last executing test programs: 2m37.81605619s ago: executing program 1 (id=511): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1a}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtfilter={0x38, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x3e}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2m37.580998646s ago: executing program 1 (id=514): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000300)={0x0, 0x4, 0x400, 0x0, 0x36f}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x40000, 0x2}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000100)={0x80, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xe8, 0x3}) fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, r9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r11 = timerfd_create(0x9, 0x180800) timerfd_settime(r11, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x8e, 0x0, 0x1, 0x0, r10}) 2m36.615831972s ago: executing program 1 (id=516): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10126, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') preadv(r3, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0) 2m35.495772185s ago: executing program 1 (id=520): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) shutdown(r2, 0x2) close(r2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00010122b00b09058103100002ba07424ae89cf7d629f944a4bedd8607e44fa2444bf40ddf534ff8c07cb1"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x30, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x8, 0x0, [{0x5, 0x2}]}]}}}}}}, 0x0) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)=0x2) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 2m32.257591851s ago: executing program 3 (id=534): rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a000100feffffff000000000005001b00010000008b4f247ed8ec58f263987a0b4c777d5ee6b543d4e41b0570d5b979ff720fa4a2f2b75dab7debcd56a8322978488771b54b7527a44cefeb011c7671e9add9b6ebfdbcddcc033a6e7c339579588580ab0c99aac8879ecd0748bc49657a2474d7d38127b80eec4dd6f6823587d134a5b2a7e331d8919ef0ef4d00c4cc98818c1157834a58fa6a849e9ee8e2eeeb889c855410c87e7600c4e5d71b038b2e004c17f3ed17eed8afd2ad4c282381321bb9ffc7f58469db7ae6dc"], 0x24}}, 0x24008800) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x100, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) r3 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}], 0x40, 0x40000}}], 0x2, 0x0) sched_setaffinity(r3, 0xffffffffffffff9a, &(0x7f0000000140)=0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='bfs\x00', 0x8019, 0x0) 2m30.999538438s ago: executing program 3 (id=538): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5", @ANYRES32, @ANYBLOB="000000000000010185100000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006000000000000000000000018"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r2, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0x0, 0x6e, 0x0, &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r4) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff6900000000002800030014f200000000861f4104bfeacdd5a9007dbeb514f650b583db", 0x2c, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x50, r12, 0x1, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x40c4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x26c, r12, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0xfffffc42, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x0, 0x8, 0x0, 0x1, [{0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xf0}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x81}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x3f7a1de2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x7493fca6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x7346884a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x712905ac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x1de390db}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xfe}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x38}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x6d42d13f}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x7c}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x79ce0862}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xdc, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7afac946}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68f545f8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x179e7af9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7eec7acb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78ee29a8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49d8145a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fe69eae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10d32945}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x607e32d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28496c81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbb4e7ef}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x198433fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56053f18}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c103663}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31dd00f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74ff5cd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f85a67c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43a6660a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeac2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5aab461}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e70}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e43}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x539ab125}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0xfffffffffffffd71, 0xa, 0x86b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c2e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b081354}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1fd7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5283863b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f309358}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6055dc67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73df1ea0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x462c7e4d}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec28}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ee97087}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8938}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc413}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69769e11}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) 2m30.956030957s ago: executing program 1 (id=540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0308000000000000000009000000300003800800010000000000050008000600000014000200766c606e310000000000000000000008"], 0x44}}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="00000000dea601ddc45ac0f0de37dd2dd5145afbf7ec", 0x16, 0x80, &(0x7f0000000340)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0xe, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11, '\x00', r3, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[{0x9, 0x0, 0x0, 0x8}]}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)) add_key$user(0x0, &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000440)="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", 0x107, r5) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000001300)="370c099069efff0700001404db09b4ce1ef77bde4b371532dd16447c1b316e3656c80900f6e7500d6f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b3dc05e298aa9572540dd950307987eef2115e1bcf5115ea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72bbdc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c82488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xba, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x13, &(0x7f0000000080), &(0x7f0000000140)=0x4) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000000)) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0x1) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x181083, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e) recvmmsg(0xffffffffffffffff, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x40000102, 0x0) gettid() 2m30.111642276s ago: executing program 3 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2bd3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x13, 0x1000c8}, 0x20) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x44000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x100, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) 2m29.049939938s ago: executing program 1 (id=550): mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = eventfd(0x20000) io_setup(0x8, &(0x7f0000000780)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) read$eventfd(r3, &(0x7f00000001c0), 0x8) r5 = dup2(r2, r2) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000480)={'\x00', 0x40, 0x3ff003, 0x401, 0x40000004, 0x10}) unlinkat(r2, &(0x7f00000003c0)='./file1\x00', 0x200) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="080057005706000066003300802009000802110000010802110000005050505050505f00ffffffffffffffff6400001101000301857fa8e69c28242497052a01042d1a00041602000000000000007b0047001100000000000001000001710769000100010720760603002f0006000000"], 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, 0x0, &(0x7f00000005c0)) 2m28.254710728s ago: executing program 3 (id=553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) read$FUSE(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_sync_file_enter\x00', r1, 0x0, 0x2}, 0x18) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0x2) syz_open_dev$I2C(0x0, 0x0, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x38, 0x30, 0x2d, 0x39]}}}}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x20}, @void, @val={0xc, 0x99, {0x7ff, 0xc}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, 0x0, 0x44095) r8 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x45, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 2m26.378865273s ago: executing program 3 (id=559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fallocate(r4, 0x20, 0x7, 0x5a58) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}}, 0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r8, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) signalfd4(r8, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES16=r0, @ANYRESOCT=r8], 0x5c}}, 0x24000814) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)={0x24, r3, 0x1, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0x4000080) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x224, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1f8, 0x2, 0x0, 0x1, [@nested={0x1f1, 0x72, 0x0, 0x1, [@generic="32a0c85cfcaff859aa38a1d12c5db9815c7a888b9724ae64708bcd0d64ab4b7690ed20641b97dbf86f4554f6cf9971618f26b9962be1b5a643921322388d69a632230bf1c09e238f3f1cd7932b500122cd06947a8383df9beadb27dff7d29bb3cd4d257756ab1eed98b4c4464d7ea6affaf04580ad2578381a49ab85e887e525da1dc42b41624f3f0aadf84083b5cdd17f001faab83aa64203d3fd87aaf6cbcdeb508c110f4bcce5658b998b7a17a55e33fdda3b1088a6fb4504962b5dea1735f7045494215a243727f2a0049e03e5b9aea58eb877c1", @typed={0x8, 0x12a, 0x0, 0x0, @fd=r0}, @typed={0x9b, 0xe, 0x0, 0x0, @binary="4cb84fcf49decbb280d9c41094bc46737255234b6de9dab28039ffa5a6daea45053c9c74423fa384644b3c81ddf29b6f611812150a2d2dd5fa97518f1e14ed8465618dd5eda08aa7c6525ce4debe274509cfaf477873358284dbafbb3e1f2d11d388d680cf82f2192ef9ddb6141746c37f892ebc51dd30c4fbbb29837c1e2eab20bf22e56550ad96744f254f219f168b25a28b63f9ad2c"}, @generic="b73f8db786a7b594fcc4a2db914c8d948c4ff4bccc39dbf3f8d0f60a33df8019aafc1d876a8484267702e74bed188d30a787e0b1367dae30e9b6a26354fa1df6d5b36507d57f192cd7d37394267381b8841d000b1804724e014ce31bc66f0666893a769ae1ba9ebf0b74df6c841595a6905eab"]}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r10}]}, 0x224}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2m22.433184275s ago: executing program 3 (id=572): mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x2880000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0xffb2, &(0x7f00000002c0)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x7c) r3 = eventfd(0x1) io_setup(0x8, &(0x7f0000000780)=0x0) io_submit(r4, 0x3, &(0x7f0000000800)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x8, 0x0, r3, 0x0, 0x0, 0x80000000}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x400, 0xffffffffffffffff, &(0x7f0000000580)="ac8d92bc2c54ac74f75e077145d6ceca0f71592f4db7f3caed9b587dfb798850afaaac5dccd4beacf7d9465b8879a785feba0cc934fbc36b6e569761c3a1a6a51d5e579b027c99e5cf62da95a7215391857118771816fb1d4207e29cc81617dc4a7e97dd79376129dd59063ee76b447e513288d16fa05c06681f77639778dd9e9750eb58b952cc63d9259eda214e444da40464ba3e0a75e51c0f84534fd46f7966e0fcc4fd0ca22fbb667a330f6f5647ac659872a2d8b27e3145793702227f4c2160f3730adc25", 0xc7, 0x6, 0x0, 0x1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000680)="eca5c41529d9780f055318ae589b49551c99467e8fdf0633167cb93e6460a7b54a7f45408140a229e818aa1b1a22cef9f5f2ffc51881dfcc9ce7b49ae0d72396020953258054e5327c4971c661f3038738f8bece3b9615326f52ef9b621a838a7a80780803b7542ff106c750a2bdb17be34b3964fd5f79997c1d7f4ffd4c941d47a349e278fe48b973d19eee1357c1c7b4707054fdded6c6299883e901b64e68a356af8d8ab86f60475d23d4aa74bc6e725e3f49bfb7ca7ee9ccc57cf75c0225cb9dd0838d1e0cc7569371326f9c91d95f82449a160a77894d73a9a53e0750a46b191ba3921a4254fab3f8c7a81266f89f3823b7", 0xf4, 0x200000000, 0x0, 0x0, r2}]) read$eventfd(r3, &(0x7f00000001c0), 0x8) r5 = dup2(r2, r2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000340)={0x2, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000400)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)=0x9}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000480)={'\x00', 0x40, 0xa, 0x401, 0x40000008, 0x10}) unlinkat(r2, &(0x7f00000003c0)='./file1\x00', 0x200) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) open$dir(&(0x7f0000000380)='./file1\x00', 0x3cb442, 0x46) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="080057005706000066003300802009000802110000010802110000005050505050505f00ffffffffffffffff6400001101000301857fa8e69c28242497052a01042d1a00041602000000000000007b0047001100000000000001000001710769000100010720760603002f0006000000"], 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000840), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x40, 0xffffffff, 0x311}, 0x0, &(0x7f0000000240)) 2m13.77465844s ago: executing program 32 (id=550): mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = eventfd(0x20000) io_setup(0x8, &(0x7f0000000780)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) read$eventfd(r3, &(0x7f00000001c0), 0x8) r5 = dup2(r2, r2) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000480)={'\x00', 0x40, 0x3ff003, 0x401, 0x40000004, 0x10}) unlinkat(r2, &(0x7f00000003c0)='./file1\x00', 0x200) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="080057005706000066003300802009000802110000010802110000005050505050505f00ffffffffffffffff6400001101000301857fa8e69c28242497052a01042d1a00041602000000000000007b0047001100000000000001000001710769000100010720760603002f0006000000"], 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, 0x0, &(0x7f00000005c0)) 2m7.346448662s ago: executing program 33 (id=572): mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x2880000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0xffb2, &(0x7f00000002c0)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x7c) r3 = eventfd(0x1) io_setup(0x8, &(0x7f0000000780)=0x0) io_submit(r4, 0x3, &(0x7f0000000800)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x8, 0x0, r3, 0x0, 0x0, 0x80000000}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x400, 0xffffffffffffffff, &(0x7f0000000580)="ac8d92bc2c54ac74f75e077145d6ceca0f71592f4db7f3caed9b587dfb798850afaaac5dccd4beacf7d9465b8879a785feba0cc934fbc36b6e569761c3a1a6a51d5e579b027c99e5cf62da95a7215391857118771816fb1d4207e29cc81617dc4a7e97dd79376129dd59063ee76b447e513288d16fa05c06681f77639778dd9e9750eb58b952cc63d9259eda214e444da40464ba3e0a75e51c0f84534fd46f7966e0fcc4fd0ca22fbb667a330f6f5647ac659872a2d8b27e3145793702227f4c2160f3730adc25", 0xc7, 0x6, 0x0, 0x1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000680)="eca5c41529d9780f055318ae589b49551c99467e8fdf0633167cb93e6460a7b54a7f45408140a229e818aa1b1a22cef9f5f2ffc51881dfcc9ce7b49ae0d72396020953258054e5327c4971c661f3038738f8bece3b9615326f52ef9b621a838a7a80780803b7542ff106c750a2bdb17be34b3964fd5f79997c1d7f4ffd4c941d47a349e278fe48b973d19eee1357c1c7b4707054fdded6c6299883e901b64e68a356af8d8ab86f60475d23d4aa74bc6e725e3f49bfb7ca7ee9ccc57cf75c0225cb9dd0838d1e0cc7569371326f9c91d95f82449a160a77894d73a9a53e0750a46b191ba3921a4254fab3f8c7a81266f89f3823b7", 0xf4, 0x200000000, 0x0, 0x0, r2}]) read$eventfd(r3, &(0x7f00000001c0), 0x8) r5 = dup2(r2, r2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000340)={0x2, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000400)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)=0x9}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000480)={'\x00', 0x40, 0xa, 0x401, 0x40000008, 0x10}) unlinkat(r2, &(0x7f00000003c0)='./file1\x00', 0x200) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) open$dir(&(0x7f0000000380)='./file1\x00', 0x3cb442, 0x46) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="080057005706000066003300802009000802110000010802110000005050505050505f00ffffffffffffffff6400001101000301857fa8e69c28242497052a01042d1a00041602000000000000007b0047001100000000000001000001710769000100010720760603002f0006000000"], 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000840), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x40, 0xffffffff, 0x311}, 0x0, &(0x7f0000000240)) 15.002230248s ago: executing program 2 (id=960): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 12.823008395s ago: executing program 2 (id=963): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x40000008, r0, 0x0) fanotify_mark(0xffffffffffffffff, 0x7e, 0x8000008, r0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r1 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000440)="070c6e9998a1466ddfe94ed35c2da271b773a71e8ffaae865ec4428d9ed87c16e9aa0134cffe4efb36402e63140c2215e4be547d430bc246d73d11e132ba7c8c4a1c2b93edf3812cb1ba360856766955b67ec142fe4ae0934bbe934145", 0x5d, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0xffffffffffffffff, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) getpid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) 11.793268876s ago: executing program 5 (id=965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket(0x26, 0xa, 0xe0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000005c0)={@loopback, @local, @remote, 0x3, 0x2, 0x5, 0x400, 0xb5, 0x40420000, r7}) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) 10.834535777s ago: executing program 5 (id=967): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) 10.723350476s ago: executing program 2 (id=968): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0xc0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, &(0x7f0000000100)=r1}, 0x20) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) clock_nanosleep(0x7, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"0070491d", 0x0, 0x5, 0x2, 0x0, 0x5, "00000000005a2392a1fdad1a0c00", "426ec62b", '\x00', "0100", ["e86621d9cc668c391f77c506", "3549ffffffffffffff00", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000480)={0x0, 0x0, 0x1, 0xc, 0x0, 0xffffffff, "01e60000000000f600", 0x0, 0x0, 0x6, 0x80}) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000300)="a6ec3bb698d50173256d2f8143ce839f15191c6789fe675bbae41ebbec9799a4f755e958c7a01efc8e74346595fa8f742096183eeae4ca2900585b0aec576230401b829edce27d56bb841d2a57f62890c7537eb665385afc5f7e93e8988816161cc4b56247e470979460bb43e26f13e32ca4dcf7a8bf677ad55efc", 0x7b}, {&(0x7f0000000380)="9e66dbb325d3f3f26db25c0570ce5d8af0e8f0403d7e3ca70f51f8d650852bc35472d24df024711a9af5b564e42cd345b0fb7675721280de35661019bfa5951f66baaff36789d268aad8fc3ed87747b356ad132e74729898b2f85d78638a375acd281b2a64", 0x65}, {&(0x7f0000002500)="073a71b75193f5f19c53c60b922d8869f1387197c66700829b06be0e339c6ae1fca07dd552b1ee191c317e99e887b1d0babd1a68448f82c6db969c48a28edb6a973f3117205de37a7374e15d74bec206de6133fcf1a0dae8b3b6c60ef29dc5f8e0b239573a93a1a00a2879be9730d62e94075b69231349f3021224076e536945be0e9842dc22c8268cd14bdf9a8e1250390c2446aa84083bd58411d9", 0x9c}], 0x3, 0xfffffffe, 0x7ad3) 9.999365011s ago: executing program 5 (id=971): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe76, 0x0, 0x0, 0x0, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x8, 0xfffffffffffffcdc, 0x0}}, 0x10) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000140), 0xfffffe2d) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0xf) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) close_range(r9, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) 9.44651266s ago: executing program 4 (id=972): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) stat(&(0x7f0000000080)='./file2\x00', &(0x7f0000000180)) 8.172175728s ago: executing program 6 (id=975): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000a40)=""/4096) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5", @ANYRES32, @ANYBLOB="000000000000010185100000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000184000000600000000000000"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r2, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0x0, 0x6e, 0x0, &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r4) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff6900000000002800030014f200000000861f4104bfeacdd5a9007dbeb514f650b583db", 0x2c, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x50, r12, 0x1, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x40c4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)={0x26c, r12, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0xfffffc42, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x0, 0x8, 0x0, 0x1, [{0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xf0}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x81}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x3f7a1de2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x7493fca6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x7346884a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x712905ac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x1de390db}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xfe}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x38}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x6d42d13f}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x7c}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x79ce0862}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xdc, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7afac946}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68f545f8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x179e7af9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7eec7acb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78ee29a8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49d8145a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fe69eae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10d32945}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x607e32d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28496c81}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xbb4e7ef}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x198433fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56053f18}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c103663}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31dd00f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74ff5cd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f85a67c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43a6660a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeac2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5aab461}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e70}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e43}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x539ab125}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0xfffffffffffffd71, 0xa, 0x86b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c2e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b081354}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1fd7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5283863b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f309358}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6055dc67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73df1ea0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x462c7e4d}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec28}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ee97087}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8938}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc413}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69769e11}]}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) 8.023317405s ago: executing program 4 (id=976): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 7.989442942s ago: executing program 5 (id=977): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 7.751066699s ago: executing program 0 (id=978): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x40000008, r0, 0x0) fanotify_mark(0xffffffffffffffff, 0x7e, 0x8000008, r0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r1 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000440)="070c6e9998a1466ddfe94ed35c2da271b773a71e8ffaae865ec4428d9ed87c16e9aa0134cffe4efb36402e63140c2215e4be547d430bc246d73d11e132ba7c8c4a1c2b93edf3812cb1ba360856766955b67ec142fe4ae0934bbe934145", 0x5d, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0xffffffffffffffff, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) getpid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) 6.949999389s ago: executing program 4 (id=979): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000300)=[{0x80, 0x0, 0x0, 0x0, @time={0x0, 0x4}, {}, {0x0, 0xb5}, @raw32}, {0x1, 0x0, 0x0, 0x0, @tick=0xc, {}, {}, @quote}], 0x38) poll(&(0x7f0000000340)=[{r0, 0x80c0}], 0x1, 0xffbffffb) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000001c0)=0x4, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001a40)=0x22888, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) recvmmsg(r1, &(0x7f0000001cc0)=[{{&(0x7f0000000280)=@hci, 0x80, &(0x7f0000001680), 0x0, &(0x7f0000001700)=""/128, 0x80}, 0x8}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000200)}, {&(0x7f0000004000)=""/123, 0x7b}, {&(0x7f0000000380)=""/166, 0xa6}], 0x1, &(0x7f0000001900)=""/27, 0x1b}, 0x5}, {{&(0x7f0000001940)=@hci, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/89, 0x59}, {&(0x7f0000001a40)}, {&(0x7f0000001a80)=""/54, 0x36}], 0x3, &(0x7f0000001b00)=""/63, 0x3f}, 0xaeb}, {{&(0x7f0000001b40)=@xdp, 0x80, &(0x7f0000001c80)}}], 0x4, 0x2000, &(0x7f0000001dc0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x80000}]}}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x7d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB]) read$FUSE(r1, &(0x7f0000004080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_open_procfs(r6, &(0x7f0000000100)='mountinfo\x00') sendfile(r7, r7, &(0x7f0000000000)=0x2eb4, 0x2000007ff) write$sndseq(r7, &(0x7f0000001ec0)=[{0xf0, 0x7, 0x2, 0x1, @tick=0x2, {0x2, 0x3}, {0x7, 0x6}, @raw32={[0x2, 0xfffffff8, 0x80000001]}}, {0x1, 0x9, 0xfb, 0x4, @tick=0x401, {0x81, 0xa}, {0x4, 0x5}, @time=@time={0x7f, 0x96e}}, {0x92, 0x9, 0x4, 0x8e, @tick=0x7ff, {0x1, 0x7}, {0xd2, 0x2}, @ext={0xba, &(0x7f0000001e00)="4a93cec51deac7c6d577cc542e92c761d6210ecf4a5f86587f2f807cd75048e7e47795e4de9a46e4d00931640f2f495310b8853ae5c08f4c9ce495e31bd4dd67076c9a436eb12b54710411904d23c1d8bfa112116bbee7aeda2d7e5fd19a5a2c532f9e27ba02f575b712ffd9caa6e2b3916a3a7979cb386f19f96204ac52ec5fb1578c5cda564eb8ce63044bcfc8e4892be2b70d183021c925dd12e0d0fd8688290b75b683b6f43ded067aec529f04fe16be0395d03684a4db5d"}}, {0x4, 0x7, 0xa5, 0x7, @time={0x10000, 0x80000001}, {0x1, 0x6}, {0xc, 0x7}, @note={0x6a, 0x1, 0x7, 0x3, 0x9}}, {0x2, 0x4, 0x0, 0x5, @time={0x3, 0x2}, {0x68, 0xfa}, {0x81, 0x3}, @connect={{0xc5, 0x5}, {0x10, 0x7f}}}, {0x7, 0x7, 0x3, 0x4, @time={0x1ff, 0x3}, {0xf8, 0xb}, {0x80, 0x6b}, @raw32={[0xffff7d1d, 0x12, 0x6]}}, {0x1, 0x5, 0x9, 0x4, @tick=0x10, {0x6, 0x6}, {0xfa, 0x5}, @raw32={[0x7, 0xff, 0x7]}}], 0xc4) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) stat(0x0, &(0x7f0000000140)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080)={0x13}, 0x20) write$FUSE_NOTIFY_DELETE(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="2c33097fb6730020000600009200000000006be3d7d8cea0ef3117000000000000000000000004000000000000000300000000000000272d2d00"], 0x2c) 6.937702603s ago: executing program 5 (id=980): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x1, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000020c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0xa}, 0x9, 0x6, 0x2, 0xf5eb, 0x0, 0x0, 0x3ff}) landlock_restrict_self(0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x44, 0x32, 0xb, 0x5, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8890}, 0x40) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000091c2f20c81403006c05010203010902"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x650, 0x0, 0x118, 0x118, 0x250, 0x250, 0x580, 0x580, 0x580, 0x580, 0x580, 0x6, &(0x7f0000000180), {[{{@ipv6={@private2, @private1, [0xffffff00, 0xff000000, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'syz_tun\x00', 'geneve1\x00', {}, {0xff}, 0x5e, 0x4, 0x2, 0x7c}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x4, 0x0, [0x5, 0xc281, 0x7, 0x7, 0xa95, 0x51ed, 0x3, 0xfffb, 0xffff, 0x1ca, 0xa, 0x400, 0x4, 0x9, 0x3, 0x5], 0x4}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x6, 0x9, 0x50, 0x4, 0x600000, 0x7f, 0x7]}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0x0, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xff, 0xff000000, 0xffffffff], 'veth1_to_team\x00', 'team0\x00', {}, {}, 0x0, 0x6, 0x2}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x4, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3e}, @mcast1, [0x0, 0x80000080, 0xffffffff, 0xff], [0xffffffff, 0x0, 0xff000000, 0xffffffff], 'bridge_slave_0\x00', 'nicvf0\x00', {}, {0xff}, 0x2c, 0x2, 0x4, 0x24}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x8, 0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}, {[0x4d4, 0x4d5], 0x0, 0xe, 0x3}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r4, 0x1, 0x70bd2d, 0x6, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x6c, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x20008081) 6.645175738s ago: executing program 2 (id=981): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) stat(&(0x7f0000000080)='./file2\x00', &(0x7f0000000180)) 6.478095094s ago: executing program 4 (id=982): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6.2617292s ago: executing program 6 (id=983): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000036c0)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000640)="2fdef02a2cc229a3475c35e4f3ab62d2f7f6c473d90b5efe9bdf4226e15d73385ed538bfa1ee75bbb33cdb2730317779ba3cc605a54b5ca6465c43f01e4cd2fe76285eea6cdfd92dfdfeb376fee95386621786d9980f2aeb12f24438495802315961cee4735bbcc5bc8c3136d944d643cf68998513d61da7b437dc4862dd1a5ecf65a60cdb6c8b3caa28bbdf9477ef7ee71c7b4d0033451ee4d2ed983b65750d8deed5d64ae9708da46bd0e4738642fc0af29e4e48b8c8452be6f54d8c642fe6a35cf9dde9443f6748a9d104455ae2d0a9c8cdb45a92", 0xd6}, {&(0x7f00000010c0)="4c52d65b112b767a98a61a63d4a95e542fa2e83517f4b4fc773deb43e526348e17af100d8f505495e441893b9a37b546b1283f8b681190fd55fe38ff60888f2ab8ab2783041e04ab4c4e7237c7595f29ce1d974f349ec29c43d635802dba8677a3721bcf80d45ad763fcd9608837646f1be7932af5f6d706a075a99dce5481d43627869edf1c4537bf4ba908073320f02293913bbfaaf9d6a1b4b1c89991a0f6e6522ce440fff260fc2be323a89d27ddae8739ef02aa61dfdea903f8fde9c05973f403f7424a4a9488f9fc7c7f20e9a0550d0b10bc07fa6a59bce86370a7e12f416ff7b47ce5b50fa2fb32e724225ff2f8433a0b90bd8e33059f1a9f86e346caeb39bbb7eb760cf30d603be73a1150405a9b3e84a719ef357d8be25a43dd8ca7121e3bdee716c96c76a52fd93769f7cb4a2371485ad8cf1c0c71d8cb7502f7f0112a4022f1e008b45105e5fa8b47c38c30b6d0e560a7a2cd149a4eb5f5dd3aaa84818836f2318af4007a13f5ac1d2c3fc4c5c1548eb9c540f755774c710f692c44f5bc22e1cc26b5f6caa16bc7729bdd0a1b1a3200b1143cfb3225b56605cfff324975eeaff808cf0f6155a03e5545ddd20d825e5cb9b92f2701d02e7f4fe384209ea586c20021893ec916e3d22be6bf0ceaf3ec4bc8ac621a61920ca66b33dbe58e576312ed605c383d2f442036636e6178483b8bc0b51da8270e0905ccd697ce41a51826ef8cf3da127b872bc38e6f86cace32a66a5d286f5b616e2d59f6222df2d6a3f9b4a7dd0b54d6cccad181f777f791c120e420bc0bc4ede7a27c94dec098b0d577407c2b15e95b1d0adc4aa0c1156f9a04c28ad081055f77a7c8870fde0712e110d6223a732ffe235e5432694c6cb79f2ba72d0131ecbdf91be0ac43efd5d351a4e24eaa828190128327561b548380253372c97bb42ec902f4569d5389319e1f51055c618a6e6aec0fc52e9d1dca99aa8c72954ca645e1825ac4cce84feddd0232b7911d2b00625966e4bfff6cb3c99a7c9907c1ffe766e53754ff1de69388d20891ff6cadc4699940c65b556f77c9170e0cc40210ea06c8d6c12c4ac08d5d893b7d20b1498c4ab7a62ca9851e0831a7c287ce6a9dde0a7870eb1c016489c2107cf0fee5226cd7e18e16fa4c30380293abf31e0099f4b84773ab00c3666eac0ea7d5f3c2b83dab1209016e8d21fba44092057481cb3089e20051a735da7ccd5b1010b69731bded9a89f708e1ab1d8bb9fb000c9fc656894100eafb4588874b9eb6f514a4a760c5f46213acf767611d2d2973fe5b1c5b4c06147b17674595a572053c261a8199295549b7e3ce0a5916fec6f3d271fbd92360ca496fb31fa5018cdb176695c6b93a8ea0870491ae11416bbbf8f88872a24dd468cf1003f528d6ab67a24efd8ba0532e57d331093800c589831ccdfb9ed37ad09f0fc68e9fe565790f17dbd363658a441d1b9eff5742ecba42f4ac47b31abbca068ab0ca23c38ef3a8e3110c33b3c1dda357ab28ec57750dd829531946b5797d4cc2f2dfda879c15800b4f573dc939d87dd619613caeaa37cf5df39ceac747b0dfe0983dcec613ca301ff94e9346b7b4a58fc12dffa8af73c66d3925f3932b1af3801935d482c0846da2de18f49c22531382e2733c1a496c82d6b21f6895486771f7f16c8f1836956ea69e1444787857e35e1cd97db52faa35900da820e011d01dd0c7c2d51c3b27d5e82d46a0f9fc82b4fcb3bc1fd6452d340919988184b3566f4ccbf4678163e64d0aa37a0903b4d1fbbfeb6587764e0a1d301e032c55a24885f527bb3ad71f178fe07e586a09bf8995cdade358398ff2eba463811945e8e409ea04eeec34451f71d412d848157421aec6891c7eed5e0b8cafa510f49a98f931a27491bb75297e9fd89501ddaf4eb944a8186256a39eaa21440e604143910f9aaa21daef9938e5b5ef0e3d28347eeddd8865b646ff6ed552fe89962c9ebe28a0c19125b6c1b92c64c5535c92ca75ba31edcc4a6ed7156b788ba2780cace496ff134649e1e928f14275996a5d14a85269df8412683359c99be2276945ce5a79a98a93f6554a103fbbeb283e650d7b9ac825b273df61d53628e288f49c293bfd6db0413c446a75fc2248adc1f9477816691b43325584af8d594c65bfd6560ac84c132731fa2de85446434b9f9c56aaec0068c4311451d6e60a615279328d6989d20581cc895ac56b0a523a2a3b53d4886b0e7cb2002ea001176a5c857a95e9ddf1bfc97e455498c5addbad30b148c9f0cc63acac9281fead9b6cd333d4577fedc80a36b747bc1daec1fc1872c6cb88af2a39a9781ddc537bda6237c257e3ff85788e52897ad5f316b9640bbd49ee7c627f4bea7d7c2bcf9155b7de99110b47c27c24cda6d10aec9677c8e2e0414585616d187582f88b20f74e35118331a4c58732011d52d97bfe89e89430bbb0fc8200086bb7939f04bed6adf4111bd290286e1ae25b87f5a0e543d906fa7c91bf7d4e804f237e568dd7f7d2d567165741aee90d5b88d34b8c191d33f861aa374faded2769eca4e62ad71ee454ec6c80ad27c7bcc72a994e4f78abcf38a8f2732f101e8686c2a0a3cf87f97423eabcaeeeaa43d53703e3346315ee0bbae566882f67e59cdc2551f4945fb6f6ccdeda8654904ee6f31ee683b2988e8e19c53d3d94e015bb76ee8ff0d7af0953257e31b7aeb0919a2e2796ad62fbc54fec3a80d7cc05ae4b01abd177d9e080c65f750058e2e7ad05f3dca5f2a6aa6e69eab9bc4960c48b6a9486244a70b50edb86282324d354200c8ef2651b3070d6e75d733ab7b092a31098b8645248515187722a5d5a6f2422c199906d545830229c0051a3e5474b595ce62cc95e0b0b5ece7b7e072975557c62c69905677f7f196d6b3fc52bff9318c9916ef007a455b5ff5b62a67892c85777ba6042eff66993090c925179fb48efed6f3b0afa2486a18e572c451cae2c7dcfc8c2060b18cba94222e5e3032705135f196a5867e4f06e3b7179bbbc92f7b3f9c30d207edde8a6fa426b7a30304090b7aa2532385998a3efe093f7cba61db31b3c4278e9b642b95b8d4fb9858c361ca016e128c54e631230ac71b516c1a9f66d1580f025109f8e5b738f264822d3b410b19f6e27f15445db3d1e8d14c94e8d96a14ccee0671e760bf4f8eeefac837f59b5070f416fab4a391f1fcb1db7350a3163223339465f0ab59330744bd6d1a36dab170d9923ea86da7a9963ae2c09c77d298dfdd44ba28326b15cc04dafd7c395d74891908877cd4f7eee7169f187c619e7e4476c062d3e49301712a3fb92d1c22f4dff47aecd17871b2765e2a26a62d248f631aae0675fa788d4bd0499fdadcdf3461993e2109e7ea9393c25b211126ee8ecb5e5810223669c1bb10a6a7f1e1de568f44b56fcccfae6aeeb2857f8fd58e1447382b10567db98d20626dcc5a43adddde64870b0b7dd454afea82fd00c53a3f9168bda3c6fcd1512fae47da745d39366758484c6955a3a4e157bd970b9a72f982321c07fe25ea07b5b21f5df0a0385313da58f70719c8926b09ca03e1dad814bb5723c35fa37749ff7972265800cdc349a0c19c6256a2a9489573384d7974a510ab4439254709337e3c373b8745c044dd76d89597d094ed58093a1cfe351873d64c1015f5f2bc2b8a621fc94975fd24b3790bd57b5b0748e7182c81d536b539da25878d16917d9bf0cac2dfbc649fe11553cb63e35db268ffd335a155f7366f8ae9813fc7d09be6f653cb8cadba4ddd9f4593b37027fc8439443d3c1f7d97d2857eab5e906d88d3728e77047e66d93ec3e97095293bf08ddefb55359946cfde3e9fe141af2dac2294d25ae432f25befc61fa7c4877e046d1ce8cdc31a008e1b4e4536d2bc0d7c5b57e46bb692763cc62d07db9636fc3f19747023fa9fa4746fd1af4e849ccffec43ab3cd3bddf348fa91003d64f65a6a829b5b94019d3968ccd59aaaba82199f951ddab2ae7958836b979fb08896d918e214bac12004f16a8d22e3f8c006571023dc52d1721289859977ed36c4c987e4a8dd65d5707c5fa8106847defc80d48e1e9d948536c8bff826036c642feace4b13c6d39b6f579f0d6fce5a1df3965e637e7dcad0a1eaa37bcf788360fe04bfbf830d956c47ee4c2892545fa8679803296dbe68fd6a58427267d6f06b8cc7121fff21aca51d3192e64c5961ffe68fa1c93c6e288b2002787b31677cc0fb2999c13ff4e0037c0b2171273e1e3fc9faf14fcf8dc390cfa4e8671d5ff3b4f3925a686b1ddd63fb9c209a73fe58283213e0896f8bd23c7e3e3d8242c458ba4a0271149eaecdb0cdf11822ea535ea3f451c7bb8a20e336086ed66fc0252de7041025be70fccb61be38fc4215ada397bebe70d0de942408b1c03d447e678beb0fd9cef97b2d9656c34cfa9e40e0abb0867830c1e4125f9c2d813a22f1b139e43143237dd6a400dcc2b03d6518d157a58966e3f1b9400e0f22b517d3eae6a6ffb5c43b3bcb87b7e7cee6f327420b98a956f0c0db49f52d5ea5bddb70ec0b502523b2af5c0075dafad2910d7c4c9d5e7d722e34ae00c9f47c6171d1840b9024c5e344320ac91f93d9e11748d7f61af8ac88cbc580b783c07ca12658ff006cc1d1afe1f7857903caffa04d4cbafc8c0b4255512b2deae984e1e252656f5e6d7eed417e047e585ad117d5b4fe1bb0e2b59a6977ae93b97109a1e3c05cf7e90a0b133b726634c872fea64018fce1be155bf093019c8106656882043475b27f2d8949cebaed9a554ec81ea86634ad162da61087cfd883243efad234b685e53f411e00a6e0d2c36d4fa6512966ea06f88c5bf4665ad2c89ba156bf462b43a90cb881d03c528fc61674112e04141fa4f6ceef66f60ce45f081e692a0a586c8caf3f425d62eed569b8bfda9dcb0565fbd933ea4cb5f840bde9a50b11b39299338fb8f18e5830695874e46553c3f08f414265ae185c31b7b08893e045b484830850898bf6b1388b488e4cf0086aed5eeb4360153979b31b5533e2012547f2bfb491ecf7881967712a4f879e92137538a1b8b06d556ce33730dc80d6011a4e302f733da3a0c40338ee98a97475bd054174260739c51e3cb225b28c03ce5b28700a41b1ca5f82fd79f7aee3c9541e24cef9b0c745bb5dbf344d26377b365cd5e887617ee7e012f8e46731f1efc8d34ce960488df512627e9c6cf44075bec00fd6aa2c267360049c1953c5570304f8426d5956a040409ebd335e6a3a7cd2fe41689e1c82b9ef40c4f66f8cae652c76f4f6bd7d4aefc8c593a0c98c084c082ef53857bd13182b8fd9761751fa81cdc1f0f7b204d76e7ae54c3222a872e38808ebc46a27f95553dc976d7338308bbf2cb7bbc503e922e2e77213c54dbbaba5c6365e3ae6938538fc190f2bcb1edcd3c6556efc41e06a69b65e1571e43403f013e5094441dd764099aefdf050705ab7185316364a7bda2c6c8993f072591615ac05f451e0f7e8e9b705b22b398d8bb40b97e37c965cf41fa0be1b64e123c5bba683941d672fa49729522d8ca8074f40fb4af1a96a27194167c18c9de83ba3c3993034d27a43913084c8a354efe2e6b5c7bce184bf88171671a12d2fb92dd917396df4ec76dffa1efb8c57889d2259253922ee7ebbb29331af29582a9e878099e2fcea25fe8b4b96a9a8671e093269756f08fc30e419078e7662a201c8b8b9d7e9059a047a96b79add75024896b9a0f7ac2890cb3907605b60c0f67581915a860799345b04564695c1ccebdc75185966bb2c32377ed0d", 0x1000}, {&(0x7f00000001c0)="cd6f8c0c63090766f98fea5336eb2aa1fa69a5", 0x13}, {&(0x7f0000000d00)="7e093265ba9efe5d272516f769440b60f4bab5b76bfc6629b64e7d2224d62517102fae137b1f62152a0000af61d3aa2d3a6cb4c75598de51d8711d85920ef254cddc485117a60930a0d7e08599f2b6a74d70dd7dd5490a025375cb150c8daa46ae9a418af6d36fe65e0e3b131ee47b7333689d7aa03eb98cc000000000", 0x7d}, {&(0x7f0000000280)="74c0857b5a3cc9b47de2fd97db01868a5fb11aa5ffd93a2b62a83908a1c8e5", 0x1f}, {&(0x7f0000000740)="c6d22a3f3adbe0536155b5e8ef1397535b3285767791c2a9fc66758cbcda21a566ee0a4bad7565810c37c83138c9f4904b6ad4de2e6b12057207323f6cdc17afe46b1a5e41f0c29728667d4b110786be383ef4a96fc6014975438f3529402816e219dd603be53fedc324f0d49d", 0x6d}], 0x6, &(0x7f0000000380)=[@cred={{0x1c}}], 0x20, 0x4000}}, {{&(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f00000008c0)="d4297807cbad0c0ed8d4a35a74733340143e7d2dbf1561c87d01e69a8a436d6c92fa8e94bfa6ff2c22aec514488d22324788d81f12baa166c211e8bf7ac8b97ed6b67009", 0x44}, {&(0x7f0000000940)="75c1584dd3e0189527ea41a95eceb31c328f1e33b882b8f7cafce33cddb5aec33a09e8407c80c243171f5b3c01450d80e73b0a03454e7591e2137a454f9f804da396e2b03e99c463764722d50d6053932f1d4734bba38930368eb318da10fa68847b462e05dc8c7043b898f528328563084c5d54d6dd17f90aaed3b440c10401de641ca1a3a802374ed6ac27b6d3e2ff3cf6b2bb81c5d65b98fe77c53fbd5e2caa39caa862dd80da207761bc6028d6abd4c3", 0xb2}, {&(0x7f0000000a00)="10f15ee96a71efd0b42aad8b693a9bf2813f6caa28b9f3bfd24584c179bef4093f9bed7e61202a9f7ec744e428e6a66f919bfa8c8e582ac95d57c8e60b3b0965796e24eea45900e9daf8bf0578f2c1f8b42938187f8f50dfceeb6366ff0d2fc9dbf2f467682a21c86e8f2cb1f1d086ae5034d2e8bef3e617fafdcadfb37021430a74dbd3447679efe2bad57f04464e23f974dcd0a7d400cde87c631b902076fb7b2fa4b970111293fb38acc2966f5d9d1c860e46d8a76ca3b6198c16dc178c186077645f3b24740ac60705e00d8a55b55fa5028efe95562290f088dc4c91faefb07fa09d6458d74a8e8bd6db3116de611d91c0", 0xf3}, {&(0x7f0000000b00)="eb22332871e17a5bffd430cd98633c4d7e7c255c9c82bba9d5a95dba5b2e096432480e2084276e08a6e5d3ad1719414fca4fbc4bba87258f86a1cf4d5d7eb63ac9a2055d3c2c47466e41eda5f5fbe646c6bc85def6a9d21f973becbfb091481ce2dde514f3a35a2e53f3bae56d0d41f8971b8cdafa3b3ba267a43c0e3209a5e658e1ddcf57a9b3d86b11", 0x8a}, {&(0x7f0000000bc0)="64e24c88a6bdfa29ec8d78856ad12ca6225b1d958ba984209891ec06c9ebb3f3b28617dd82489bf22474ddf4561311568ffa196fe046186a3be1c928e05513510b2a158522517a5396ff1c940ddaa38e84ba7726ba1747ee40ea11cfa32bf188160943e4f5a2de931fbffcd094b413f5e7bf3a66389e21baf42365d281eb4ec84ee2ed64fb1d9baced27a861dc60a01051fc3175b0018864e9e00f7fb2c056c4", 0xa0}], 0x5, &(0x7f0000002440)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000004dd83a600ad4d26afee9236dd6cdabbaf70b3510aa1aaedb9f154217bb7b90288e"], 0x50, 0x801}}, {{&(0x7f0000000dc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000000e40)="1a0338ec960793a05ddef521d532279096c635b76a61119c74f92faca73f2a8d9429d085d7a822b480905947fcadec4a2fbd0d16e5fe85e0352897defed9f51a4a7b5c067083698a998a52e5baf224cb7342d7f7ab6eab02f131a3a6cf480878beba1ce2de7073ca5b0c6878791427fb0ffe102c801f1c590707205f9e81b577d2fb34670875edc6f3873935c81707c12fea0a10cd7205f9233f35f84cc359cd65f9d2cd61704ae450", 0xa9}, {&(0x7f0000000480)="ceab8fd34ca5fec8f666a5bbee08664232ff578052a7103b0ec0692ce868df1642ba902c57370b98edeb29d6f410000e6f74e3b2cefd287685df30a1a8da9bf8da536790e55b0c5ed2d3bbae85247aa61fce6eff923f5e68c1c51d7a80e740f9913e0f9d39a3cefb7189a2a3ecebea045ab8930c0f705c71e037ae1d53f6b319df34b15ffa4a67b42833dd9a6869d3ff19377fa7f9db0179f0e359111971d134ab184bdef96f9768a07038580573e4", 0xaf}, {&(0x7f0000000f40)="f64f901a14a9b28804b4c0c153c5004b75713c3cb80669727335c4df58c3e5c39f58df34e3d5ec4b7a3eff5cce88a861459db394280997b8c718422edd385abbe6e19eadaf731381d1f7c4d9185a2c03badc1fcc4a2fb36d633d0770628979b27e3581fab78bba0f6584daf4824940d1e5908473b51c98c10380d07cf59da943cef3738a34e44ffcc7fe9b35a2a3e8317583c99bc4f52fb255bfd2cbbe89866366", 0xa1}, {&(0x7f00000020c0)="85770ce4c8de46a0a060310d6bdaf3838668e63d949948e3de7b111ea412fdc0aec71c7d33777a6a37b48cdd5c87b7e97a4908e6808c8b30cb27d8d2ef91bf118d968557df8e03217c0aba4747c88d5969642a6e01348c0c5d1ae8c77f69b3147ada86c51a8c6057015904bfb67c71e1956840b1a499c19b65e24abac39c2b5383a647548342d8f0d0e1daef07844d821277f5ac484ad2b470c470689babd651b6e2fdba1e999a2d7da6873ca84addbc485c603b2932d3257a29ab2835308c2155af19947ce3f0c8c627937a702329cd0ab674fe1e12d4c2007e37063beb2eb72f3dcdd2a314cc48a8dbf99f", 0xec}, {&(0x7f00000021c0)="74bc3c5a47ec704a5dfe680f46d51c725dcc76af97116867001667a38a9c53f4417f26d4ead9e9b379c730f6f8422344559423dce06d4041870d6c0f3bee2aeaa5e26348add77b74275682e34aeb726c006e5b7e317d5f8b6426e572532ef601437b172f10aac549f545477dfc1f3e74fb046b555c12a704d514d5", 0x7b}, {&(0x7f0000002240)="614823874436922d9205747ffd6907d0e2fd91fdda6f47d204374351dcb545ef2ba5a0404a9acf8db90bf0f79111c5f91851bf870c9b35e14097960d3d2a6a3a680d469c9a33613bf70dc02f13477d8b3965f266fbe565efeaf427eb7a752199716d4428be218cc941c3498cacea32d34f580da3f702ef3c1e6fa34ba9e07ca4ee7f57c0c7f594ebe543aa810296df815df52be8d0be2c3eb14a63b72a6bca22f5e8bd8d80e413d419d8ca898f1a22c01d4eabcd3a353a6fb4de36c20802dc89c797f9712de4df603ebd3625b6afde2f62b41f8a325f0fac72b017ca3fb459ceb50e30", 0xe3}], 0x6, &(0x7f0000003580)}}], 0x3, 0x20008000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000d80)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRESDEC=r3], 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42, @multicast}, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x10, 0x2000008c, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b0000000000000000180400", @ANYRES32], 0x0, 0x18, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, 0x0, 0x210, 0x102, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4000af, 0x5, 0x6, 0x100bf2}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf25090002007308000000000000080041007369770014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x5, r3, 0x2, 0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) dup(r10) 5.511182164s ago: executing program 2 (id=984): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket(0x26, 0xa, 0xe0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000005c0)={@loopback, @local, @remote, 0x3, 0x2, 0x5, 0x400, 0xb5, 0x40420000, r7}) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) 5.444254481s ago: executing program 4 (id=985): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) 4.411629821s ago: executing program 2 (id=986): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8878, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0xcca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$loop(&(0x7f0000000040), 0x80000000, 0x185083) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) pipe2$9p(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='vfat\x00', 0x10, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) socket$isdn_base(0x22, 0x3, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xd1ec, 0x400, 0x3, 0x5}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000280)={0x9, 0x0, 0x400, 0x9, 0x400, 0x8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x38bc, &(0x7f00000005c0)={0x0, 0x0, 0x10100, 0x2, 0xfffffffd}, &(0x7f00000001c0), &(0x7f0000000100)) 4.212768071s ago: executing program 4 (id=987): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x6f2f, &(0x7f0000000300)={0x0, 0x18fc, 0x8, 0x800002, 0x240}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, 0x0, 0x24004004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x5, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f00000000c0)=""/38, 0x26}], 0x1, 0x80000001, 0x3) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 4.122357667s ago: executing program 0 (id=988): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="bf7ccc3789dff7ca7b0f7e3c7e834ce31b7fdf43507456d44faa1ec006824cb2d4505e6065316beee81a023d71a78293fdd6f6a17a7b47c291f2d17e53de7e4a297267d3216bdb8b5f983202938eeac6a63ceeb3b6", @ANYRES32=0x0, @ANYRES64=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file1\x00', 0x10180, 0x8) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, 0x0) fcntl$setlease(r0, 0x400, 0x0) 3.97557695s ago: executing program 0 (id=989): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x40400c0) mkdir(0x0, 0x21) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) unshare(0x80) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000f40)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRES64=r1, @ANYBLOB="7591c0f0f05637045927b483094a005210569e232d1e71ffd00949", @ANYRES32, @ANYRES64=0x0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x41000, 0x12, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 3.787712547s ago: executing program 6 (id=990): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.287132959s ago: executing program 5 (id=991): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0xc0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, &(0x7f0000000100)=r1}, 0x20) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) clock_nanosleep(0x7, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"0070491d", 0x0, 0x5, 0x2, 0x0, 0x5, "00000000005a2392a1fdad1a0c00", "426ec62b", '\x00', "0100", ["e86621d9cc668c391f77c506", "3549ffffffffffffff00", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000480)={0x0, 0x0, 0x1, 0xc, 0x0, 0xffffffff, "01e60000000000f600", 0x0, 0x0, 0x6, 0x80}) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000300)="a6ec3bb698d50173256d2f8143ce839f15191c6789fe675bbae41ebbec9799a4f755e958c7a01efc8e74346595fa8f742096183eeae4ca2900585b0aec576230401b829edce27d56bb841d2a57f62890c7537eb665385afc5f7e93e8988816161cc4b56247e470979460bb43e26f13e32ca4dcf7a8bf677ad55efc", 0x7b}, {&(0x7f0000000380)="9e66dbb325d3f3f26db25c0570ce5d8af0e8f0403d7e3ca70f51f8d650852bc35472d24df024711a9af5b564e42cd345b0fb7675721280de35661019bfa5951f66baaff36789d268aad8fc3ed87747b356ad132e74729898b2f85d78638a375acd281b2a64", 0x65}, {&(0x7f0000002500)="073a71b75193f5f19c53c60b922d8869f1387197c66700829b06be0e339c6ae1fca07dd552b1ee191c317e99e887b1d0babd1a68448f82c6db969c48a28edb6a973f3117205de37a7374e15d74bec206de6133fcf1a0dae8b3b6c60ef29dc5f8e0b239573a93a1a00a2879be9730d62e94075b69231349f3021224076e536945be0e9842dc22c8268cd14bdf9a8e1250390c2446aa84083bd58411d9", 0x9c}], 0x3, 0xfffffffe, 0x7ad3) 2.54530184s ago: executing program 0 (id=992): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1ba75d71e39c2e00000000000000000004000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000040001f2000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r7, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r4, 0xffffffffffffffff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0xffffffffffffff33) 2.41226855s ago: executing program 6 (id=993): memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) prctl$PR_SET_DUMPABLE(0x4, 0x2) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) gettid() 1.463729189s ago: executing program 0 (id=994): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) 1.051788765s ago: executing program 6 (id=995): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x6f22, &(0x7f0000000500)={0x0, 0x4fff, 0x2}, &(0x7f0000000000), &(0x7f0000000180)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000fc60ffff00000100010081af4f54800c0012800800de800400588000cf2305d5494df59fe63273b74e8c76ccefcba7ddfab107f6aa1f3fed25dfec500469a40ebfee24aa67cfb9168db3cf93b8075514f8d9dbcb91033e59ba39a034fad100008ccb64337dd29814e9729c49e38286c012bd6ca3133c03341f818f95236a4ed9af27519763242ee02e4fcdfbc327f953029993e1402473c035890f8dbef5a6f26953081253cd9ca0722044cca15a5f09a9ecfc69acc4bd4992aa7c9568647255036e55bfb4739d65a897252360121b9f492e3e1af6d861d4136c6f779f9da0a095aafc3d55cea14b4fe2e0f66b1d3f5cb51044f75e7e3d67bcbddcc272a32e027ebe47ac094eb0899a"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0x20044840) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES64=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x48) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='ip_vti0\x00', 0x10) sendto$inet(r3, &(0x7f0000000300)='\b\x00', 0x2, 0x3ca611852b6aee4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r6, 0x80047437, 0xfffffffffffffffe) 993.937755ms ago: executing program 0 (id=996): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) pipe2$watch_queue(&(0x7f0000000040), 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe76, 0x0, 0x0, 0x0, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x8, 0xfffffffffffffcdc, 0x0}}, 0x10) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000140), 0xfffffe2d) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0xf) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000080)=@phonet={0x23, 0x40, 0x9, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="97fbce5ee86c852f3f4caf218abcc87a2bd0a2d75e8f5ceea1b4f5a76c97d329b959a4630e16b277e3c5a05338930bcfaedb6c28dd0fbacb89d963672bd9e2402f0dbfeff337a5bd1fd15fbecc431e8ca540223518e72a7ccd0a125dc096dfbe698d57ef9c6260f44de0a8dbb98b88c23028a22f1e20d98d340cf7d3183954a6888ba0a5995224e5985d6b09e697549ca640c28dd985cba2a2ae20248e4b1bf51811ecfb6a7962b0d5ba959d129907f659d997fee7eadb497ca6c02446deb661e699d9", 0xc3}, {&(0x7f0000000280)="993ec16d5fd51f09cee8bea90029", 0xe}], 0x2, &(0x7f0000000500)=[{0x88, 0x114, 0x2, "55c96f68266f4fb3600603bf14f854ddd614b200f221d04bdc6bf5dd8576acf87467ee84c2584f5918fc147dba6e0644f429a68c2394f573e42f098f2361c439f2417c4d44c701f432b4b6bba5ccda4244ac4d8f6f87ec69f5ef29f76fc8a684bfcf403805ade103c632f2684877ab933733c3cc90"}, {0xd8, 0x108, 0x1, "14b4d3c6ce0e820604ec6473fd47fbb760b4a8a09716a0713e6de62816f7770be58d888e2d7cadf34f69e437408fb8ca2c0e285a3c205a9aff1ce98f444840da2fc8e46b57799091d15a5420380a7bdfed5c1a76dc9d9331f9206570c548c633fd461ef484a0d4da239882b857752edf02c394de48dace0e74c61e96fc4b5ceb8e2f2e9cd0cb210ed0fce9c3fc2848e6dc3cc62bd02d7e1eaa5f6ed8fee840f83f69c477bf670e20ace95bcbf7aa4dc4ccdba7a26dc4444d14125003e9fb92a9f78cb3fcb4"}, {0x68, 0x10d, 0xfff, "cc32b1f87c103ae48271e4c8948c588caec72af6616de889da57a56c7a1e18f88f355ad0e095d252b86b042e4a0c0fa762951b3051bf8e4ba8ff6344b21f1196b78c32562bfc24bafa94d10ad171b5100417b6b6"}, {0xf8, 0x6, 0x5, "52b5669de74736cdb3d10f1122d0e8d7ecfe1c91e1de7a6c5fdab6d262d5e61a51fdfc5382f55d9ce4b715b618c8e56c444bb6d83c92e011a2fb1efc4d0af75c9f763c145d2e09e61a6b9bf1ac1bb66aa3692d306cbf666cdfd0052d50e7032b51bd08219b6ec4bdf120780e171d61f8c93731a432dd53d840fd817106df99d1d768ac629ab18ac76d0ea2a9ad0b335ea66eeab0060305ba74e86f0db7e35153f7b659d5050477b859b6b7a6779009311e3b9ad767ccc49aea8531f8c0e86a2fa160c71d1732b8c4f4cf352be327168d607eb91d2930eeeb4fcce9be9c505004d108223fc546"}, {0x1010, 0x3a, 0xff, "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"}, {0x38, 0x0, 0x5, "3c69a1803bed5a96e6d000a5cf477fde6ec6957107258525e67bca4991fa66306c5ae91b09b41b36"}, {0x30, 0x10a, 0x2, "08a1f3ced7e304b1fccd94c00ecb7d112327cf561ab02ebc0df49a892965"}, {0x58, 0x1, 0xff, "8a568e88488832fd5cce3ae9484fee740416e4a8d4a587436939e13ce65a890922bf366dcd16a60b0a0e0985ba0ca1a4c68d62fc04d74e0ee0bb95f10055a41d0969"}, {0xb8, 0x10e, 0x5e8, "598692b88486f93e4fd2309e20fa84e6720ff76b842c8fa58117e966ca2b705145579c235b5f88bbfc4ddb8e39981bb48530a1f5a278f023aeabe8e26c79a5c7ba783c567e0475b8221f38f00be362e659dfe9b6eeb01eea9eaa19783e94f425ea2ea739526d5f96d1f7a9041ad9c65fec906c809f5712d5e9b2b0962ac13462c788fa19544350ffa45b4b633ef6a6cc583538707c7413a8bbfe23fe37fe6b3b68ddf8fb"}, {0x1010, 0x116, 0x2, "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"}], 0x2458}, 0x0) 0s ago: executing program 6 (id=997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x7c2}) socket$kcm(0x11, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): : couldn't find an available UDC or it's busy [ 181.769293][ T7399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.872219][ T7401] process 'syz.4.363' launched '/dev/fd/7' with NULL argv: empty string added [ 182.312118][ T30] audit: type=1400 audit(1744779352.060:399): avc: denied { execute_no_trans } for pid=7396 comm="syz.4.363" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.341489][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.354553][ T7406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.842896][ T7406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.892067][ T9] usb 3-1: USB disconnect, device number 13 [ 184.203008][ T7411] tmpfs: Bad value for 'mpol' [ 184.225402][ T7411] nfs: Unknown parameter '' [ 184.654188][ T7404] infiniband syz1: set active [ 184.664009][ T7404] infiniband syz1: added syz_tun [ 184.671293][ T7404] syz1: rxe_create_cq: returned err = -12 [ 184.677267][ T7404] infiniband syz1: Couldn't create ib_mad CQ [ 184.684347][ T7404] infiniband syz1: Couldn't open port 1 [ 184.699837][ T9] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 184.729250][ T7404] RDS/IB: syz1: added [ 184.734215][ T7404] smc: adding ib device syz1 with port count 1 [ 184.743367][ T7404] smc: ib device syz1 port 1 has pnetid [ 185.109752][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.117779][ T9] usb 3-1: config 0 has no interface number 0 [ 185.368735][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.391308][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 185.435651][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.497243][ T9] usb 3-1: config 0 descriptor?? [ 185.516186][ T9] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 185.926484][ T7430] block device autoloading is deprecated and will be removed. [ 186.401335][ T9] usb 3-1: USB disconnect, device number 14 [ 188.232264][ T7456] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 188.249904][ T7456] audit: out of memory in audit_log_start [ 188.678555][ T7464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=640 sclass=netlink_route_socket pid=7464 comm=syz.4.379 [ 188.786912][ T5911] usb 4-1: USB disconnect, device number 12 [ 188.936163][ T7474] netlink: 'syz.3.383': attribute type 10 has an invalid length. [ 188.944601][ T7474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.383'. [ 188.954036][ T7474] batadv0: entered promiscuous mode [ 188.959252][ T7474] batadv0: entered allmulticast mode [ 188.966704][ T7474] bridge0: port 4(batadv0) entered blocking state [ 188.973478][ T7474] bridge0: port 4(batadv0) entered disabled state [ 188.987570][ T7474] bridge0: port 4(batadv0) entered blocking state [ 188.994102][ T7474] bridge0: port 4(batadv0) entered forwarding state [ 189.823906][ T5910] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 189.833335][ T5910] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 189.851359][ T7474] bond0: (slave dummy0): Releasing backup interface [ 189.883049][ T7474] batman_adv: batadv0: Adding interface: dummy0 [ 189.980610][ T7474] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.300992][ T7474] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 190.359125][ T30] audit: type=1400 audit(1744779360.110:400): avc: denied { create } for pid=7480 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 190.813408][ T30] audit: type=1400 audit(1744779360.110:401): avc: denied { accept } for pid=7480 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 191.129122][ T30] audit: type=1400 audit(1744779361.300:402): avc: denied { bind } for pid=7485 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.148148][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.168077][ T7486] netlink: 476 bytes leftover after parsing attributes in process `syz.3.386'. [ 191.187426][ T30] audit: type=1400 audit(1744779361.340:403): avc: denied { accept } for pid=7485 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.239433][ T30] audit: type=1400 audit(1744779361.340:404): avc: denied { write } for pid=7485 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.283913][ T30] audit: type=1400 audit(1744779361.340:405): avc: denied { read } for pid=7485 comm="syz.3.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.709684][ T58] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 192.092839][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 192.110211][ T58] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 192.146202][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 192.172706][ T58] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 192.201517][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 192.202658][ T58] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 192.229034][ T7508] netlink: 80 bytes leftover after parsing attributes in process `syz.1.391'. [ 192.232600][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.308007][ T7508] kvm: pic: non byte write [ 192.368005][ T7515] afs: Unknown parameter 'dy' [ 193.326482][ T30] audit: type=1400 audit(1744779363.390:406): avc: denied { bind } for pid=7510 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 193.657711][ T58] usb 3-1: Product: syz [ 193.663136][ T58] usb 3-1: Manufacturer: syz [ 193.667812][ T58] usb 3-1: SerialNumber: syz [ 193.682503][ T58] usb 3-1: config 0 descriptor?? [ 193.690671][ T58] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 193.704423][ T30] audit: type=1326 audit(1744779363.870:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.1.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcef8e169 code=0x7fc00000 [ 193.755111][ T30] audit: type=1326 audit(1744779363.880:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.1.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdcef8e169 code=0x7fc00000 [ 193.780635][ T30] audit: type=1326 audit(1744779363.880:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.1.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcef8e169 code=0x7fc00000 [ 193.815238][ T30] audit: type=1326 audit(1744779363.880:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.1.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcef8e169 code=0x7fc00000 [ 193.840716][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.847022][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.868722][ T30] audit: type=1326 audit(1744779363.880:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.1.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcef8e169 code=0x7fc00000 [ 193.901897][ T58] scsi host1: usb-storage 3-1:0.0 [ 193.916221][ T58] usb 3-1: USB disconnect, device number 15 [ 193.921019][ T5898] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 193.933685][ T30] audit: type=1326 audit(1744779363.880:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.1.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcef8e169 code=0x7fc00000 [ 193.962287][ T30] audit: type=1326 audit(1744779363.880:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.1.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcef8e169 code=0x7fc00000 [ 193.989681][ T30] audit: type=1326 audit(1744779363.880:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.1.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcef8e169 code=0x7fc00000 [ 194.029730][ T30] audit: type=1326 audit(1744779363.880:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7504 comm="syz.1.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdcef8e169 code=0x7fc00000 [ 194.237204][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 194.272703][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.356602][ T5898] usb 4-1: config index 0 descriptor too short (expected 34347, got 43) [ 194.369956][ T7536] fuse: blksize only supported for fuseblk [ 194.488665][ T5898] usb 4-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 194.593473][ T5898] usb 4-1: config 31 has an invalid descriptor of length 0, skipping remainder of the config [ 194.609414][ T5898] usb 4-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 194.618908][ T5898] usb 4-1: config 31 has no interface number 0 [ 194.645920][ T5898] usb 4-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 194.661482][ T5898] usb 4-1: config 31 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 194.672075][ T5898] usb 4-1: config 31 interface 81 has no altsetting 0 [ 194.683291][ T5898] usb 4-1: string descriptor 0 read error: -22 [ 194.689791][ T5898] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 194.698987][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.738047][ T5898] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:31.81/input/input26 [ 195.040388][ T7555] afs: Unknown parameter 'dy' [ 195.094066][ T5898] usb 4-1: USB disconnect, device number 13 [ 196.148532][ T7574] FAULT_INJECTION: forcing a failure. [ 196.148532][ T7574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.189256][ T7574] CPU: 0 UID: 0 PID: 7574 Comm: syz.3.412 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 196.189283][ T7574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.189293][ T7574] Call Trace: [ 196.189299][ T7574] [ 196.189305][ T7574] dump_stack_lvl+0x16c/0x1f0 [ 196.189333][ T7574] should_fail_ex+0x512/0x640 [ 196.189355][ T7574] _copy_from_user+0x2e/0xd0 [ 196.189376][ T7574] kvm_arch_dev_ioctl+0x3c9/0x760 [ 196.189399][ T7574] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 196.189420][ T7574] ? do_vfs_ioctl+0x512/0x1990 [ 196.189443][ T7574] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 196.189472][ T7574] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 196.189503][ T7574] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 196.189527][ T7574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 196.189547][ T7574] kvm_dev_ioctl+0x787/0x1ad0 [ 196.189576][ T7574] ? hook_file_ioctl_common+0x145/0x410 [ 196.189593][ T7574] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 196.189616][ T7574] ? selinux_file_ioctl+0x180/0x270 [ 196.189638][ T7574] ? selinux_file_ioctl+0xb4/0x270 [ 196.189663][ T7574] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 196.189685][ T7574] __x64_sys_ioctl+0x190/0x200 [ 196.189709][ T7574] do_syscall_64+0xcd/0x260 [ 196.189733][ T7574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.189749][ T7574] RIP: 0033:0x7fcbbeb8e169 [ 196.189763][ T7574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.189778][ T7574] RSP: 002b:00007fcbbf936038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.189795][ T7574] RAX: ffffffffffffffda RBX: 00007fcbbedb5fa0 RCX: 00007fcbbeb8e169 [ 196.189805][ T7574] RDX: 0000200000000280 RSI: 00000000c008ae09 RDI: 0000000000000005 [ 196.189815][ T7574] RBP: 00007fcbbf936090 R08: 0000000000000000 R09: 0000000000000000 [ 196.189824][ T7574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.189834][ T7574] R13: 0000000000000000 R14: 00007fcbbedb5fa0 R15: 00007ffd93f1cd48 [ 196.189854][ T7574] [ 196.769932][ T5911] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 196.942820][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 196.967867][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.004615][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.017382][ T5911] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 197.067155][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.105379][ T5911] usb 4-1: config 0 descriptor?? [ 197.325663][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.478750][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.059786][ T58] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 198.091275][ T7604] netlink: 'syz.0.421': attribute type 1 has an invalid length. [ 198.099646][ T5899] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 198.111212][ T7603] delete_channel: no stack [ 198.274481][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 198.282529][ T58] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 198.292281][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.300402][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 198.368737][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.381316][ T58] usb 2-1: config 0 descriptor?? [ 198.443006][ T58] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 198.469272][ T5899] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 198.579186][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.651080][ T5899] usb 3-1: config 0 descriptor?? [ 198.864390][ T30] kauditd_printk_skb: 607 callbacks suppressed [ 198.864423][ T30] audit: type=1400 audit(1744779369.040:1023): avc: denied { read } for pid=7592 comm="syz.1.418" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 198.900132][ T30] audit: type=1400 audit(1744779369.040:1024): avc: denied { open } for pid=7592 comm="syz.1.418" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 198.952687][ T30] audit: type=1400 audit(1744779369.040:1025): avc: denied { ioctl } for pid=7592 comm="syz.1.418" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x534c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 198.997380][ T5899] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 199.160601][ T58] gspca_nw80x: reg_r err -110 [ 199.166269][ T58] nw80x 2-1:0.0: probe with driver nw80x failed with error -110 [ 199.430834][ T7619] dlm: Unknown command passed to DLM device : 0 [ 199.430834][ T7619] [ 199.488905][ T5911] usbhid 4-1:0.0: can't add hid device: -71 [ 199.511692][ T5911] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 199.547144][ T5911] usb 4-1: USB disconnect, device number 14 [ 199.746875][ T5898] usb 3-1: USB disconnect, device number 16 [ 199.921161][ T5911] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 200.029829][ T58] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 200.089635][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 200.096283][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.108269][ T5911] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.117963][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.127895][ T5911] usb 4-1: config 0 descriptor?? [ 200.201417][ T58] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.213290][ T58] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.223168][ T58] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.232250][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.242727][ T7629] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 200.253405][ T58] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.342632][ T5911] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 200.542050][ T5911] usb 2-1: USB disconnect, device number 13 [ 200.691578][ T30] audit: type=1400 audit(1744779370.870:1026): avc: denied { create } for pid=7642 comm="syz.0.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.765926][ T58] usb 5-1: USB disconnect, device number 15 [ 200.996240][ T5898] usb 4-1: USB disconnect, device number 15 [ 201.939655][ T58] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 202.239717][ T58] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 202.305599][ T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.319224][ T58] usb 3-1: config 0 has no interface number 0 [ 202.325714][ T58] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 202.341322][ T58] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 202.359868][ T5898] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 202.359901][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.393085][ T58] usb 3-1: Product: syz [ 202.402511][ T58] usb 3-1: Manufacturer: syz [ 202.411282][ T58] usb 3-1: SerialNumber: syz [ 202.428732][ T58] usb 3-1: config 0 descriptor?? [ 202.441008][ T7657] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.519795][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 202.535001][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.548422][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.567579][ T5898] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 202.576957][ T5898] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 202.587651][ T5898] usb 4-1: Manufacturer: syz [ 202.601724][ T5898] usb 4-1: config 0 descriptor?? [ 202.681350][ T58] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.706080][ T58] usb 3-1: MIDIStreaming interface descriptor not found [ 202.761703][ T58] usb 3-1: USB disconnect, device number 17 [ 202.981356][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.090370][ T7678] siw: device registration error -23 [ 203.420111][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.476710][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.594408][ T30] audit: type=1400 audit(1744779373.770:1027): avc: denied { connect } for pid=7675 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.631122][ T30] audit: type=1400 audit(1744779373.770:1028): avc: denied { bind } for pid=7675 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.666673][ T30] audit: type=1400 audit(1744779373.840:1029): avc: denied { setattr } for pid=7675 comm="syz.1.442" path="socket:[13846]" dev="sockfs" ino=13846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.754608][ T30] audit: type=1400 audit(1744779373.930:1030): avc: denied { write } for pid=7675 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 203.847834][ T7686] syz_tun: entered allmulticast mode [ 203.874286][ T7685] syz_tun: left allmulticast mode [ 203.895842][ T7688] nfs: Unknown parameter '' [ 204.365320][ T30] audit: type=1400 audit(1744779374.540:1031): avc: denied { nlmsg_write } for pid=7695 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 204.575728][ T30] audit: type=1400 audit(1744779374.750:1032): avc: denied { setopt } for pid=7703 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 204.900046][ T9] usb 4-1: USB disconnect, device number 16 [ 205.516952][ T7716] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 205.858524][ T7716] bond1: entered promiscuous mode [ 205.864725][ T7716] bond1: entered allmulticast mode [ 205.952273][ T7716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.084136][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 206.093072][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 206.109725][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 206.169873][ T58] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 206.180882][ T30] audit: type=1400 audit(1744779376.350:1033): avc: denied { watch watch_reads } for pid=7730 comm="syz.3.457" path="/88" dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 206.431429][ T58] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 206.445545][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.479778][ T58] usb 2-1: config 0 has no interface number 0 [ 206.488515][ T58] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 206.521709][ T58] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 206.537744][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.556472][ T58] usb 2-1: Product: syz [ 206.566166][ T58] usb 2-1: Manufacturer: syz [ 206.584781][ T58] usb 2-1: SerialNumber: syz [ 206.607924][ T58] usb 2-1: config 0 descriptor?? [ 206.628648][ T7723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 207.415905][ T58] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.450255][ T58] usb 2-1: MIDIStreaming interface descriptor not found [ 208.089921][ T58] usb 2-1: USB disconnect, device number 14 [ 208.340661][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.373939][ T5869] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 208.385652][ T5899] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 208.652704][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 208.652740][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 208.723280][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 208.822769][ T7756] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 0, id = 0 [ 208.822885][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 208.850560][ T5869] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 208.861074][ T7755] IPVS: stopping backup sync thread 7756 ... [ 208.870413][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.881702][ T5869] usb 3-1: config 0 descriptor?? [ 208.886857][ T5899] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 208.900717][ T5869] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input27 [ 208.910136][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.925448][ T5899] usb 5-1: config 0 descriptor?? [ 208.937372][ T5899] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input28 [ 209.710109][ T58] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 209.750411][ T7771] nfs: Unknown parameter '/' [ 209.904257][ T58] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 210.065321][ T58] usb 4-1: config 0 has no interface number 0 [ 210.073590][ T7770] nfs: Unknown parameter '/' [ 210.085120][ T58] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 210.104741][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.114522][ T58] usb 4-1: Product: syz [ 210.116162][ T5181] bcm5974 3-1:0.0: could not read from device [ 210.118755][ T58] usb 4-1: Manufacturer: syz [ 210.133445][ T58] usb 4-1: SerialNumber: syz [ 210.220587][ T5869] bcm5974 3-1:0.0: could not read from device [ 210.247296][ T5181] bcm5974 3-1:0.0: could not read from device [ 210.264256][ T5869] input: failed to attach handler mousedev to device input27, error: -5 [ 210.310729][ T58] usb 4-1: config 0 descriptor?? [ 210.332404][ T5181] bcm5974 3-1:0.0: could not read from device [ 210.347745][ T5899] bcm5974 5-1:0.0: could not read from device [ 210.361530][ T5869] usb 3-1: USB disconnect, device number 18 [ 210.367652][ T5181] bcm5974 3-1:0.0: could not read from device [ 210.379279][ T5899] input: failed to attach handler mousedev to device input28, error: -5 [ 210.391453][ T5181] bcm5974 5-1:0.0: could not read from device [ 210.409439][ T5181] bcm5974 5-1:0.0: could not read from device [ 210.417093][ T5899] usb 5-1: USB disconnect, device number 16 [ 210.609250][ T30] audit: type=1400 audit(1744779380.780:1034): avc: denied { map } for pid=7760 comm="syz.3.467" path="/dev/ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 210.632728][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.679959][ T30] audit: type=1400 audit(1744779380.780:1035): avc: denied { execute } for pid=7760 comm="syz.3.467" path="/dev/ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 212.199704][ T7795] fuse: Bad value for 'fd' [ 212.269620][ T9] Process accounting resumed [ 212.397199][ T5898] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 212.674052][ T58] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware [ 212.710982][ T5898] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 212.711150][ T30] audit: type=1400 audit(1744779382.890:1036): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 212.720416][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.766497][ T5898] usb 3-1: config 0 has no interface number 0 [ 212.773047][ T5898] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 212.785895][ T7801] netlink: 44 bytes leftover after parsing attributes in process `syz.1.477'. [ 212.809453][ T5898] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 212.818923][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.839354][ T5898] usb 3-1: Product: syz [ 212.859153][ T5898] usb 3-1: Manufacturer: syz [ 212.884696][ T5898] usb 3-1: SerialNumber: syz [ 212.964651][ T58] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 212.972761][ T30] audit: type=1400 audit(1744779383.140:1037): avc: denied { firmware_load } for pid=58 comm="kworker/1:1" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=376 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 212.998516][ T58] dib0700: firmware download failed at 7 with -22 [ 213.106074][ T7808] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 213.118602][ T7808] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 213.915392][ T58] usb 4-1: USB disconnect, device number 17 [ 214.010805][ T5898] usb 3-1: config 0 descriptor?? [ 214.069670][ T7793] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 214.139779][ T7811] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 214.413923][ T5898] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.425860][ T5898] usb 3-1: MIDIStreaming interface descriptor not found [ 215.295546][ T7805] delete_channel: no stack [ 215.589570][ T5898] usb 3-1: USB disconnect, device number 19 [ 215.600101][ T30] audit: type=1400 audit(1744779385.690:1038): avc: denied { write } for pid=7821 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 215.612814][ T7829] zonefs (nullb0) ERROR: Not a zoned block device [ 215.620561][ T7826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.130072][ T7843] siw: device registration error -23 [ 216.556247][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.458487][ T7855] netlink: 'syz.3.493': attribute type 1 has an invalid length. [ 217.713884][ T7859] netlink: 132 bytes leftover after parsing attributes in process `syz.2.495'. [ 217.743630][ T7853] delete_channel: no stack [ 217.990966][ T5898] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 218.223293][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 218.390367][ T5898] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.441507][ T5898] usb 2-1: config 0 interface 0 has no altsetting 0 [ 218.460652][ T5898] usb 2-1: New USB device found, idVendor=0079, idProduct=2644, bcdDevice= 0.00 [ 218.472727][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 218.502372][ T5898] usb 2-1: Product: syz [ 218.683056][ T7879] fuse: Unknown parameter '' [ 218.848859][ T7880] siw: device registration error -23 [ 218.926079][ T5898] usb 2-1: config 0 descriptor?? [ 219.186682][ T5869] Process accounting resumed [ 219.200553][ T5869] Process accounting resumed [ 219.540069][ T5898] hid-generic 0003:0079:2644.0003: hidraw0: USB HID v1.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 219.707387][ T1565] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 219.736774][ T7860] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4223616668 (8447233336 ns) > initial count (4629617844 ns). Using initial count to start timer. [ 220.351502][ T1565] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 220.414686][ T1565] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.626114][ T1565] usb 5-1: config 0 has no interface number 0 [ 220.654293][ T1565] usb 5-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 220.680950][ T1565] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 220.697969][ T1565] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.714264][ T1565] usb 5-1: Product: syz [ 220.760736][ T7899] warning: `syz.0.505' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 220.813380][ T1565] usb 5-1: Manufacturer: syz [ 221.278069][ T1565] usb 5-1: SerialNumber: syz [ 221.294858][ T1565] usb 5-1: config 0 descriptor?? [ 221.305317][ T7884] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 221.542091][ T1565] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 221.564533][ T1565] usb 5-1: MIDIStreaming interface descriptor not found [ 221.627527][ T1565] usb 5-1: USB disconnect, device number 17 [ 221.721331][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.780892][ T5898] usb 2-1: USB disconnect, device number 15 [ 222.585974][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 223.269640][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 223.313376][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.412854][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 223.441723][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.456165][ T24] usb 5-1: config 0 descriptor?? [ 224.003704][ T24] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 224.130487][ T7947] netlink: 'syz.2.517': attribute type 10 has an invalid length. [ 224.798430][ T5899] usb 5-1: USB disconnect, device number 18 [ 225.082195][ T30] audit: type=1400 audit(1744779395.260:1039): avc: denied { shutdown } for pid=7955 comm="syz.1.520" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.399862][ T5899] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 225.471263][ T7971] FAULT_INJECTION: forcing a failure. [ 225.471263][ T7971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.484442][ T7971] CPU: 1 UID: 0 PID: 7971 Comm: syz.2.523 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 225.484465][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.484475][ T7971] Call Trace: [ 225.484481][ T7971] [ 225.484487][ T7971] dump_stack_lvl+0x16c/0x1f0 [ 225.484514][ T7971] should_fail_ex+0x512/0x640 [ 225.484536][ T7971] _copy_from_user+0x2e/0xd0 [ 225.484555][ T7971] move_addr_to_kernel+0x65/0x170 [ 225.484583][ T7971] __sys_bind+0x11b/0x260 [ 225.484599][ T7971] ? __pfx___sys_bind+0x10/0x10 [ 225.484613][ T7971] ? __fget_files+0x20e/0x3c0 [ 225.484651][ T7971] __x64_sys_bind+0x72/0xb0 [ 225.484664][ T7971] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.484685][ T7971] do_syscall_64+0xcd/0x260 [ 225.484708][ T7971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.484724][ T7971] RIP: 0033:0x7fc4a7b8e169 [ 225.484738][ T7971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.484753][ T7971] RSP: 002b:00007fc4a8a71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 225.484769][ T7971] RAX: ffffffffffffffda RBX: 00007fc4a7db6160 RCX: 00007fc4a7b8e169 [ 225.484780][ T7971] RDX: 000000000000006e RSI: 0000200000000140 RDI: 000000000000000b [ 225.484790][ T7971] RBP: 00007fc4a8a71090 R08: 0000000000000000 R09: 0000000000000000 [ 225.484800][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.484810][ T7971] R13: 0000000000000000 R14: 00007fc4a7db6160 R15: 00007ffee86d7e38 [ 225.484832][ T7971] [ 225.622388][ T1565] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 225.626451][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.658786][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.664770][ C1] hrtimer: interrupt took 175211313 ns [ 225.764797][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.803549][ T5899] usb 4-1: config 0 has an invalid interface number: 95 but max is 0 [ 225.812245][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.822348][ T5899] usb 4-1: config 0 has no interface number 0 [ 225.828417][ T5899] usb 4-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 225.840644][ T5899] usb 4-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 225.849692][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.857676][ T5899] usb 4-1: Product: syz [ 225.861857][ T5899] usb 4-1: Manufacturer: syz [ 225.866744][ T5899] usb 4-1: SerialNumber: syz [ 225.873722][ T5899] usb 4-1: config 0 descriptor?? [ 225.881071][ T7961] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 226.658034][ T5899] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 226.674337][ T5899] usb 4-1: MIDIStreaming interface descriptor not found [ 226.716429][ T5899] usb 4-1: USB disconnect, device number 18 [ 226.796249][ T1565] usb 2-1: Using ep0 maxpacket: 16 [ 226.955462][ T7983] tmpfs: Bad value for 'mpol' [ 226.976466][ T7982] nfs: Unknown parameter '' [ 227.188966][ T7985] netlink: 44 bytes leftover after parsing attributes in process `syz.4.529'. [ 227.323684][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.349975][ T5898] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 227.554823][ T5898] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.563104][ T5898] usb 3-1: config 0 has no interface number 0 [ 227.574332][ T5898] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 227.628858][ T5898] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 227.691221][ T5898] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 227.757079][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.824236][ T5898] usb 3-1: config 0 descriptor?? [ 228.710026][ T5898] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 228.889755][ T8002] sock: sock_set_timeout: `syz.0.535' (pid 8002) tries to set negative timeout [ 228.897476][ T5898] usb 3-1: USB disconnect, device number 20 [ 229.089093][ T1565] usb 2-1: unable to get BOS descriptor or descriptor too short [ 229.100190][ T1565] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 229.123215][ T1565] usb 2-1: can't read configurations, error -71 [ 229.149840][ T30] audit: type=1400 audit(1744779399.320:1040): avc: denied { bind } for pid=8008 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.184958][ T8007] netlink: 476 bytes leftover after parsing attributes in process `syz.3.538'. [ 229.203976][ T30] audit: type=1400 audit(1744779399.320:1041): avc: denied { listen } for pid=8008 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.223441][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.252394][ T30] audit: type=1400 audit(1744779399.320:1042): avc: denied { connect } for pid=8008 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.272703][ T30] audit: type=1400 audit(1744779399.330:1043): avc: denied { accept } for pid=8008 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.303522][ T30] audit: type=1400 audit(1744779399.410:1044): avc: denied { write } for pid=8010 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.323021][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.329813][ T30] audit: type=1326 audit(1744779399.410:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.540" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdcef8e169 code=0x0 [ 229.441453][ T8018] netlink: 44 bytes leftover after parsing attributes in process `syz.2.542'. [ 229.815785][ T5867] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 230.913208][ T5867] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 230.924424][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.098966][ T5867] usb 3-1: config 0 has no interface number 0 [ 231.106029][ T5867] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 231.143745][ T5867] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 231.671578][ T30] audit: type=1400 audit(1744779401.840:1046): avc: denied { write } for pid=8048 comm="syz.1.550" name="file0" dev="tmpfs" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 231.693832][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.751227][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.759251][ T5867] usb 3-1: Product: syz [ 231.767207][ T5867] usb 3-1: Manufacturer: syz [ 231.771986][ T5867] usb 3-1: SerialNumber: syz [ 231.778546][ T30] audit: type=1400 audit(1744779401.930:1047): avc: denied { open } for pid=8048 comm="syz.1.550" path="/104/file0" dev="tmpfs" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 231.807809][ T30] audit: type=1400 audit(1744779401.980:1048): avc: denied { ioctl } for pid=8048 comm="syz.1.550" path="/104/file0" dev="tmpfs" ino=584 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 231.832774][ T5867] usb 3-1: config 0 descriptor?? [ 231.864849][ T8021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 232.086887][ T8061] tmpfs: Bad value for 'mpol' [ 232.102076][ T8061] nfs: Unknown parameter '' [ 232.290204][ T5867] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.301459][ T5867] usb 3-1: MIDIStreaming interface descriptor not found [ 232.419997][ T1565] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 232.672107][ T1565] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 232.687167][ T1565] usb 4-1: config 0 has no interface number 0 [ 232.694259][ T1565] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 232.719252][ T1565] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 232.730951][ T1565] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.749477][ T8066] netlink: 44 bytes leftover after parsing attributes in process `syz.4.554'. [ 232.768134][ T1565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.824972][ T1565] usb 4-1: config 0 descriptor?? [ 232.830589][ T5867] usb 3-1: USB disconnect, device number 21 [ 232.848084][ T1565] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 233.047723][ T58] usb 4-1: USB disconnect, device number 19 [ 233.151034][ T6476] udevd[6476]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.499775][ T8079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8079 comm=syz.4.557 [ 233.681260][ T8083] overlayfs: failed to clone upperpath [ 234.919842][ T30] audit: type=1400 audit(1744779404.970:1049): avc: denied { read } for pid=8092 comm="syz.0.561" path="socket:[15867]" dev="sockfs" ino=15867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 235.679456][ T8104] netlink: 44 bytes leftover after parsing attributes in process `syz.0.565'. [ 236.142832][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.3.559'. [ 236.317852][ T8113] siw: device registration error -23 [ 236.806043][ T8086] netlink: 'syz.3.559': attribute type 2 has an invalid length. [ 236.869112][ T8116] nfs: Unknown parameter '' [ 237.191582][ T8122] lo speed is unknown, defaulting to 1000 [ 237.197375][ T8122] lo speed is unknown, defaulting to 1000 [ 237.203749][ T8122] lo speed is unknown, defaulting to 1000 [ 237.218182][ T8122] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 237.578040][ T8122] lo speed is unknown, defaulting to 1000 [ 237.587483][ T8122] lo speed is unknown, defaulting to 1000 [ 237.594776][ T8122] lo speed is unknown, defaulting to 1000 [ 237.601864][ T8122] lo speed is unknown, defaulting to 1000 [ 237.608928][ T8122] lo speed is unknown, defaulting to 1000 [ 238.001210][ T30] audit: type=1400 audit(1744779408.160:1050): avc: denied { ioctl } for pid=8139 comm="syz.0.575" path="socket:[15936]" dev="sockfs" ino=15936 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.085095][ T30] audit: type=1400 audit(1744779408.220:1051): avc: denied { accept } for pid=8139 comm="syz.0.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.141727][ T8145] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 238.253434][ T8145] kvm: pic: non byte read [ 238.258033][ T8145] kvm: pic: level sensitive irq not supported [ 238.258096][ T8145] kvm: pic: non byte read [ 238.345866][ T30] audit: type=1400 audit(1744779408.520:1052): avc: denied { ioctl } for pid=8156 comm="syz.0.577" path="socket:[17249]" dev="sockfs" ino=17249 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 238.370427][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.378937][ T30] audit: type=1400 audit(1744779408.540:1053): avc: denied { setopt } for pid=8156 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 239.004789][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 239.259621][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 239.275613][ T24] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 239.312925][ T24] usb 3-1: config 0 has no interface number 0 [ 239.349658][ T24] usb 3-1: config 0 interface 89 has no altsetting 0 [ 239.363404][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 239.382542][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.417315][ T24] usb 3-1: Product: syz [ 239.433716][ T24] usb 3-1: Manufacturer: syz [ 239.454515][ T24] usb 3-1: SerialNumber: syz [ 239.488796][ T24] usb 3-1: config 0 descriptor?? [ 239.522608][ T24] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 239.563914][ T24] em28xx 3-1:0.89: Video interface 89 found: bulk [ 239.783047][ T24] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 239.877070][ T24] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 239.926611][ T24] em28xx 3-1:0.89: board has no eeprom [ 239.999814][ T24] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 240.007062][ T24] em28xx 3-1:0.89: analog set to bulk mode. [ 240.050594][ T58] em28xx 3-1:0.89: Registering V4L2 extension [ 240.071145][ T24] usb 3-1: USB disconnect, device number 22 [ 240.109397][ T24] em28xx 3-1:0.89: Disconnecting em28xx [ 240.160241][ T58] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 240.190262][ T58] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 240.219947][ T58] em28xx 3-1:0.89: No AC97 audio processor [ 240.252747][ T58] usb 3-1: Decoder not found [ 240.262882][ T58] em28xx 3-1:0.89: failed to create media graph [ 240.274929][ T58] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 240.282162][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.583'. [ 240.291388][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.583'. [ 240.304173][ T58] em28xx 3-1:0.89: Registering snapshot button... [ 240.338288][ T58] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input29 [ 240.460230][ T58] em28xx 3-1:0.89: Remote control support is not available for this card. [ 240.518226][ T24] em28xx 3-1:0.89: Closing input extension [ 240.575908][ T30] audit: type=1400 audit(1744779410.730:1054): avc: denied { getopt } for pid=8192 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.597021][ T24] em28xx 3-1:0.89: Deregistering snapshot button [ 240.938237][ T24] em28xx 3-1:0.89: Freeing device [ 241.770492][ T30] audit: type=1400 audit(1744779411.940:1055): avc: denied { open } for pid=8222 comm="syz.4.589" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 241.798493][ T30] audit: type=1400 audit(1744779411.940:1056): avc: denied { ioctl } for pid=8222 comm="syz.4.589" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 241.939922][ T24] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 242.078279][ T30] audit: type=1400 audit(1744779412.250:1057): avc: denied { allowed } for pid=8236 comm="syz.4.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 242.163812][ T24] usb 3-1: config index 0 descriptor too short (expected 48, got 27) [ 242.225690][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.374346][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 242.409042][ T24] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 242.423749][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.432544][ T24] usb 3-1: Product: syz [ 242.436713][ T24] usb 3-1: Manufacturer: syz [ 242.441581][ T24] usb 3-1: SerialNumber: syz [ 242.458175][ T24] usb 3-1: config 0 descriptor?? [ 242.668501][ T8218] x_tables: duplicate underflow at hook 1 [ 242.690297][ T24] usb 3-1: USB disconnect, device number 23 [ 243.802820][ T30] audit: type=1400 audit(1744779413.490:1058): avc: denied { connect } for pid=8275 comm="syz.4.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 244.770621][ T30] audit: type=1400 audit(1744779414.950:1059): avc: denied { read write } for pid=8302 comm="syz.2.602" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 245.003181][ T30] audit: type=1400 audit(1744779414.970:1060): avc: denied { open } for pid=8302 comm="syz.2.602" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 245.404297][ T30] audit: type=1400 audit(1744779414.980:1061): avc: denied { map } for pid=8302 comm="syz.2.602" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 245.750864][ T8310] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 246.241095][ T30] audit: type=1400 audit(1744779415.910:1062): avc: denied { append } for pid=8302 comm="syz.2.602" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 246.250884][ T8312] overlayfs: failed to clone upperpath [ 246.301901][ T30] audit: type=1400 audit(1744779416.480:1063): avc: denied { write } for pid=5178 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.349697][ T30] audit: type=1400 audit(1744779416.480:1064): avc: denied { remove_name } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.406808][ T30] audit: type=1400 audit(1744779416.480:1065): avc: denied { add_name } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.712502][ T58] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 246.829187][ T8321] siw: device registration error -23 [ 246.944735][ T58] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 247.078576][ T58] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.213025][ T58] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 247.249616][ T58] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.279614][ T58] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.298882][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.340637][ T58] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 247.348248][ T58] usb 3-1: invalid MIDI out EP 0 [ 247.377724][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.388729][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.396900][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.402746][ T58] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 247.429773][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.438963][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.461799][ T30] audit: type=1400 audit(1744779417.630:1066): avc: denied { mounton } for pid=8324 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 247.561331][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.573141][ T8324] lo speed is unknown, defaulting to 1000 [ 248.718833][ T30] audit: type=1400 audit(1744779418.890:1067): avc: denied { module_request } for pid=8324 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 248.815033][ T8324] chnl_net:caif_netlink_parms(): no params data found [ 248.967805][ T8324] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.983144][ T8324] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.994372][ T8324] bridge_slave_0: entered allmulticast mode [ 249.002950][ T8324] bridge_slave_0: entered promiscuous mode [ 249.011004][ T8343] lo speed is unknown, defaulting to 1000 [ 249.104170][ T8324] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.127286][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.146345][ T8324] bridge_slave_1: entered allmulticast mode [ 249.168689][ T8324] bridge_slave_1: entered promiscuous mode [ 249.551745][ T5832] Bluetooth: hci5: command tx timeout [ 250.238219][ T5899] usb 3-1: USB disconnect, device number 24 [ 251.180274][ T8324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.215397][ T8365] @: renamed from vlan0 (while UP) [ 251.237543][ T8324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.336541][ T8370] netlink: 476 bytes leftover after parsing attributes in process `syz.4.619'. [ 251.467698][ T8324] team0: Port device team_slave_0 added [ 251.495260][ T8324] team0: Port device team_slave_1 added [ 251.629788][ T5832] Bluetooth: hci5: command tx timeout [ 251.720198][ T8324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.746718][ T8324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.795441][ T8324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.829459][ T8324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.836580][ T8324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.059241][ T8324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.208942][ T8324] hsr_slave_0: entered promiscuous mode [ 252.240952][ T8324] hsr_slave_1: entered promiscuous mode [ 252.247093][ T8324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.279924][ T8324] Cannot create hsr debugfs directory [ 252.308014][ T8377] loop5: detected capacity change from 0 to 3495 [ 252.447471][ T8376] syzkaller0: entered promiscuous mode [ 252.503067][ T8376] syzkaller0: entered allmulticast mode [ 252.509990][ T30] audit: type=1400 audit(1744779422.690:1068): avc: denied { listen } for pid=8375 comm="syz.2.621" laddr=172.20.20.170 lport=50720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 252.651950][ T30] audit: type=1400 audit(1744779422.830:1069): avc: denied { name_connect } for pid=8373 comm="syz.4.620" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 253.332377][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.341936][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 253.353552][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 253.365076][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 253.469815][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 253.506026][ T8392] devpts: Unknown parameter 'fd' [ 253.709954][ T5831] Bluetooth: hci5: command tx timeout [ 254.462224][ T30] audit: type=1326 audit(1744779424.630:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 254.525452][ T30] audit: type=1326 audit(1744779424.670:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 254.589240][ T30] audit: type=1326 audit(1744779424.670:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 254.654036][ T30] audit: type=1326 audit(1744779424.670:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 254.705890][ T30] audit: type=1326 audit(1744779424.670:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 254.756958][ T30] audit: type=1326 audit(1744779424.670:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 254.819646][ T30] audit: type=1326 audit(1744779424.670:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 254.878260][ T30] audit: type=1326 audit(1744779424.670:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.0.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 255.244856][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.251246][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.553668][ T5831] Bluetooth: hci6: command tx timeout [ 255.795125][ T5831] Bluetooth: hci5: command tx timeout [ 256.265217][ T8413] x_tables: duplicate underflow at hook 1 [ 256.809471][ T8394] netlink: 'syz.4.623': attribute type 1 has an invalid length. [ 256.846246][ T8394] delete_channel: no stack [ 257.003426][ T8324] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 257.047613][ T8324] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 257.072354][ T8324] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.114384][ T8422] veth0_vlan: entered allmulticast mode [ 257.153873][ T8324] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.332095][ T8324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.361132][ T8324] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.435538][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.442745][ T6149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.454128][ T8426] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 257.519190][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.526339][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.630873][ T5831] Bluetooth: hci6: command tx timeout [ 257.777740][ T8389] lo speed is unknown, defaulting to 1000 [ 257.937921][ T8422] lo speed is unknown, defaulting to 1000 [ 258.333693][ T8425] lo speed is unknown, defaulting to 1000 [ 258.564789][ T8324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.850997][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 258.851014][ T30] audit: type=1400 audit(1744779429.030:1156): avc: denied { create } for pid=8447 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 258.932697][ T8453] overlayfs: failed to clone upperpath [ 258.970241][ T8389] chnl_net:caif_netlink_parms(): no params data found [ 259.000957][ T30] audit: type=1400 audit(1744779429.060:1157): avc: denied { write } for pid=8447 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 259.149907][ T30] audit: type=1400 audit(1744779429.060:1158): avc: denied { nlmsg_read } for pid=8447 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 259.212899][ T8459] mmap: syz.0.641 (8459) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 259.293002][ T30] audit: type=1400 audit(1744779429.460:1159): avc: denied { mount } for pid=8455 comm="syz.0.641" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 259.314698][ T58] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 259.451441][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.475349][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.484489][ T8389] bridge_slave_0: entered allmulticast mode [ 259.490587][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 259.504124][ T8389] bridge_slave_0: entered promiscuous mode [ 259.512682][ T58] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 259.529785][ T58] usb 3-1: config 0 has no interface number 0 [ 259.538958][ T58] usb 3-1: config 0 interface 200 has no altsetting 0 [ 259.540590][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.548855][ T58] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 259.570584][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.578588][ T58] usb 3-1: Product: syz [ 259.583053][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.611503][ T58] usb 3-1: Manufacturer: syz [ 259.616126][ T58] usb 3-1: SerialNumber: syz [ 259.619733][ T8389] bridge_slave_1: entered allmulticast mode [ 259.633596][ T8389] bridge_slave_1: entered promiscuous mode [ 259.662165][ T58] usb 3-1: config 0 descriptor?? [ 259.719979][ T5831] Bluetooth: hci6: command tx timeout [ 259.721593][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.776453][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.912324][ T8324] veth0_vlan: entered promiscuous mode [ 259.940341][ T8471] Option ' /msr' to dns_resolver key: bad/missing value [ 260.068025][ T8324] veth1_vlan: entered promiscuous mode [ 261.026725][ T8389] team0: Port device team_slave_0 added [ 261.731861][ T8389] team0: Port device team_slave_1 added [ 261.806501][ T5831] Bluetooth: hci6: command tx timeout [ 262.283345][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.304784][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.370019][ T8389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.393969][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.426706][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.512133][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.658936][ T8389] hsr_slave_0: entered promiscuous mode [ 262.686220][ T8389] hsr_slave_1: entered promiscuous mode [ 262.703096][ T8389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.723470][ T8389] Cannot create hsr debugfs directory [ 262.911841][ T58] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input30 [ 263.063525][ T58] usb 3-1: USB disconnect, device number 25 [ 263.585573][ T8495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.648'. [ 263.612139][ T8495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.648'. [ 263.654318][ T8497] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 263.673515][ T8324] veth0_macvtap: entered promiscuous mode [ 263.715368][ T8324] veth1_macvtap: entered promiscuous mode [ 263.852296][ T30] audit: type=1400 audit(1744779434.030:1160): avc: denied { ioctl } for pid=8498 comm="syz.2.649" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 263.938692][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.088966][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.139676][ T8504] input: syz1 as /devices/virtual/input/input32 [ 264.151145][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.175696][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.223250][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.259165][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.344205][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.371794][ T30] audit: type=1400 audit(1744779434.550:1161): avc: denied { setopt } for pid=8506 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.321922][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.331797][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.592576][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.610344][ T8324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.634207][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.730413][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.746629][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.757885][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.796005][ T8520] overlayfs: failed to clone upperpath [ 265.801783][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.822534][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.971557][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.982142][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.992042][ T8324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.005983][ T8324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.056148][ T8324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.146605][ T8526] siw: device registration error -23 [ 266.393115][ T8324] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.499663][ T8324] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.508393][ T8324] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.589800][ T8324] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.858579][ T8389] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 266.906031][ T8389] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 266.942903][ T8389] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.011118][ T8389] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 267.054150][ T5910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.073268][ T5910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.297789][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.318658][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.385534][ T8535] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 267.818260][ T30] audit: type=1400 audit(1744779437.990:1162): avc: denied { mounton } for pid=8324 comm="syz-executor" path="/root/syzkaller.k2cJGp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 267.897158][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.963541][ T8389] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.060129][ T30] audit: type=1400 audit(1744779438.220:1163): avc: denied { mounton } for pid=8324 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 268.285184][ T8543] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 268.723799][ T1072] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.730994][ T1072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.473847][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.480999][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.909682][ T30] audit: type=1400 audit(1744779440.010:1164): avc: denied { sqpoll } for pid=8550 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 270.443837][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 270.810145][ T5867] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 270.827532][ T30] audit: type=1400 audit(1744779441.000:1165): avc: denied { setopt } for pid=8568 comm="syz.0.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 270.909188][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.034786][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.073203][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 271.119396][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 271.145506][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 271.195821][ T5867] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 271.238520][ T5867] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 271.274034][ T5867] usb 3-1: Manufacturer: syz [ 271.382860][ T5867] usb 3-1: config 0 descriptor?? [ 271.565036][ T8594] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 271.634883][ T8389] veth0_vlan: entered promiscuous mode [ 271.771467][ T8389] veth1_vlan: entered promiscuous mode [ 271.987942][ T5867] rc_core: IR keymap rc-hauppauge not found [ 272.014145][ T5867] Registered IR keymap rc-empty [ 272.056376][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.076135][ T8389] veth0_macvtap: entered promiscuous mode [ 272.089680][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.116864][ T8389] veth1_macvtap: entered promiscuous mode [ 272.179449][ T8604] netlink: 'syz.0.676': attribute type 1 has an invalid length. [ 272.191268][ T5867] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 272.202706][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.230041][ T8602] delete_channel: no stack [ 272.243349][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.271549][ T5867] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33 [ 272.271632][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.326398][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.342625][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.361958][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.366458][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.396865][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.416229][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 272.421784][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.530591][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.211269][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.222961][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.233289][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.240540][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.251096][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.263688][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.271132][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.281522][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.294596][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.302314][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.312426][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.323957][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.333893][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.343236][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.359677][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.366908][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.409825][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.420795][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.432035][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.440688][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.452111][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.462101][ T5867] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 273.471360][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.484304][ T5867] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 273.500201][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.519621][ T5867] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 273.530720][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.552589][ T8598] netlink: 'syz.5.674': attribute type 1 has an invalid length. [ 273.626191][ T58] usb 3-1: USB disconnect, device number 26 [ 273.646152][ T8597] delete_channel: no stack [ 273.665403][ T8389] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.719604][ T8389] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.777322][ T8389] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.816248][ T8389] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.831008][ T8626] fuse: Unknown parameter '0x0000000000000000' [ 274.069807][ T6338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.077647][ T6338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.085351][ T30] audit: type=1400 audit(1744779444.250:1166): avc: denied { ioctl } for pid=8630 comm="syz.4.686" path="socket:[19911]" dev="sockfs" ino=19911 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 274.325677][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.363284][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.673003][ T8673] x_tables: duplicate underflow at hook 1 [ 276.816297][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.347508][ T30] audit: type=1400 audit(1744779447.320:1167): avc: denied { mounton } for pid=8681 comm="syz.5.699" path=2F382FE91F7189591E9233614B dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 277.652379][ T30] audit: type=1400 audit(1744779447.830:1168): avc: denied { write } for pid=8686 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 277.686539][ T8688] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 277.696995][ T8688] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 277.708769][ T8688] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 277.947133][ T30] audit: type=1400 audit(1744779447.830:1169): avc: denied { read } for pid=8686 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 279.231555][ T30] audit: type=1326 audit(1744779449.410:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.6.705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c2d8e169 code=0x0 [ 279.729728][ T1565] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 279.741793][ T30] audit: type=1400 audit(1744779449.920:1171): avc: denied { append } for pid=8713 comm="syz.4.707" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 279.941294][ T1565] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 280.194843][ T1565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.242867][ T1565] usb 3-1: config 0 descriptor?? [ 281.070453][ T1565] usb 3-1: Cannot read MAC address [ 281.108765][ T30] audit: type=1400 audit(1744779451.280:1172): avc: denied { read } for pid=8726 comm="syz.5.710" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 281.207138][ T1565] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 281.290156][ T1565] usb 3-1: USB disconnect, device number 27 [ 281.301143][ T30] audit: type=1400 audit(1744779451.280:1173): avc: denied { open } for pid=8726 comm="syz.5.710" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 281.570048][ T8731] fuseblk: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 282.147977][ T30] audit: type=1400 audit(1744779452.320:1174): avc: denied { bind } for pid=8736 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 282.219036][ T5898] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 282.234114][ T8734] veth0_vlan: entered allmulticast mode [ 282.332843][ T8734] lo speed is unknown, defaulting to 1000 [ 282.458506][ T30] audit: type=1400 audit(1744779452.320:1175): avc: denied { name_bind } for pid=8736 comm="syz.2.714" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 282.481359][ T30] audit: type=1400 audit(1744779452.320:1176): avc: denied { node_bind } for pid=8736 comm="syz.2.714" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 282.502281][ T30] audit: type=1400 audit(1744779452.540:1177): avc: denied { connect } for pid=8736 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 282.522028][ T30] audit: type=1400 audit(1744779452.540:1178): avc: denied { name_connect } for pid=8736 comm="syz.2.714" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 282.522064][ T30] audit: type=1400 audit(1744779452.630:1179): avc: denied { accept } for pid=8736 comm="syz.2.714" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 282.645318][ T5898] usb 7-1: config index 0 descriptor too short (expected 48, got 27) [ 282.660800][ T8741] netlink: 476 bytes leftover after parsing attributes in process `syz.5.713'. [ 282.670052][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.700662][ T5898] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.827335][ T5898] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 282.836598][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.852261][ T5898] usb 7-1: Product: syz [ 282.856778][ T5898] usb 7-1: Manufacturer: syz [ 282.873914][ T5898] usb 7-1: SerialNumber: syz [ 282.899318][ T5898] usb 7-1: config 0 descriptor?? [ 283.553661][ T8729] x_tables: duplicate underflow at hook 1 [ 283.605095][ T5898] usb 7-1: USB disconnect, device number 2 [ 284.839798][ T5867] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 285.134705][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.173166][ T30] audit: type=1400 audit(1744779455.340:1180): avc: denied { setattr } for pid=8768 comm="syz.5.723" path="/dev/dma_heap/system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.207565][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.246574][ T5867] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 285.285034][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.316610][ T5867] usb 3-1: config 0 descriptor?? [ 285.394522][ T8771] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 285.486380][ T8774] netlink: 'syz.0.725': attribute type 1 has an invalid length. [ 285.525494][ T8772] delete_channel: no stack [ 285.744249][ T5867] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 285.785894][ T5867] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 286.297096][ T5867] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0004/input/input34 [ 286.550042][ T8784] siw: device registration error -23 [ 286.720924][ T5867] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 287.405987][ T8792] netlink: 'syz.5.729': attribute type 1 has an invalid length. [ 287.479621][ T58] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 287.702884][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 287.762242][ T5911] usb 3-1: reset high-speed USB device number 28 using dummy_hcd [ 287.770234][ T30] audit: type=1400 audit(1744779457.900:1181): avc: denied { connect } for pid=8793 comm="syz.0.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 287.807304][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.915356][ T8796] lo speed is unknown, defaulting to 1000 [ 288.007896][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.021453][ T8790] delete_channel: no stack [ 288.042409][ T58] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 288.051658][ T58] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 288.082165][ T58] usb 5-1: Manufacturer: syz [ 288.153371][ T58] usb 5-1: config 0 descriptor?? [ 288.693288][ T30] audit: type=1400 audit(1744779458.870:1182): avc: denied { create } for pid=8806 comm="syz.5.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 288.761700][ T5899] usb 3-1: USB disconnect, device number 28 [ 288.776637][ T8810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.799969][ T8810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.862130][ T30] audit: type=1400 audit(1744779458.900:1183): avc: denied { setopt } for pid=8806 comm="syz.5.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 288.905250][ T8810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.728'. [ 289.681678][ T8822] FAULT_INJECTION: forcing a failure. [ 289.681678][ T8822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.789928][ T8822] CPU: 0 UID: 0 PID: 8822 Comm: syz.5.735 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 289.789956][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.789965][ T8822] Call Trace: [ 289.789971][ T8822] [ 289.789977][ T8822] dump_stack_lvl+0x16c/0x1f0 [ 289.790006][ T8822] should_fail_ex+0x512/0x640 [ 289.790028][ T8822] _copy_from_user+0x2e/0xd0 [ 289.790048][ T8822] do_sys_poll+0x1d5/0xe00 [ 289.790082][ T8822] ? __pfx_do_sys_poll+0x10/0x10 [ 289.790105][ T8822] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.790147][ T8822] ? __lock_acquire+0xaa4/0x1ba0 [ 289.790230][ T8822] ? set_user_sigmask+0x21b/0x2b0 [ 289.790250][ T8822] ? __pfx_set_user_sigmask+0x10/0x10 [ 289.790270][ T8822] ? __fget_files+0x20e/0x3c0 [ 289.790293][ T8822] __x64_sys_ppoll+0x254/0x2d0 [ 289.790310][ T8822] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 289.790327][ T8822] ? rcu_is_watching+0x12/0xc0 [ 289.790353][ T8822] do_syscall_64+0xcd/0x260 [ 289.790377][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.790394][ T8822] RIP: 0033:0x7f895c78e169 [ 289.790408][ T8822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.790424][ T8822] RSP: 002b:00007f895d636038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 289.790440][ T8822] RAX: ffffffffffffffda RBX: 00007f895c9b6080 RCX: 00007f895c78e169 [ 289.790450][ T8822] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000140 [ 289.790460][ T8822] RBP: 00007f895d636090 R08: 0000000000000000 R09: 0000000000000000 [ 289.790470][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.790480][ T8822] R13: 0000000000000000 R14: 00007f895c9b6080 R15: 00007ffc1f9d6408 [ 289.790503][ T8822] [ 289.985746][ T8825] fuse: Unknown parameter '0x0000000000000004' [ 290.029131][ T58] usb 5-1: USB disconnect, device number 19 [ 290.050395][ T30] audit: type=1400 audit(1744779460.160:1184): avc: denied { mounton } for pid=8817 comm="syz.5.735" path="/18/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 290.072578][ C1] vkms_vblank_simulate: vblank timer overrun [ 291.654139][ T30] audit: type=1400 audit(1744779461.820:1185): avc: denied { execute } for pid=8837 comm="syz.5.740" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 292.647425][ T30] audit: type=1400 audit(1744779462.820:1186): avc: denied { connect } for pid=8847 comm="syz.6.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 292.653807][ T8852] xt_hashlimit: size too large, truncated to 1048576 [ 292.668932][ C1] vkms_vblank_simulate: vblank timer overrun [ 293.100872][ T8851] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 293.150229][ T8857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.164280][ T8851] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 295.751742][ T8899] netlink: 476 bytes leftover after parsing attributes in process `syz.5.756'. [ 296.556568][ T8908] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 296.636552][ T8908] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 296.693770][ T30] audit: type=1800 audit(1744779466.870:1187): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.754" name="bus" dev="ramfs" ino=21627 res=0 errno=0 [ 297.189464][ T8914] netlink: 36 bytes leftover after parsing attributes in process `syz.5.760'. [ 297.244252][ T8916] FAULT_INJECTION: forcing a failure. [ 297.244252][ T8916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.306818][ T8916] CPU: 1 UID: 0 PID: 8916 Comm: syz.6.761 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 297.306843][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.306852][ T8916] Call Trace: [ 297.306857][ T8916] [ 297.306863][ T8916] dump_stack_lvl+0x16c/0x1f0 [ 297.306890][ T8916] should_fail_ex+0x512/0x640 [ 297.306910][ T8916] _copy_from_user+0x2e/0xd0 [ 297.306929][ T8916] copy_msghdr_from_user+0x98/0x160 [ 297.306949][ T8916] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 297.306979][ T8916] ___sys_sendmsg+0xfe/0x1d0 [ 297.306999][ T8916] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.307048][ T8916] __sys_sendmsg+0x16d/0x220 [ 297.307069][ T8916] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.307096][ T8916] ? rcu_is_watching+0x12/0xc0 [ 297.307127][ T8916] do_syscall_64+0xcd/0x260 [ 297.307150][ T8916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.307166][ T8916] RIP: 0033:0x7f54c2d8e169 [ 297.307180][ T8916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.307195][ T8916] RSP: 002b:00007f54c3bcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.307211][ T8916] RAX: ffffffffffffffda RBX: 00007f54c2fb5fa0 RCX: 00007f54c2d8e169 [ 297.307222][ T8916] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 297.307232][ T8916] RBP: 00007f54c3bcf090 R08: 0000000000000000 R09: 0000000000000000 [ 297.307242][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.307251][ T8916] R13: 0000000000000000 R14: 00007f54c2fb5fa0 R15: 00007fffcc854ab8 [ 297.307273][ T8916] [ 297.472505][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.349364][ T8967] netlink: 'syz.5.773': attribute type 4 has an invalid length. [ 301.474236][ T30] audit: type=1400 audit(1744779471.650:1188): avc: denied { mount } for pid=8963 comm="syz.6.772" name="/" dev="configfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 301.709789][ T30] audit: type=1400 audit(1744779471.790:1189): avc: denied { mount } for pid=8965 comm="syz.5.773" name="/" dev="autofs" ino=20882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 301.794315][ T30] audit: type=1400 audit(1744779471.830:1190): avc: denied { write } for pid=8965 comm="syz.5.773" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 301.865802][ T30] audit: type=1326 audit(1744779471.860:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 302.052822][ T30] audit: type=1326 audit(1744779471.860:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 302.060567][ T8980] netlink: 476 bytes leftover after parsing attributes in process `syz.6.775'. [ 302.076161][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.227899][ T30] audit: type=1326 audit(1744779471.860:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 302.363273][ T30] audit: type=1326 audit(1744779471.860:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 302.479889][ T30] audit: type=1326 audit(1744779471.860:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 302.804017][ T8988] syz.2.777 (8988): drop_caches: 2 [ 302.825492][ T8988] syz.2.777 (8988): drop_caches: 2 [ 302.835694][ T30] audit: type=1326 audit(1744779471.870:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 302.858999][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.871504][ T30] audit: type=1326 audit(1744779471.870:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 302.894810][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.979719][ T30] audit: type=1326 audit(1744779471.870:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b4cb8e169 code=0x7ffc0000 [ 303.237164][ T8974] lo speed is unknown, defaulting to 1000 [ 303.769965][ T5899] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 303.971444][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 303.998279][ T5899] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 304.017806][ T5899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.031000][ T9008] fuse: Bad value for 'user_id' [ 304.049720][ T9008] fuse: Bad value for 'user_id' [ 304.058056][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 304.121539][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.149362][ T5899] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.215667][ T5899] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 304.256468][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.303303][ T9010] xt_hashlimit: size too large, truncated to 1048576 [ 304.536651][ T5899] usb 5-1: GET_CAPABILITIES returned 0 [ 305.047280][ T5899] usbtmc 5-1:16.0: can't read capabilities [ 305.179694][ T5899] usb 5-1: USB disconnect, device number 20 [ 306.189746][ T5899] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 306.603108][ T9036] netlink: 'syz.2.790': attribute type 1 has an invalid length. [ 306.821166][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 306.850585][ T5899] usb 5-1: device descriptor read/all, error -71 [ 306.998487][ T9039] netlink: 'syz.6.792': attribute type 13 has an invalid length. [ 307.049376][ T9034] delete_channel: no stack [ 307.541327][ T9039] gretap0: refused to change device tx_queue_len [ 307.547875][ T9039] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 307.781763][ T9053] fuse: Bad value for 'user_id' [ 307.898427][ T9053] fuse: Bad value for 'user_id' [ 308.518982][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 308.518998][ T30] audit: type=1400 audit(1744779478.690:1210): avc: denied { create } for pid=9057 comm="syz.4.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 309.539937][ T30] audit: type=1400 audit(1744779478.690:1211): avc: denied { ioctl } for pid=9057 comm="syz.4.797" path="socket:[20998]" dev="sockfs" ino=20998 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 309.821728][ T30] audit: type=1400 audit(1744779478.690:1212): avc: denied { bind } for pid=9057 comm="syz.4.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 309.904113][ T9075] netlink: 'syz.6.801': attribute type 1 has an invalid length. [ 309.943888][ T9073] delete_channel: no stack [ 311.499654][ T9100] fuse: Bad value for 'user_id' [ 311.504543][ T9100] fuse: Bad value for 'user_id' [ 313.668641][ T9116] netlink: 'syz.2.811': attribute type 27 has an invalid length. [ 313.680514][ T30] audit: type=1400 audit(1744779483.780:1213): avc: denied { wake_alarm } for pid=9107 comm="syz.2.811" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 314.123615][ T9116] bridge0: port 3(netdevsim2) entered disabled state [ 314.130503][ T9116] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.138886][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.261024][ T9127] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 314.310828][ T30] audit: type=1400 audit(1744779484.420:1214): avc: denied { mount } for pid=9112 comm="syz.5.814" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 314.609613][ T5868] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 314.707550][ T9116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.719678][ T9116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.743216][ T30] audit: type=1400 audit(1744779484.910:1215): avc: denied { unmount } for pid=8324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 314.798854][ T9116] veth0_vlan: left allmulticast mode [ 314.807886][ T5868] usb 5-1: device descriptor read/64, error -71 [ 314.902460][ T9116] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.911457][ T9116] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.920374][ T9116] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.929243][ T9116] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.075963][ T9133] trusted_key: syz.0.817 sent an empty control message without MSG_MORE. [ 315.110046][ T5868] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 315.232282][ T9136] netlink: 'syz.5.816': attribute type 10 has an invalid length. [ 315.640433][ T9136] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 315.659630][ T5868] usb 5-1: device descriptor read/64, error -71 [ 315.793364][ T5868] usb usb5-port1: attempt power cycle [ 315.975695][ T30] audit: type=1400 audit(1744779486.150:1216): avc: denied { write } for pid=9144 comm="syz.6.820" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 316.037584][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.6.820'. [ 316.130538][ T5898] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 316.144718][ T30] audit: type=1400 audit(1744779486.320:1217): avc: denied { ioctl } for pid=9144 comm="syz.6.820" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 316.381370][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 316.411380][ T9151] netlink: 'syz.6.823': attribute type 10 has an invalid length. [ 316.476069][ T9151] team0: Device ipvlan1 failed to register rx_handler [ 316.516420][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 316.551953][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 316.679738][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.686164][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.711993][ T5898] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 316.750234][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.783983][ T5898] usb 3-1: config 0 descriptor?? [ 317.724092][ T5898] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 317.774072][ T9156] syzkaller1: entered promiscuous mode [ 317.779623][ T9156] syzkaller1: entered allmulticast mode [ 317.818182][ T9166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9166 comm=syz.0.827 [ 317.890935][ T30] audit: type=1400 audit(1744779488.040:1218): avc: denied { read write } for pid=9153 comm="syz.6.824" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 318.433800][ T9170] syz.0.827 (9170) used greatest stack depth: 21096 bytes left [ 318.448209][ T30] audit: type=1400 audit(1744779488.040:1219): avc: denied { open } for pid=9153 comm="syz.6.824" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 318.499684][ T5868] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 318.560894][ T5898] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 318.608049][ T5898] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 318.639038][ T5898] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -71 [ 318.684581][ T5898] usb 3-1: USB disconnect, device number 29 [ 318.703198][ T5868] usb 7-1: Using ep0 maxpacket: 16 [ 318.740237][ T5868] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.792982][ T5868] usb 7-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 318.822630][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.879968][ T5868] usb 7-1: Product: syz [ 318.884218][ T5868] usb 7-1: Manufacturer: syz [ 318.909754][ T5868] usb 7-1: SerialNumber: syz [ 318.960407][ T5868] usb 7-1: config 0 descriptor?? [ 319.058488][ T5868] gspca_main: etoms-2.14.0 probing 102c:6151 [ 319.919741][ T5868] usb 7-1: USB disconnect, device number 3 [ 320.156949][ T9182] netlink: 476 bytes leftover after parsing attributes in process `syz.2.832'. [ 320.226148][ T9186] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 320.239951][ T9184] delete_channel: no stack [ 320.864349][ T9191] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 320.876556][ T9192] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 320.940505][ T9191] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 325.067071][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.844'. [ 327.032795][ T9239] netlink: 'syz.0.846': attribute type 1 has an invalid length. [ 327.048271][ T9218] lo speed is unknown, defaulting to 1000 [ 327.058597][ T9238] delete_channel: no stack [ 330.804993][ T9277] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 331.502704][ T9285] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 331.677650][ T9289] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 331.882817][ T30] audit: type=1326 audit(1744779501.970:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9286 comm="syz.5.859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f895c78e169 code=0x0 [ 332.241776][ T30] audit: type=1400 audit(1744779502.420:1221): avc: denied { ioctl } for pid=9298 comm="syz.0.864" path="socket:[22523]" dev="sockfs" ino=22523 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 332.266669][ T5898] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 332.543911][ T9306] netlink: 36 bytes leftover after parsing attributes in process `syz.6.862'. [ 332.555755][ T9309] netlink: 'syz.5.865': attribute type 27 has an invalid length. [ 332.629645][ T5898] usb 5-1: device descriptor read/64, error -71 [ 332.890216][ T5898] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 333.047434][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.210258][ T5898] usb 5-1: device descriptor read/64, error -71 [ 333.725446][ T9309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.746503][ T9309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.875621][ T5898] usb usb5-port1: attempt power cycle [ 334.270343][ T5898] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 334.369074][ T5898] usb 5-1: device descriptor read/8, error -71 [ 334.502257][ T9309] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.517423][ T9309] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.526449][ T9309] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.535406][ T9309] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.618058][ T9309] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 338.557050][ T30] audit: type=1400 audit(1744779508.690:1222): avc: denied { setopt } for pid=9355 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 338.998349][ T9368] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 339.281933][ T9368] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 339.740437][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 339.747604][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 339.753657][ T9383] ceph: No mds server is up or the cluster is laggy [ 340.302296][ T1565] libceph: connect (1)[c::]:6789 error -101 [ 340.308401][ T1565] libceph: mon0 (1)[c::]:6789 connect error [ 341.428773][ T30] audit: type=1326 audit(1744779511.600:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895c78e169 code=0x7ffc0000 [ 341.674794][ T30] audit: type=1326 audit(1744779511.600:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895c78e169 code=0x7ffc0000 [ 341.707546][ T30] audit: type=1326 audit(1744779511.600:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f895c78e169 code=0x7ffc0000 [ 342.137061][ T30] audit: type=1326 audit(1744779511.600:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895c78e169 code=0x7ffc0000 [ 342.169489][ T9418] overlayfs: failed to clone upperpath [ 342.233820][ T30] audit: type=1326 audit(1744779511.600:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895c78e169 code=0x7ffc0000 [ 342.382810][ T9420] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 342.518922][ T30] audit: type=1326 audit(1744779511.600:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f895c78e169 code=0x7ffc0000 [ 342.597459][ T30] audit: type=1326 audit(1744779511.680:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f895c785127 code=0x7ffc0000 [ 342.680085][ T30] audit: type=1326 audit(1744779511.680:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f895c72a359 code=0x7ffc0000 [ 342.754091][ T30] audit: type=1326 audit(1744779511.680:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.5.891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f895c78e169 code=0x7ffc0000 [ 342.970107][ T9424] netlink: 68 bytes leftover after parsing attributes in process `syz.0.896'. [ 343.565861][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 343.680000][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 343.686768][ T30] audit: type=1400 audit(1744779513.860:1302): avc: denied { accept } for pid=9435 comm="syz.2.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 344.909110][ T9445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.739589][ T30] audit: type=1326 audit(1744779515.730:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9449 comm="syz.5.903" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f895c78e169 code=0x0 [ 346.009424][ T9460] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 346.159592][ T5869] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 346.310081][ T30] audit: type=1400 audit(1744779516.480:1304): avc: denied { write } for pid=9463 comm="syz.4.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 346.372000][ T5869] usb 7-1: config index 0 descriptor too short (expected 48, got 27) [ 346.459668][ T5869] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.474786][ T5869] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 346.486129][ T5869] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 346.495422][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.503523][ T5869] usb 7-1: Product: syz [ 346.507783][ T5869] usb 7-1: Manufacturer: syz [ 346.515731][ T5869] usb 7-1: SerialNumber: syz [ 346.525150][ T5869] usb 7-1: config 0 descriptor?? [ 346.782024][ T9456] x_tables: duplicate underflow at hook 1 [ 346.807709][ T5869] usb 7-1: USB disconnect, device number 4 [ 348.097535][ T9474] delete_channel: no stack [ 350.303865][ T9505] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 351.152828][ T9518] netlink: 60 bytes leftover after parsing attributes in process `syz.4.921'. [ 351.165515][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 352.906160][ T1565] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 352.958382][ T9539] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 353.089605][ T1565] usb 5-1: Using ep0 maxpacket: 16 [ 353.119906][ T1565] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.149847][ T1565] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.222554][ T1565] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 353.258605][ T1565] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 353.342572][ T1565] usb 5-1: Manufacturer: syz [ 353.359913][ T1565] usb 5-1: config 0 descriptor?? [ 353.367611][ T9544] delete_channel: no stack [ 353.384262][ T9549] siw: device registration error -23 [ 354.078106][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.137477][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.392925][ T8056] syz.1.550: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 354.431996][ T8056] CPU: 1 UID: 0 PID: 8056 Comm: syz.1.550 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 354.432022][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 354.432033][ T8056] Call Trace: [ 354.432039][ T8056] [ 354.432046][ T8056] dump_stack_lvl+0x16c/0x1f0 [ 354.432075][ T8056] warn_alloc+0x248/0x3a0 [ 354.432095][ T8056] ? __pfx_warn_alloc+0x10/0x10 [ 354.432121][ T8056] ? __get_vm_area_node+0x1b9/0x300 [ 354.432145][ T8056] ? __get_vm_area_node+0x1e5/0x300 [ 354.432174][ T8056] __vmalloc_node_range_noprof+0x1110/0x1540 [ 354.432200][ T8056] ? do_blk_trace_setup+0x503/0xb50 [ 354.432229][ T8056] ? relay_open_buf.part.0+0x194/0xb90 [ 354.432258][ T8056] ? rcu_read_unlock+0x17/0x60 [ 354.432281][ T8056] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 354.432317][ T8056] __kvmalloc_node_noprof+0x2ff/0x600 [ 354.432335][ T8056] ? relay_open_buf.part.0+0x194/0xb90 [ 354.432361][ T8056] ? trace_kmalloc+0x2b/0xd0 [ 354.432380][ T8056] ? __kmalloc_noprof.cold+0x5c/0x61 [ 354.432401][ T8056] ? relay_open_buf.part.0+0x194/0xb90 [ 354.432429][ T8056] ? relay_open_buf.part.0+0x194/0xb90 [ 354.432452][ T8056] relay_open_buf.part.0+0x194/0xb90 [ 354.432494][ T8056] relay_open+0x653/0xad0 [ 354.432518][ T8056] ? debugfs_create_file_full+0x41/0x60 [ 354.432549][ T8056] do_blk_trace_setup+0x503/0xb50 [ 354.432575][ T8056] blk_trace_setup+0xed/0x1b0 [ 354.432599][ T8056] ? __pfx_blk_trace_setup+0x10/0x10 [ 354.432620][ T8056] ? __pfx_snprintf+0x10/0x10 [ 354.432657][ T8056] blk_trace_ioctl+0x146/0x280 [ 354.432681][ T8056] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 354.432709][ T8056] ? hook_file_ioctl_common+0x145/0x410 [ 354.432731][ T8056] blkdev_ioctl+0x108/0x6d0 [ 354.432757][ T8056] ? __pfx_blkdev_ioctl+0x10/0x10 [ 354.432781][ T8056] ? selinux_file_ioctl+0x180/0x270 [ 354.432806][ T8056] ? selinux_file_ioctl+0xb4/0x270 [ 354.432833][ T8056] ? __pfx_blkdev_ioctl+0x10/0x10 [ 354.432860][ T8056] __x64_sys_ioctl+0x190/0x200 [ 354.432886][ T8056] do_syscall_64+0xcd/0x260 [ 354.432911][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.432927][ T8056] RIP: 0033:0x7efdcef8e169 [ 354.432946][ T8056] Code: Unable to access opcode bytes at 0x7efdcef8e13f. [ 354.432953][ T8056] RSP: 002b:00007efdcfe82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.432969][ T8056] RAX: ffffffffffffffda RBX: 00007efdcf1b6080 RCX: 00007efdcef8e169 [ 354.432980][ T8056] RDX: 0000200000000480 RSI: 00000000c0481273 RDI: 0000000000000004 [ 354.432994][ T8056] RBP: 00007efdcf010a68 R08: 0000000000000000 R09: 0000000000000000 [ 354.433003][ T8056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.433012][ T8056] R13: 0000000000000000 R14: 00007efdcf1b6080 R15: 00007ffcac921ec8 [ 354.433035][ T8056] [ 354.434177][ T8056] Mem-Info: [ 354.865269][ T8056] active_anon:16219 inactive_anon:3 isolated_anon:0 [ 354.865269][ T8056] active_file:14833 inactive_file:210 isolated_file:0 [ 354.865269][ T8056] unevictable:768 dirty:74 writeback:0 [ 354.865269][ T8056] slab_reclaimable:7135 slab_unreclaimable:109049 [ 354.865269][ T8056] mapped:49319 shmem:14925 pagetables:1060 [ 354.865269][ T8056] sec_pagetables:0 bounce:0 [ 354.865269][ T8056] kernel_misc_reclaimable:0 [ 354.865269][ T8056] free:124181 free_pcp:3092 free_cma:0 [ 354.932378][ T8056] Node 0 active_anon:1164kB inactive_anon:0kB active_file:4kB inactive_file:36kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135388kB dirty:8kB writeback:0kB shmem:3220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11056kB pagetables:2944kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB [ 355.331756][ T8056] Node 1 active_anon:63712kB inactive_anon:12kB active_file:59328kB inactive_file:804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:57588kB dirty:288kB writeback:0kB shmem:56480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:724kB pagetables:1296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.429280][ T5869] usb 5-1: USB disconnect, device number 30 [ 355.440894][ T8056] Node 0 DMA free:10104kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:132kB local_pcp:8kB free_cma:0kB [ 355.479442][ T8056] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 355.485593][ T9567] netlink: 28 bytes leftover after parsing attributes in process `syz.6.934'. [ 355.486937][ T8056] Node 0 DMA32 free:49112kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:16384KB active_anon:1164kB inactive_anon:0kB active_file:4kB inactive_file:36kB unevictable:1536kB writepending:8kB present:3129332kB managed:2541524kB mlocked:0kB bounce:0kB free_pcp:1820kB local_pcp:756kB free_cma:0kB [ 355.533296][ T8056] lowmem_reserve[]: 0 0 1 1 1 [ 355.538042][ T8056] Node 0 Normal free:8kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:32kB free_cma:0kB [ 355.549984][ T9567] netlink: 60 bytes leftover after parsing attributes in process `syz.6.934'. [ 355.580145][ T9565] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 355.674206][ T8056] lowmem_reserve[]: 0 0 0 0 0 [ 355.685903][ T8056] Node 1 Normal free:447492kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:52376kB inactive_anon:12kB active_file:59428kB inactive_file:804kB unevictable:1536kB writepending:348kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10704kB local_pcp:5344kB free_cma:0kB [ 355.787248][ T8056] lowmem_reserve[]: 0 0 0 0 0 [ 355.797359][ T8056] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 10104kB [ 355.894791][ T8056] Node 0 DMA32: 54*4kB (MEH) 72*8kB (UMEH) 130*16kB (MEH) 99*32kB (UMEH) 49*64kB (UMEH) 28*128kB (UMEH) 12*256kB (UMEH) 5*512kB (UMH) 4*1024kB (MH) 9*2048kB (M) 2*4096kB (M) = 49112kB [ 356.060318][ T8056] Node 0 Normal: 6*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 356.324223][ T8056] Node 1 Normal: 2*4kB (UE) 3*8kB (ME) 8*16kB (E) 2*32kB (E) 3*64kB (E) 12*128kB (UME) 4*256kB (ME) 9*512kB (UME) 8*1024kB (UME) 2*2048kB (M) 100*4096kB (M) = 429472kB [ 356.441975][ T8056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.465342][ T8056] Node 0 hugepages_total=13 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 356.643896][ T8056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.654821][ T30] audit: type=1326 audit(1744779526.800:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9579 comm="syz.2.937" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4a7b8e169 code=0x0 [ 356.723181][ T8056] Node 1 hugepages_total=4294967287 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 356.739351][ T8056] 27245 total pagecache pages [ 356.748057][ T8056] 825 pages in swap cache [ 356.777540][ T8056] Free swap = 9088kB [ 356.902003][ T8056] Total swap = 124996kB [ 356.906247][ T8056] 2097051 pages RAM [ 356.924932][ T8056] 0 pages HighMem/MovableOnly [ 357.463680][ T8056] 429628 pages reserved [ 357.497174][ T8056] 0 pages cma reserved [ 357.687745][ T9594] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 363.102392][ T9647] netlink: 476 bytes leftover after parsing attributes in process `syz.2.951'. [ 363.313341][ T9649] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 363.438324][ T30] audit: type=1400 audit(1744779533.610:1306): avc: denied { setopt } for pid=9650 comm="syz.4.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 363.504922][ T9651] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 364.834984][ T9670] siw: device registration error -23 [ 367.632437][ T9695] netlink: 'syz.5.962': attribute type 10 has an invalid length. [ 368.599017][ T9704] netlink: 'syz.5.965': attribute type 10 has an invalid length. [ 369.033879][ T9706] x_tables: duplicate underflow at hook 1 [ 370.041086][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 370.887033][ T9729] vxcan1: tx address claim with dlc 0 [ 371.043055][ T30] audit: type=1326 audit(1744779541.170:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9724 comm="syz.5.971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f895c78e169 code=0x0 [ 372.199788][ T9739] netlink: 476 bytes leftover after parsing attributes in process `syz.6.975'. [ 373.549669][ T5911] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 373.934539][ T5911] usb 6-1: config index 0 descriptor too short (expected 48, got 27) [ 374.269447][ T5911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.583999][ T5911] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 374.669826][ T5911] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 374.689105][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.713247][ T5911] usb 6-1: Product: syz [ 374.729929][ T5911] usb 6-1: Manufacturer: syz [ 374.899619][ T5911] usb 6-1: SerialNumber: syz [ 375.163510][ T9773] siw: device registration error -23 [ 375.172304][ T9777] netlink: 'syz.2.984': attribute type 10 has an invalid length. [ 375.562310][ T5911] usb 6-1: config 0 descriptor?? [ 375.769684][ T9755] x_tables: duplicate underflow at hook 1 [ 375.840667][ T5911] usb 6-1: USB disconnect, device number 2 [ 375.990867][ T9784] No control pipe specified [ 376.359796][ T9790] overlayfs: failed to clone upperpath [ 378.140124][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.146693][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.811033][ T30] audit: type=1326 audit(1744779549.990:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9817 comm="syz.0.996" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b4cb8e169 code=0x0 [ 380.029856][ T31] INFO: task syz.1.550:8057 blocked for more than 143 seconds. [ 380.037442][ T31] Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 [ 380.105338][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.128567][ T31] task:syz.1.550 state:D stack:29048 pid:8057 tgid:8048 ppid:5833 task_flags:0x400040 flags:0x00000004 [ 380.161637][ T31] Call Trace: [ 380.165353][ T31] [ 380.169152][ T31] __schedule+0x116f/0x5de0 [ 380.176007][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 380.196524][ T5832] Bluetooth: hci6: command 0x0406 tx timeout [ 380.234911][ T31] ? __pfx___schedule+0x10/0x10 [ 380.265391][ T31] ? find_held_lock+0x2b/0x80 [ 380.273190][ T31] ? schedule+0x2d7/0x3a0 [ 380.283928][ T31] schedule+0xe7/0x3a0 [ 380.288006][ T31] schedule_preempt_disabled+0x13/0x30 [ 380.310981][ T31] __mutex_lock+0x6c7/0xb90 [ 380.338179][ T31] ? blk_trace_ioctl+0x23a/0x280 [ 380.344419][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 380.356840][ T31] ? avc_has_extended_perms+0x47c/0x1090 [ 380.372193][ T31] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 380.386125][ T31] ? blk_trace_ioctl+0x23a/0x280 [ 380.395132][ T31] blk_trace_ioctl+0x23a/0x280 [ 380.417165][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 380.425571][ T31] blkdev_common_ioctl+0x1665/0x2250 [ 380.439164][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 380.448299][ T31] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 380.457934][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 380.484502][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 380.494166][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 380.501054][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 380.515301][ T31] blkdev_ioctl+0x1cb/0x6d0 [ 380.524180][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 380.534822][ T31] ? selinux_file_ioctl+0x180/0x270 [ 380.547595][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 380.558663][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 380.565098][ T31] __x64_sys_ioctl+0x190/0x200 [ 380.578761][ T31] do_syscall_64+0xcd/0x260 [ 380.585712][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.596895][ T31] RIP: 0033:0x7efdcef8e169 [ 380.604315][ T31] RSP: 002b:00007efdcfe61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.629457][ T31] RAX: ffffffffffffffda RBX: 00007efdcf1b6160 RCX: 00007efdcef8e169 [ 380.639817][ T31] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000004 [ 380.659798][ T31] RBP: 00007efdcf010a68 R08: 0000000000000000 R09: 0000000000000000 [ 380.667997][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.676497][ T31] R13: 0000000000000000 R14: 00007efdcf1b6160 R15: 00007ffcac921ec8 [ 380.689778][ T31] [ 380.692921][ T31] [ 380.692921][ T31] Showing all locks held in the system: [ 380.701192][ T31] 1 lock held by khungtaskd/31: [ 380.713594][ T31] #0: ffffffff8e3c15c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 380.733737][ T31] 2 locks held by getty/5578: [ 380.744974][ T31] #0: ffff888036b510a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 380.765762][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 380.788070][ T31] 2 locks held by syz-executor/5822: [ 380.799636][ T31] #0: ffff888079b100e0 (&type->s_umount_key#76){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 380.826981][ T31] #1: ffffffff8e3ccaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 380.855843][ T31] 3 locks held by syz.1.550/8056: [ 380.861530][ T31] 1 lock held by syz.1.550/8057: [ 380.866512][ T31] #0: ffff888025dfa658 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x23a/0x280 [ 380.893621][ T31] 2 locks held by syz.3.572/8127: [ 380.898756][ T31] #0: ffff888025dfcd58 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xd7/0x1b0 [ 380.913939][ T31] #1: ffffffff8e43ed68 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x395/0xad0 [ 380.929023][ T31] 1 lock held by syz.3.572/8148: [ 380.941515][ T31] #0: ffff888025dfcd58 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x23a/0x280 [ 380.965134][ T31] 2 locks held by syz.6.997/9822: [ 380.980797][ T31] #0: ffffffff9012caa8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 381.004917][ T31] #1: ffffffff8e3ccaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 381.018012][ T31] [ 381.028889][ T31] ============================================= [ 381.028889][ T31] [ 381.048263][ T31] NMI backtrace for cpu 0 [ 381.048280][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 381.048299][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 381.048308][ T31] Call Trace: [ 381.048314][ T31] [ 381.048321][ T31] dump_stack_lvl+0x116/0x1f0 [ 381.048346][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 381.048362][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 381.048382][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 381.048402][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 381.048421][ T31] watchdog+0xf70/0x12c0 [ 381.048442][ T31] ? __pfx_watchdog+0x10/0x10 [ 381.048457][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.048478][ T31] ? __kthread_parkme+0x19e/0x250 [ 381.048502][ T31] ? __pfx_watchdog+0x10/0x10 [ 381.048518][ T31] kthread+0x3c2/0x780 [ 381.048534][ T31] ? __pfx_kthread+0x10/0x10 [ 381.048548][ T31] ? __pfx_kthread+0x10/0x10 [ 381.048562][ T31] ? __pfx_kthread+0x10/0x10 [ 381.048577][ T31] ? __pfx_kthread+0x10/0x10 [ 381.048592][ T31] ? rcu_is_watching+0x12/0xc0 [ 381.048611][ T31] ? __pfx_kthread+0x10/0x10 [ 381.048628][ T31] ret_from_fork+0x45/0x80 [ 381.048643][ T31] ? __pfx_kthread+0x10/0x10 [ 381.048659][ T31] ret_from_fork_asm+0x1a/0x30 [ 381.048693][ T31] [ 381.048701][ T31] Sending NMI from CPU 0 to CPUs 1: [ 381.187730][ C1] NMI backtrace for cpu 1 [ 381.187745][ C1] CPU: 1 UID: 0 PID: 8056 Comm: syz.1.550 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 381.187761][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 381.187768][ C1] RIP: 0010:rcu_is_watching+0x60/0xc0 [ 381.187788][ C1] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 75 5c 48 03 1c ed 00 bd cf 8d 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 <48> 89 d8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 24 8b 03 c1 e8 02 [ 381.187801][ C1] RSP: 0018:ffffc9001cc3f780 EFLAGS: 00000a06 [ 381.187812][ C1] RAX: dffffc0000000000 RBX: ffff8880b8532de8 RCX: 0000000000000002 [ 381.187820][ C1] RDX: 0000000000000000 RSI: ffffffff8bf46480 RDI: ffffffff8dcfbd08 [ 381.187828][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 381.187836][ C1] R10: 0000000000000002 R11: 00000000000137ed R12: 0000000000000000 [ 381.187843][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.187851][ C1] FS: 00007efdcfe826c0(0000) GS:ffff888124ab0000(0000) knlGS:0000000000000000 [ 381.187864][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.187873][ C1] CR2: 00007f73d7b7fab8 CR3: 00000000351ce000 CR4: 00000000003526f0 [ 381.187881][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.187888][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.187896][ C1] Call Trace: [ 381.187903][ C1] [ 381.187908][ C1] lock_acquire+0x2cd/0x350 [ 381.187922][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 381.187938][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 381.187956][ C1] unwind_next_frame+0xd1/0x20a0 [ 381.187971][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 381.187985][ C1] ? do_syscall_64+0xcd/0x260 [ 381.188004][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 381.188021][ C1] arch_stack_walk+0x94/0x100 [ 381.188039][ C1] ? do_syscall_64+0xcd/0x260 [ 381.188057][ C1] stack_trace_save+0x8e/0xc0 [ 381.188072][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 381.188088][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 381.188100][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 381.188111][ C1] save_stack+0x160/0x1f0 [ 381.188123][ C1] ? __pfx_save_stack+0x10/0x10 [ 381.188134][ C1] ? __free_frozen_pages+0x69d/0xff0 [ 381.188150][ C1] ? relay_destroy_buf+0x11f/0x3e0 [ 381.188167][ C1] ? relay_close_buf+0x144/0x1a0 [ 381.188183][ C1] ? relay_open+0x765/0xad0 [ 381.188199][ C1] ? do_blk_trace_setup+0x503/0xb50 [ 381.188214][ C1] ? blk_trace_setup+0xed/0x1b0 [ 381.188228][ C1] ? blk_trace_ioctl+0x146/0x280 [ 381.188248][ C1] ? blkdev_ioctl+0x108/0x6d0 [ 381.188265][ C1] ? __x64_sys_ioctl+0x190/0x200 [ 381.188280][ C1] ? do_syscall_64+0xcd/0x260 [ 381.188297][ C1] ? page_ext_put+0x3e/0xd0 [ 381.188311][ C1] __reset_page_owner+0x84/0x1a0 [ 381.188325][ C1] __free_frozen_pages+0x69d/0xff0 [ 381.188344][ C1] relay_destroy_buf+0x11f/0x3e0 [ 381.188363][ C1] relay_close_buf+0x144/0x1a0 [ 381.188380][ C1] relay_open+0x765/0xad0 [ 381.188397][ C1] ? debugfs_create_file_full+0x41/0x60 [ 381.188416][ C1] do_blk_trace_setup+0x503/0xb50 [ 381.188433][ C1] blk_trace_setup+0xed/0x1b0 [ 381.188448][ C1] ? __pfx_blk_trace_setup+0x10/0x10 [ 381.188462][ C1] ? __pfx_snprintf+0x10/0x10 [ 381.188483][ C1] blk_trace_ioctl+0x146/0x280 [ 381.188498][ C1] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 381.188516][ C1] ? hook_file_ioctl_common+0x145/0x410 [ 381.188531][ C1] blkdev_ioctl+0x108/0x6d0 [ 381.188547][ C1] ? __pfx_blkdev_ioctl+0x10/0x10 [ 381.188564][ C1] ? selinux_file_ioctl+0x180/0x270 [ 381.188581][ C1] ? selinux_file_ioctl+0xb4/0x270 [ 381.188598][ C1] ? __pfx_blkdev_ioctl+0x10/0x10 [ 381.188615][ C1] __x64_sys_ioctl+0x190/0x200 [ 381.188632][ C1] do_syscall_64+0xcd/0x260 [ 381.188649][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.188662][ C1] RIP: 0033:0x7efdcef8e169 [ 381.188677][ C1] Code: Unable to access opcode bytes at 0x7efdcef8e13f. [ 381.188683][ C1] RSP: 002b:00007efdcfe82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.188695][ C1] RAX: ffffffffffffffda RBX: 00007efdcf1b6080 RCX: 00007efdcef8e169 [ 381.188703][ C1] RDX: 0000200000000480 RSI: 00000000c0481273 RDI: 0000000000000004 [ 381.188710][ C1] RBP: 00007efdcf010a68 R08: 0000000000000000 R09: 0000000000000000 [ 381.188717][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.188725][ C1] R13: 0000000000000000 R14: 00007efdcf1b6080 R15: 00007ffcac921ec8 [ 381.188739][ C1] [ 381.189887][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 381.189899][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(full) [ 381.189916][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 381.189924][ T31] Call Trace: [ 381.189930][ T31] [ 381.189935][ T31] dump_stack_lvl+0x3d/0x1f0 [ 381.189958][ T31] panic+0x71c/0x800 [ 381.189972][ T31] ? __pfx_panic+0x10/0x10 [ 381.189991][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 381.190010][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 381.190026][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 381.190042][ T31] ? watchdog+0xdda/0x12c0 [ 381.190056][ T31] ? watchdog+0xdcd/0x12c0 [ 381.190073][ T31] watchdog+0xdeb/0x12c0 [ 381.190092][ T31] ? __pfx_watchdog+0x10/0x10 [ 381.190105][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.190125][ T31] ? __kthread_parkme+0x19e/0x250 [ 381.190146][ T31] ? __pfx_watchdog+0x10/0x10 [ 381.190161][ T31] kthread+0x3c2/0x780 [ 381.190176][ T31] ? __pfx_kthread+0x10/0x10 [ 381.190189][ T31] ? __pfx_kthread+0x10/0x10 [ 381.190202][ T31] ? __pfx_kthread+0x10/0x10 [ 381.190216][ T31] ? __pfx_kthread+0x10/0x10 [ 381.190229][ T31] ? rcu_is_watching+0x12/0xc0 [ 381.190248][ T31] ? __pfx_kthread+0x10/0x10 [ 381.190263][ T31] ret_from_fork+0x45/0x80 [ 381.190278][ T31] ? __pfx_kthread+0x10/0x10 [ 381.190292][ T31] ret_from_fork_asm+0x1a/0x30 [ 381.190323][ T31] [ 381.771067][ T31] Kernel Offset: disabled [ 381.775367][ T31] Rebooting in 86400 seconds..