee0695ec343ccc7ec192b22fd77af6167fab0346dad3f3595d000f4720c594c0f2909735c279ec18dc4bf454d8fb037ecd20443bf496121aaacc0404d7a8e7ed1d53a2106d4624bcf51ee4ab6355a96aac88bce182e6bd1df2eb4de6853400ea18e3d87c783647284da61ba466f65016bfb4d18f1327fc3da1dc6ee3e37b7de4e2df16e73a5aadaf21ee5af1e0d5b7d2ef8b230e4ed1edcc27d3cb8a7b15fc721d914d10c1070e087938d18e423a2354cb7a22a74e8efcf4a8d626f0f6ee2f10c2170781acec2084a8089a16176985c1ad7c32636b41233e2c37f29b71fecac949da038d954d504476520e91de74e72dab913fbdf695e96ff811916e80b0f7eab4a4ffbffc0b2bb9e0a94752b79116bfe7f543023de58a305a32a2fd8c32669f0c176b64bbb7376438c9eb0428cd819e20dc0aca4c015b409575daf93a7d2dbf4e60e1d205fff2691e9e7675ea80054e47d212403458d0d70372645805f3436a6f81c3bbbdc137145eccd0b2e7e824747ed14870f24c037c0b5e64d62d40187841b452dfd7d877808dfb6e250b8a377deb0679a2436566e94a20aaf44b81c1e7a586573f8e5f944e593365da14ba55ba77153fbfd291d2e7fb7eb6566cb0c174d2953a6c00418159d8b9e6cfbc25ee1f07aa7f0e965ad50958941043124e59d6768e43f46ffeaad44ec236479f4174ad59934cdde68b9bf3cc24cfda59e05a01837beb4790c4b513a2ec335cff28899e0bd62a8fb1a67a2941a9227f6003ff8c14d4f98e74db9d09c0cc8afc6fe15a3134dd8d57f045cb11b7d3eb396c2caaa19b1dc265d1cf3c02d316c1530bd0932d33b36f9968fa38a6d51cb62c14276df454ddbe467d01d79169b5a13cd3fb0ac31672c79d8eb11b94156d14f0777ca9170516070be9df64dfc8ffb33cd130bfe59885ef4676e9f3214d91ff46cef37855d08d16e6e968215b082ecc0e49f5eb6e706167d9254b7c8639a719eb0f14a56e9e5091b7f619b91f8e17221c4dbdc78128a4244d93fd7f2335469dc94a3a0ad0ff1e92b9684309f6f8b385f019ca214961999c92c55dcad2a81a4cb25d9cb3913fa6a30ee5f493142b9db212147c34267ca62239d68cb95de9c8dc294b2e394cb61358d67bd22b2232dbbf39e9e5c5ad09473765cf9819c941b268fcfb39aaa40b386b23a541894164c665caae54595532dadab8fbba3e34146584420302bb48d132736ca594b419501d6e6ebd2ae654e998dffc2c073231c30cb32e6e399b17da81d68355c515545d00713cbef91bc9f310e0540c4520fa54a2f9edbafff00e467a57f446685211c0c407eac7d341c027e3ce4b3fb94025ce6d87d1028d605bf0331d259b5c5fda53095901d33489243fe7c18304f996c57ef2ed505d653508357b84fc260a7e0c1ea46ca85481b7f6d679c0d61ecf2d5316a3a7d172dab1c7cfb9d82af159ab24050ef5606db2572ba67e6675a0b8dc8f92e2f31fc2d5f007bcb612227a58e59117cf97994f394e41f63522ee3150dc84b7431fd28842bb3b3b4d3ba7637a6c688b78fa073d6fe70437581651ae4134556533a0beaa0956ddd01d226b7cb0cde12047c2846a8ca1c61ffcc225121fbef5c2729dce71bdb7fb29e32654d8c911f2fe4e08230fc86acff568d9c7c820d7cd27493ade69689ab6e6b676b1234948f31016f504bd4d2d24c1b613c0ee7f0f272d76f01c1235c8959de6294b4d174aaadb6fa95acd0c5176ceb7d1abd6b6f0754867fad17e7d4b8f3a46f2ab6369d95ec5322fbf811c4bcd8e24c2fae5192ccb9d1eeb3b9ccdd68884ed60aa3f402b3682e3b1f1c75e4922293693fe766de0e4cb1ff904751320f57b37365c8f5ad86ba6b5fe40dd8a5619ace004a620f97c1bd8b499e2d45a094e5f89ee8b323a47d4373c34389caa8c1cd4d8df01042d4c1483d82a57a3f00126abda66fb46425660f21845b43adf2fd283f257f8f7360eb7a9fd710db3a3d858da78d33df73e42f1d182ac86b4366bc1426148f6ecf19252a5664a035cba6c7607608b7f0852623b938d13e832c2becd90c16e716c627d5c599558f8077996ff563422b955a39860459ce4ae46f98ab22d7de356537f490db68f9e189469232cf8a53a2671ec0a4e75b9a4b9ca99463f9f1a9bfff083632d00bf1fe9bf722a9248e6190862372bec90a509"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x9c, 0x1d, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xe}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xd89}]}, {0x5e, 0x6, "608d5e78de0ea7134e715bd5ad03d05aaf52512378399709fa1ca8a5115007b423d1e843e638088a2be7eb899615d251ddc726864197c04601e4cf8dfc66048ed3c2f934f05435c96f71a60e7e08ab70585a1ecb9f6e877344be"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0xbc, 0x16, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x80000000, 0x3, 0xe8e3, 0x16e186ed}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x80, 0x9, 0x1, 0x7f, 0x80}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffff0}]}, {0x2e, 0x6, "c244de6aa3b9ab81f9bb3a14d4cd27ca9e4e859610412ad0d5055c709b9268ab793e3a941e711c7daeab"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x15c, 0x17, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x4, 0x1c6, 0x5}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x10000000, 0x100, 0x5}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x1, 0x0, 0xffffffff}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x2c6, 0x8, 0x0, 0x600}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x20000000, 0x1, 0x5b}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xb, 0x8, 0x400, 0xfffffffd}, 0x1e}}]}, {0x86, 0x6, "4391e9b6ade28accd59b15c40581e3ed0ba49ecd27256dd9c3a9b8efd4d267b9e6380e87f76b311763b78ae2f9cd3320d844103c3f51b162f381bedabc2c0f9156308d000c941c107bce3cce1c4d00e18018bd73b1850de5ba9715fc02e957782f33d66fce492d8e1694d5e5243514395a32b4318efe7dceb51d8aba1607d183b71d"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_connmark={0x11c, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x3, 0x6, 0x9, 0xd}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8001, 0x7, 0x6, 0x9}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x8, 0xffffffffffffffff, 0x9, 0x5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffe53, 0x3ff, 0x20000000, 0x8664, 0x1}, 0x2}}]}, {0x79, 0x6, "4ba9191599afec43cb9efbfc14504a80add3df382afc2cfcebe9ae9d5babc59e23a72d5055f518d973f8cde1c9fc8a3298539ef0c01e8d860a9e2e14bacc2f4aa2832494871b44fcbb3529637884e5c879ae2fa7a9be9171797825d72a519751a76b9006abaf94f061404071da6353004e14f0c4d2"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ctinfo={0xb4, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffffb}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x65, 0x6, "470efc6ac4ff69e17468965cc0510f0b16f27126ba44304fe88e7a656c983abfe4c2f80914fa8c6506065b748de7c9f76b29f816d42f75ce3162a44a8382d38e1297898d1bb5c8029801aeb41f3f98d043c2755576c2cedc832ce7a2b331b5706a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x174, 0xa, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x296, 0x3, 0x3, 0x8}, @loopback, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc99, 0x7, 0x5, 0x0, 0x400}, @private=0xa010101, @loopback, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x40, 0x5, 0xc25b, 0x7}, @empty, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x5, 0x6, 0x3}, @multicast1, @private=0xa010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x8, 0x80000000, 0x6}, @empty, @local, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8ebb, 0x4, 0x1, 0x8, 0x401}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff000000, 0x1}}]}, {0x5b, 0x6, "c096b53437a49207485558073fe66474d5d11544de9c850f6573a1fcbc7767f08ab06ea8296ded502b81ec72d41e570bf6459240a2d6f82d3dc8e4f8141900c7157e4b3eaf2106db3e09e04e68db402fe99862af1d23b1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0x8}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x16d8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1d, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85002000b80000009500000000000000c1543ea9ffa4df2505cdca48bf"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) 2m0.548245569s ago: executing program 7 (id=2675): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000a40)='^', 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$vim2m(0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0xfffffffffffffe21, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x878}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1m58.847428252s ago: executing program 7 (id=2681): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x88}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r1, 0x289e0cb5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r2, 0x2007ffc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r3, &(0x7f00000000c0)="d3", 0x1, 0xc899) sendfile(r2, r2, 0x0, 0x2000000000006) lseek(r2, 0x8, 0x4) 1m57.237783623s ago: executing program 7 (id=2687): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x7e) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) getgroups(0x2, &(0x7f0000000600)=[0xee00, 0xffffffffffffffff]) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') 1m56.327383284s ago: executing program 7 (id=2689): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x40, 0x17, 0x6, "a37daa502855"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x0, 0xb, 0x5, "26410283c7"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x800}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "b771408f56868692252ced51340acbc68f0e993b949ea909d11786def3a4c598c8ea9194d985526756775d57125051"}}) 1m55.916761247s ago: executing program 36 (id=2689): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x40, 0x17, 0x6, "a37daa502855"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x0, 0xb, 0x5, "26410283c7"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x800}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "b771408f56868692252ced51340acbc68f0e993b949ea909d11786def3a4c598c8ea9194d985526756775d57125051"}}) 16.535430801s ago: executing program 0 (id=2951): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000340)=""/149, 0x1a, 0x95, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x24, r2, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x24}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x110) 16.055239412s ago: executing program 0 (id=2954): prctl$PR_MCE_KILL(0x23, 0x3, 0x7ffffffff000) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0, 0x0, 0x400000000000000}]) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x240480c0}, 0x4004844) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c000280080005000100"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/file0\x00', 0x1ff) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) 12.225333638s ago: executing program 0 (id=2962): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000280)={0x9, 0x8, 0x8, 0xfbc2}) 10.330269595s ago: executing program 0 (id=2966): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x0) socket$l2tp6(0xa, 0x2, 0x73) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = syz_open_dev$mtd(0x0, 0x48a99fbe, 0x10b241) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$MEMGETREGIONCOUNT(r1, 0x80044d07, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) r2 = syz_open_dev$video(0x0, 0x6, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000340)={0x20000, "2a123b200000000000010000000000000000000000040000000000008000", 0x0, 0xfffffffd, 0x1, 0xe0, 0xba994d21c8ea99c7, 0x4}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x33581ccc, 0xb, 0x200000, 0x3, 0x5, 0xa}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000066f76008500000096000000955859938b955676d1c82af3f685096d38d0d06dfcbb0b6932ef42b0e4b203f2be18912f22b9195603bac9bd25d4848b506e0df5948441d2a4c68e099b"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) 10.035866929s ago: executing program 8 (id=2968): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000a40)}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$vim2m(0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0xfffffffffffffe21, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x878}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 9.745737575s ago: executing program 9 (id=2969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0xcb) mount(&(0x7f00000000c0)=@filename='./lower\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='ecryptfs\x00', 0x0, &(0x7f0000000180)='ecryptfs_sig=0123456789abcdef\x00') bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@target_btf_id=r3}, 0x14) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000000)={0x1, 0x200, 0x800, 0x76f, 0x96c}) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = dup(r6) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 9.565216764s ago: executing program 0 (id=2970): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) 8.671984573s ago: executing program 9 (id=2971): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) r4 = getpid() syz_pidfd_open(r4, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a3000000000c4000000090a010400000000000000000700000008000a40000000000900020073797a310000000084000d40cde2cf8aa68227b983d529471895e7a9dc80af0b204e04bcce7223a141d9a310d00560e4d597f1b9f120c9ed0f0b27ba3f8db5124808752516ebca6c453910fd2e8c9f14e9dda5976f51608e556aef3923720b254dc51960a0f46d1c9e26e893766da85cde333c0793418a206a6f59e76284fbf3eb35eb7eba8807a79dacc0d0080005400000000c080003400000000808000640ffffff00380000000c0a01010000000000000000070000000900020073797a31000000000901010073797a30000000000c0003800800008004000180140000001000010000000000000000000084000a"], 0x144}}, 0x4000840) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="140000004200010a00000000000000000a000000234b28142e8915e94eff7b361a6862b655e0503be3fd11fa8809f446670d21b1226b4c02999a5cde6084459d470954564c8943deadc6dd552b763e5ac30d651240227327442a47d47963bcd8485d0431aa21a6bc35ba3f1feed7a6f8b387c95f042b0f4071889108c736cd6c0716e3df354516de"], 0x14}}, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000100)=@req3={0x0, 0xe2, 0x4, 0x8, 0x0, 0x1, 0x9}, 0x1c) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000380)={0xc}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x25, &(0x7f00000000c0)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, 0x0) 8.437313142s ago: executing program 9 (id=2972): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000005dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005d80)={&(0x7f0000001640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0xf8, 0x18, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xd8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}]}]}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x44d0, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1108, 0x3, 0x0, 0x1, [{0x1104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1100, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "0a4910b12728a086aab8a9c50161f49fa9a44fd118165f38eddf8f5f712b7898ccf6f6ec9d9da229b20ee51742fef2d0f191ac1cc0474506ed6c7ff3eebb9b743b91950fc630f5734a204eb553ccad1dc1dd1f4c938f76af479aaf5d455da5a41a625d57e299dd3a1cae024d76216fa9a8352a405c3a"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3390, 0x3, 0x0, 0x1, [{0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xcb, 0x6, 0x1, 0x0, "06e21a35dcf33cba9969d59e697dfd569b8db04515906122d919fcf83b0879d95e36b352a487646d4f1b31b75871b1cafe4cf2008de69f1aad0de83c98b38f3d65388bd8fdbf9f6da824dc23d1e8d2f5eacc2a3cd4e996571efb1ee1397c69d19c1d39218ce782c1b640182f5f54dd6c960d64b7bdf6c00c5c95f6360082da20b7bd301eebd0c62f936894596ced344961571604205486cca34a30806c1a074a9df67b640ea4e80479af053709e447419a0c014b3170cb9c9056fc228b83079655029c36565079"}, @NFTA_SET_ELEM_USERDATA={0x13, 0x6, 0x1, 0x0, "cc25be44a5acf56efe31bec10f8025"}]}, {0x1888, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xe2a}, @NFTA_SET_ELEM_DATA={0xe0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x11, 0x1, "a23a7e037e5941e33844668cd0"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x20e7e60ccd701465}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x35, 0x1, "395a2087d37ad0f593f6c72e6c092aef531d8d9c181e16186518ca6d5d003b4a9f84df3733bc33be670613cf6f596d2e90"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x180, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xed, 0x1, "bb5bc3871c9a1e2cdabf7eca1d9e0d3c2f8ff6ad3818906057b6cfe12a654433692d7cc34f6bc29d7cd368e69e1458adfb69822c293349195e81b321b8acf121becef5296191a3a3667cef6add4528070ccdba57ec8497f62ae2578cf2f5f7a818fa5d9b8e0894140ef8fbafc761b81f17d66ff44ff61ac924542b9a80a6e5de6ed7b35d936ae4599a22860c48b90cc26ff820f42d541115f309564f4facad1e762c61379ccb061fd1832a5830ea701fa18db9894f008af41c430cf5174614ff67e5aad480822909c11890e9cd5008de9879937e7577b794869922a9a0f58ccd8880f1c064534d0787"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xf8, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x14}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPR={0x140c, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0x1400, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CMP_DATA={0x11e8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xa9, 0x1, "f158d98da7621dd1e1bcd33b29da504e794268e7e07d429dcd95be046d09b0a7c0272337d6fa9d12038358dc47e50f934464890efea71b97708f4b00ed8b6fffb34d52a7ed4e30147fa611d061052472d13d8f0f50d3de66355ff0fabd691b3bb1697cc7efffeb8825f0ba4d22c15249a3af65dc60b262f040827014a89564fcafbe28bd37814cd8fd9fda07fa97c2db99f2013d23befe0c4fe288d624d60039e619238610"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "6da09d6d41c2abf83eeddf2502c3e7f20ab6a2f26c0f39b4e6e79e1557c8e17a1b7c167f61abc9ff601c7dfb43415b1ca38b50630db9fd5835bca21b446bb6bd0bb5d06640aafa64da93a520ff78d768525208aa67bb5e0d07614c82541f0123fdc44596e89036209bc4"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_CMP_DATA={0x20c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "0f3ff8ae3ff638a38847fb988013ba621bd233dff7d39ce5a030b81ecb8d5030f73493b6dde9bf38b0a62e42ad4df7bbc9ebc89c2855a3f415cd39ea32ed76237da51bac9df5416274a5c08de81aa287229a9282736d0327cdee40cb181bfc72c3f40134966122cf0c125cb423c1b170ed0638279e933f4a448eb570547ab1f4229ce3153367a1296f7f71abf348064abee2188d0e2916dc14c520f37e8d2dc2b97093421789ee69fd589c432c62f038520676c7cca0f4510d6b"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x91, 0x1, "c2726ec653b8640743095d6d8aef50e0e4996e77d9dd9ec6eb8f5941a50d2c8242c24dc53e05f66eb13dd7889c08f544fae5b0cf1ca881bed9e927f1d95d4f17b4dc522feb1e72fe7fbbf3878d9c2071180ab46ec58bdf58dc35129b08392829e2f8270b24d69feeb41e1241e493260a4742704b0f6d38b84b196a7c908a40e8d49b3af78f43e8424670255798"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_KEY_END={0xe8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x59, 0x1, "802d99daae38515549c8283902cab41978e1ca5f87523a947f12089976f86cc5747c55841d92ec00b3ba8125883d5b5024d29bd34418d49cece1516cb302ac389ed0a6c4c4adbd3a1e4e14d99be203d2a83d9d5a42"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}, {0x1310, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x150, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "822d4a2eb91ea9187708f2fb4200b962b74774a966c30981f3ea1c9b4e8af9565fa27a4d3e2e8a79ef36c17620522d8e97bf98a228d8c5736eca7cc9ee18e68e0d40555d4b61eb37e2032a2fa7d3c61c0f8ac285576fa3e3580425737c2deb8f4133dd4d681ae91296416126fc7ddbdff53fbff7a3538c1c383f1d9ea14c8425aea7567fa80f86146a8a639947d4c768d599d8a0bb67e1abd748678f100160fdffc9fd2b7872d781cb88fb422255565ecb8c71f2d74543092d93336451e63d3dff00118b1d3803cd1ed43382d95f8412e2bd504e6e12dfdbfec9fe4b73a88fe078d6fa"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}]}]}, @NFTA_SET_ELEM_KEY_END={0x2c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x17, 0x1, "e44bc66623d597a6f3011f27ba98e94bacff9d"}]}, @NFTA_SET_ELEM_KEY_END={0x1170, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "e1c3da5772a68d"}, @NFTA_DATA_VALUE={0x9a, 0x1, "0efcb60119f9d3bab612ed56eff6954c4ee8aa2034c18868dfca11b5d3db53d9706e10d10c81dc5d005b66f97b10b51a7e25523b87c996a91c9ecd1416be4137b03840749e0fe314b0f157e1228b058c52d99cf48fefe0406b791611da8ff64662e671c2eb1f03767371317eee98be31eccbf11dee0efa19ca280de84285c86be86e7fde6ca0780236a826ac71fac5d8b024cdd2ede4"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_KEY_END={0x14, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x10, 0x1, "9f076bdba655f9d7e29b101e"}]}]}, {0x4d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x18, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x128, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6f, 0x1, "327e5fc3a91e09e6b79aec765a470b89cc8b489d6cbc997fb0c37a9b4f09063601c6e514e5df2ef77617f44f915a79161eb29706d4a243ae4b25135e93f8f04ae998dfc41e79bb6faf29460559634232989a5177e7d8f54537760e16acf79aad862e1e65ad4e672cd1166e"}, @NFTA_DATA_VALUE={0x25, 0x1, "f49bbedee5a76d4f218c48ad4b889bf1e89ea66dfe9726d5c01cf6823c9ccc4787"}, @NFTA_DATA_VALUE={0x42, 0x1, "c9a4bf457ad9d5c6e3a40f0a793dcdaa06352253dc48f7171fc8502717f85acea6d93d15462e9ba26f538866be6a61015a6d4bb94d658e2d9614f770ecc0"}, @NFTA_DATA_VALUE={0x3c, 0x1, "a17be3d302776e444f762d4d7b5757d42d3c97566c49db3b5fe207466cca5b25ecc6cf9dac4cc46dcea95f88cd787c3de3596d08ccc9c2c0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY={0x1a8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdf, 0x1, "3a3f084cf95bd567d3e508d0bf6379e1badb5fbdb2c9b2ba8a132beea1f56a814d907ab731fa7931cd9f73e4fd69c5b3af533db9c3f4b16f64391b98fe27c296d82d5e68ef90cfae3dc99e284f7e7f357f8da61b76539508ad0ab4cffde0a5e091050c7e66c9db241a0ea35a885498b8fd2a7f96acc819eb2b17607f71655b50cdbfe948ca8e241598e6f05d2b4461d7641fe2a6e535db3c655adbf034914b7a12ddf830934257f0e302572620ba19d9a57d7c7497c405054332b410892b0a7c71827d9764564f431abc6e7f303b34f3f8bfafbe0067d4e3afefa3"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x33, 0x1, "2c9025a6a530f04ca8c04a8bfb1859b8677519c9afaf42c5cd1b8d94315c28ca20c53c92430fdfd1397fedb2185931"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x41, 0x1, "7cde855630b14aee15fd96334d31c8cdd9f4447dd470fda6b4e09378e1d8f84b9e3f3e214bf6d9b6f82fc82e90d8962a7b9eec4284429793ca38ea60e1"}]}, @NFTA_SET_ELEM_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "638e6f951d5cf6fe53ed07ad77dd8c416afc5fb84d32262386137d65c31b83a9b47b6739e1ddd31504c696d60040ee17b8"}, @NFTA_DATA_VALUE={0xba, 0x1, "a5ed041b3a1b41ad440cd774560405df4254278da1de931ded21f291d30d832c0b188700e5175f2eb156c9e0e3de966096a1fecc680405b06c15eb7be6dd8b35d2c7054319ad0b605076f42d9f1694ac83b2ba34116b04c17ed77f22f5f378299a7c29ac74ded0b95fc6fc03480fd50103e621952ba32519ad1e6740e56459a04fb949d29a3fbbcecba0b537eae29ab5fd4bcb9c8d32910281a66d3dfb76296b07d526ed9f523c44e3af84a0f6f1c293d4ab5bf107d4"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_USERDATA={0xab, 0x6, 0x1, 0x0, "5cbcdd987d261b55e0924bdd3883b2b4caa28ad0faccc88d5e847947dfc16ed922822c5fb2255bfdbb134ac8b55bf4e02583b0e354076dc5a48b48d9b255d29f2b9cf11bc6f32c03de7e1ed535e4e84bedbf6c35c154c4898c47fd712e58a93e8ed1910ec0f5e8b3c33b0c3500b630b24e3c9d081fb24e9305877e59a992052f01491f8a61ae1e7eed57b05d29e771e84a3a291449c17fa90295936a0d0307ad47e867307b0ddf"}]}, {0x124, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xe4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "0af11946e330dac81f820f18a03ab2087acccf35730b2db531ce50f308c4d5c7d382c1bd27b20a2075ecea770ec5b1a24ab82535a5732c8090468aa4f69144846338d15314216636a853268c334a68f8523596003d376c085b076f5f6a24305044fe7905f480df4e026ead0425a8924eaf0ca1753758af"}]}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, {0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0xfc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf5, 0x1, "b654b574868483ab0cca5c728e1ab6862a5ae3893b95d292daa674d6f16ece29922db9ef0918ee65ce0a6e4ca850eb27baf51eafa93bd849798c978783dea6033427583506408dee4c5d7b54d569fdef480579abe51098db48c064a98fe54b1d469c911d46f58167b381bfd46bf999c1e8be6eda2cbc504788ad85cde0ab781b6ccdb0e36acbc78f14a716294c1a6fefba0fd111ea3b1efc19d25dfd7e3b5fa0bddb913030855ab7a9acc7b4c0000d0a219782a1674ecbbfb7929be6b3538fd8312801f748aab1f14b817abe8f5460a1caa1e048dd80e2963802001c7054a7cbaaac287b3d2311601fdf3d30908d318c22"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x110, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x93, 0xc, "b0abe3db53d19131b771ee1360d62a1dedd20fccf0f4c03449f226def7ff9194cccc1c81e5335a39a2f368feba73989d7be5501d1cd4425be3dd893479cfa0be0b03d9d6c002f27fda9084b0885cd58da752a0f5e227a570cfe26d27ed819d51ac3c7832acd22ff888e6af07198a382c57b53541b0a20326e181b7f5fb5cbba939014b6d0ed12795b107f49d4fa3aa"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x178338b9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4728}, 0x1, 0x0, 0x0, 0x40044}, 0x40000) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) inotify_init() mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) 8.159800636s ago: executing program 0 (id=2973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000005c0)={0x4, @sdr={0x30385056, 0x5c69}}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000005c00)="27000000140007c8820e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x8000, 0x1, 0x6, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 7.653064359s ago: executing program 9 (id=2975): syz_io_uring_setup(0x2af8, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x13090, 0xffffffff, 0x8000319}, 0x0, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000a80)={0x8, {"60fb45e9c594df7792ade65cef2c85e01e519d3200c95140b4dc435008522cd02712a6b31e43e14797aa03de48d6517acf7ee109eaebae4e07a4e8052e0edfc9a6808c5cd3c6d94fe873bad2ed09b1f0cd61a81406af42e5b74f6a0ec4bf59d068c747f9ce1fd709a80566cb5dbf704ff56ea65472c8b93c9e841a08bdf1c7fb070c91de676379934d2224430975346ac7e20ae8077bf6d9b379db4a605820298993028ed312c37f9cc39315d64767f4c273c7c52ce71d324dd43b57535107aec90b1938b002aaa6dd262bebb59af378d6bb2e169f3db85f76ab1d848a15a57e1d44599889fd75b86f0afabdfe160c7377881e4dd58b44ae5a22dfd6b8226ac5905b47831806fe5688be95e7869b59570906bce61f4111100e228e4eff8190fb434c51c55610aca4f3975d85c167fec93a65954fca5f1642fbeb63e81cc05f2056f6a7bfa184498b77d31cfd676d5d66f41d9476dff80634a5e258fc2314ee460aeb2564dd5233a7d858aaba057ed792a08b9cfadd2a901f10a0c7100424fad530cc246e846a9306c2a409c31d51de578e0969807d476729326714059d5dd52a30c47075745197db09f23d68fa22923c9e213f03602234605c26cf4e82c472de07668d5fb36b7037fcf4a8ecbcca6a9a82bfb08f8969a57ef06d256f97f40edad56887d5a091d4a42dad6aea68767e965371cc8fb8298e8d153fc0852d44b09c0f628971125b3a0271e0e409a652da34e5de68eaaca80f06e4f7bf6c3176786789b0255a6ba4e53cb07dcad4cb33355c8a4e7cd7c52774b237e6c893120a155a0cfcfcf78520946b5f87f8abe612a1fbd24a0d2d90a0a4960107830ad58f4cbd613907590abe6f99e28c3e4728a9f40d97a71d252e2e92e7841ba9b20d314fffa5463ebb3ebe7227c9137f10e6559fca5411d50e5a32b99aaaaba937d2fd1b85d81a663d475797509ded39020e4e4da28bd9d97724b7364e2b7300012754f2fa03e51a0d22372cdd66c2f12d0ef214674daebaff286ca70fbc17fc65dd84c571a6149d18f302fcf3a115b12fe5cc5ed5bde0518f51966b881d09f8ca4289a0082a55ff9fa17ba82a51a85596cd94397210d627b558308e88d7ac37385aad00a43fff1718ec564fec2d0fe2740724ee4e23b8c6c49824045be7ce0254ea70b253a1e3e706d53ae0e3bc32a4c6a91f7e8ce32b49d183caceef8e3e5db1ce50d731571ace25338ef62c5597ee09a62fe655c41e20269a1bce7ebc70db3dc8b9a43759e86c7336dad3867fe1a06a1a0bfb89643a95091a54016e122dfb9cd04676f6c1fcd07792a3bd306ec6a810a52f630fa26c9145354d8b3d32f5e95d16fc94578eb03eb7ca585f0fa7d62e0680ffe693859fe0f738b2573c7d2dd2f65208c84434711d3e6abb726ab3c6da1ab6bbdc547a10941a5f5a2b2f5ab51a4e8cbbf68f9a2e55c5e0e872747b5a72f2edd5c53e2969585fc2d6dc045120f7d85b3f7340d99d35da20c8688a7c8098f402c5478363f08fa08292d53f59527f7a6915ffc4b7aa8d67566dc8320951b86bcb680705c46d729f2f64c8f5237db7d10b59bb8def6c9d5b2cbdcc3fcf72480303a885bd0fbf047ace4295da24140320801e977005e9798ccb80577ffc8644a771fe162e86d6c0319bab8d0b6d4774b3752f66078661321b29afc061f50bd9e2af72424840ce2961173739bf37f1d17ea0f1edc549a9c69b03a4e66dca703d12060a092cffabd66ce65c40e32a50893b38cffe8cdac45a1eb6abda214ffd3eb94cf1d31d550a80777124561d155dfeac17d241b46fe14ddb72f7aac81c94b8289dd95d816974a57a7d17379de87c5c9a47dfcfc92443777b97eeb342c7434e05cb6fa7c0ee949d5e47c8d724a178e57578c837ee97000882a27e8576540b816446c7ebbca40939defdc1f5e53b011cfbf56b70315ac30c141bd88e199d7813846544cccb641622f58cba45a4ec06aaa3b0044dc5bd26d8f1d01d2ec2ea07880b456f6dba28ccae11b0d0dc3f4dfedb2e182351b7126ddc966c7b8e4a3d110e1ed2f3bc4933cf32b5e5f79e4ea052bca73387a499620ff35def0d638e5626fb77ad8746b1e369d060b7d123a3dda5ae05ccab4263156c1f0d47b9e3bfc5cbbba347335963c66fcd7573b719ed4e4b990e00c2e7941a2681131b2e54c4e4be6da3dc7ae1e42100268228fd34ddbe06f1ce253131eb32a72b6fd3dc26df731682dc992e735569053baf2eee2b316f9a39a00e94b3dc320bd30719ba328beb7c929c31541cb2fe2b1b68ddcdaddf2c6e5a0e203d5786eafacf1ac76f367140adf409d0baaa9a9ab323cfebf7dde03a94516ec4d985a5689af142bef445c12484faac68f787b0b54cc65a83a55c88156981f12145332564b633047e7802e591056aa6971f281625850c0cfa3470b2c7f5e219788d81abb6d02b5f73b2376dc0e856c050b844b3596689c19f85e888a35a477b9644f84b9b5cf59ce10f501f29224d1f03e2dac839d69ebab8d4c55007397f30d3ae3bdfc4f88bf72533180ff8282e4981420a27624387984a54ed8cb6b53c0e94c93f2a8ee79c29270f6afe4dfb18f8d92f5e3197091411cc13c0512ffc52baab98ba4d1ac423f15a080f7b2fae548691e1b209e6b283442c6fd748e8e928a96e73098c934c078d5f8796c973e497f8e87dbec1fa90754c31fe0d1eee9c473be9a083cfde112ebabd9f39a423889a1cde6c9a733a05f8380b9618e73a0afa73749fe61fb1bdcf69d9091cb19497cec8b90d02d82e9e9530c6745e3de7ae015f11085182da329928e4894e0e2bdb7a485e4459e5c2d8c5b71ab95723746a8b06c49d7d02da31585adece47d2902c658cea03fe2118496ea66dbe4e9d1d04506542559aec36156c0a36471e03611558512490f76eaff7ae71eec381b962b4cf61d025db6d3656a077a6aee343b3b12dea95db7a23945f4753fa4ab248a4fb01e5a41b92739db6165bcbafd3851deba09aee05fb81bde73997a874f55ec7c9bd54487976cc2f67c59e728134bb06568c042450572a8db9cf308b946455d065b3bc2a1a69f16825ff482958dd80357079e0695cf6edd419c15ca9e9d0a93f5d29a8b19249cc7f0d0d12f23d210363cca72cc89151e44bcd25ac3686e8491fefa5ee051193edd2fdb95da0fce69febdbb7d119bca2eb36fd01851fc16988a37c4a3f22e3eac180b41b84ab607b7ca86f16f4fe4c4e334fa18cdb003b575c3c111d87d21e2863d74b4eed1e70a4dfa388aae8856a6bbf724321673ea7f9e5f8442ed0dfa53cad3edb562224263142a1b875201a14d934d3c01740fc8e36869efa2dc42e8e2615808afc29624b69dc6af21b05c87ee4cb493b71cf2f90ffdabe9c1b744829e5c07a48df5ecac183ee86f5123e9653a0d90fb7ff10f3600dea71436520ce647be51129e2f640f693b251e85e8cec884b00fa7c37cb5ce9a90d7d872b257823a910b1f80a1c65b864ff5793e3ba8a639b2f7e02513982ca860aec8c76159fd11de430525b8534cd505c2eb7e78e6cc4d28d7d4749eb5cad1ad43c3216a1729d8c80fd64b8bf2459658d113d9928abbc5624c778ec261ac448b586a3e28b93e46b00f11e0a65e41dececf40adad794d4f656026d7c14627dae8b8da5e7bcf0d6ed45f10b6b05f18db525c1728d8c14388bff85049371db7c4aa5ac2dbe39be9817b4662b1bf60f4461c7b2038718c72daf3e5fee3069e7b1e987e0bb575e5a626b1be1b645a8164e9361ef17ed40043f9794b728bacd224c7be5a35656e26372c0d72fb02ea5bed6a4c19c9f2dfafb49870f45597ddd41f23e37ae52ce02a87efbe8b711d8027b2f6ec6f81e22192a74a467f8eb8fb3905b162bc914e72c33002fcb9644a0c3bab6868d6079919b65f7fbab9d0082e619992220c2e17411a8d5b53bb37d907243392e4f44b51380fe688b609abfc161a8f402a5ea3ae54abaf488d631d48adf643cc8ab822dcfab1de5c9b6cd16ca41eccd660cdb99f9dfe927c1c854bbca1c11481c99664577017993c22343f2918bc75b1558a20bb1af70fffa0bb3a0893fd156f8f214c322bd850ccb6656f2071b3166a19dd8d08b5936f090878aaddc4fd98b918d108ba3ddc8c622dd5e031e844f10348ca51ee7cde640edd6700e4adff4538e1d9d187670f73da6949846f12a34f55d42bbc9635c89225f089a4182e029abcfa92ac95896818d4a452429e008937a092d6314926a420f341eb0d74a5a7514499d21db527d7fd4d93f8296559424c8a1f8d0c5995fffe1dd0dd480f6c2ddac4b7409216e6099f4d6b0b8eb49ec5bed47acd770da8ba3a8783c59a5db261a0df45a38cdf570ae562407d9820e0caaea46b538f8436f7c3bcaf909289cff0f3d2a94c3c22765a4bcb43f109da626c92b1c58cb7de7e99f0514bf88fcb1b5e42de826963b335d6bc724c284a0c7a303190c7f95f74fb6a1f10cbc856058ec381e5295a7b3a81f2e2c4792f406c23ecc87161f32f74894b4b60c14e9ca090f120536f5ff32abfc06724073db037f265b3ef83b4a5c5135080ef10dc0b33d006e95bc104643e22b893861bef6caaa6a911233b0658227b3f9eca82bfc6ad1f75627dbf944505597aadaa4ec476aa56ca6f0faecf377bdb6f040ac08f0b13c136ac88a3d97fec095a887f02266515e38b51be4f9c7d82416df95dc8ec290eec41ccab440caf98a0400480f7127e9596c823139be6e1ff92870dd21bb4c7946c9c33077a72eca94a96678e668f98c0fb598325eec7538d4d03b5af768bca110ea60f77b610edefde5522a66ae7e495e5aaae7d2d2617c86ee52f39d55970f802be0ccc58ead65a26c9b6aa8d9d350a244b99e2a2e2ea1929146eff59b4ebf22d386e8217d64a9f8c12776da50077a55d06a275ed800b0e21bfb007df3136442507d53300dff6d19d741d4754700c7ce6e67103295e1d19d181c1abfeb6cd21984f622a0433b095ff0791cca072f1aef21088bb381172b1e3bd897b014fa924999bf350d97046ae8b5f496d4444fe1db7009c80b4507fb5b49b8088f8b63e93187e384c50ec31f6fa5a329db01b7a399813e25f717555c64cc143567bf487143cf80cbce5a99c19d79fd4a1da452a10d6b926428486dc829938a4385bae8f04eec61e3a6680de4986ec4120ab053058d6cd7a8a453d1e86aa18dca66bf545a7078679e410aa056ec344476fa76d8a51c2a152781fd87f1d41fa76564b1026f4fb182e433eef15606364efb2f0639f4e6ecffa241ecfa4b9398c63b36624db82f3afd534ef413340e4de21fc20293da08466a89d3c6044e23bbc94d90faa858b4078cbaa5da4889f0cb4564adb4f22e10e50c0d41d23a849d13a78630b3d1382a01263e80b2b4c22724ad180a8c177ab8a5d7b87158f456a0f1c3e6a494f88ce14a06c5d85189e927e5821ac686550e53c39a17342a90ebd269924c55d86b899af0a91a1f3b68aaf40ea7b821ae2aedddeac07ab8c2d257788db9aa530d558eb478331ca2c0472e5ed21b7b65ec0c4729040846dd6d4031fa7704a1a0cd4141c9a9368be96e4d5bed6be99d3c8ea8adc6f2a9a15db02a9a7f5d12663246f01f6fdf5a8dceb0c81b9a3a978dcd5e3e1225e7e4e0d0a926c52742904564eba74ade47e47b034fcbf831e5c22ceab4acab13d921cf26af709a2260407f7559111306e8132f18802ca7bbbe257127644a4b9d6ea6b7e8d37bdb1b37bb3bfffc73150297ce2d8aa67c3345c58981d6372d270995298416816396de23252b0b1e", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/dev/scsi/logging_level\x00', 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x2, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x0, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 6.160528821s ago: executing program 9 (id=2981): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x40000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000080)=0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f0000000500)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @nested_load_syzos={0x136, 0xe8, {0x3, 0x401, [@nested_create_vm={0x12d, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x29d, 0x8}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @in_dx={0x69, 0x20, {0x357a, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x43f, 0x0, 0x6b1ac6f2, 0xd6}}, @wr_drn={0x68, 0x20, {0x5, 0x2}}]}}], 0x100}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008732b0a0040000102030109024e00030109200c080b00"], 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x101002) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'vlan0\x00'}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000005704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="76147583ddd0569ba56a88a85993", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 6.007692085s ago: executing program 8 (id=2982): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYRES16=r0, @ANYBLOB="17090000000000d3e9858afc767abdc2fb1900100001000000050008000a0000000000060002000000000014001f000000000000000000000000000000000014002000fe80000000000000000000000000003b050021000100"/105], 0x64}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000b70000000200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="0100000500cd960000c85df0e900", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000800"/17, @ANYRES32=r6, @ANYBLOB="0800050007000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'veth1_to_hsr\x00', 0x2000}) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0310ee7b60e26bbb3996f171f337829e04ac89d19aacc152c9802660ae5eff5e01cbdad510e9cbab8d95f771b7cfeae20b0e8fca53f8da68e3d7ff9b2aa4c20189d4e94c372d65b09566e0060554ea7c479a2d4a995a121ef4f17e13f3ef80f445e4a90ef06433192f5ab6364daa9e3ffc9844e3555ed9f275cb500155580959f1734b649c561dfe199c614a7f7a3a95e373b9e69bb39f8e28432033ef032d8d924cf3003fe9926067a9d9bea6ae85463bb847ee27850e895539444f", @ANYRES32=r6, @ANYBLOB="0af4050008021100c6f0"], 0x28}, 0x1, 0x0, 0x0, 0x40804}, 0x40) listen(0xffffffffffffffff, 0xfffffffc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r10, 0x89e0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000009000000090000000050000000f0000000100000500000000010000000300000001000000000000000000000300000000040000000500000000000000100000000000000205000000040000000000000000800000090000000000000c030000000a0000000000000905000000060000000000ed120200000001000000000000090100000010000000000000120100000008000000000000070000000000305f6100cc81d61b5c516c36e1570ab46c093b078494c4bdde8ebe63d1fa52ba0d379642ac1ee73673857e296dccfa5bd96c515d3c476b02aaf09c253745d5c16b35bf516e6bfdd3d85ef67ca5297c399ea90ba60b2e7462dd"], &(0x7f0000000480)=""/69, 0xad, 0x45, 0x0, 0x9}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000fda61148c2cfd4f280ef2e0fe2ea0668def8dd069c3332145b8926ff72c81bab10cd8b185f487177e56d0e297532af44ac6f07a985adae5c583bee4b3c937e419a55d5962f9ea2843410e623190b94dc204561158845d2b627517bc300634e9f287ba10858634a55a0acec978036628ea57e33b489b459b3efc88cf1c86e3eb63ef8803e0aac8c1539949bb8eb9f880806", @ANYRESHEX=r3], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="bc0a4703c8b57f000000d03a36f2", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.909211728s ago: executing program 6 (id=2983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0x1, 0xfffffffd}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000800040000000001000700000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000100000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000240)={0x8, 0x8b}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='\x00'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000280)) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r6, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x81}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x1}, 0xe}], 0x2, 0x40000141, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 5.618182379s ago: executing program 8 (id=2984): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x88}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r1, 0x289e0cb5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r2, 0x2007ffc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r3, &(0x7f00000000c0)="d3", 0x1, 0xc899) sendfile(r2, r2, 0x0, 0x2000000000006) lseek(r2, 0x8, 0x4) 5.170268927s ago: executing program 1 (id=2985): bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r0, @ANYRES64=r0], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) 4.880841128s ago: executing program 1 (id=2986): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={r0, 0x12, 0xc2}, &(0x7f0000000100)=ANY=[@ANYBLOB='enc=raw hash=\x00ha256\x00'/77], &(0x7f0000000180)="61c139d9280cf2b7ac8c0b52e01c73044e69", &(0x7f0000000240)=""/194) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e20, 0x773d, @private2, 0x800}}}, &(0x7f0000000040)=0x84) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x400842, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e", 0x21) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) recvmmsg(r5, &(0x7f00000021c0), 0x5b, 0x40, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x9f0000, 0xfffffffe, 0x401, 0xffffffffffffffff, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) 4.732068674s ago: executing program 6 (id=2987): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x21}, 0x10}, 0x94) setns(0xc9, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x274) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000180)) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) r2 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfd}, {0x9, 0x5, 0x7, 0x2, 0x400, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) r4 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x50, 0x5, 0x1, {0x0, 0x1}, {0x45, 0x2}, @rumble={0x29, 0xc2}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x120) ioctl(r5, 0xc138fd03, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) ioctl(r5, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000600100003801") syz_usb_control_io$sierra_net(r2, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0xb, 0x2b, {0x2b, 0x3, "b8534b7dcde7bb496e948415e5cc59a46e9e8c18059d283801b5df706003aff7811ba99ed630e29cbc"}}, &(0x7f0000001000)=ANY=[]}, &(0x7f0000001580)={0x1c, &(0x7f0000000f80)={0x40, 0x14, 0x78, "e8a81967dc6f35150c33a26e676ffbdc4dc9fa023148f3de5379b2d4314c32552919643403622bc17e2cdd40486c6ff2798dbd1e65c05daa9366d0cdea2e86521adf4a9f02203198667234bcab584a8b509b67322762b8de7568f58c0c9171f1052852b1c62722fcfd0d4bcfddd4796a58a0b79c0f1293ae"}, &(0x7f0000001100)={0xa1, 0x1, 0x400, "bbcd5a5741a15f4d0d224a2ec5d4b2d0aa092d67eedf8fe521fb387442f2d50ad9947752f6b979882e52093bc44338051a7e89ff534460cf3b2e9afeb82a0ab638ed83473f9571d2712aa8d8b0719de8b4212034aa7d4f30cb0d42149d3ed466f71f517e4c7d64f0ac88f611296ad157eda7977a3af410188080db4e54e0b850c57bb99f6240447f61e471579ff9d1d752a7c16e5eefbc32689d360cb7c45800b308be1a6f718fbd61d29463b33f279ac50a1266eabe00791aa6c1402303509424e86129c00c490011e8fc2c073d0405c7c6710f6e7f1187e09ed45f3a3ff55ef6a5466d11b09f1c3462d0d02029ed889ab1deb4f78de8d0290002229a44c3b650e7f380614c1a565506afcf35f02cf1d8f23f47cbb2a1ee81bee08efcfb97941b90fb0bd9ae95171126b4c1fa66db170ef19a3092d48e2ea8786c52dca841cac483373355e06504dd67e59cf55949531de6ed8280bf4c8b8d213a1a988bfe4d72c3a8de65e05f0361391988eae19a3f6adffff68fffda82e4688ae7191a4ae4c01a9e0b4b27d149623a9fd8f4131da4479b92e835c07d0f0ebd9dc4a31cc6b9929b1656f373d4888c0c0cd599cfcaf628eb0a73f9dfd2936d5953b00d5116587c62c71783fff3868bcddb9b5564cfac4a59290b367ae5adae22346c3ba55c673e6bda59b888e6eef715b3e093dcad5ccdf18293360bb2d16527412349d3fd1fd5cc0708ce5bc1ec3355c2804f78850c23c0d96c0d1f6a8016b3b1433606bd16205f4459271651a40eb357460030b742ed661c4ba640e1bd7ac9052929eff3e7a880e3a059e5855556cb75696027771f9e3eed90d40c7c74167115e7a3ea180520783d2f23df0c59add750ffef4a5ba857a02a96bef4c580ff99ae5c7bc0eb73d4e132f6b0098808d4eea44e2a51206462491af250acf70d77fc385803ffca5691cae2d17ea693ee39b6964e3540047bdbb3d0c1d342a4a096ce21a9136d36c2157a6a56f05ecf7e1b646a7d1adfa803ff14dc020c94177406671b307b0db4952803f88b4c7afa47921f7ad4650d7cae0fffda394974ba4e8c2e226ba5ecdc61658c0bf105c6c914a3f98bf462716dc32ae832f1c7cfd5dc92f496e5849f0da9f484e99a78571f7c6912dfb8813b0b84dc916eb3d9399e3242e2139185f58faee833d32dfc465c151f4a99265317788e998634da2e42b6af5658ed10ae23dec80691bf4fdcef63d27bc5414ad7cfdcf1f760bf09e1c4ce8e188e654cfb86df773952ac0345530bd7a7b35aa8c256d7fa646e12c4ca3e373081404181f76c1be4e79a7d6fd2b5b0d4745c992eb14c53e73d7f4c6390ca31201074d12ed9348e773e839235a1324505d9b0570c8aadada0a21571fa55cbe0b4e7a54b849765c3691e9e202729dddd79afa640104399b2fb30baec2d4cc98a09052fe31ef02bc60f"}, &(0x7f0000001540)={0x21, 0x0, 0x1, "ad"}}) syz_usb_control_io$sierra_net(r2, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x0, 0x22, 0x2, {0x2, 0x23}}, 0x0}, 0x0) 3.297447671s ago: executing program 8 (id=2988): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x4048055) 3.271533999s ago: executing program 1 (id=2989): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x5, 0x9, 0x20ffd}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x3dba, 0x81, 0x0, 0x5}]}) syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='addr=127.0.0.1,soft,timeo=1,retrans=1,sec=krb5,\x00h']) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r2, 0x2}) 2.908743245s ago: executing program 6 (id=2990): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x4004662b, 0x0) 1.770871806s ago: executing program 9 (id=2991): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_emit_ethernet(0x86, &(0x7f00000005c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x50, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x6, {0xc, 0x6, "fdcd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@hopopts={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}], "81d7a040d5c56b1e3480ce3b5b2ab488"}}}}}}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x102, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.68127634s ago: executing program 1 (id=2992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)={[{0x2b, 'pids'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'blkio'}, {0x2d, 'io'}]}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000ac0)={r4}, &(0x7f0000000bc0)=0x8) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0xe4e, 0x9, 0x9, 0x4e, 0x120000, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x5, 0x6, 0x24, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x7800, 0x10, 0x9, 0x80000001}}) write(r6, &(0x7f0000000180)="08021100950166c411000000450000fa8c9557904c036dc207c928661ce676c3cfefd29cb3930b2d2ba0d5a081aa0b2a264a24c021a3512abe09d1610961433f2bb9a202010000004849c19459f1efd310e4be5a0ac75fcb792d6ab6e8e95d63af0437c29a2d3ca189797f8b4da45354", 0x70) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 1.660792679s ago: executing program 6 (id=2993): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x23f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x17, 0x20, 0x5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0xf, {0x9, 0x21, 0x80, 0xd, 0x1, {0x22, 0xf2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x4, 0x74}}}}}]}}]}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @mcast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000200)={0x0, 0x210000}) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f00000001c0)={0x0, 0x200, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x100000003, 0xffffffffffffffff, 0x7fff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffff801, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6000000000, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdfffffffff, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x10001, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2, 0x30f3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffdffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0xffbfffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffff3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) r6 = syz_io_uring_setup(0x10, &(0x7f0000000880), &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x4, 0x0, r6, 0x0, 0x1, 0x8, 0x2, 0x0, {0x0, 0x0, r6, 0x1000}}) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x6, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000340)=0xfffffff9, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) 1.325489748s ago: executing program 8 (id=2994): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) 1.18375693s ago: executing program 1 (id=2995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x801, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80080}, 0x4000) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x80bc5}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async, rerun: 64) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f0000001000)) (rerun: 64) ioctl$KVM_SET_NR_MMU_PAGES(r6, 0xae44, 0x58ce9695) (async, rerun: 64) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000002000)={0x3, 0x0, [{0x40000083, 0x0, 0x1001}, {0x400000b0, 0x0, 0x10001}, {0x400000b1, 0x0, 0x1}]}) (async, rerun: 64) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r6, 0x8138ae83, &(0x7f0000000100)) 796.683093ms ago: executing program 1 (id=2996): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000000000000000000000850000007a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000008f00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) setns(0xc9, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r2, &(0x7f0000000000)='3', 0x4e) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc0000000000000000e700001000", "f0630400"}, 0x28) 701.663747ms ago: executing program 6 (id=2997): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000d, 0x32, 0xffffffffffffffff, 0x261c5000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000140)="ecd6c697c1", 0x5}, {&(0x7f0000000180)="06000000", 0x4}, {&(0x7f00000006c0)="e7cf", 0x2}], 0x3) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) sendmsg$NFT_BATCH(r1, 0x0, 0x800) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 11.475579ms ago: executing program 8 (id=2998): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffffffffc01}}, './proc/thread-self/fail-nth\x00'}) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0x4, 0x8, 0xfe, 0xfffffffe, 0x80000000, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x7, 0x9, 0xffff2d36, 0x101, 0x4, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x40000000, 0x5, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c70, 0x80000000, 0x242, 0x8, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x400, 0x7f, 0x7, 0x5, 0x3e, 0x8f, 0x8, 0x6, 0x800, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x114, 0x8001, 0x4, 0x4, 0x0, 0xfffffffa], [0x1000, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0x46, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x0, 0x7, 0xc2bf, 0x6, 0x402, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c7, 0xd, 0x4, 0x1, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x89e8, 0x3, 0x9, 0x38c, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c9368d, 0x80, 0x3], [0x4, 0xc08, 0x4, 0x5, 0xfffffffd, 0xd, 0x31b, 0x9, 0x5, 0x7fff, 0x9, 0x6, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0xfffffffc, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xe, 0x2, 0x0, 0x2, 0xda6, 0xc, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x7, 0x4, 0x2950bfb1, 0x1000, 0x400000a2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0x80, 0x20, 0x9, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0x10bb33, 0x7, 0x8, 0x80, 0x938, 0x2003, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x9, 0x3, 0x4000, 0x10000, 0x104, 0x37f2, 0xffff, 0xa622, 0x1, 0x5, 0x1, 0xffffffff, 0x14f, 0x4, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x4, 0x4, 0x4c7, 0x1, 0xfffff000, 0x7, 0x5, 0x7e, 0x100, 0x3173, 0x2, 0xb2, 0x8, 0x6, 0x10, 0x5, 0x5, 0x8, 0x30b1d693, 0x4008a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0x4, 0x6, 0x200, 0x0, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 0s ago: executing program 6 (id=2999): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000000c0)={0x21}, 0x10}, 0x94) setns(0xc9, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x274) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000180)) r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) r2 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfd}, {0x9, 0x5, 0x7, 0x2, 0x400, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x120) ioctl(r5, 0xc138fd03, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) ioctl(r5, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000600100003801") syz_usb_control_io$sierra_net(r2, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0xb, 0x2b, {0x2b, 0x3, "b8534b7dcde7bb496e948415e5cc59a46e9e8c18059d283801b5df706003aff7811ba99ed630e29cbc"}}, &(0x7f0000001000)=ANY=[]}, &(0x7f0000001580)={0x1c, &(0x7f0000000f80)={0x40, 0x14, 0x78, "e8a81967dc6f35150c33a26e676ffbdc4dc9fa023148f3de5379b2d4314c32552919643403622bc17e2cdd40486c6ff2798dbd1e65c05daa9366d0cdea2e86521adf4a9f02203198667234bcab584a8b509b67322762b8de7568f58c0c9171f1052852b1c62722fcfd0d4bcfddd4796a58a0b79c0f1293ae"}, &(0x7f0000001100)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001540)={0x21, 0x0, 0x1, "ad"}}) syz_usb_control_io$sierra_net(r2, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x0, 0x22, 0x2, {0x2, 0x23}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): 2683" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 966.036606][ T31] audit: type=1400 audit(1791147315.149:1964): avc: denied { read } for pid=14231 comm="syz-executor" name="loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 966.115722][ T31] audit: type=1400 audit(1791147315.229:1965): avc: denied { create } for pid=16102 comm="syz.0.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 966.115856][ T31] audit: type=1400 audit(1791147315.229:1966): avc: denied { unmount } for pid=9704 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=0 [ 966.116159][ T31] audit: type=1400 audit(1791147315.229:1967): avc: denied { unmount } for pid=9704 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=0 [ 966.121818][ T31] audit: type=1400 audit(1791147315.229:1968): avc: denied { create } for pid=16103 comm="syz.6.2684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=0 [ 966.239479][ T31] audit: type=1400 audit(1791147315.349:1969): avc: denied { read write } for pid=16106 comm="syz.8.2686" name="raw-gadget" dev="devtmpfs" ino=814 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 966.275152][ T31] audit: type=1400 audit(1791147315.389:1970): avc: denied { create } for pid=16106 comm="syz.8.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=0 [ 966.283842][ T31] audit: type=1400 audit(1791147315.389:1971): avc: denied { create } for pid=16106 comm="syz.8.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=0 [ 966.387376][ T31] audit: type=1400 audit(1791147315.499:1972): avc: denied { unlink } for pid=9704 comm="syz-executor" name="tap62" dev="devtmpfs" ino=3297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 966.391118][ T31] audit: type=1404 audit(1791147315.499:1973): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 967.428558][ T376] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.010108][T16127] 9p: Bad value for 'rfdno' [ 968.028270][T16129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2695'. [ 968.252834][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 968.275785][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 968.276767][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 968.277232][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 968.277516][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 968.578652][ T376] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.671357][T16137] FAULT_INJECTION: forcing a failure. [ 968.671357][T16137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.671390][T16137] CPU: 0 UID: 0 PID: 16137 Comm: syz.8.2696 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.671407][T16137] Tainted: [L]=SOFTLOCKUP [ 968.671411][T16137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 968.671419][T16137] Call Trace: [ 968.671425][T16137] [ 968.671431][T16137] dump_stack_lvl+0x100/0x190 [ 968.671457][T16137] should_fail_ex.cold+0x5/0xa [ 968.671477][T16137] _copy_from_iter+0x1f4/0x1690 [ 968.671497][T16137] ? __pfx__copy_from_iter+0x10/0x10 [ 968.671514][T16137] ? lock_acquire+0x1d1/0x380 [ 968.671532][T16137] kernfs_fop_write_iter+0x186/0x5f0 [ 968.671551][T16137] vfs_write+0x6af/0x1050 [ 968.671566][T16137] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 968.671587][T16137] ? __pfx_vfs_write+0x10/0x10 [ 968.671599][T16137] ? find_held_lock+0x2b/0x80 [ 968.671626][T16137] ksys_write+0x12a/0x250 [ 968.671640][T16137] ? __pfx_ksys_write+0x10/0x10 [ 968.671657][T16137] do_syscall_64+0x123/0x790 [ 968.671674][T16137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.671687][T16137] RIP: 0033:0x7f45aa59e159 [ 968.671697][T16137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.671708][T16137] RSP: 002b:00007f45ab554028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 968.671721][T16137] RAX: ffffffffffffffda RBX: 00007f45aa825fa0 RCX: 00007f45aa59e159 [ 968.671728][T16137] RDX: 0000000000000002 RSI: 0000200000000540 RDI: 0000000000000003 [ 968.671735][T16137] RBP: 00007f45ab554090 R08: 0000000000000000 R09: 0000000000000000 [ 968.671742][T16137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.671748][T16137] R13: 00007f45aa826038 R14: 00007f45aa825fa0 R15: 00007ffdc6adf028 [ 968.671763][T16137] [ 969.076154][ T376] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.048601][T16118] tipc: Enabling of bearer rejected, already enabled [ 970.071004][T16154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2700'. [ 970.881614][T14802] Bluetooth: hci0: command tx timeout [ 971.023041][ T376] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.418314][ T31] kauditd_printk_skb: 70 callbacks suppressed [ 972.418332][ T31] audit: type=1400 audit(1791147321.519:2044): avc: denied { create } for pid=16167 comm="syz.0.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 972.418357][ T31] audit: type=1400 audit(1791147321.519:2045): avc: denied { write } for pid=16167 comm="syz.0.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 972.896271][T14802] Bluetooth: hci0: command tx timeout [ 973.076355][T12948] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 44978 - 0 [ 973.077085][ T31] audit: type=1400 audit(1791147322.189:2046): avc: denied { read } for pid=5268 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 973.136628][ T31] audit: type=1400 audit(1791147322.249:2047): avc: denied { search } for pid=5268 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.138215][ T31] audit: type=1400 audit(1791147322.249:2048): avc: denied { search } for pid=5268 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.191530][ T31] audit: type=1400 audit(1791147322.249:2049): avc: denied { search } for pid=5268 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.191568][ T31] audit: type=1400 audit(1791147322.299:2050): avc: denied { read } for pid=5268 comm="dhcpcd" name="n84" dev="tmpfs" ino=4703 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 973.191589][ T31] audit: type=1400 audit(1791147322.299:2051): avc: denied { open } for pid=5268 comm="dhcpcd" path="/run/udev/data/n84" dev="tmpfs" ino=4703 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 973.191612][ T31] audit: type=1400 audit(1791147322.299:2052): avc: denied { getattr } for pid=5268 comm="dhcpcd" path="/run/udev/data/n84" dev="tmpfs" ino=4703 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 973.422832][T12951] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 44978 - 0 [ 973.597334][T12951] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 44978 - 0 [ 973.876211][ T31] audit: type=1400 audit(1791147322.989:2053): avc: denied { read } for pid=16175 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.907855][T12966] netdevsim netdevsim7 eth17: set [1, 0] type 2 family 0 port 44978 - 0 [ 973.968644][ T376] bridge_slave_1: left allmulticast mode [ 973.968672][ T376] bridge_slave_1: left promiscuous mode [ 973.968832][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.005211][ T376] bridge_slave_0: left allmulticast mode [ 974.005235][ T376] bridge_slave_0: left promiscuous mode [ 974.005388][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.121774][T14802] Bluetooth: hci0: command tx timeout [ 975.185205][ T2281] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 975.265136][ T5734] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 975.314869][ T2281] usb 9-1: device descriptor read/64, error -71 [ 975.414897][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 975.415419][ T5734] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 975.416433][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.416455][ T5734] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.416470][ T5734] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 975.416502][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.496159][ T5734] usb 2-1: config 0 descriptor?? [ 975.650173][ T2281] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 975.794943][ T2281] usb 9-1: device descriptor read/64, error -71 [ 975.899815][ T376] team0: Port device bridge1 removed [ 975.904888][ T2281] usb usb9-port1: attempt power cycle [ 975.949671][ T376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.971620][ T376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.994007][ T376] bond0 (unregistering): Released all slaves [ 976.202926][ T376] tipc: Disabling bearer [ 976.203027][ T376] tipc: Left network mode [ 976.254912][ T2281] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 976.277191][ T2281] usb 9-1: device descriptor read/8, error -71 [ 976.378350][ T5268] 8021q: adding VLAN 0 to HW filter on device eth14 [ 976.514653][ T2281] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 976.546623][ T2281] usb 9-1: device descriptor read/8, error -71 [ 976.655478][ T2281] usb usb9-port1: unable to enumerate USB device [ 977.135882][T14802] Bluetooth: hci0: command tx timeout [ 977.685378][T16131] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.685429][T16131] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.685578][T16131] bridge_slave_0: entered allmulticast mode [ 977.722352][T16131] bridge_slave_0: entered promiscuous mode [ 977.741778][T16131] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.741890][T16131] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.742045][T16131] bridge_slave_1: entered allmulticast mode [ 977.799036][T16131] bridge_slave_1: entered promiscuous mode [ 977.816746][ T5734] usbhid 2-1:0.0: can't add hid device: -71 [ 977.816814][ T5734] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 977.858714][ T5734] usb 2-1: USB disconnect, device number 10 [ 978.058777][T16131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.082283][T16131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.136172][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 978.136191][ T31] audit: type=1400 audit(1791147327.239:2074): avc: denied { create } for pid=16240 comm="syz.1.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 978.143185][ T31] audit: type=1400 audit(1791147327.249:2075): avc: denied { bind } for pid=16240 comm="syz.1.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 978.247732][ T2281] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 978.251449][ T31] audit: type=1400 audit(1791147327.359:2076): avc: denied { write } for pid=16209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 978.325270][T16131] team0: Port device team_slave_0 added [ 978.331902][T16131] team0: Port device team_slave_1 added [ 979.159942][ T2281] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 979.162915][ T2281] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 979.162940][ T2281] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 979.162952][ T2281] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 979.162965][ T2281] usb 1-1: config 220 has no interface number 2 [ 979.163004][ T2281] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 979.163021][ T2281] usb 1-1: config 220 interface 0 has no altsetting 0 [ 979.163033][ T2281] usb 1-1: config 220 interface 76 has no altsetting 0 [ 979.163045][ T2281] usb 1-1: config 220 interface 1 has no altsetting 0 [ 979.210077][ T2281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.210104][ T2281] usb 1-1: Product: syz [ 979.210118][ T2281] usb 1-1: Manufacturer: syz [ 979.210132][ T2281] usb 1-1: SerialNumber: syz [ 979.420862][T16131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.420879][T16131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.420894][T16131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.478904][T16131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.478920][T16131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.478952][T16131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.581609][T16235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.581909][T16235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.678605][ T31] audit: type=1400 audit(1791147328.789:2077): avc: denied { write } for pid=16250 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 979.921672][T16131] hsr_slave_0: entered promiscuous mode [ 979.922202][T16131] hsr_slave_1: entered promiscuous mode [ 979.922592][T16131] debugfs: 'hsr0' already exists in 'hsr' [ 979.922606][T16131] Cannot create hsr debugfs directory [ 980.110286][ T5268] 8021q: adding VLAN 0 to HW filter on device eth15 [ 980.358567][ T376] hsr_slave_0: left promiscuous mode [ 980.369833][ T376] hsr_slave_1: left promiscuous mode [ 980.370415][ T376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.370429][ T376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.398662][ T376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 980.398682][ T376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.551480][ T376] veth1_macvtap: left promiscuous mode [ 980.551531][ T376] veth0_macvtap: left promiscuous mode [ 980.551594][ T376] veth1_vlan: left promiscuous mode [ 980.551637][ T376] veth0_vlan: left promiscuous mode [ 980.743251][ T31] audit: type=1400 audit(1791147329.849:2078): avc: denied { node_bind } for pid=16260 comm="syz.8.2720" saddr=127.0.0.1 src=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 981.040945][ T2281] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 981.040973][ T2281] uvcvideo 1-1:220.0: No valid video chain found. [ 981.041004][ T2281] usb 1-1: selecting invalid altsetting 0 [ 981.096231][ T2281] usb 1-1: selecting invalid altsetting 0 [ 981.096259][ T2281] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 981.128175][ T2281] usb 1-1: USB disconnect, device number 86 [ 981.240684][ T376] team0 (unregistering): Port device team_slave_1 removed [ 981.257358][ T376] team0 (unregistering): Port device team_slave_0 removed [ 981.381865][T16239] tipc: Enabling of bearer rejected, already enabled [ 981.456199][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 981.615876][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 981.617192][ T9] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 981.621957][ T9] usb 2-1: config 0 has no interfaces? [ 981.659944][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.660570][ T9] usb 2-1: Product: syz [ 981.660586][ T9] usb 2-1: Manufacturer: syz [ 981.660601][ T9] usb 2-1: SerialNumber: syz [ 981.692419][ T9] usb 2-1: config 0 descriptor?? [ 981.826035][ T376] IPVS: stop unused estimator thread 0... [ 981.870530][ T31] audit: type=1400 audit(1791147330.979:2079): avc: denied { read } for pid=16272 comm="syz.8.2722" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 981.870779][ T31] audit: type=1400 audit(1791147330.979:2080): avc: denied { open } for pid=16272 comm="syz.8.2722" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 981.871692][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2721'. [ 982.594824][ T31] audit: type=1400 audit(1791147331.619:2081): avc: denied { ioctl } for pid=16272 comm="syz.8.2722" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 982.594872][ T31] audit: type=1400 audit(1791147331.679:2082): avc: denied { write } for pid=16272 comm="syz.8.2722" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 982.594894][ T31] audit: type=1400 audit(1791147331.699:2083): avc: denied { read write } for pid=16264 comm="syz.1.2718" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 982.630080][ T9] usb 2-1: USB disconnect, device number 11 [ 983.360916][ T5734] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 983.496740][ T5734] usb 9-1: device descriptor read/64, error -71 [ 983.734427][ T5734] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 983.875291][ T5734] usb 9-1: device descriptor read/64, error -71 [ 983.982843][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 983.982860][ T31] audit: type=1400 audit(1791147333.089:2085): avc: denied { write } for pid=16267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.014253][ T5734] usb usb9-port1: attempt power cycle [ 984.341576][ T31] audit: type=1400 audit(1791147333.449:2086): avc: denied { write } for pid=16294 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.367770][ T5734] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 984.385778][ T5734] usb 9-1: device descriptor read/8, error -71 [ 984.596882][ T5268] 8021q: adding VLAN 0 to HW filter on device eth16 [ 984.624200][ T5734] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 984.644788][ T5734] usb 9-1: device descriptor read/8, error -71 [ 984.755712][ T5734] usb usb9-port1: unable to enumerate USB device [ 984.803840][ T31] audit: type=1400 audit(1791147333.909:2087): avc: denied { setopt } for pid=16296 comm="syz.0.2727" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 984.803884][ T31] audit: type=1400 audit(1791147333.909:2088): avc: denied { write } for pid=16296 comm="syz.0.2727" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 984.803906][ T31] audit: type=1400 audit(1791147333.909:2089): avc: denied { read } for pid=16296 comm="syz.0.2727" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 985.011736][T16131] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 985.061020][T16131] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 985.061593][T16131] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 985.273217][T16131] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 985.337462][T16131] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 985.362645][T16131] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 985.363373][T16131] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 985.430411][T16131] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 986.028224][T16311] FAULT_INJECTION: forcing a failure. [ 986.028224][T16311] name failslab, interval 1, probability 0, space 0, times 0 [ 986.028256][T16311] CPU: 0 UID: 0 PID: 16311 Comm: syz.1.2726 Tainted: G L syzkaller #0 PREEMPT(full) [ 986.028272][T16311] Tainted: [L]=SOFTLOCKUP [ 986.028277][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 986.028285][T16311] Call Trace: [ 986.028290][T16311] [ 986.028295][T16311] dump_stack_lvl+0x100/0x190 [ 986.028322][T16311] should_fail_ex.cold+0x5/0xa [ 986.028341][T16311] should_failslab+0xc2/0x120 [ 986.028360][T16311] kmem_cache_alloc_noprof+0x92/0x6a0 [ 986.028376][T16311] ? do_getname+0x35/0x390 [ 986.028390][T16311] do_getname+0x35/0x390 [ 986.028403][T16311] __x64_sys_rmdir+0x36/0x70 [ 986.028421][T16311] do_syscall_64+0x123/0x790 [ 986.028439][T16311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.028459][T16311] RIP: 0033:0x7f1bb639e159 [ 986.028470][T16311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 986.028481][T16311] RSP: 002b:00007f1bb722f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 986.028494][T16311] RAX: ffffffffffffffda RBX: 00007f1bb6625fa0 RCX: 00007f1bb639e159 [ 986.028502][T16311] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 986.028509][T16311] RBP: 00007f1bb722f090 R08: 0000000000000000 R09: 0000000000000000 [ 986.028516][T16311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.028523][T16311] R13: 00007f1bb6626038 R14: 00007f1bb6625fa0 R15: 00007fff8f781428 [ 986.028537][T16311] [ 986.069490][ T31] audit: type=1400 audit(1791147335.129:2090): avc: denied { mount } for pid=16308 comm="syz.1.2726" name="/" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 986.069543][ T31] audit: type=1400 audit(1791147335.129:2091): avc: denied { search } for pid=16308 comm="syz.1.2726" name="/" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 986.069567][ T31] audit: type=1400 audit(1791147335.129:2092): avc: denied { search } for pid=16308 comm="syz.1.2726" name="usb_gadget" dev="configfs" ino=3337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 986.069587][ T31] audit: type=1400 audit(1791147335.129:2093): avc: denied { search } for pid=16308 comm="syz.1.2726" name="/" dev="configfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 986.069609][ T31] audit: type=1400 audit(1791147335.129:2094): avc: denied { search } for pid=16308 comm="syz.1.2726" name="usb_gadget" dev="configfs" ino=3337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 986.641929][T16328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 986.666751][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2733'. [ 986.745509][T16131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.812215][T16131] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.840101][T12966] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.840173][T12966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.931272][T12966] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.931350][T12966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 987.027391][T16336] syzkaller0: entered promiscuous mode [ 987.027415][T16336] syzkaller0: entered allmulticast mode [ 987.486496][T16314] tipc: Enabling of bearer rejected, already enabled [ 987.503960][T16348] FAULT_INJECTION: forcing a failure. [ 987.503960][T16348] name failslab, interval 1, probability 0, space 0, times 0 [ 987.504008][T16348] CPU: 0 UID: 0 PID: 16348 Comm: syz.8.2736 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.504036][T16348] Tainted: [L]=SOFTLOCKUP [ 987.504042][T16348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 987.504053][T16348] Call Trace: [ 987.504060][T16348] [ 987.504068][T16348] dump_stack_lvl+0x100/0x190 [ 987.504095][T16348] should_fail_ex.cold+0x5/0xa [ 987.504120][T16348] should_failslab+0xc2/0x120 [ 987.504145][T16348] __kmalloc_cache_noprof+0x91/0x6d0 [ 987.504159][T16348] ? __request_module+0x2b7/0x6a0 [ 987.504180][T16348] __request_module+0x2b7/0x6a0 [ 987.504196][T16348] ? __pfx___request_module+0x10/0x10 [ 987.504212][T16348] ? rcu_is_watching+0x13/0xc0 [ 987.504234][T16348] ? __wake_up+0x3f/0x60 [ 987.504246][T16348] ? rcu_is_watching+0x13/0xc0 [ 987.504262][T16348] ? lockdep_hardirqs_on+0x7d/0x110 [ 987.504279][T16348] netlink_create+0x458/0x610 [ 987.504301][T16348] __sock_create+0x339/0x860 [ 987.504319][T16348] __sys_socket+0x14d/0x260 [ 987.504332][T16348] ? __pfx___sys_socket+0x10/0x10 [ 987.504349][T16348] __x64_sys_socket+0x72/0xb0 [ 987.504369][T16348] ? lockdep_hardirqs_on+0x7d/0x110 [ 987.504386][T16348] do_syscall_64+0x123/0x790 [ 987.504407][T16348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.504425][T16348] RIP: 0033:0x7f45aa59e159 [ 987.504442][T16348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.504458][T16348] RSP: 002b:00007f45ab554028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 987.504475][T16348] RAX: ffffffffffffffda RBX: 00007f45aa825fa0 RCX: 00007f45aa59e159 [ 987.504484][T16348] RDX: 0000000000000003 RSI: 0000000000000803 RDI: 0000000000000010 [ 987.504491][T16348] RBP: 00007f45aa63506b R08: 0000000000000000 R09: 0000000000000000 [ 987.504498][T16348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.504505][T16348] R13: 00007f45aa826038 R14: 00007f45aa825fa0 R15: 00007ffdc6adf028 [ 987.504519][T16348] [ 988.606580][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2738'. [ 988.872386][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 988.900711][ T5268] 8021q: adding VLAN 0 to HW filter on device eth17 [ 989.057538][T16361] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 989.057564][T16361] Error validating options; rc = [-22] [ 989.060724][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 989.060738][ T31] audit: type=1400 audit(1791147338.169:2113): avc: denied { write } for pid=16358 comm="syz.0.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 990.190692][T16366] random: crng reseeded on system resumption [ 990.190733][ T31] audit: type=1400 audit(1791147339.299:2114): avc: denied { append } for pid=16364 comm="syz.1.2732" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 990.190766][ T31] audit: type=1400 audit(1791147339.299:2115): avc: denied { open } for pid=16364 comm="syz.1.2732" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 990.371134][ T31] audit: type=1400 audit(1791147339.479:2116): avc: denied { read append } for pid=16369 comm="syz.0.2741" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 990.371361][ T31] audit: type=1400 audit(1791147339.479:2117): avc: denied { open } for pid=16369 comm="syz.0.2741" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 990.520651][ T31] audit: type=1400 audit(1791147339.629:2118): avc: denied { write } for pid=16369 comm="syz.0.2741" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 990.646245][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 990.675877][ T31] audit: type=1400 audit(1791147339.789:2119): avc: denied { ioctl } for pid=16378 comm="syz.1.2742" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 990.906908][ T31] audit: type=1400 audit(1791147340.019:2120): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 990.954773][T16383] /dev/sg0: Can't lookup blockdev [ 990.961372][T16131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.070665][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 991.625689][T16395] FAULT_INJECTION: forcing a failure. [ 991.625689][T16395] name failslab, interval 1, probability 0, space 0, times 0 [ 991.625718][T16395] CPU: 0 UID: 0 PID: 16395 Comm: syz.8.2744 Tainted: G L syzkaller #0 PREEMPT(full) [ 991.625735][T16395] Tainted: [L]=SOFTLOCKUP [ 991.625739][T16395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 991.625746][T16395] Call Trace: [ 991.625752][T16395] [ 991.625758][T16395] dump_stack_lvl+0x100/0x190 [ 991.625783][T16395] should_fail_ex.cold+0x5/0xa [ 991.625806][T16395] should_failslab+0xc2/0x120 [ 991.625823][T16395] __kvmalloc_node_noprof+0x113/0x9b0 [ 991.625840][T16395] ? seq_read_iter+0x819/0x1270 [ 991.625859][T16395] seq_read_iter+0x819/0x1270 [ 991.625873][T16395] ? lock_acquire+0x1d1/0x380 [ 991.625889][T16395] ? fdget_pos+0x2aa/0x380 [ 991.625911][T16395] kernfs_fop_read_iter+0x46c/0x610 [ 991.625928][T16395] ? rw_verify_area+0xce/0x6d0 [ 991.625941][T16395] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 991.625958][T16395] vfs_read+0x82e/0xb40 [ 991.625976][T16395] ? __pfx_vfs_read+0x10/0x10 [ 991.625988][T16395] ? find_held_lock+0x2b/0x80 [ 991.626014][T16395] ksys_read+0x12a/0x250 [ 991.626029][T16395] ? __pfx_ksys_read+0x10/0x10 [ 991.626046][T16395] do_syscall_64+0x123/0x790 [ 991.626063][T16395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.626075][T16395] RIP: 0033:0x7f45aa59e159 [ 991.626086][T16395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.626097][T16395] RSP: 002b:00007f45ab554028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 991.626110][T16395] RAX: ffffffffffffffda RBX: 00007f45aa825fa0 RCX: 00007f45aa59e159 [ 991.626117][T16395] RDX: 0000000000000109 RSI: 0000200000000c80 RDI: 0000000000000007 [ 991.626124][T16395] RBP: 00007f45ab554090 R08: 0000000000000000 R09: 0000000000000000 [ 991.626131][T16395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.626137][T16395] R13: 00007f45aa826038 R14: 00007f45aa825fa0 R15: 00007ffdc6adf028 [ 991.626152][T16395] [ 991.870151][ T5734] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 992.034528][ T5734] usb 1-1: Using ep0 maxpacket: 16 [ 992.037308][ T5734] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 992.042013][ T5734] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 992.042036][ T5734] usb 1-1: config 0 interface 0 has no altsetting 0 [ 992.042056][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.043723][ T5734] usb 1-1: config 0 descriptor?? [ 992.767033][ T5734] hid_parser_main: 470 callbacks suppressed [ 992.767054][ T5734] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 992.767070][ T5734] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 992.767084][ T5734] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 992.767098][ T5734] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 992.767112][ T5734] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 992.767126][ T5734] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 992.767140][ T5734] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 992.767154][ T5734] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 992.767169][ T5734] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 992.767182][ T5734] hid_mf 0003:0079:1846.0010: unknown main item tag 0x0 [ 992.998870][ T5734] hid_mf 0003:0079:1846.0010: hidraw0: USB HID v7f.fd Device [HID 0079:1846] on usb-dummy_hcd.0-1/input0 [ 993.029350][ T5734] usb 1-1: USB disconnect, device number 87 [ 993.228802][T16407] fido_id[16407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 993.330555][T16131] veth0_vlan: entered promiscuous mode [ 993.363852][T16131] veth1_vlan: entered promiscuous mode [ 993.923133][T16131] veth0_macvtap: entered promiscuous mode [ 993.952177][T16131] veth1_macvtap: entered promiscuous mode [ 993.988578][T16412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=16412 comm=syz.0.2748 [ 993.989016][T16412] netlink: 'syz.0.2748': attribute type 1 has an invalid length. [ 994.069336][T16412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.091298][T16131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.141129][T16414] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.158886][T16414] bond0: (slave team0): Enslaving as a backup interface with an up link [ 994.193813][T16131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 994.257751][ T376] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.257807][ T376] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.257827][ T376] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.257849][ T376] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.727497][T12948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.727518][T12948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.558095][ T31] audit: type=1400 audit(1791147344.669:2121): avc: denied { create } for pid=16415 comm="syz.8.2745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 995.819900][ T4901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.819919][ T4901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.855850][ T31] audit: type=1400 audit(1791147344.969:2122): avc: denied { mounton } for pid=16131 comm="syz-executor" path="/root/syzkaller.GFd7Fz/syz-tmp" dev="sda1" ino=2066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 995.856628][ T31] audit: type=1400 audit(1791147344.969:2123): avc: denied { mount } for pid=16131 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 995.922836][ T31] audit: type=1400 audit(1791147345.029:2124): avc: denied { mounton } for pid=16131 comm="syz-executor" path="/root/syzkaller.GFd7Fz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 995.922878][ T31] audit: type=1400 audit(1791147345.029:2125): avc: denied { mounton } for pid=16131 comm="syz-executor" path="/root/syzkaller.GFd7Fz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=68634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 996.018342][ T31] audit: type=1400 audit(1791147345.129:2126): avc: denied { unmount } for pid=16131 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 996.049689][ T31] audit: type=1400 audit(1791147345.159:2127): avc: denied { mounton } for pid=16131 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 996.049976][ T31] audit: type=1400 audit(1791147345.159:2128): avc: denied { mount } for pid=16131 comm="syz-executor" name="/" dev="gadgetfs" ino=8091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 996.126396][ T31] audit: type=1400 audit(1791147345.239:2129): avc: denied { mount } for pid=16131 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 996.175446][ T31] audit: type=1400 audit(1791147345.289:2130): avc: denied { mounton } for pid=16131 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 996.522936][ T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 997.374496][ T9] usb 9-1: device descriptor read/64, error -71 [ 997.468595][T15568] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 998.359115][ T9] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 998.379029][T15568] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 998.382742][T15568] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.408870][T15568] usb 10-1: config 0 descriptor?? [ 998.486423][ T9] usb 9-1: device descriptor read/64, error -71 [ 998.597080][ T9] usb usb9-port1: attempt power cycle [ 998.632765][T15568] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 998.747439][T16462] /dev/sg0: Can't lookup blockdev [ 998.886437][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2760'. [ 998.937771][ T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 998.954839][ T9] usb 9-1: device descriptor read/8, error -71 [ 999.040281][T15568] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 999.040303][T15568] [drm] Initialized udl on minor 1 [ 999.158724][T16464] lo: entered promiscuous mode [ 999.158746][T16464] lo: entered allmulticast mode [ 999.159496][T16464] tunl0: entered promiscuous mode [ 999.159508][T16464] tunl0: entered allmulticast mode [ 999.163200][T16464] gre0: entered promiscuous mode [ 999.163213][T16464] gre0: entered allmulticast mode [ 999.163638][T16464] gretap0: entered promiscuous mode [ 999.163647][T16464] gretap0: entered allmulticast mode [ 999.205961][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 999.307020][T15568] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 999.324438][T16464] erspan0: entered promiscuous mode [ 999.324457][T16464] erspan0: entered allmulticast mode [ 999.364309][T16464] ip_vti0: entered promiscuous mode [ 999.364333][T16464] ip_vti0: entered allmulticast mode [ 999.366143][T16464] ip6_vti0: entered promiscuous mode [ 999.366160][T16464] ip6_vti0: entered allmulticast mode [ 999.372063][T16464] sit0: entered promiscuous mode [ 999.372080][T16464] sit0: entered allmulticast mode [ 999.372807][T16464] ip6tnl0: entered promiscuous mode [ 999.372820][T16464] ip6tnl0: entered allmulticast mode [ 999.423272][ T9] usb 9-1: device descriptor read/8, error -71 [ 999.444754][T16464] ip6gre0: entered promiscuous mode [ 999.444792][T16464] ip6gre0: entered allmulticast mode [ 999.445544][T16464] syz_tun: entered promiscuous mode [ 999.445556][T16464] syz_tun: entered allmulticast mode [ 999.481335][T16464] ip6gretap0: entered promiscuous mode [ 999.481352][T16464] ip6gretap0: entered allmulticast mode [ 999.482602][T16464] bridge0: entered promiscuous mode [ 999.482620][T16464] bridge0: entered allmulticast mode [ 1000.294312][ T9] usb usb9-port1: unable to enumerate USB device [ 1000.488774][T15568] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1001.663152][T15568] usb 10-1: USB disconnect, device number 2 [ 1001.936559][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1002.034916][T16489] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2769'. [ 1002.086428][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1002.088280][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.088304][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.088327][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.089931][ T10] usb 2-1: config 0 descriptor?? [ 1002.297502][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1002.297536][ T31] audit: type=1400 audit(1791147351.409:2134): avc: denied { create } for pid=16478 comm="syz.1.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1002.474826][T15568] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1002.558413][ T31] audit: type=1400 audit(1791147351.669:2135): avc: denied { create } for pid=16478 comm="syz.1.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1002.630771][T15568] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1002.645194][T15568] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.645214][T15568] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1002.645227][T15568] usb 10-1: config 1 has no interface number 0 [ 1002.645252][T15568] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.645268][T15568] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1002.651533][T15568] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.651551][T15568] usb 10-1: Product: syz [ 1002.651561][T15568] usb 10-1: Manufacturer: syz [ 1002.651571][T15568] usb 10-1: SerialNumber: syz [ 1002.737962][ T10] hid_parser_main: 462 callbacks suppressed [ 1002.737982][ T10] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1002.737998][ T10] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1002.738012][ T10] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1002.738025][ T10] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1002.738039][ T10] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1002.738053][ T10] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1002.738066][ T10] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 1002.873478][ T10] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1002.926288][ T10] cp2112 0003:10C4:EA90.0011: error requesting version [ 1002.942327][ T10] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -32 [ 1003.214408][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1003.321395][ T31] audit: type=1400 audit(1791147352.429:2136): avc: denied { write } for pid=16493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1003.365301][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1003.365953][ T10] usb 9-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1003.366757][ T10] usb 9-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1003.366776][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1003.366795][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.373204][ T10] usb 9-1: config 0 descriptor?? [ 1003.633996][T16473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.636773][T16473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.432416][ T31] audit: type=1400 audit(1791147353.529:2137): avc: denied { block_suspend } for pid=16513 comm="syz.6.2772" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1004.484919][T15568] cdc_ncm 10-1:1.1: failed GET_NTB_PARAMETERS [ 1004.484960][T15568] cdc_ncm 10-1:1.1: bind() failure [ 1004.577771][ T10] hid_mf 0003:0079:1846.0012: unknown main item tag 0x0 [ 1004.577796][ T10] hid_mf 0003:0079:1846.0012: unknown main item tag 0x0 [ 1004.577812][ T10] hid_mf 0003:0079:1846.0012: unknown main item tag 0x0 [ 1004.612819][ T10] hid_mf 0003:0079:1846.0012: collection stack underflow [ 1004.612841][ T10] hid_mf 0003:0079:1846.0012: item 0 0 0 12 parsing failed [ 1004.613189][ T10] hid_mf 0003:0079:1846.0012: HID parse failed. [ 1004.613226][ T10] hid_mf 0003:0079:1846.0012: probe with driver hid_mf failed with error -22 [ 1004.711391][ T31] audit: type=1400 audit(1791147353.819:2138): avc: denied { write } for pid=16515 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1004.750157][ T5734] usb 9-1: USB disconnect, device number 22 [ 1005.691671][T15568] usb 10-1: USB disconnect, device number 3 [ 1005.805902][T16533] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2776'. [ 1005.910999][T15568] usb 2-1: USB disconnect, device number 12 [ 1006.907201][T16540] random: crng reseeded on system resumption [ 1007.047812][T16550] netlink: 2140 bytes leftover after parsing attributes in process `syz.6.2779'. [ 1007.079572][T16551] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2780'. [ 1007.080198][T16550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2779'. [ 1007.080570][T16550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1008.565816][T16564] ip_tables: iptables: counters copy to user failed while replacing table [ 1008.787758][ T31] audit: type=1400 audit(1791147357.679:2139): avc: denied { ioctl } for pid=16563 comm="syz.9.2784" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1008.787802][ T31] audit: type=1400 audit(1791147357.679:2140): avc: denied { name_bind } for pid=16563 comm="syz.9.2784" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1008.787823][ T31] audit: type=1400 audit(1791147357.679:2141): avc: denied { connect } for pid=16563 comm="syz.9.2784" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1008.948246][T16567] blktrace: Concurrent blktraces are not allowed on sda1 [ 1008.975642][ T5734] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1009.020375][ T31] audit: type=1400 audit(1791147358.129:2142): avc: denied { write } for pid=16531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1009.125674][ T5734] usb 9-1: Using ep0 maxpacket: 8 [ 1009.127530][ T5734] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1009.130774][ T5734] usb 9-1: config 0 has no interfaces? [ 1009.155729][ T5734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.155748][ T5734] usb 9-1: Product: syz [ 1009.155758][ T5734] usb 9-1: Manufacturer: syz [ 1009.155767][ T5734] usb 9-1: SerialNumber: syz [ 1009.176210][ T5734] usb 9-1: config 0 descriptor?? [ 1009.321061][T16572] FAULT_INJECTION: forcing a failure. [ 1009.321061][T16572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1009.321090][T16572] CPU: 0 UID: 0 PID: 16572 Comm: syz.1.2788 Tainted: G L syzkaller #0 PREEMPT(full) [ 1009.321107][T16572] Tainted: [L]=SOFTLOCKUP [ 1009.321111][T16572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1009.321119][T16572] Call Trace: [ 1009.321124][T16572] [ 1009.321130][T16572] dump_stack_lvl+0x100/0x190 [ 1009.321156][T16572] should_fail_ex.cold+0x5/0xa [ 1009.321175][T16572] _copy_from_user+0x2e/0xd0 [ 1009.321195][T16572] copy_msghdr_from_user+0x9f/0x4c0 [ 1009.321211][T16572] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1009.321228][T16572] ? lock_acquire+0x1d1/0x380 [ 1009.321242][T16572] ? get_pid_task+0x2a/0x250 [ 1009.321261][T16572] ___sys_sendmsg+0x106/0x1e0 [ 1009.321275][T16572] ? __pfx____sys_sendmsg+0x10/0x10 [ 1009.321288][T16572] ? get_pid_task+0x106/0x250 [ 1009.321308][T16572] ? find_held_lock+0x2b/0x80 [ 1009.321333][T16572] __sys_sendmsg+0x160/0x210 [ 1009.321350][T16572] ? __pfx___sys_sendmsg+0x10/0x10 [ 1009.321374][T16572] do_syscall_64+0x123/0x790 [ 1009.321391][T16572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.321404][T16572] RIP: 0033:0x7f1bb639e159 [ 1009.321414][T16572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.321426][T16572] RSP: 002b:00007f1bb722f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1009.321438][T16572] RAX: ffffffffffffffda RBX: 00007f1bb6625fa0 RCX: 00007f1bb639e159 [ 1009.321445][T16572] RDX: 0000000000008000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 1009.321452][T16572] RBP: 00007f1bb722f090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.321459][T16572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.321466][T16572] R13: 00007f1bb6626038 R14: 00007f1bb6625fa0 R15: 00007fff8f781428 [ 1009.321480][T16572] [ 1010.140548][ T31] audit: type=1400 audit(1791147359.249:2143): avc: denied { write } for pid=16570 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1010.186299][ T2281] usb 9-1: USB disconnect, device number 23 [ 1010.303539][ T31] audit: type=1400 audit(1791147359.409:2144): avc: denied { create } for pid=16576 comm="syz.1.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1010.335169][ T31] audit: type=1400 audit(1791147359.449:2145): avc: denied { setopt } for pid=16576 comm="syz.1.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1010.374370][ T31] audit: type=1400 audit(1791147359.489:2146): avc: denied { bind } for pid=16576 comm="syz.1.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1010.376825][ T31] audit: type=1400 audit(1791147359.489:2147): avc: denied { map } for pid=16576 comm="syz.1.2789" path="socket:[69212]" dev="sockfs" ino=69212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1010.376856][ T31] audit: type=1400 audit(1791147359.489:2148): avc: denied { read write } for pid=16576 comm="syz.1.2789" path="socket:[69212]" dev="sockfs" ino=69212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1010.804459][ T2281] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1010.954178][ T10] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1010.957656][ T2281] usb 2-1: Using ep0 maxpacket: 16 [ 1010.960984][ T2281] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1010.961753][ T2281] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1010.961773][ T2281] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1010.961792][ T2281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.963289][ T2281] usb 2-1: config 0 descriptor?? [ 1011.107746][ T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1011.109988][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.113616][ T10] usb 1-1: config 0 descriptor?? [ 1011.326781][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2786'. [ 1011.361851][ T10] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1011.426504][ T2281] hid_parser_main: 372 callbacks suppressed [ 1011.426525][ T2281] hid_mf 0003:0079:1846.0013: unknown main item tag 0x0 [ 1011.426542][ T2281] hid_mf 0003:0079:1846.0013: unknown main item tag 0x0 [ 1011.426555][ T2281] hid_mf 0003:0079:1846.0013: unknown main item tag 0x0 [ 1011.426570][ T2281] hid_mf 0003:0079:1846.0013: unknown main item tag 0x0 [ 1011.426584][ T2281] hid_mf 0003:0079:1846.0013: unknown main item tag 0x0 [ 1011.426598][ T2281] hid_mf 0003:0079:1846.0013: unknown main item tag 0x0 [ 1011.426624][ T2281] hid_mf 0003:0079:1846.0013: unknown main item tag 0x0 [ 1011.426638][ T2281] hid_mf 0003:0079:1846.0013: unknown main item tag 0x0 [ 1011.426653][ T2281] hid_mf 0003:0079:1846.0013: unknown main item tag 0x0 [ 1011.426667][ T2281] hid_mf 0003:0079:1846.0013: unknown main item tag 0x0 [ 1011.441354][ T2281] hid_mf 0003:0079:1846.0013: collection stack underflow [ 1011.441374][ T2281] hid_mf 0003:0079:1846.0013: item 0 0 0 12 parsing failed [ 1011.471406][ T2281] hid_mf 0003:0079:1846.0013: HID parse failed. [ 1011.471472][ T2281] hid_mf 0003:0079:1846.0013: probe with driver hid_mf failed with error -22 [ 1011.666867][ T2281] usb 2-1: USB disconnect, device number 13 [ 1011.709736][ T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 1011.709759][ T10] [drm] Initialized udl on minor 1 [ 1011.804211][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1011.825049][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1011.832330][ T10] usb 1-1: USB disconnect, device number 88 [ 1012.096903][ T5706] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1012.228765][T16618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2793'. [ 1012.244121][T15568] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1012.245201][ T5706] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1012.246085][ T5706] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.246100][ T5706] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1012.246122][ T5706] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.251192][ T5706] usb 9-1: config 0 descriptor?? [ 1012.396774][T15568] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1012.397670][T15568] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1012.397687][T15568] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1012.397700][T15568] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.397712][T15568] usb 10-1: config 220 has no interface number 2 [ 1012.397746][T15568] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1012.397764][T15568] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1012.397776][T15568] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1012.397788][T15568] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1012.399329][T15568] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.399344][T15568] usb 10-1: Product: syz [ 1012.399354][T15568] usb 10-1: Manufacturer: syz [ 1012.399364][T15568] usb 10-1: SerialNumber: syz [ 1012.571949][T16621] FAULT_INJECTION: forcing a failure. [ 1012.571949][T16621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1012.571977][T16621] CPU: 0 UID: 0 PID: 16621 Comm: syz.1.2794 Tainted: G L syzkaller #0 PREEMPT(full) [ 1012.571993][T16621] Tainted: [L]=SOFTLOCKUP [ 1012.571998][T16621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1012.572005][T16621] Call Trace: [ 1012.572010][T16621] [ 1012.572015][T16621] dump_stack_lvl+0x100/0x190 [ 1012.572049][T16621] should_fail_ex.cold+0x5/0xa [ 1012.572068][T16621] _copy_from_iter+0x1f4/0x1690 [ 1012.572088][T16621] ? __pfx__copy_from_iter+0x10/0x10 [ 1012.572101][T16621] ? __lock_acquire+0x5c0/0x1f40 [ 1012.572116][T16621] ? _parse_integer_limit+0x1ac/0x220 [ 1012.572136][T16621] ? _kstrtoull+0x144/0x200 [ 1012.572152][T16621] ? __pfx__kstrtoull+0x10/0x10 [ 1012.572170][T16621] tun_get_user+0x265/0x3cc0 [ 1012.572193][T16621] ? __lock_acquire+0x5c0/0x1f40 [ 1012.572208][T16621] ? __lock_acquire+0x5c0/0x1f40 [ 1012.572220][T16621] ? __pfx_tun_get_user+0x10/0x10 [ 1012.572237][T16621] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1012.572262][T16621] ? find_held_lock+0x2b/0x80 [ 1012.572280][T16621] ? tun_get+0x191/0x370 [ 1012.572293][T16621] ? tun_get+0x191/0x370 [ 1012.572311][T16621] tun_chr_write_iter+0xdc/0x200 [ 1012.572329][T16621] vfs_write+0x6af/0x1050 [ 1012.572346][T16621] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1012.572363][T16621] ? __pfx_vfs_write+0x10/0x10 [ 1012.572375][T16621] ? find_held_lock+0x2b/0x80 [ 1012.572401][T16621] ksys_write+0x12a/0x250 [ 1012.572414][T16621] ? __pfx_ksys_write+0x10/0x10 [ 1012.572431][T16621] do_syscall_64+0x123/0x790 [ 1012.572447][T16621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.572460][T16621] RIP: 0033:0x7f1bb639e159 [ 1012.572472][T16621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.572483][T16621] RSP: 002b:00007f1bb722f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1012.572496][T16621] RAX: ffffffffffffffda RBX: 00007f1bb6625fa0 RCX: 00007f1bb639e159 [ 1012.572503][T16621] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 1012.572511][T16621] RBP: 00007f1bb722f090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.572517][T16621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.572524][T16621] R13: 00007f1bb6626038 R14: 00007f1bb6625fa0 R15: 00007fff8f781428 [ 1012.572538][T16621] [ 1012.667107][T16597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.667370][T16597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.601848][T16647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2801'. [ 1013.646903][T15568] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1013.646933][T15568] uvcvideo 10-1:220.0: No valid video chain found. [ 1013.646968][T15568] usb 10-1: selecting invalid altsetting 0 [ 1013.704552][T15568] usb 10-1: selecting invalid altsetting 0 [ 1013.704574][T15568] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 1013.706791][T16647] ipvlan2: entered allmulticast mode [ 1013.706807][T16647] syz_tun: entered allmulticast mode [ 1013.746402][T15568] usb 10-1: USB disconnect, device number 4 [ 1013.834262][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1014.031783][ T5706] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1014.124847][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1014.127468][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1014.127489][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.127502][ T10] usb 2-1: config 220 has no interface number 2 [ 1014.127556][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1014.127574][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1014.127586][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1014.127599][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1014.129098][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.129112][ T10] usb 2-1: Product: syz [ 1014.129122][ T10] usb 2-1: Manufacturer: syz [ 1014.129130][ T10] usb 2-1: SerialNumber: syz [ 1014.242548][ T5706] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1014.244146][ T5706] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1014.244171][ T5706] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1014.244192][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.298680][ T5706] usb 1-1: config 0 descriptor?? [ 1014.352353][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2804'. [ 1014.353166][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 1014.353177][ T31] audit: type=1400 audit(1791147363.459:2156): avc: denied { create } for pid=16654 comm="syz.6.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1014.393960][ T31] audit: type=1400 audit(1791147363.499:2157): avc: denied { write } for pid=16654 comm="syz.6.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1014.431754][T16645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.433854][T16645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.600416][T16661] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2805'. [ 1014.774269][T15568] usb 9-1: USB disconnect, device number 24 [ 1015.844261][ T5706] usbhid 1-1:0.0: can't add hid device: -71 [ 1015.844362][ T5706] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1015.877196][ T5706] usb 1-1: USB disconnect, device number 89 [ 1017.874170][ T5706] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1018.000766][ T10] usb 2-1: selecting invalid altsetting 0 [ 1018.001161][ T10] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1018.001182][ T10] uvcvideo 2-1:220.0: No valid video chain found. [ 1018.054122][ T10] usb 2-1: selecting invalid altsetting 0 [ 1018.054144][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1018.064252][ T5706] usb 10-1: Using ep0 maxpacket: 8 [ 1018.079662][ T10] usb 2-1: USB disconnect, device number 14 [ 1018.094184][ T5706] usb 10-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1018.095589][ T5706] usb 10-1: config 0 has no interfaces? [ 1018.098524][ T5706] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.098542][ T5706] usb 10-1: Product: syz [ 1018.098552][ T5706] usb 10-1: Manufacturer: syz [ 1018.098561][ T5706] usb 10-1: SerialNumber: syz [ 1018.129448][ T5706] usb 10-1: config 0 descriptor?? [ 1018.882430][T15568] usb 10-1: USB disconnect, device number 5 [ 1019.217778][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1019.338222][ T984] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1019.374584][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1019.375222][ T10] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1019.375792][ T10] usb 1-1: config 0 has no interfaces? [ 1019.377860][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.377877][ T10] usb 1-1: Product: syz [ 1019.377887][ T10] usb 1-1: Manufacturer: syz [ 1019.377896][ T10] usb 1-1: SerialNumber: syz [ 1019.379603][ T10] usb 1-1: config 0 descriptor?? [ 1019.494693][ T984] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1019.495564][ T984] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1019.495580][ T984] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1019.495592][ T984] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.495604][ T984] usb 2-1: config 220 has no interface number 2 [ 1019.495634][ T984] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1019.495650][ T984] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1019.495662][ T984] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1019.495672][ T984] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1019.497329][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.497345][ T984] usb 2-1: Product: syz [ 1019.497354][ T984] usb 2-1: Manufacturer: syz [ 1019.497363][ T984] usb 2-1: SerialNumber: syz [ 1020.249706][T16692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.249990][T16692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.280240][ T5706] usb 1-1: USB disconnect, device number 90 [ 1020.499981][ T984] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1020.500010][ T984] uvcvideo 2-1:220.0: No valid video chain found. [ 1020.500047][ T984] usb 2-1: selecting invalid altsetting 0 [ 1020.560823][ T984] usb 2-1: selecting invalid altsetting 0 [ 1020.560854][ T984] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1020.591339][ T984] usb 2-1: USB disconnect, device number 15 [ 1021.014210][ T5706] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1021.164721][ T5706] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1021.165481][ T5706] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.165508][ T5706] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.167467][ T5706] usb 9-1: config 0 descriptor?? [ 1021.169450][ T5706] pwc: Askey VC010 type 2 USB webcam detected. [ 1021.399036][ T31] audit: type=1400 audit(1791147370.509:2158): avc: denied { append } for pid=16702 comm="syz.8.2822" name="uprobe_events" dev="tracefs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1021.459054][T16711] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2820'. [ 1021.609598][T16714] ip_tables: iptables: counters copy to user failed while replacing table [ 1021.625669][ T31] audit: type=1400 audit(1791147370.739:2159): avc: denied { bind } for pid=16713 comm="syz.1.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1021.625712][ T31] audit: type=1400 audit(1791147370.739:2160): avc: denied { name_bind } for pid=16713 comm="syz.1.2825" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1021.625748][ T31] audit: type=1400 audit(1791147370.739:2161): avc: denied { node_bind } for pid=16713 comm="syz.1.2825" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1021.633206][ T31] audit: type=1400 audit(1791147370.739:2162): avc: denied { read } for pid=16713 comm="syz.1.2825" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1021.633273][ T31] audit: type=1400 audit(1791147370.739:2163): avc: denied { open } for pid=16713 comm="syz.1.2825" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1021.633312][ T31] audit: type=1400 audit(1791147370.739:2164): avc: denied { ioctl } for pid=16713 comm="syz.1.2825" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1021.803334][ T31] audit: type=1400 audit(1791147370.909:2165): avc: denied { execute } for pid=16702 comm="syz.8.2822" name="file0" dev="tmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1021.803746][ T5706] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1021.836649][ T31] audit: type=1400 audit(1791147370.939:2166): avc: denied { write } for pid=16713 comm="syz.1.2825" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1021.843273][ T5706] pwc: recv_control_msg error -32 req 02 val 2700 [ 1021.883080][ T5706] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1021.893210][ T5706] pwc: recv_control_msg error -32 req 04 val 1000 [ 1021.903041][ T5706] pwc: recv_control_msg error -32 req 04 val 1300 [ 1021.915753][ T31] audit: type=1400 audit(1791147370.999:2167): avc: denied { read } for pid=16715 comm="syz.6.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1022.284182][ T5706] pwc: recv_control_msg error -71 req 02 val 2000 [ 1022.285917][ T5706] pwc: recv_control_msg error -71 req 02 val 2100 [ 1022.287328][ T5706] pwc: recv_control_msg error -71 req 04 val 1500 [ 1022.288324][ T5706] pwc: recv_control_msg error -71 req 02 val 2500 [ 1022.290643][ T5706] pwc: recv_control_msg error -71 req 02 val 2400 [ 1022.290916][ T5706] pwc: recv_control_msg error -71 req 02 val 2600 [ 1022.291231][ T5706] pwc: recv_control_msg error -71 req 02 val 2900 [ 1022.292373][ T5706] pwc: recv_control_msg error -71 req 02 val 2800 [ 1022.351343][ T5706] pwc: recv_control_msg error -71 req 04 val 1100 [ 1022.352425][ T5706] pwc: recv_control_msg error -71 req 04 val 1200 [ 1022.430868][ T5706] pwc: Registered as video103. [ 1022.447034][ T5706] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input46 [ 1022.501852][ T5706] usb 9-1: USB disconnect, device number 25 [ 1022.865804][T16735] 9p: Bad value for 'rfdno' [ 1023.298448][T16746] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2834'. [ 1023.298482][T16746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2834'. [ 1023.298493][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2834'. [ 1023.486568][ T5706] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1023.634763][ T5706] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1023.636352][ T5706] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1023.636373][ T5706] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.636386][ T5706] usb 9-1: config 220 has no interface number 2 [ 1023.636418][ T5706] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1023.636436][ T5706] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1023.636446][ T5706] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1023.636459][ T5706] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1023.637941][ T5706] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.637957][ T5706] usb 9-1: Product: syz [ 1023.637967][ T5706] usb 9-1: Manufacturer: syz [ 1023.637977][ T5706] usb 9-1: SerialNumber: syz [ 1024.437025][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1024.471941][T16739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.472712][T16739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.625701][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1024.678369][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.678407][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1024.678431][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.160172][ T9] usb 2-1: config 0 descriptor?? [ 1025.734789][T16765] FAULT_INJECTION: forcing a failure. [ 1025.734789][T16765] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.734819][T16765] CPU: 0 UID: 0 PID: 16765 Comm: syz.0.2839 Tainted: G L syzkaller #0 PREEMPT(full) [ 1025.734836][T16765] Tainted: [L]=SOFTLOCKUP [ 1025.734840][T16765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1025.734848][T16765] Call Trace: [ 1025.734853][T16765] [ 1025.734858][T16765] dump_stack_lvl+0x100/0x190 [ 1025.734884][T16765] should_fail_ex.cold+0x5/0xa [ 1025.734903][T16765] should_failslab+0xc2/0x120 [ 1025.734921][T16765] __kmalloc_noprof+0xfc/0x840 [ 1025.734934][T16765] ? rcu_is_watching+0x13/0xc0 [ 1025.734953][T16765] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1025.734975][T16765] tomoyo_realpath_from_path+0xb6/0x690 [ 1025.734995][T16765] tomoyo_path_number_perm+0x23c/0x580 [ 1025.735009][T16765] ? tomoyo_path_number_perm+0x22e/0x580 [ 1025.735024][T16765] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1025.735043][T16765] ? __lock_acquire+0x5c0/0x1f40 [ 1025.735064][T16765] ? __fget_files+0x34/0x3d0 [ 1025.735081][T16765] ? find_held_lock+0x2b/0x80 [ 1025.735098][T16765] ? hook_file_ioctl_common+0x140/0x440 [ 1025.735119][T16765] ? __fget_files+0x21f/0x3d0 [ 1025.735137][T16765] security_file_ioctl+0xd3/0x230 [ 1025.735155][T16765] __x64_sys_ioctl+0xb7/0x210 [ 1025.735170][T16765] do_syscall_64+0x123/0x790 [ 1025.735186][T16765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.735199][T16765] RIP: 0033:0x7f0d9419e159 [ 1025.735209][T16765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.735220][T16765] RSP: 002b:00007f0d923f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1025.735234][T16765] RAX: ffffffffffffffda RBX: 00007f0d94425fa0 RCX: 00007f0d9419e159 [ 1025.735241][T16765] RDX: 0000000000000000 RSI: 0000000040086200 RDI: 0000000000000004 [ 1025.735248][T16765] RBP: 00007f0d923f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.735255][T16765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.735262][T16765] R13: 00007f0d94426038 R14: 00007f0d94425fa0 R15: 00007ffc4adc65e8 [ 1025.735276][T16765] [ 1025.738464][T16765] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1026.434300][ T984] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1027.139820][ T984] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1027.143389][ T984] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1027.143411][ T984] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1027.143421][ T984] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.143434][ T984] usb 10-1: config 220 has no interface number 2 [ 1027.143463][ T984] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1027.143494][ T984] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1027.143506][ T984] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1027.143517][ T984] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1027.174970][ T984] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.174990][ T984] usb 10-1: Product: syz [ 1027.175002][ T984] usb 10-1: Manufacturer: syz [ 1027.175012][ T984] usb 10-1: SerialNumber: syz [ 1027.301920][ T9] usb 2-1: USB disconnect, device number 16 [ 1027.510895][T16770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.511163][T16770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.626157][ T984] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1027.626199][ T984] uvcvideo 10-1:220.0: No valid video chain found. [ 1027.626234][ T984] usb 10-1: selecting invalid altsetting 0 [ 1027.773379][ T984] usb 10-1: selecting invalid altsetting 0 [ 1027.773416][ T984] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 1027.804646][ T984] usb 10-1: USB disconnect, device number 6 [ 1027.957919][T16784] 9p: Bad value for 'rfdno' [ 1028.089045][ T5706] usb 9-1: selecting invalid altsetting 0 [ 1028.142909][ T5706] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1028.142937][ T5706] uvcvideo 9-1:220.0: No valid video chain found. [ 1028.171037][ T5706] usb 9-1: selecting invalid altsetting 0 [ 1028.171062][ T5706] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 1028.212818][ T5706] usb 9-1: USB disconnect, device number 26 [ 1028.550327][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1028.550343][ T31] audit: type=1400 audit(1791147377.659:2171): avc: denied { create } for pid=16793 comm="syz.1.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1028.603410][ T31] audit: type=1400 audit(1791147377.709:2172): avc: denied { append } for pid=16793 comm="syz.1.2850" name="v4l-subdev2" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1028.685274][ T5706] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1029.404830][ T5706] usb 9-1: Using ep0 maxpacket: 8 [ 1029.405319][ T5706] usb 9-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1029.405716][ T5706] usb 9-1: config 0 has no interfaces? [ 1029.407145][ T5706] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.407160][ T5706] usb 9-1: Product: syz [ 1029.407169][ T5706] usb 9-1: Manufacturer: syz [ 1029.407178][ T5706] usb 9-1: SerialNumber: syz [ 1029.409465][ T5706] usb 9-1: config 0 descriptor?? [ 1029.478476][ T984] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 1029.614629][T15568] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1030.105967][ T5734] usb 9-1: USB disconnect, device number 27 [ 1030.134351][ T984] usb 2-1: No LPM exit latency info found, disabling LPM. [ 1030.134377][ T984] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1030.138801][ T984] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x1 is Bulk; changing to Interrupt [ 1030.138822][ T984] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x82 is Bulk; changing to Interrupt [ 1030.138837][ T984] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1030.194174][T15568] usb 10-1: Using ep0 maxpacket: 8 [ 1030.194606][T15568] usb 10-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1030.195023][T15568] usb 10-1: config 0 has no interfaces? [ 1030.196732][T15568] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.196747][T15568] usb 10-1: Product: syz [ 1030.196757][T15568] usb 10-1: Manufacturer: syz [ 1030.196767][T15568] usb 10-1: SerialNumber: syz [ 1030.256324][T15568] usb 10-1: config 0 descriptor?? [ 1030.353700][T16818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2856'. [ 1031.072423][ T5706] usb 10-1: USB disconnect, device number 7 [ 1031.138385][T16820] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1031.272087][ T31] audit: type=1400 audit(1791147380.379:2173): avc: denied { write } for pid=16824 comm="syz.0.2859" name="event2" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1031.272136][ T31] audit: type=1400 audit(1791147380.379:2174): avc: denied { open } for pid=16824 comm="syz.0.2859" path="/dev/input/event2" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1031.274876][ T31] audit: type=1400 audit(1791147380.389:2175): avc: denied { ioctl } for pid=16824 comm="syz.0.2859" path="/dev/input/event2" dev="devtmpfs" ino=916 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1031.365182][ T31] audit: type=1400 audit(1791147380.479:2176): avc: denied { read write } for pid=16824 comm="syz.0.2859" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1031.365235][ T31] audit: type=1400 audit(1791147380.479:2177): avc: denied { open } for pid=16824 comm="syz.0.2859" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1031.367804][ T31] audit: type=1400 audit(1791147380.479:2178): avc: denied { map } for pid=16824 comm="syz.0.2859" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1031.370171][ T31] audit: type=1400 audit(1791147380.479:2179): avc: denied { ioctl } for pid=16824 comm="syz.0.2859" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1031.370217][ T31] audit: type=1400 audit(1791147380.479:2180): avc: denied { set_context_mgr } for pid=16824 comm="syz.0.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1031.577217][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.608656][ T984] usb 2-1: can't set config #1, error -71 [ 1031.639660][ T984] usb 2-1: USB disconnect, device number 17 [ 1033.607153][T16840] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2858'. [ 1034.014241][T15568] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1034.164675][T15568] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1034.167491][T15568] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.194289][T15568] usb 9-1: config 0 descriptor?? [ 1034.417745][T15568] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1034.622254][T15568] [drm:udl_init] *ERROR* Selecting channel failed [ 1034.665777][T15568] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 1034.665798][T15568] [drm] Initialized udl on minor 1 [ 1034.741328][T15568] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1034.741543][T15568] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1034.771594][T15568] usb 9-1: USB disconnect, device number 28 [ 1035.536867][T16859] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2867'. [ 1035.905387][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2870'. [ 1036.126445][ T5706] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1036.202570][T16875] 9p: Bad value for 'rfdno' [ 1036.274602][ T5706] usb 2-1: Using ep0 maxpacket: 16 [ 1036.275257][ T5706] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 1036.276560][ T5706] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1036.276580][ T5706] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1036.318956][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.318976][ T5706] usb 2-1: Product: syz [ 1036.318988][ T5706] usb 2-1: Manufacturer: syz [ 1036.318998][ T5706] usb 2-1: SerialNumber: syz [ 1036.504875][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.505214][T16872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.821289][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1037.821319][ T31] audit: type=1400 audit(1791147386.929:2182): avc: denied { bind } for pid=16865 comm="syz.1.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1038.400880][T16872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.521788][T16872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.620900][T16896] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2879'. [ 1040.092641][T16900] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 1040.092667][T16900] Error validating options; rc = [-22] [ 1040.225170][T12953] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.226626][T12953] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.226651][T12953] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.226670][T12953] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.386722][ T5706] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input47 [ 1040.391592][ T4958] bcm5974 2-1:1.0: could not read from device [ 1040.422704][ T4958] bcm5974 2-1:1.0: could not read from device [ 1040.445261][ T4958] bcm5974 2-1:1.0: could not read from device [ 1040.450076][ T4958] bcm5974 2-1:1.0: could not read from device [ 1040.474490][ T5706] usb 2-1: USB disconnect, device number 18 [ 1041.426547][ T31] audit: type=1400 audit(1791147390.539:2183): avc: denied { mount } for pid=16910 comm="syz.6.2884" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1041.698945][ T31] audit: type=1400 audit(1791147390.809:2184): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1041.729927][ T31] audit: type=1400 audit(1791147390.839:2185): avc: denied { write } for pid=16914 comm="syz.6.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1041.846754][ T31] audit: type=1400 audit(1791147390.959:2186): avc: denied { create } for pid=16917 comm="syz.9.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1041.849184][ T31] audit: type=1400 audit(1791147390.959:2187): avc: denied { read } for pid=16917 comm="syz.9.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1041.849281][T16926] blktrace: Concurrent blktraces are not allowed on sda1 [ 1041.905256][ T31] audit: type=1400 audit(1791147391.019:2188): avc: denied { read } for pid=16921 comm="syz.8.2886" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1043.450152][T16943] FAULT_INJECTION: forcing a failure. [ 1043.450152][T16943] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.450182][T16943] CPU: 0 UID: 0 PID: 16943 Comm: syz.8.2893 Tainted: G L syzkaller #0 PREEMPT(full) [ 1043.450199][T16943] Tainted: [L]=SOFTLOCKUP [ 1043.450203][T16943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1043.450211][T16943] Call Trace: [ 1043.450216][T16943] [ 1043.450221][T16943] dump_stack_lvl+0x100/0x190 [ 1043.450248][T16943] should_fail_ex.cold+0x5/0xa [ 1043.450269][T16943] should_failslab+0xc2/0x120 [ 1043.450290][T16943] __kvmalloc_node_noprof+0x113/0x9b0 [ 1043.450306][T16943] ? lock_acquire+0x1d1/0x380 [ 1043.450320][T16943] ? __might_fault+0xc5/0x140 [ 1043.450334][T16943] ? seq_read_iter+0x819/0x1270 [ 1043.450352][T16943] seq_read_iter+0x819/0x1270 [ 1043.450373][T16943] seq_read+0x344/0x4d0 [ 1043.450389][T16943] ? __pfx_seq_read+0x10/0x10 [ 1043.450404][T16943] ? lock_acquire+0x1d1/0x380 [ 1043.450419][T16943] ? avc_policy_seqno+0x9/0x20 [ 1043.450437][T16943] ? selinux_file_permission+0x8f/0x6d0 [ 1043.450456][T16943] ? rw_verify_area+0xce/0x6d0 [ 1043.450469][T16943] ? __pfx_seq_read+0x10/0x10 [ 1043.450484][T16943] vfs_read+0x1e4/0xb40 [ 1043.450498][T16943] ? lock_acquire+0x1d1/0x380 [ 1043.450510][T16943] ? __fget_files+0x34/0x3d0 [ 1043.450526][T16943] ? __pfx_vfs_read+0x10/0x10 [ 1043.450538][T16943] ? find_held_lock+0x2b/0x80 [ 1043.450555][T16943] ? __fget_files+0x215/0x3d0 [ 1043.450573][T16943] ? __fget_files+0x21f/0x3d0 [ 1043.450593][T16943] ksys_read+0x12a/0x250 [ 1043.450606][T16943] ? __pfx_ksys_read+0x10/0x10 [ 1043.450624][T16943] do_syscall_64+0x123/0x790 [ 1043.450640][T16943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.450653][T16943] RIP: 0033:0x7f45aa59e159 [ 1043.450663][T16943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.450675][T16943] RSP: 002b:00007f45ab554028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1043.450687][T16943] RAX: ffffffffffffffda RBX: 00007f45aa825fa0 RCX: 00007f45aa59e159 [ 1043.450694][T16943] RDX: 0000000000002020 RSI: 0000200000000040 RDI: 0000000000000004 [ 1043.450701][T16943] RBP: 00007f45ab554090 R08: 0000000000000000 R09: 0000000000000000 [ 1043.450708][T16943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1043.450714][T16943] R13: 00007f45aa826038 R14: 00007f45aa825fa0 R15: 00007ffdc6adf028 [ 1043.450729][T16943] [ 1043.532001][ T31] audit: type=1400 audit(1791147392.639:2189): avc: denied { read write } for pid=16942 comm="syz.0.2892" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1043.568210][ T31] audit: type=1400 audit(1791147392.679:2190): avc: denied { open } for pid=16942 comm="syz.0.2892" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1043.849375][T16945] tipc: New replicast peer: 172.20.20.187 [ 1043.849801][T16945] tipc: Enabled bearer , priority 10 [ 1043.850066][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2888'. [ 1044.183630][T16951] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 1044.183655][T16951] Error validating options; rc = [-22] [ 1045.310732][ T31] audit: type=1400 audit(1791147394.419:2191): avc: denied { read write } for pid=16956 comm="syz.8.2897" name="sg0" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1045.310893][ T31] audit: type=1400 audit(1791147394.419:2192): avc: denied { getopt } for pid=16955 comm="syz.6.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1045.312945][ T31] audit: type=1400 audit(1791147394.419:2193): avc: denied { open } for pid=16956 comm="syz.8.2897" path="/dev/sg0" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1045.401412][ T31] audit: type=1400 audit(1791147394.509:2194): avc: denied { ioctl } for pid=16949 comm="syz.0.2895" path="socket:[70785]" dev="sockfs" ino=70785 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1045.403367][ T31] audit: type=1400 audit(1791147394.509:2195): avc: denied { bind } for pid=16949 comm="syz.0.2895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1045.487529][ T31] audit: type=1400 audit(1791147394.599:2196): avc: denied { setopt } for pid=16955 comm="syz.6.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1046.277045][ T31] audit: type=1400 audit(1791147395.389:2197): avc: denied { setopt } for pid=16967 comm="syz.8.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1046.525610][T16977] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2891'. [ 1047.431631][T16982] FAULT_INJECTION: forcing a failure. [ 1047.431631][T16982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1047.431660][T16982] CPU: 0 UID: 0 PID: 16982 Comm: syz.0.2904 Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.431677][T16982] Tainted: [L]=SOFTLOCKUP [ 1047.431681][T16982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1047.431689][T16982] Call Trace: [ 1047.431694][T16982] [ 1047.431699][T16982] dump_stack_lvl+0x100/0x190 [ 1047.431725][T16982] should_fail_ex.cold+0x5/0xa [ 1047.431745][T16982] _copy_to_user+0x32/0xd0 [ 1047.431763][T16982] __do_sys_sysinfo+0x95/0x100 [ 1047.431777][T16982] ? __pfx___do_sys_sysinfo+0x10/0x10 [ 1047.431794][T16982] ? syscall_user_dispatch+0x76/0x130 [ 1047.431813][T16982] do_syscall_64+0x123/0x790 [ 1047.431829][T16982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.431841][T16982] RIP: 0033:0x7f0d9419e159 [ 1047.431852][T16982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.431863][T16982] RSP: 002b:00007f0d923f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000063 [ 1047.431875][T16982] RAX: ffffffffffffffda RBX: 00007f0d94425fa0 RCX: 00007f0d9419e159 [ 1047.431883][T16982] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 1047.431890][T16982] RBP: 00007f0d923f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.431896][T16982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.431903][T16982] R13: 00007f0d94426038 R14: 00007f0d94425fa0 R15: 00007ffc4adc65e8 [ 1047.431917][T16982] [ 1048.261387][T16994] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 1048.261456][T16994] Error validating options; rc = [-22] [ 1049.793155][T17007] /dev/sg0: Can't lookup blockdev [ 1049.817126][T17007] nfs4: Bad value for 'timeo' [ 1049.829918][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2903'. [ 1050.024985][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1050.069087][T17017] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2912'. [ 1050.541183][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1050.639288][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1050.641648][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.641672][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.641695][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.689694][ T10] usb 2-1: config 0 descriptor?? [ 1051.130359][ T10] hid_parser_main: 365 callbacks suppressed [ 1051.130380][ T10] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1051.130397][ T10] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1051.130411][ T10] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1051.130462][ T10] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1051.130477][ T10] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1051.130492][ T10] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1051.130505][ T10] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 1051.132759][ T10] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1051.351710][ T10] cp2112 0003:10C4:EA90.0014: error requesting version [ 1051.556069][ T10] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -32 [ 1052.869199][T17040] random: crng reseeded on system resumption [ 1054.222340][ T10] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 1054.265593][ T5734] usb 2-1: USB disconnect, device number 19 [ 1054.305090][T17034] ceph: No mds server is up or the cluster is laggy [ 1054.415145][ T5706] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1054.570651][ T5706] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1054.571487][ T5706] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1054.571502][ T5706] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1054.571513][ T5706] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.571524][ T5706] usb 10-1: config 220 has no interface number 2 [ 1054.571558][ T5706] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1054.571575][ T5706] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1054.571586][ T5706] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1054.571598][ T5706] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1054.666030][ T5706] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.666050][ T5706] usb 10-1: Product: syz [ 1054.666060][ T5706] usb 10-1: Manufacturer: syz [ 1054.666070][ T5706] usb 10-1: SerialNumber: syz [ 1054.829492][ T5734] libceph: mon0 (2)0.0.0.0:6789 socket closed (con state V2_BANNER_PREFIX) [ 1054.924309][T17049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.924553][T17049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.416785][ T5706] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1055.416813][ T5706] uvcvideo 10-1:220.0: No valid video chain found. [ 1055.416851][ T5706] usb 10-1: selecting invalid altsetting 0 [ 1055.456521][ T5706] usb 10-1: selecting invalid altsetting 0 [ 1055.456543][ T5706] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 1055.481200][T17067] /dev/sg0: Can't lookup blockdev [ 1055.498542][ T5706] usb 10-1: USB disconnect, device number 8 [ 1056.101372][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2923'. [ 1056.593187][T17077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2926'. [ 1056.712411][T17078] /dev/sg0: Can't lookup blockdev [ 1056.831017][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2925'. [ 1060.896805][ T10] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1061.066155][ T10] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1061.068357][ T10] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1061.068379][ T10] usb 1-1: config 1 has no interface number 0 [ 1061.068404][ T10] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1061.068427][ T10] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1061.068448][ T10] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1061.070792][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.070811][ T10] usb 1-1: Product: syz [ 1061.070831][ T10] usb 1-1: Manufacturer: syz [ 1061.070844][ T10] usb 1-1: SerialNumber: syz [ 1061.123410][T17100] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1061.123505][T17100] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1061.352071][T17100] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1061.352150][T17100] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1061.601914][ T10] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:0f:07 [ 1061.990023][ T10] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71 [ 1061.990098][ T10] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71 [ 1062.019863][ T10] usb 1-1: USB disconnect, device number 91 [ 1062.035963][T17109] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2938'. [ 1062.104353][ T10] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem [ 1062.216637][ T10] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1062.732685][ T31] audit: type=1400 audit(1791147411.839:2198): avc: denied { write } for pid=17121 comm="syz.0.2940" name="md0" dev="devtmpfs" ino=3077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1062.944243][ T5706] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1063.095821][ T5706] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1063.096688][ T5706] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1063.096706][ T5706] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.096718][ T5706] usb 9-1: config 220 has no interface number 2 [ 1063.096746][ T5706] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1063.096764][ T5706] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1063.096776][ T5706] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1063.096787][ T5706] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1063.100592][ T5706] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.100609][ T5706] usb 9-1: Product: syz [ 1063.100618][ T5706] usb 9-1: Manufacturer: syz [ 1063.100628][ T5706] usb 9-1: SerialNumber: syz [ 1063.114355][ T5713] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1063.364706][ T5713] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1063.369575][ T5713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.369606][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1063.369633][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.440742][T17120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.441001][T17120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.441423][ T5713] usb 1-1: config 0 descriptor?? [ 1063.482817][ T5713] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1064.348878][T17116] tipc: Enabling of bearer rejected, already enabled [ 1064.695565][ T5706] usb 9-1: selecting invalid altsetting 0 [ 1064.714208][ T5706] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1064.714239][ T5706] uvcvideo 9-1:220.0: No valid video chain found. [ 1064.769873][ T5706] usb 9-1: selecting invalid altsetting 0 [ 1064.769899][ T5706] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 1064.801352][ T5706] usb 9-1: USB disconnect, device number 29 [ 1064.838624][T17137] blktrace: Concurrent blktraces are not allowed on sda1 [ 1065.146124][ T31] audit: type=1400 audit(1791147414.259:2199): avc: denied { getopt } for pid=17143 comm="syz.1.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1065.489455][T17144] Set syz1 is full, maxelem 6117 reached [ 1065.496084][ T5706] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1065.654208][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 1065.654718][ T5706] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1065.657008][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.657028][ T5706] usb 2-1: Product: syz [ 1065.657038][ T5706] usb 2-1: Manufacturer: syz [ 1065.657048][ T5706] usb 2-1: SerialNumber: syz [ 1065.658814][ T5706] usb 2-1: config 0 descriptor?? [ 1065.662680][ T5706] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1065.662705][ T5706] pctv452e: pctv452e_power_ctrl: 1 [ 1065.662705][ T5706] [ 1065.662727][ T5706] usb 2-1: selecting invalid altsetting 3 [ 1065.662737][ T5706] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1065.662737][ T5706] [ 1065.662747][ T5706] dvb-usb: bulk message failed: -22 (5/0) [ 1065.757970][ T5706] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1065.761453][ T5706] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1065.761486][ T5706] usb 2-1: media controller created [ 1065.761511][ T5706] dvb-usb: bulk message failed: -22 (8/0) [ 1065.761519][ T5706] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1065.761545][ T5706] dvb-usb: MAC address reading failed. [ 1065.820757][T17148] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1065.844756][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1065.890443][T17144] dvb-usb: bulk message failed: -22 (7/0) [ 1065.890460][T17144] pctv452e: I2C error -22; AA 02 08 00 00 -> aa 02 31 03 08 00 00 [ 1065.991669][ T5734] usb 1-1: USB disconnect, device number 92 [ 1066.025780][T17157] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2949'. [ 1066.808119][ T5706] DVB: Unable to find symbol stb0899_attach() [ 1066.808136][ T5706] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1066.965431][ T5706] rc_core: IR keymap rc-tt-1500 not found [ 1066.965448][ T5706] Registered IR keymap rc-empty [ 1066.966048][ T5706] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1067.053258][ T5706] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input48 [ 1067.070700][ T5706] dvb-usb: schedule remote query interval to 100 msecs. [ 1067.070720][ T5706] pctv452e: pctv452e_power_ctrl: 0 [ 1067.070720][ T5706] [ 1067.070729][ T5706] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1067.107161][ T5706] usb 2-1: USB disconnect, device number 20 [ 1067.759640][ T5706] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1068.362194][ T31] audit: type=1400 audit(1791147417.469:2200): avc: denied { mount } for pid=17182 comm="syz.6.2955" name="/" dev="ramfs" ino=71864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1068.537958][ T5706] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1068.725489][ T5706] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1068.736814][ T5706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.736846][ T5706] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1068.736861][ T5706] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1068.736874][ T5706] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1068.736899][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.596307][ T31] audit: type=1400 audit(1791147418.699:2201): avc: denied { execute_no_trans } for pid=17190 comm="syz.8.2957" path="/144/file2" dev="tmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1069.914772][T17199] FAULT_INJECTION: forcing a failure. [ 1069.914772][T17199] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.914818][T17199] CPU: 0 UID: 0 PID: 17199 Comm: syz.8.2959 Tainted: G L syzkaller #0 PREEMPT(full) [ 1069.914838][T17199] Tainted: [L]=SOFTLOCKUP [ 1069.914845][T17199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1069.914855][T17199] Call Trace: [ 1069.914861][T17199] [ 1069.914868][T17199] dump_stack_lvl+0x100/0x190 [ 1069.914897][T17199] should_fail_ex.cold+0x5/0xa [ 1069.914918][T17199] should_failslab+0xc2/0x120 [ 1069.914941][T17199] __kmalloc_noprof+0xfc/0x840 [ 1069.914955][T17199] ? __kasan_kmalloc+0xaa/0xb0 [ 1069.914971][T17199] ? mpi_resize+0x1ac/0x250 [ 1069.914993][T17199] mpi_resize+0x1ac/0x250 [ 1069.915009][T17199] mpi_powm+0x9ff/0x1e50 [ 1069.915036][T17199] ? __pfx_mpi_powm+0x10/0x10 [ 1069.915052][T17199] ? mpi_free+0xc0/0x150 [ 1069.915067][T17199] ? mpi_free+0xe1/0x150 [ 1069.915083][T17199] ? kfree+0x22b/0x6d0 [ 1069.915098][T17199] ? mpi_free+0xe6/0x150 [ 1069.915116][T17199] rsa_enc+0x1fe/0x3b0 [ 1069.915137][T17199] ? __pfx_rsa_enc+0x10/0x10 [ 1069.915153][T17199] ? __virt_addr_valid+0x239/0x430 [ 1069.915168][T17199] ? sg_init_one+0xf5/0x1b0 [ 1069.915181][T17199] rsassa_pkcs1_verify+0x4eb/0xc20 [ 1069.915203][T17199] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 1069.915228][T17199] ? rsa_max_size+0xd/0x70 [ 1069.915241][T17199] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 1069.915260][T17199] public_key_verify_signature+0x5ee/0x910 [ 1069.915277][T17199] ? __pfx_public_key_verify_signature+0x10/0x10 [ 1069.915296][T17199] ? asymmetric_key_generate_id+0x7e/0x180 [ 1069.915321][T17199] x509_check_for_self_signed+0x325/0x510 [ 1069.915339][T17199] x509_cert_parse+0x60c/0x910 [ 1069.915356][T17199] x509_key_preparse+0x65/0x9c0 [ 1069.915375][T17199] asymmetric_key_preparse+0xce/0x1d0 [ 1069.915386][T17199] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 1069.915397][T17199] __key_create_or_update+0x463/0xe30 [ 1069.915420][T17199] ? __pfx___key_create_or_update+0x10/0x10 [ 1069.915436][T17199] ? lookup_user_key+0x3f3/0x1300 [ 1069.915457][T17199] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1069.915472][T17199] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1069.915491][T17199] key_create_or_update+0x42/0x60 [ 1069.915509][T17199] __do_sys_add_key+0x2e8/0x460 [ 1069.915521][T17199] ? __pfx___do_sys_add_key+0x10/0x10 [ 1069.915538][T17199] do_syscall_64+0x123/0x790 [ 1069.915554][T17199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.915567][T17199] RIP: 0033:0x7f45aa59e159 [ 1069.915578][T17199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.915589][T17199] RSP: 002b:00007f45ab554028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1069.915603][T17199] RAX: ffffffffffffffda RBX: 00007f45aa825fa0 RCX: 00007f45aa59e159 [ 1069.915610][T17199] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1069.915617][T17199] RBP: 00007f45aa63506b R08: 000000002bdcedd9 R09: 0000000000000000 [ 1069.915624][T17199] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1069.915631][T17199] R13: 00007f45aa826038 R14: 00007f45aa825fa0 R15: 00007ffdc6adf028 [ 1069.915646][T17199] [ 1070.326384][T17202] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2960'. [ 1070.841053][T17206] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 1070.841082][T17206] Error validating options; rc = [-22] [ 1070.921099][ T5706] [drm] Initialized gud 1.0.0 for 2-1:1.0 on minor 1 [ 1071.329516][T17212] 9p: Bad value for 'rfdno' [ 1071.498801][T17214] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `ݗb"^6C2W [ 1071.498801][T17214] 7 [ 1071.522068][ T5706] gud 2-1:1.0: USB-1: Invalid EDID size (ret=79) [ 1071.573124][T17213] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2953'. [ 1072.362668][ T5706] gud 2-1:1.0: [drm] Cannot find any crtc or sizes [ 1072.432354][ T5706] usb 2-1: USB disconnect, device number 21 [ 1073.474226][ T5706] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1073.624870][ T5706] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1073.627954][ T5706] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1073.627983][ T5706] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.627996][ T5706] usb 2-1: config 220 has no interface number 2 [ 1073.628028][ T5706] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1073.628045][ T5706] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1073.628057][ T5706] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1073.628069][ T5706] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1073.629729][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.629746][ T5706] usb 2-1: Product: syz [ 1073.629756][ T5706] usb 2-1: Manufacturer: syz [ 1073.629766][ T5706] usb 2-1: SerialNumber: syz [ 1074.071668][T17236] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 1074.071693][T17236] Error validating options; rc = [-22] [ 1074.093380][T17228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.093684][T17228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.324972][ T5706] usb 2-1: selecting invalid altsetting 0 [ 1074.379894][ T5706] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1074.379931][ T5706] uvcvideo 2-1:220.0: No valid video chain found. [ 1074.409144][ T5706] usb 2-1: selecting invalid altsetting 0 [ 1074.409168][ T5706] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1074.431394][ T5706] usb 2-1: USB disconnect, device number 22 [ 1074.794378][T17244] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2971'. [ 1074.958025][T17249] netlink: 'syz.9.2972': attribute type 1 has an invalid length. [ 1075.029757][T17249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1075.046798][T17253] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1075.147292][ T31] audit: type=1400 audit(1791147424.259:2202): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1075.222362][T17249] bridge1: entered promiscuous mode [ 1075.267572][T17249] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1075.353639][T17256] FAULT_INJECTION: forcing a failure. [ 1075.353639][T17256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1075.353668][T17256] CPU: 0 UID: 0 PID: 17256 Comm: syz.1.2974 Tainted: G L syzkaller #0 PREEMPT(full) [ 1075.353685][T17256] Tainted: [L]=SOFTLOCKUP [ 1075.353689][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1075.353697][T17256] Call Trace: [ 1075.353701][T17256] [ 1075.353707][T17256] dump_stack_lvl+0x100/0x190 [ 1075.353732][T17256] should_fail_ex.cold+0x5/0xa [ 1075.353751][T17256] _copy_from_user+0x2e/0xd0 [ 1075.353768][T17256] copy_msghdr_from_user+0x9f/0x4c0 [ 1075.353786][T17256] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1075.353801][T17256] ? _kstrtoull+0x144/0x200 [ 1075.353818][T17256] ? __pfx__kstrtoull+0x10/0x10 [ 1075.353837][T17256] ___sys_sendmsg+0x106/0x1e0 [ 1075.353851][T17256] ? __pfx____sys_sendmsg+0x10/0x10 [ 1075.353869][T17256] ? __fget_files+0x34/0x3d0 [ 1075.353895][T17256] __sys_sendmmsg+0x20c/0x440 [ 1075.353914][T17256] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1075.353932][T17256] ? ksys_write+0x190/0x250 [ 1075.353957][T17256] ? fput+0x7c/0x100 [ 1075.353974][T17256] ? ksys_write+0x1ac/0x250 [ 1075.353986][T17256] ? __pfx_ksys_write+0x10/0x10 [ 1075.353999][T17256] ? do_raw_spin_unlock+0x145/0x1e0 [ 1075.354018][T17256] __x64_sys_sendmmsg+0x9c/0x100 [ 1075.354034][T17256] ? lockdep_hardirqs_on+0x7d/0x110 [ 1075.354050][T17256] do_syscall_64+0x123/0x790 [ 1075.354064][T17256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.354077][T17256] RIP: 0033:0x7f1bb639e159 [ 1075.354087][T17256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.354097][T17256] RSP: 002b:00007f1bb722f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1075.354109][T17256] RAX: ffffffffffffffda RBX: 00007f1bb6625fa0 RCX: 00007f1bb639e159 [ 1075.354117][T17256] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: 0000000000000003 [ 1075.354123][T17256] RBP: 00007f1bb722f090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.354131][T17256] R10: 0000000000004800 R11: 0000000000000246 R12: 0000000000000001 [ 1075.354138][T17256] R13: 00007f1bb6626038 R14: 00007f1bb6625fa0 R15: 00007fff8f781428 [ 1075.354158][T17256] [ 1075.768406][T17257] syzkaller0: entered promiscuous mode [ 1075.768424][T17257] syzkaller0: entered allmulticast mode [ 1075.809284][T17257] 0: reclassify loop, rule prio 0, protocol 700 [ 1075.810807][ T31] audit: type=1400 audit(1791147424.919:2203): avc: denied { read write } for pid=17260 comm="syz.9.2975" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1075.810841][ T31] audit: type=1400 audit(1791147424.919:2204): avc: denied { open } for pid=17260 comm="syz.9.2975" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1075.846215][ T31] audit: type=1400 audit(1791147424.959:2205): avc: denied { setopt } for pid=17262 comm="syz.6.2977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1076.744399][ T31] audit: type=1400 audit(1791147425.859:2206): avc: denied { map } for pid=17260 comm="syz.9.2975" path="socket:[72204]" dev="sockfs" ino=72204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1076.807067][T17266] IPv6: sit2: Disabled Multicast RS [ 1076.807622][T17266] sit2: entered allmulticast mode [ 1076.933214][T17233] tipc: Started in network mode [ 1076.933241][T17233] tipc: Node identity ac14140f, cluster identity 4711 [ 1076.933434][T17233] tipc: New replicast peer: 255.255.255.255 [ 1076.933771][T17233] tipc: Enabled bearer , priority 10 [ 1077.603508][ T31] audit: type=1400 audit(1791147426.709:2207): avc: denied { setopt } for pid=17287 comm="syz.6.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1077.635422][ T31] audit: type=1400 audit(1791147426.739:2208): avc: denied { write } for pid=17287 comm="syz.6.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1077.746824][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1077.767439][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1077.769888][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1077.808031][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1077.808441][T17292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1077.937913][ T31] audit: type=1400 audit(1791147427.049:2209): avc: denied { read } for pid=17287 comm="syz.6.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1078.046676][ T5706] tipc: Node number set to 2886997007 [ 1078.265100][ T984] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1078.384483][T17302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1078.456169][ T984] usb 10-1: Using ep0 maxpacket: 8 [ 1078.456772][ T984] usb 10-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 1078.458751][ T984] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.458766][ T984] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1078.461194][ T984] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.461211][ T984] usb 10-1: Product: syz [ 1078.461220][ T984] usb 10-1: Manufacturer: syz [ 1078.461230][ T984] usb 10-1: SerialNumber: syz [ 1078.629971][ T31] audit: type=1400 audit(1791147427.739:2210): avc: denied { write } for pid=17306 comm="syz.1.2986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1078.726393][ T376] smc: removing ib device syz1 [ 1079.841163][ T5706] infiniband syz1: ib_query_port failed (-19) [ 1079.934426][T17292] Bluetooth: hci1: command tx timeout [ 1080.354161][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2989'. [ 1081.396513][ T984] usb 10-1: USB disconnect, device number 9 [ 1081.722978][ T31] audit: type=1326 audit(1791147430.829:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17323 comm="syz.8.2988" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f45aa59e159 code=0x0 [ 1081.783970][ T31] audit: type=1400 audit(1791147430.889:2212): avc: denied { create } for pid=17323 comm="syz.8.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1081.792647][ T31] audit: type=1400 audit(1791147430.899:2213): avc: denied { write } for pid=17323 comm="syz.8.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1081.852336][T17337] blktrace: Concurrent blktraces are not allowed on sda1 [ 1081.897706][ T376] smbdirect: ib_dev[syz1] removed [ 1081.994152][ T984] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1082.016086][T17292] Bluetooth: hci1: command tx timeout [ 1082.177835][ T984] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1082.180650][ T984] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.213128][ T984] usb 10-1: config 0 descriptor?? [ 1082.222190][ T984] cp210x 10-1:0.0: cp210x converter detected [ 1082.305581][ T31] audit: type=1400 audit(1791147431.409:2214): avc: denied { read } for pid=17346 comm="syz.1.2995" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1082.305640][ T31] audit: type=1400 audit(1791147431.409:2215): avc: denied { open } for pid=17346 comm="syz.1.2995" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1082.393134][ T31] audit: type=1400 audit(1791147431.499:2216): avc: denied { ioctl } for pid=17346 comm="syz.1.2995" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1082.672548][ T984] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1082.682933][ T984] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 1082.682984][ T984] cp210x 10-1:0.0: GPIO initialisation failed: -121 [ 1082.703021][T17354] FAULT_INJECTION: forcing a failure. [ 1082.703021][T17354] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.703052][T17354] CPU: 0 UID: 0 PID: 17354 Comm: syz.1.2996 Tainted: G L syzkaller #0 PREEMPT(full) [ 1082.703071][T17354] Tainted: [L]=SOFTLOCKUP [ 1082.703076][T17354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1082.703086][T17354] Call Trace: [ 1082.703091][T17354] [ 1082.703098][T17354] dump_stack_lvl+0x100/0x190 [ 1082.703124][T17354] should_fail_ex.cold+0x5/0xa [ 1082.703146][T17354] should_failslab+0xc2/0x120 [ 1082.703167][T17354] __kmalloc_noprof+0xfc/0x840 [ 1082.703181][T17354] ? __kasan_kmalloc+0xaa/0xb0 [ 1082.703196][T17354] ? mpi_resize+0x1ac/0x250 [ 1082.703215][T17354] mpi_resize+0x1ac/0x250 [ 1082.703230][T17354] mpi_powm+0x9ff/0x1e50 [ 1082.703251][T17354] ? __pfx_mpi_powm+0x10/0x10 [ 1082.703266][T17354] ? mpi_free+0xc0/0x150 [ 1082.703281][T17354] ? mpi_free+0xe1/0x150 [ 1082.703296][T17354] ? kfree+0x22b/0x6d0 [ 1082.703308][T17354] ? mpi_free+0xe6/0x150 [ 1082.703324][T17354] rsa_enc+0x1fe/0x3b0 [ 1082.703340][T17354] ? __pfx_rsa_enc+0x10/0x10 [ 1082.703355][T17354] ? __virt_addr_valid+0x239/0x430 [ 1082.703370][T17354] ? sg_init_one+0xf5/0x1b0 [ 1082.703384][T17354] rsassa_pkcs1_verify+0x4eb/0xc20 [ 1082.703405][T17354] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 1082.703440][T17354] ? rsa_max_size+0xd/0x70 [ 1082.703456][T17354] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 1082.703478][T17354] public_key_verify_signature+0x5ee/0x910 [ 1082.703498][T17354] ? __pfx_public_key_verify_signature+0x10/0x10 [ 1082.703523][T17354] ? asymmetric_key_generate_id+0x7e/0x180 [ 1082.703548][T17354] x509_check_for_self_signed+0x325/0x510 [ 1082.703566][T17354] x509_cert_parse+0x60c/0x910 [ 1082.703583][T17354] x509_key_preparse+0x65/0x9c0 [ 1082.703603][T17354] asymmetric_key_preparse+0xce/0x1d0 [ 1082.703615][T17354] ? __pfx_asymmetric_key_preparse+0x10/0x10 [ 1082.703627][T17354] __key_create_or_update+0x463/0xe30 [ 1082.703647][T17354] ? __pfx___key_create_or_update+0x10/0x10 [ 1082.703664][T17354] ? lookup_user_key+0x3f3/0x1300 [ 1082.703686][T17354] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1082.703700][T17354] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1082.703720][T17354] key_create_or_update+0x42/0x60 [ 1082.703738][T17354] __do_sys_add_key+0x2e8/0x460 [ 1082.703750][T17354] ? __pfx___do_sys_add_key+0x10/0x10 [ 1082.703767][T17354] do_syscall_64+0x123/0x790 [ 1082.703784][T17354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.703797][T17354] RIP: 0033:0x7f1bb639e159 [ 1082.703809][T17354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.703820][T17354] RSP: 002b:00007f1bb722f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1082.703834][T17354] RAX: ffffffffffffffda RBX: 00007f1bb6625fa0 RCX: 00007f1bb639e159 [ 1082.703842][T17354] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1082.703849][T17354] RBP: 00007f1bb643506b R08: 000000001fe9f204 R09: 0000000000000000 [ 1082.703856][T17354] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1082.703863][T17354] R13: 00007f1bb6626038 R14: 00007f1bb6625fa0 R15: 00007fff8f781428 [ 1082.703878][T17354] [ 1082.885599][ T31] audit: type=1400 audit(1791147431.999:2217): avc: denied { mounton } for pid=17332 comm="syz.9.2991" path="/39/file0" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1083.164595][T17359] 9p: Bad value for 'rfdno' [ 1083.228955][ T984] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1083.260199][ T984] usb 10-1: USB disconnect, device number 10 [ 1083.523148][ T376] ================================================================== [ 1083.523167][ T376] BUG: KASAN: slab-use-after-free in kobject_uevent_env+0x1383/0x18b0 [ 1083.523195][ T376] Read of size 8 at addr ffff888075111e50 by task kworker/u8:6/376 [ 1083.523205][ T376] [ 1083.523216][ T376] CPU: 0 UID: 0 PID: 376 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.523232][ T376] Tainted: [L]=SOFTLOCKUP [ 1083.523236][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1083.523245][ T376] Workqueue: ib-unreg-wq ib_unregister_work [ 1083.523269][ T376] Call Trace: [ 1083.523274][ T376] [ 1083.523280][ T376] dump_stack_lvl+0x100/0x190 [ 1083.523299][ T376] print_report+0x13d/0x4b0 [ 1083.523321][ T376] ? __virt_addr_valid+0x239/0x430 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1083.523335][ T376] ? kobject_uevent_env+0x1383/0x18b0 [ 1083.523351][ T376] kasan_report+0xdf/0x1c0 [ 1083.523368][ T376] ? kobject_uevent_env+0x1383/0x18b0 [ 1083.523385][ T376] ? __pfx_device_namespace+0x10/0x10 [ 1083.523407][ T376] kobject_uevent_env+0x1383/0x18b0 [ 1083.523424][ T376] ? bus_to_subsys+0x114/0x150 [ 1083.523437][ T376] device_del+0x605/0x9b0 [ 1083.523452][ T376] ? __pfx_device_del+0x10/0x10 [ 1083.523466][ T376] ? kobject_put+0xb9/0x640 [ 1083.523481][ T376] disable_device+0x1ea/0x280 [ 1083.523495][ T376] ? __pfx_disable_device+0x10/0x10 [ 1083.523512][ T376] __ib_unregister_device+0x2b4/0x480 [ 1083.523527][ T376] ? process_one_work+0x906/0x1b10 [ 1083.523545][ T376] ? process_one_work+0x906/0x1b10 [ 1083.523563][ T376] ib_unregister_work+0x19/0x30 [ 1083.523577][ T376] process_one_work+0xac7/0x1b10 [ 1083.523597][ T376] ? __pfx_process_one_work+0x10/0x10 [ 1083.523615][ T376] ? lock_acquire+0x1d1/0x380 [ 1083.523629][ T376] ? __pfx_ib_unregister_work+0x10/0x10 [ 1083.523647][ T376] worker_thread+0x5ef/0xe50 [ 1083.523658][ T376] ? __pfx_worker_thread+0x10/0x10 [ 1083.523668][ T376] ? kthread+0x13a/0x450 [ 1083.523684][ T376] ? __pfx_worker_thread+0x10/0x10 [ 1083.523694][ T376] kthread+0x373/0x450 [ 1083.523709][ T376] ? __pfx_kthread+0x10/0x10 [ 1083.523725][ T376] ret_from_fork+0x730/0xd60 [ 1083.523740][ T376] ? __pfx_ret_from_fork+0x10/0x10 [ 1083.523752][ T376] ? __switch_to+0x800/0x10f0 [ 1083.523769][ T376] ? __pfx_kthread+0x10/0x10 [ 1083.523785][ T376] ret_from_fork_asm+0x1a/0x30 [ 1083.523800][ T376] [ 1083.523805][ T376] [ 1083.523807][ T376] Allocated by task 17282: [ 1083.523817][ T376] kasan_save_stack+0x30/0x50 [ 1083.523831][ T376] kasan_save_track+0x14/0x30 [ 1083.523843][ T376] __kasan_kmalloc+0xaa/0xb0 [ 1083.523856][ T376] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1083.523871][ T376] uevent_net_init+0xd3/0x330 [ 1083.523886][ T376] ops_init+0x1e2/0x5f0 [ 1083.523904][ T376] setup_net+0x118/0x3a0 [ 1083.523919][ T376] copy_net_ns+0x345/0x7a0 [ 1083.523928][ T376] create_new_namespaces+0x3ea/0xac0 [ 1083.523940][ T376] unshare_nsproxy_namespaces+0xf2/0x220 [ 1083.523952][ T376] ksys_unshare+0x4a2/0xa70 [ 1083.523965][ T376] __x64_sys_unshare+0x31/0x40 [ 1083.523977][ T376] do_syscall_64+0x123/0x790 [ 1083.523988][ T376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.523999][ T376] [ 1083.524001][ T376] Freed by task 12948: [ 1083.524007][ T376] kasan_save_stack+0x30/0x50 [ 1083.524020][ T376] kasan_save_track+0x14/0x30 [ 1083.524032][ T376] kasan_save_free_info+0x3b/0x70 [ 1083.524043][ T376] __kasan_slab_free+0x5f/0x80 [ 1083.524056][ T376] kfree+0x22b/0x6d0 [ 1083.524064][ T376] ops_undo_list+0x2ee/0xab0 [ 1083.524079][ T376] cleanup_net+0x499/0x920 [ 1083.524088][ T376] process_one_work+0xac7/0x1b10 [ 1083.524104][ T376] worker_thread+0x5ef/0xe50 [ 1083.524112][ T376] kthread+0x373/0x450 [ 1083.524126][ T376] ret_from_fork+0x730/0xd60 [ 1083.524137][ T376] ret_from_fork_asm+0x1a/0x30 [ 1083.524148][ T376] [ 1083.524151][ T376] The buggy address belongs to the object at ffff888075111e40 [ 1083.524151][ T376] which belongs to the cache kmalloc-32 of size 32 [ 1083.524159][ T376] The buggy address is located 16 bytes inside of [ 1083.524159][ T376] freed 32-byte region [ffff888075111e40, ffff888075111e60) [ 1083.524170][ T376] [ 1083.524176][ T376] The buggy address belongs to the physical page: [ 1083.524186][ T376] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888075111480 pfn:0x75111 [ 1083.524204][ T376] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1083.524223][ T376] page_type: f5(slab) [ 1083.524233][ T376] raw: 00fff00000000200 ffff88801c031780 ffffea0000a7fed0 ffffea0000d06a10 [ 1083.524245][ T376] raw: ffff888075111480 0000000000400031 00000000f5000000 0000000000000000 [ 1083.524251][ T376] page dumped because: kasan: bad access detected [ 1083.524260][ T376] page_owner tracks the page as allocated [ 1083.524268][ T376] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 59, tgid 59 (kworker/u8:4), ts 232463073964 [ 1083.524285][ T376] post_alloc_hook+0xfd/0x120 [ 1083.524296][ T376] get_page_from_freelist+0x110d/0x35d0 [ 1083.524307][ T376] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1083.524318][ T376] new_slab+0xa9/0x6e0 [ 1083.524327][ T376] refill_objects+0xe3/0x410 [ 1083.524337][ T376] __pcs_replace_empty_main+0x35e/0x650 [ 1083.524347][ T376] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 1083.524357][ T376] batadv_mcast_mla_update+0x1ed0/0x3200 [ 1083.524375][ T376] process_one_work+0xac7/0x1b10 [ 1083.524391][ T376] worker_thread+0x5ef/0xe50 [ 1083.524399][ T376] kthread+0x373/0x450 [ 1083.524413][ T376] ret_from_fork+0x730/0xd60 [ 1083.524424][ T376] ret_from_fork_asm+0x1a/0x30 [ 1083.524434][ T376] page last free pid 15 tgid 15 ts 232425340736 stack trace: [ 1083.524442][ T376] __free_frozen_pages+0x79f/0x10f0 [ 1083.524459][ T376] tlb_remove_table_rcu+0x2cf/0x380 [ 1083.524474][ T376] rcu_core+0x5f0/0x1260 [ 1083.524489][ T376] handle_softirqs+0x1e6/0x9d0 [ 1083.524501][ T376] run_ksoftirqd+0x38/0x60 [ 1083.524511][ T376] smpboot_thread_fn+0x3d3/0xab0 [ 1083.524525][ T376] kthread+0x373/0x450 [ 1083.524539][ T376] ret_from_fork+0x730/0xd60 [ 1083.524550][ T376] ret_from_fork_asm+0x1a/0x30 [ 1083.524561][ T376] [ 1083.524563][ T376] Memory state around the buggy address: [ 1083.524568][ T376] ffff888075111d00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 1083.524576][ T376] ffff888075111d80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 1083.524583][ T376] >ffff888075111e00: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 1083.524588][ T376] ^ [ 1083.524594][ T376] ffff888075111e80: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 1083.524601][ T376] ffff888075111f00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 1083.524607][ T376] ================================================================== [ 1083.568946][ T984] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1083.569259][ T984] cp210x 10-1:0.0: device disconnected [ 1083.629732][ T31] audit: type=1400 audit(1791147432.739:2218): avc: denied { write } for pid=5591 comm="syz-executor" path="pipe:[5295]" dev="pipefs" ino=5295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1083.697745][ T376] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1084.244062][ T376] CPU: 0 UID: 0 PID: 376 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.254975][ T376] Tainted: [L]=SOFTLOCKUP [ 1084.259273][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1084.269391][ T376] Workqueue: ib-unreg-wq ib_unregister_work [ 1084.275286][ T376] Call Trace: [ 1084.278544][ T376] [ 1084.281451][ T376] dump_stack_lvl+0x100/0x190 [ 1084.286109][ T376] vpanic+0x553/0x970 [ 1084.290063][ T376] ? __pfx_vpanic+0x10/0x10 [ 1084.294536][ T376] ? mark_held_locks+0x40/0x70 [ 1084.299274][ T376] ? kobject_uevent_env+0x1383/0x18b0 [ 1084.304628][ T376] panic+0xd1/0xe0 [ 1084.308337][ T376] ? __pfx_panic+0x10/0x10 [ 1084.312723][ T376] ? kobject_uevent_env+0x1383/0x18b0 [ 1084.318134][ T376] ? preempt_schedule_common+0x3c/0xb0 [ 1084.323593][ T376] check_panic_on_warn.cold+0x19/0x34 [ 1084.328980][ T376] end_report.part.0+0x3a/0x90 [ 1084.333762][ T376] kasan_report.cold+0xe/0x18 [ 1084.338459][ T376] ? kobject_uevent_env+0x1383/0x18b0 [ 1084.343945][ T376] ? __pfx_device_namespace+0x10/0x10 [ 1084.349340][ T376] kobject_uevent_env+0x1383/0x18b0 [ 1084.354559][ T376] ? bus_to_subsys+0x114/0x150 [ 1084.359299][ T376] device_del+0x605/0x9b0 [ 1084.363607][ T376] ? __pfx_device_del+0x10/0x10 [ 1084.368442][ T376] ? kobject_put+0xb9/0x640 [ 1084.372923][ T376] disable_device+0x1ea/0x280 [ 1084.377589][ T376] ? __pfx_disable_device+0x10/0x10 [ 1084.382853][ T376] __ib_unregister_device+0x2b4/0x480 [ 1084.388199][ T376] ? process_one_work+0x906/0x1b10 [ 1084.393290][ T376] ? process_one_work+0x906/0x1b10 [ 1084.398394][ T376] ib_unregister_work+0x19/0x30 [ 1084.403220][ T376] process_one_work+0xac7/0x1b10 [ 1084.408167][ T376] ? __pfx_process_one_work+0x10/0x10 [ 1084.413564][ T376] ? lock_acquire+0x1d1/0x380 [ 1084.418249][ T376] ? __pfx_ib_unregister_work+0x10/0x10 [ 1084.423787][ T376] worker_thread+0x5ef/0xe50 [ 1084.428369][ T376] ? __pfx_worker_thread+0x10/0x10 [ 1084.433450][ T376] ? kthread+0x13a/0x450 [ 1084.437702][ T376] ? __pfx_worker_thread+0x10/0x10 [ 1084.442812][ T376] kthread+0x373/0x450 [ 1084.446895][ T376] ? __pfx_kthread+0x10/0x10 [ 1084.451467][ T376] ret_from_fork+0x730/0xd60 [ 1084.456040][ T376] ? __pfx_ret_from_fork+0x10/0x10 [ 1084.461124][ T376] ? __switch_to+0x800/0x10f0 [ 1084.465789][ T376] ? __pfx_kthread+0x10/0x10 [ 1084.470413][ T376] ret_from_fork_asm+0x1a/0x30 [ 1084.475190][ T376] [ 1084.478237][ T376] Kernel Offset: disabled [ 1084.482537][ T376] Rebooting in 86400 seconds..