last executing test programs: 8m3.743699597s ago: executing program 4 (id=5): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000380)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffdfff, 0x1260, 0x1, 0x7}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000000000000000800040001000000", 0x24) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0xd, &(0x7f0000000540)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x100e, &(0x7f0000001e80)=""/4110, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001d00)={0x1, 0x8, 0x8, 0x1}, 0x10, 0xdd42, 0xffffffffffffffff, 0x1, &(0x7f0000001d40)=[0xffffffffffffffff], &(0x7f0000000040)=[{0x8000001, 0x4, 0x7, 0x3}], 0x10, 0xa}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) sendmsg$AUDIT_USER(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x28}, 0x4000000) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r4, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x2}, 0x5c) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}}, 0x0) socket$kcm(0x11, 0x3, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, 0x0, 0x8d4) 8m2.634428493s ago: executing program 4 (id=7): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}}, 0x4000000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x6, 0x5, 0x3}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f00000004c0)={0x2, 0x9, 0x7, 0x8, 0x9, 0x7, 0x950}, 0xc) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8031}, 0x4004000) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000600), 0x341300, 0x0) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000640)=0x2) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000680)={0x2, 'lo\x00', {0x6}, 0xd}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r8 = fcntl$getown(r5, 0x9) prlimit64(r8, 0xf, &(0x7f00000006c0)={0x5, 0x8}, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r9, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000840}, 0x5) close(r6) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000840)={0x0, 0x2}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000008c0)={0x3ff, 0x0, 0x0, 0x8fa, r10}, 0x10) fstatfs(r7, &(0x7f0000000900)=""/232) io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, &(0x7f0000000a00)={0x1}, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000a40)=@req3={0x7, 0x6, 0x37, 0xc5e, 0xdb, 0x59, 0xc}, 0x1c) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) fsetxattr$security_capability(r11, &(0x7f0000000ac0), &(0x7f0000000b00)=@v2={0x2000000, [{0x8, 0x3}, {0x62e, 0x97}]}, 0x14, 0x1) ioctl$GIO_CMAP(r11, 0x4b70, &(0x7f0000000b40)) sendto$inet6(r6, &(0x7f0000000b80)="b4363ff2e1b020bad410769857cbfb6a3c712e346c807d7d25e2233a7ace62f22a134ae31fb94952c37c4bf19746d92a832757dd786a35909e5d757c6646839d9b125c5adb9ea5883b81946b1f14ca3d4fe13e677748f609527832e29e5735acfcb2b7ad022c4fcf9479ffdbb605e79739fcaa6c2d3d22f99629658efb2aef3e32834d23f5f664f5cb2ebd381018f9993fbf5ad59973da49a326e9f4e370565d5cccdfc8807f100b9a665a19ea26f802f104993fb4335639645087774ac195a24366b4f91cda22b97e5fe499af847a7da7b2e9dff72007b9d07377335b7d22bb667369453ebe6b161067d3bee2e611a5908437c922fb9b3e02719fa7fcb0ea675e1ef795141ec642fced736e949dbdeed8371b4a82378836a663d52e1c3ee9979da79c85449ed524638329827da5c991abe70352a5392658edaaf23cde7c904d45f7b6146afcc9bebeca04accbe2e54753f30fbb4c5a2176f1b2213ea984025eead67fa2f5d7491b551e6c3cc89b8d593b751f39949ebd545cb7e939fb8795d24e53e7e2c85a9a257ced160f0a257ee4959abf5d7dd859b3bb72fa77f65a726e5ab33120bef1f10e359189cdaca560a06a594f35b7613df9845ba602c0ed38df0cbc1e7dc4da8a91133b4cc445a4a3d2ba8b639d769979c256c20268f0ba0eb818217e88cb61c46f8a835e9a567fc85b47472fb2485d9e1ee9116254edc329f5b4b5a2eafa99eeba271d5402034eb4d1071dd14c99d90e45fdecbfd0f21724a750de58e8c56ffa6121657c35ef9c17dc36654f55544647fbaf70a3ad2d5eb0a782699ec8b10c6450a1c01c514bb4701420fbbe0432ce847df926333b977812997d92e5f16c6c15f586684a7909a5ee3fd0190bec2373546efe7958e60a2b8db86d86593ff3def081d0a7a98180d5b218f9a531604cfeeb3982f16a7c558dc319f6f1f59afc2360943550dd198bc198c14f991ba869b4fb448768742824e2515d53210652620730d27383375d08a78571dcb7284bbae7d420ba78ca47ef34e3d55508ae5893db8f44f013fb1280ea544d7873f718fca5ab68957478410aaddc24272610af3258683985432a4c7be6c51bf94df4561e51d2520bae959ec499f1f737bb17ed26bc928da5e2856e556c94cc593abd5008cc29cbd49999d8b311587d4f9faa8d14c05c5863822e85943e04402bba32c1c44c4a66c241671801351cce331890d322f810806b6c94c7d95467ead199dc6828f4a3bb585b9767b7f23c8ce66c9e4f8bf897b7f227fcd68cd4bd399f70d8fe781936de2bc3e487fd1023f710afb99b5c15bda903879e355f3bd4160d06ac41f41d995247568e879d8e1f8297cf3c107fb2cf5062f3a53dc3b23b8dd2725b9af01f5c8d8a5cbd32e59d79d3c5c399f1a5540d500ed088d46d6d18787014652c30ec8f4bb7ea8bf16df258ae01a993b509eeb4e1fa1f4124e66b4e477d765cc8107052ed952c46eb3ab4c5d2d718cbb930a8e2e68e5773db43676cab839a588d87a07fe850a74b76286324adeed8c288b2cd3bb34f3333f0577b6c9fc57e52f3eab3df4669c5d71c49be34b9f5cea52d5ab207728416446b67b60723ec04642aac313e0e6c2a3c86defdfcb7c82981a2d72356c521d5918604cfcf73f135c2f395d3f4462895d52a343c7b3fa23e398a0adc6ad89e47152f3c6d2543f2ceb4eb6ae193b6cf36c335ae72d452a9f2f718ae0a1220bb91cf982c8ccdf09ca3bb5f83d321cdcabbdaaf68516aa8132bb14e78e1a02c3433de3e0897b67378f624e5f0918e9042784dde6130870f6965af614f9181c49b940416b306b4a7481c51fd6a04323b496e48660638c8a16883c8becf4142c570cc894e93bf26a289006385a104c89d5f589f630f263dc2b331f2ec6917e470fc4bbacc607cb19d20e5f0bf2e5e36d127c7743e9d349f94c6d52d844c53ed6489941253020ed92e06ea24c37e2d0413211ab4080558ad3edf03f28be73ebee3f0f29891f273c955f1867a8a6e00ee2a5fbaad44985c4c1e139bc3d7b3f22b57c9571b6968387ca7fad4fffed755432d1906601665583c585b83a1d7e47a62fe2363fe9c8a155ca5ec865a200d51c66b7b52f9878b6918b35d3bf246581a8b13f5c7916684258a0a19ec2a2968afbfccf018bbdb4e2b8ec623329281fbae3a9117e0aeac193646941516a7a47fe9e4c81b2a1ca1a4d2894c76852cd1af3955952feeab0c1841c59b13c41eb9de2bcecc222eff6eec0c93eb6623f209daae55d76de82d0dd1289fadd7195e23d9f8629c5a873d28bfb82bb246b49bfaade33f30f068eb5ba9eb7b1d0a229e3ef49e408290d07f4d08c8e0b146d1a3556c6114926b94f5f870710431d93890792b66270e8b3c68c1f51721b72db40e2d58aab33e5d92aa05c004fc129c658eae8a9238951da17364289df172759f015ab0dec7c7435e72c8cc6c7c285cc0ad4d092289cf295feadd9986cd25cf6d2832436317e7400dd9fd565adc09e91f2e88194c61b4a8cbf1c5a2ff652c4853773405d3875e140548f749736f8195d81efc628f640ac8da165c1eed89ef870d2f55ae92099f5aebc2482e72c325ef32e4b0a5d0072050099e135d82ead9c7c412979a7f580300006c0805a2800be18a09e39a683f974fbbc68e3d58380912867badb55abdfe305f9ef02e736074cf98b105ffdf1e889e39cef293718ce4a1d3e16e803764b14f1a1e120d2e6b6ab2a957445a35fe73eb0af8051fad33b863cc24fa9010d6235a4508c93ea6b5419d1e743d8b8e7bdb05d2d0483a6098c2e8caeadb0177f7c22930f5767301cbf85c9a637f87b5f1e8e2f86677217aab5b2b4e4b948cc8067ac1c2f1dd5063dcbeab49f89732328e76a2ee51715aa378efa5adf6e17a45a32a0bc4355afe1fa65f0048514e8a4800a164751bae5085cbcb0437af0377c58e886dc676a1727b927575e22d3ca775fd85f253734db246252060e1793cca31e4fde7e16f2239e78c04c6f1ee7a465a4b481cbbdbba339469a43e740b0491d5f95678fd67e0c584ec4d1fba2afb979923d8284c0043c3b8bfd7f9fc6a613f54744e774a45e733590da0a8bf8cbf9a4f0486df4f880b1fa019d18da4b331f3af0c6c5c1817c92ebe5b0bd2c1effef2f3ac31ab986ec7816a59fcf639182120cabe6c44f12e7a33b57da3e58609de7942f98892a97dfd3e53b311ca00f0cfe19c485c7dd7f0d7e926ab8493bcc877fbb3d691b62a83e7f5711b0a73ba775042e670ec084df4117656b61555345b8174b2dac0cc7f285df7ef911cfe02a2022c511043ffd63de81bcdad288bb185b9260094b7e758a310283fa162e39e1470a0be5d3e92cb51c9a88f500f408e6992892ce58dc8d8a712229e14d4573d25f44eceb8604d65b3242ea315fe7c5c706e94f5dfc2308e5a86ce4f74735b4f0fd98da1397dc4eb952eb587ddae09deac0f324775c457165ea2691e32d464bb57263ef25204874b578eaea0acfb5b97874d9932475c2722a7552166c86e914e6fa559aff1dc9049889c3ae2df2995a83e17003f535da613e3c2ecc09a1e76c7f48915ddf449a2b1bc8b2baabe65bb21454a04df0f336775dd0f851dde0e50b8b65987d2d731d6bef3c28daab3b928e7f702debec276bfd9962e710f199ee03f0f5df86c7503f0c1f59b5fc3e8eeb662822ab71e3af23c664e5e63c628d877d74611812c7a567ad935f47304fe4cacdc3547a22f34ff2de43cac6d217ef5bc3770e3d72c56f051fd32a531c8fd151da98bb03d4e701cd5691303a9fa6e19362c5fe733227d4d88a730cc0261c4ea55888bb64e8a262bd137394875dba73e8f821b774116445ca6c738978af522f9c553369e818a3b6fbf62068a231744ea6f679c18229389bf598f036dd90eb4e728bc49063e7c881a29918d4c55f9b9d825ff097e6c758dcaa7ebfa171bf96043de02868ed81a64d4982bbddc2b457b4c096e5238fa104b6c4c7f3e0bcee028b1d040b7a94c330382c94585752ce7a6aaf2400917cd9d2a0667ed53c9e4efb2ff25e91d89a0f2f407ac6ebf34ef12d5b2eea73163c6007bb8ca2c3e38840f4bbc95404e42c558bd3081fec02a668f0f7207232c782e131b3d4d21f6b3032436d42a17b8e596b2ed236f795b2a95c3e5fc17bfabb8024d926ff313522fd05722facbbbe585e8c8da65a52cb7590ca3c3a8886af92c75abc9b8f72301e1d7c5ebe7cdf915a4a326a30c354dd95a359fca7936eb47846c39ea89d47287352e3816c047dfd5300e0155ba4eb415d1bc4d820f363795d6a778fa4c05bfc042d332a7c2b7d10f3cc5e13ae5e1058e63354ecec5fe3529c5812b1eeb1fefba6b7cd840d7e391bcec6b426c728ef3d46072964ebaff3fe510583e1094cc52e2bf570b103b5231570a5720fad0194baf408a7f0d29c61a733367943b96b968f9ebdead7790d433f13642d634e32ea73cc356631e9c754b99d5149c8994ee75c04ed51a483759ff250b36f089db16e35068c21dc216133975b0510cb5dee46515baed7db29b5e99ea63d73c40ced64272b6f5f92f9ad212cc67b2621e553fda212b5e0af06f84beb19c5ca9abf69d34cf6f0255bba71e3eddedd1fa17f50a68f20b2333b4e722c29c84d2dc56c0f3e876312f9d524ceda7c709538c4fde617f8118328137d898c2eee461cea3cb843f07351e7b713745d3485052093ee0ac1a9d19595747941834d3aa50bd9ade4e267add82c1c3b03e7faadf80f401c6019161ae6e267e76764946248de1593a25599f37b910e4353b5cafc37fe4eba1bc1362cb39eac2ec2b4da94c4ecb68d3c27645253059fa81ff276cec468e4280626cb30ba37f14eedc2cf4e609171f53d973eaed357bc53a776317f3a861f6f0c96aad3557751ce80031c315a24614624ca49904ccc230a0428ffdb16353f50afb147bf7c541b6c5da215492bf6f939f53000588bb6d7cf792b136dfaf78e6f91893e7d293392ae5bfd723749fbe1d876e669288cf082fcba7ce7a9ed2644c4ad34617478852981e07d22dafd12df2f40a19d88dbbf529c04292ef64902b879aef8520defb09623e315b77ec77f616732e8575d2b824d17d7f60b840e43b466f50d55ca81699810a9014afb8e1d5ae507b17631dfcf036b5ae0c1fed9c872e5ff9e59b736a61d39c074a9875a5bac9cca74a77971907b0c12155132a776cb788c27ce1c1fd7131dd12bc13d72eb300d17437cd25a1f139142ec13d4d241aaceba5bb3342f946b7176ccf6d6e13a231103b79aa37b4659ee30273652aa9dddccdcb468f77b2445304d334c53f87973723b237d7d15ae4dd2b1073f7682f49048115144edaa203a4d6f7b8bc6cd03953fddc69fba9ef554f3d1f35877580559c02ec8420800581a48d65923252db1233228c46fc0c41b8ed6a31d439df12ef8332cf2c453698ac65ae7ef42f4b0d3b2124cebef42334b6b1817c0e4948e68eeb21dc219098066c0bf43f1be58b1c3afb3a57c7078b4568e66fb2571d034530b410cffd2f959e34c8cf789df081bc4053b29e011bbaeedb98196f509beb7fe39b75e64464d0ef609bc9f5f40063e7124a05af3c596482c0216f5cbc9b94cc307a0263d5e53b4b2068af5d74e6ca2f7d54d14445f3ec53de7cf3741c92ec52ff44ee239e44e4227751ca31abbfb3f512b19f44106bc0d1acc5532b40210cceca189a9065437b506fd2b958055a00804e9cddf5ff018456673e1b390eab64cdc7291c688a9e521f0c3e4f6ee24a2abb94b7e9a68589ed423521e7", 0x1000, 0x4084, &(0x7f0000001b80)={0xa, 0x4e23, 0x3, @empty, 0xfffffffb}, 0x1c) 8m1.358502845s ago: executing program 4 (id=8): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x2}, &(0x7f0000000300)=0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) acct(0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d66145acf7ae69b339bdaca0f59e2551cc64d3244abdbb1bef87d1908d6fbe0796e330c4bc0d33b1bbb691df155aba6b0ffb74b1caa8a301bee40656897871b028e58f8b5", @ANYRESHEX=r1]) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000040000000800000008000000922a0200", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000e100"/28], 0x50) syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') linkat(r2, &(0x7f0000000180)='./mnt\x00', r2, 0x0, 0x1000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f00000036c0)={0x0, 0x1, 0x0, 0x7}) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x2108, 0x121001) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000540)={0x30, &(0x7f0000000480)=[{0x29, '\x00', @st={0x4, [{0x1, @uvalue=0x101}, {0x2, @svalue=0x2}, {0x1, @svalue=0x9d6a}, {0x2, @svalue=0x6}]}, 0x9}, {0x35, '\x00', @data=0x2, 0x400}]}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r6, &(0x7f0000000c40)={0x2, 0xfffe, @local}, 0xd) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(0x0, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') 8m0.003321479s ago: executing program 4 (id=13): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000200)=0x6e) r3 = socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000380)='\vw', 0x2}], 0x1) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0) pwritev2(r2, &(0x7f0000000480)=[{&(0x7f0000000340)="ff2a50f995052a0f6df61e18bc62c63e21072e331582dd77fbde12ff311be3d4255c39f54318a1f0676e142024d809a595058ac30e857604dfa93d9ae94ee8ebf3cb0d32eede57f1dc22c60d55276247eeae78cef8dedc54708d4e659205e178e7e379ae6659d597b10d3b5d62a10bc36ba56389131628df9afed9ffcea52ffed124241c5fb8af938f8fb91d93ea49112545c932f44c0ff3a668b402a805262bf8a197de730eec499df8a14d9eac5e6df5849f4be7f85e9739ee068237333a", 0xbf}, {&(0x7f0000000400)="2769067d00ca50863c6d1e93ea8b2462266508b633e8618dc0b2aee8792d04f7f914f9988e12b002fc36f9837ba85c323cda0574c070d5eb959cc81a6d3ac9a5e7e086ddfb4975b844c2ef18cdcdf6ae221eb0dc", 0x54}], 0x2, 0x3, 0xc5, 0x9) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r6, 0x8, &(0x7f0000000080)=0x7) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r8, 0x100000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) 7m58.30567426s ago: executing program 4 (id=18): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000200)=0x6e) r3 = socket$rds(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000380)='\vw', 0x2}], 0x1) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0) pwritev2(r2, &(0x7f0000000480)=[{&(0x7f0000000340)="ff2a50f995052a0f6df61e18bc62c63e21072e331582dd77fbde12ff311be3d4255c39f54318a1f0676e142024d809a595058ac30e857604dfa93d9ae94ee8ebf3cb0d32eede57f1dc22c60d55276247eeae78cef8dedc54708d4e659205e178e7e379ae6659d597b10d3b5d62a10bc36ba56389131628df9afed9ffcea52ffed124241c5fb8af938f8fb91d93ea49112545c932f44c0ff3a668b402a805262bf8a197de730eec499df8a14d9eac5e6df5849f4be7f85e9739ee068237333a", 0xbf}, {&(0x7f0000000400)="2769067d00ca50863c6d1e93ea8b2462266508b633e8618dc0b2aee8792d04f7f914f9988e12b002fc36f9837ba85c323cda0574c070d5eb959cc81a6d3ac9a5e7e086ddfb4975b844c2ef18cdcdf6ae221eb0dc", 0x54}], 0x2, 0x3, 0xc5, 0x9) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r6, 0x8, &(0x7f0000000080)=0x7) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r8, 0x100000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) 7m55.889719173s ago: executing program 4 (id=25): syz_usb_connect(0x5, 0x58, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xd4, 0x8b, 0x86, 0x10, 0x45e, 0x468, 0xb29c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x3, 0x40, 0x20, 0x7f, "", [{{0x9, 0x4, 0x4a, 0x1, 0x5, 0xb5, 0xef, 0xe4, 0x9, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x5b, 0xd}}, {{0x9, 0x5, 0x35027ad7510f81c3, 0x2, 0x200, 0x1, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xd1, 0x80, 0xfb}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xfc, 0x40, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x81, 0x9, 0x0, [@generic={0x7, 0x5, "b1a62325cc"}]}}]}}]}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) lseek(r1, 0x8000000000000000, 0x1) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000400)="a6", 0x1}], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) ioctl(r0, 0x8b2c, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0xc) syz_open_dev$dvb_frontend(0x0, 0x0, 0x212401) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047bd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0x117}], 0x1}, 0x0) 7m55.278112281s ago: executing program 32 (id=25): syz_usb_connect(0x5, 0x58, &(0x7f0000002040)={{0x12, 0x1, 0x250, 0xd4, 0x8b, 0x86, 0x10, 0x45e, 0x468, 0xb29c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x3, 0x40, 0x20, 0x7f, "", [{{0x9, 0x4, 0x4a, 0x1, 0x5, 0xb5, 0xef, 0xe4, 0x9, [], [{{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x5b, 0xd}}, {{0x9, 0x5, 0x35027ad7510f81c3, 0x2, 0x200, 0x1, 0x1, 0x8}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xd1, 0x80, 0xfb}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xfc, 0x40, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x81, 0x9, 0x0, [@generic={0x7, 0x5, "b1a62325cc"}]}}]}}]}}]}}, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) lseek(r1, 0x8000000000000000, 0x1) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000400)="a6", 0x1}], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) ioctl(r0, 0x8b2c, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0xc) syz_open_dev$dvb_frontend(0x0, 0x0, 0x212401) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047bd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000009000000ffca1b1f0000000004c00e72f750375ed08a56331d3f9ed7815e381af1e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9b752b0925e312c1aebc7a46e3988285dcdf12f21308f868fece010000ed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff457bf8463980fdd5038631edd7dfae12d9b4f463b58a05f422422a71bccf792562c939844873c29a3a91bb89bd0f5f0e3ab2c54aac07a25acd8a6d315620ab6078011ecfe34e62d694c076ad452b670b63e733783295934b329888f3eba290da6085ca204bbeed85bdd4a3fe4bde6e28042cfca30604a19c8b22942893d4fc6b5b77d214edc5", 0x117}], 0x1}, 0x0) 4m47.451005094s ago: executing program 1 (id=526): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, &(0x7f0000000100)=0x9, r2, 0x0, 0x7, 0x2) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0180001001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0xc050) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4m47.204168612s ago: executing program 1 (id=530): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2b, 'devices'}]}, 0x9) timer_create(0x0, 0x0, 0x0) inotify_init() inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000340)={0x4, {"1b1b0f8ff5d2ab6993de03e5086dc4ac", "8b538a29ac7c640a211e00ffffdcf2d1", "8700"}, 0x51e}) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r7 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r5, 0x0, 0x5a}, &(0x7f0000000980)=ANY=[@ANYBLOB='enc=pkcs1'], 0x0, &(0x7f00000004c0)=""/90) 4m45.359190992s ago: executing program 1 (id=533): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_ublk_setup_io_uring(0x277c, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, r0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x4, 0x0) getdents64(r3, 0x0, 0x0) 4m44.222625833s ago: executing program 1 (id=536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = inotify_init() sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8010) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x10}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) r4 = socket(0x10, 0x3, 0x1000000) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)={0x54, 0x30, 0x605, 0x0, 0x0, "", [@typed={0x0, 0x1, 0x0, 0x0, @binary="400001003c0001000900010067617465000000002c000200200001001800010000000000000000000000000000000000000000000800020000000000"}]}, 0x54}], 0x1}, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) read$nci(r5, 0x0, 0x0) 4m42.904830423s ago: executing program 1 (id=540): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r3 = syz_clone(0x300400, &(0x7f00000004c0)="c42cb0c68a4561d247e00edeff867a65db739b936873c39535b1c571e51b021f5b437b7a5c14cf16a51b6dfc27b4fa92abc71ec09d0377b3646558c65495cb68a17316290f4920e58945b018261aa948d7fae5d08045c3cd23d9880855729bf8f611d3933a6eebeef952c463ca1b5058409bd582aea1f6012771818c6754999c535d099c0e254929aef8d3e3c723c693c88158af8e700701f1a79c23d4ed7b6d835828e25c8130fe69935675dde06c3754c0ee8c9bf3022d2b970f0ce13a912ca4fee5813f0f00ea1d58", 0xca, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="a8ed16630013d9221d38de7964fd0db9399595ee27c52fb7010bd5189166a4db9d83065920e4") ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000680)={'\x00', 0x8000, 0x3, 0x98c, 0x3, 0x682f09dd, r3}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000006c00000008000300", @ANYRES32=r4, @ANYBLOB="080026006c09000008009f800700c2"], 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 4m38.101152298s ago: executing program 1 (id=549): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000b, 0x13, r2, 0x15c1000) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r7) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r8, 0x4, 0x40800) 4m22.102178993s ago: executing program 33 (id=549): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe51de000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300000b, 0x13, r2, 0x15c1000) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r7) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r8, 0x4, 0x40800) 3m42.494818255s ago: executing program 0 (id=679): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x8, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 3m41.257330329s ago: executing program 0 (id=681): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x1, 0x40, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xe, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@local, @in6=@mcast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x70}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x6, 0xb, 0x4, 0x80, 0xa, {0x0, 0xea60}, {0x3, 0x0, 0x9, 0x10, 0x6, 0x0, "5895396b"}, 0xc, 0x1, {0x0}, 0xfffffff9}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$dri(&(0x7f0000000240), 0x9, 0x48503) ioctl$FE_SET_FRONTEND(r5, 0x40246f4c, &(0x7f00000000c0)={0x30a32c3, 0x1, @qpsk={0x60b721a, 0x1e}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x4810}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 3m40.944500015s ago: executing program 0 (id=685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (rerun: 64) write(r3, &(0x7f0000000000)='3', 0x4e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtclass={0x44, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe(&(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) rseq(0x0, 0xfde1, 0x0, 0x0) sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x2c0, 0x2c0, 0xfeffffff, 0x218, 0x218, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010102, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0xe01, 0x1, 0x1}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @port=0x4e23, @gre_key=0x40}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x600, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @broadcast, @remote, @gre_key=0xff, @port=0x4e20}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'lo\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, @icmp_id=0x64, @gre_key=0x1ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r9 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r5, 0x1, 0x0) (async) setsockopt$sock_int(r9, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) 3m39.174872844s ago: executing program 0 (id=690): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000002040)=[{&(0x7f0000000e40)="05894e62871ed449cb8033d5fa235f5335ce75083d7ea3a254ce397dff90ab030a4736b24fec787471e4a8b815782f85c4bdf769b452b07a86ed3212d9a874a23d97b31b782e2ae0b0ba0ffffd7f1b68e77f021f0dc198dae0a231ab0b189446d16f163782f9921fc7eca099b4097fd2e0f090b26c4822d417e00938f2ed16508a81850c65079ef9310af25cf81f52d25c7c3ac201b9f3303f260da776e4a1bf479ab38bed06f52d7627b9e7ca0f9b435546fe922474457d087f114527bc467d4dc277185ca7a5b9eb6e2ec21729b16a85b0d4d28cb4c616821d2d74474bc0030b18df8e6ba4f4877bb8d9394bc0519b85e6f354a5b1dce48c45ae290361b3adf872dc895cdfc9aa98ec1ab1b388208c77d0b035a08d1081da51d9bf91f99472f078d4c36ae9a0fb04707a1b9a392d87e7d4712f2d3f1a5dcd020cc8a54282a869913ee8a93a08e038a6fd918e57f2ee5212f8f2b3009b0d87a32edc7029d7339a4eabb96e7375bbc2e52b71bcf631c16276622de14b0114a85adf53261fdbd42744045a9faea5718d9ae659fe6a77ecd0cb56dd0a6164712189de4b2ba197cd12f2cb28c1819051e6e5b4e61626092adbcd74f433dc0e002f122927c5b21847b91f0aff5abb103c7d4fc02574fa68c8cab553b6d15e0f4c07f475f2ef8a2c186de716b054b8bd2367bbeb73fefea2d7963511cd5a65a91abd5609e3c3106596fac466272dbadcebf844d3dd8f70343b6d3349e74282803a945e0d4cbbb1c06d21734188e2999acef1cf8924678ebc94f065d39d17760d6ef9e9e2d2d920aac21cc83134aa5319d428198c97ffb6d81ae8e8320643c6bf882234eebb0ae919f778a0757f11884a678dba782900cf7c0d010f57e8371215ca8afb632a0167f93b089829b1195abf73f95112f4cc56a59f911eaeb8ac50292b5fbfadbf02730db58483e7cf0c3541152c3089dccb470a7f4c1412d8e9595c71f41891c0feaa6dda9af204f7eec5fbd6ecd0abdd314484f93849d176477d90281c8787b3138b4af2494fc1b8be70584057f9506e11415c8995a8aa176a47e9fd4a75636257a0bee9724ac1fed350922041773dd3f25e53bbdcf9568a9b7337e56b098afb99d6ed82fde44ba58ee83b6ca9c32025766d1b461ef545ce3da8b01ceb1f44d06f2891c7adcff43e420bfe8927d3222d932abc30a90f1cd6e68638a61ad74390f8b364d08dc5728fe50c7158743ce5a2432a7591c728d5150d210924b9667a0a2294416d85d5d3c1d1d70d1a3a0516fd642eefe00f79c857f133b78c760519b8374ffe0f30d00758f2b53062d25c513b17f4615fc87c769acfa842c8b95a0df905a37aa4cdf8ce814c5f151e5620894db62f6ccf51fc1fe642f0daa431cb24d2fd0c18ac3d3ca47125ecef1dc203e0861d8a781abea02dcc1923e279ca35457c0fa90f6e7b61d06c99fa99d0e3ff5b798961cb99b7e73ef4dae250c2336b9f02850ba60ddae6f9b146acafb5342b2ffff6029eb837519b1d049e3443601eb610afa286892e34a69987fbcc17d7d79242cf11ff28fdbe9c4fa4eb26bbdf30b6e53df8c1b6f50f364991c37231eaeeb4d3002ceed104d7acb411664706b68289a1530497970509b1b7aea7f0fbf4428ae298df2932d25873ea37df4507031dd8f01e0ef10ba940ae72ab0a08e0a6029d196e0f6ae7f763d74b1eb23d5396c1175b2530ebdaff3dfc87221a0fcf8331840dc882b07cb424e105936129a01ab94a8ab5b06b74687bae39400164d3f544c0f128a2acaacbecf551c14e184edd70c3e3f92a40fc9ea56f39015a380eaa531111c41a285c838e39bac6f56b8ee874c05a24f63c658cbbde2dbad6b93d92df49d0460a04de57ab5d402fd7d5cc3cbcdf428a41f4e807f909598e5dde8b3db18cc7520c2b1c32d84c10e170f9178c3b39eae28dfb7172bebc709f360c68331d03a94491b39db04c9ad2bcc8a8dd3a74ea4ea9eeafecb64f7c3b9d4dd2f0c9d7a7ff0f6f4bb68d4ad8ef605fc3db1b3813fa0a2aa6d701c797b5f635696dda264a6c1bda3f9a1ac51794f9e4b022b8e99295cdd3e0f8ad69f2bc58900ab28f7c645b859ac2b303d45209a82c3ec936fd3ba6a20aef365287e5b3dca07b63a530b7aeb9a4917bee31d39f6df88edad90ffcf74027b1dd7ad344e707f2b0ebab2eabdad85b89087914403fe14423f169b74c17b43ebef655510f8619db13c2ae71c2768a90c68e61aba2201d947beb08b6b146dd5fb7411afc1d822d1ff597cf1c43fccd035cb38835c6227c70d6a9c1832e9c71627ba77d0345e50b7b40dd16e8b4c24cad26b358b1b29753eff93fd3d21f89b4ea9f8d83a9fde07e6b7ddc096a73e05047a6e63d516d81d9d190330e7fe857a196f979ea33e45fea2c769bb3ae7ae20c0952a3959e163ba11cf1489d910b8865dc9134a9510fa8586b159b106dbc93c2bba5e4cf5a1e04239f96c135181eb8601d32c7bcb58c01b09928320cc1dfd485cb3dc28fc5711d9222a87f817e21d5bdaaaf3abc9ca47eaa75d934dd76296b06ab0fa940521e639a444547adc389d00bc3368946759b6359f113a623edc4159965bb721a3657a3e7437c2d7bf8fc7727f5052e0a0fe5e3228168702fc8a8d9e88a0a822e0f4eded0466dd20892003c270d00fa59f86ec77db57f80fcd394f2b69abeff36b7bd0bda76092852d643d8b98912b36e37df6d6d0d2d8b1e1ca36693b8c9f739e1ea2db75337b999e8acfe21452faee047aafbdeb85dcde59b473a64cdb22b523743c6d0e44303d6ed985d6f087bc561520eb572ad842466a13b501a187a42804323cc7100484f0ffabb658271a85b344c95bb51f68f5f99dd182e27acd3bf1295a4ec607474436b1fbbeafe2ca23e89267b6753fc9082a5ccea3daffc45ca00d4319d625a97911e6f0cf63fe7a3bc12330e76f3a5f7d5c4111e0f6bcd77395d997e449098ba4aa35f946620899c0dfa00e9344363a7225e33a7b51cb971f35fddaf52dbb05c42802cc0e8019967855672f755d181311801b36dd898b016790e9a374f0ba0a7e83849ea493174901451453dd7e7ee39b89a144dcd697f17745e1158fc01e8f83642cf6381c54bfae4f45763184caceb07d6dce479027df9b8e3a669276cb5611e511337b89cdf752f2e981d4e4211c15aec8bb0e50b96bbd47614e962a56bed58f7852aef3bbaa6feeb7e24a238eedd51ba83da0cad2858e5aca1cd6f8de2299ede8134bac42026bef3f6f58f19d71028f1e502c8f450cf38dc9f621d8444452d14b1544f194130ee1c0f7d890977f5a8feda03cfb1e4cb73163137321689662ceee2c97f2d9e9533eeea9a2eddb9cbc70b83331a325d4b2bd36b1d7c57ece228a080086460cbf32d90035c59c7b5e439b9a998c7941043a8d774d6929a16c8dedb8b84789ccf3a5ceeaafd91411f46cad6fc5e84aeece7aa4aa8e8251a631cb5b1978c75c36eae228443f47a7e6a5928feeaa94b0bcfcd28f34235345eba7ff49ad6190c87037752b0516de6dceb365ef2e506ed525bdface6eba3f8c54c3a14312f64696e1e492a0c5581566fd2f70b759aebbea804b2e0dfd6abdcf670a8763a6682fb52ddd7382c579dab28ebb00e3926bb9888764c78f637bdc5735ddbe7158a4372d07015318aeb55d5cb0969abcf4f016f689383b0323fdcee8a51c705a2ba408541593f00bfaced8928a6e9ff090610f12b005ea7c993d6fba352fd36e6c76e3146d59cd4524ed37079e76f88f48bbdb861a696f402c1a1bfb45f4602a9c59fd7ae38cc55dbe6ebca3791ec8cf0fa9af046130897f66dee8e29fc69ea2a6a627f0d4af9e1aa34dc2c89c1857ae8584ca82e34610eff3395d02adbacd954bfd3aae57254239beb9807b590d380a707afb2bc9e7c86ece7a1798784d46ea7dc2f3762e36f30f124c38ae6ff04d4297efccde98692a83b6452833f67083adbd81bb109a2e8a63742eff889e2777f531fe085794b96bbde967e09608a0a012271df5878fda67a101386ffd635b7c772c56f4f098b448c46734efa41b8616030fa3f3c2a0f916f2e56e214dd67a382897dc7eeae993feba28c1b7b6c5244c8803dc0d51252bf519dbe22f0d3b37aee1ce98f6282150d7974b46c58b5be14833949dad6fa9194b2037f4aaa37aa0745ddac9551bb7aabe287131801549dbdda6fb97ac88edb47f782919bcc47f4c3746e5d8495dd5876cc4dc8b133196ce926fbf0bdad742162f1125c8d5d850f146583ed8668ba281a2c98717d321d7e6fae0c2c804b81f6fb6b30ea79e398cd4faa6a0661de244a8dbad9da49dded03b4b56bb5f4bf3b97a817ec2fded1ee988f072584232681d7cbdce96d774db208d612566d2b6788f09d460d4c7d5bf596e8fce7285e32b357a98c66b40b4c4b1149e8f6d62fde6d53b650e2c8cabdcd38c4d7fa1cb9e741ddef7146da32d88586dedee80c7919cc85d26c423f3744661d617eee3cd6484b5ecab5895b84964dae9a90795f5b60d298479865c98a37611e69e4d33bb8436a7d42c7f2e06dd5fcfeafaaff1e32d6aafa7a6a8e749d41a83d9dc7e180aaa6c9ec82108a588c3f1f442aaa3cdc8fcb6a792dc81b21392a1a88f4ddb1b8a91f530b1564b3b31b41bccb12bd2b22c434a0877ef612833cb5c40a0b5fa9a71cc65e8a8ef1d81f78a2df02b87915cd866e281e2b38efb507d29f737e9c0eb85e22f49da5a84a82ff09ad9a72e4c6f82f0999d6fb66c882742dde85897e19051fe80505778a2eafc604dfc90590d81660c11523889bb1293ef24b50e57267f3a4186500fbf1b5354c0925d5729faf16cec38a298427b435d2bbbafd0531fdc891f2646241b103c14998ce701e84efce944f46f1d8dbc90f5a5bcc05750d56e9af65ec17248d0cb3c4cbf0c37e9ade1278e352fcec711dd4f54b3ca0803928c60ce070eae61df7aaef0994ec061e05a155bcf8883e20cead4960f29a334693cb3e11e177f2a17c8779efe82f0c2e268c8fa3b1e8bd19e3fe5e52ebc310ef6ac0737faf4b6a05092a85905282e47a18246faba1a581108274ecc097a37726d79a6263c79feb7901a0e9203f8899798dcc66d344568fb804d8df8418c100f5d14d60ea32b40293d846b492ab4d3495aa9950a0de0071a774a7925fd22e746f9639f4850ba2de6176fa062cf5ff0551285cb2e0af0d17e82093073aa2b5dd9724d33c509a55056e952b8385c4900f5b9e282f1ae302a84efe801d3e2fb76c06ac4e0048a7f07e3e90d45ba66c16ee6ce485c81cb8a2680755d6719103b49a79b697f9b9c0426d334c50ac7ad11a7e6945a1e0d8664357295c2eee5526f56bf55adceaa11bc33ec77b5344960e8d2aada6ef2b11a92810576b07bfda0d5214df6adfcff920f3afaffa51d35a519b6e100e9c971e7a29b6f97aa66b2dcdf049c6fbc3ca389723b50c690fb30b04c14db3036665ccdcf467069a3acb04a833664b3137ebbade5abb426b1f199b502b7f2c1896820072b0aa141714fb799cb6acde3dc75faf2a6df149c7ec4a72618aa8893d1da81da337dbcd177dcda5a0739c140a877ea77d55b6626a1f9db4d5159aa49054ddd62696bccdf00958610b4e0f2860be10351f5a8cd7fdc485fd083447451d0d10156b2f8c2f67cfc7a6f65189565f889d2d1db4931d3ca1e0966776534a8f855a84e3456a22681f0c6777d64c7b31d794453ba7f45aeaa6c7bdc645795bc3ef2b3193f39f07d6d6ae119c849b809655541729ceb51c0a30d2af9e8cecf2f1e2c322f60d65cd", 0x1000}, {&(0x7f0000002080)="0ffbd1d496d71b7c08096046ada469c8b009f61fd05e8c241f947463494403b0ff1ad40e4e675080c3c1d54484bab26fa6a53808e17f41784644cf96e48e142ab434b5628cd7c0da9ca29c749e41c971055f611beaed8c16314cdcb6b43f9da44efb8131c502ac720154ac7e73beb4ace115d9b17f249fffffffffffffffff9e0d2e3aed2ae1705ac2fe0d0dba3a4aa43676d50a6cf1f13e0f8a29299513a49c04ae3fe4b9c2b15eef3590022f35539317a880f8144ef8b198e6e99fccfaa2fb8b96b7a309a64caf1f07af93aab49710d1d4baf3b75f04ee2abb786933b9d8a302ad419afea4d9736cb0e05008a48b90c14dae13acd412294db7829528e47080c9cf86a9d12a98e14477f56df0cbfc2f8a41ba744aa350851d6fe18c585683858f26077396850fe502cf517c0425c27cf024713132bdfd8cc5f3b079990baae5464c93af7c0990a6e0688f729af21865eaac450cf65ed0b12cfb08246041ee3afca321", 0x163}, {&(0x7f0000001f00)="23572b7da3de7f11921bb74991022a6efbbda6fca3b1b212684d3a359cb3b144dc834c450e781dccd5f5dae9b3ff4deba4d0f88632eba461f17747e3f5f3da07e5f674324c26a9c337d32111322fdc327c1a278af07f065e720cba91d60bf37cc2d6633806a38aeb9c84646440b11d316a6d2a793b1937b7f4e34c6089a3dc92bfd7f585c9692a52f19b86ff9cbfd7", 0x8f}, {&(0x7f0000001fc0)="34d0e5afd1ab53226e552602eb4eee38064894cc6ca6bafb90524c6ef01424c2a0cd71298684ab905b02d5305babca723e44472c89cde40a240ab8e88372bfb1a3638cb4e6896c5d6423954b173905474094851e61cd2b391db94f79da54e5f5e1f502230274f2b0bf353e41a90f1e38ba5b1d21812160895d27dac9edc8", 0x7e}], 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x1, 0x9}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01de4e5d19baec2020cdf4001100040000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000300"/28], 0x50) recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000180)=@l2tp6, 0x80, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000500)=""/102, 0x66}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f0000000640)=""/109, 0x6d}, {&(0x7f00000006c0)=""/86, 0x56}, {&(0x7f0000000740)=""/83, 0x53}, {&(0x7f00000007c0)=""/35, 0x23}], 0x7}, 0x8000}, {{&(0x7f0000000900)=@l2, 0x80, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=""/196, 0xc4}}, {{&(0x7f0000000ac0)=@hci, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/159, 0x9f}, {&(0x7f0000000c00)=""/211, 0xd3}], 0x2}, 0x8}], 0x3, 0x40, &(0x7f0000000e00)={0x77359400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r3, 0x4}, 0x38) chdir(&(0x7f00000000c0)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000240)={0x20000, 0x4, 0x10000000000337, 0x200, 0x3, 0xfffffffffffffffd, 0x8f7e, 0x8, 0x1}) write(0xffffffffffffffff, &(0x7f0000000100)="312b817b97ec05046f86a91e0542d61e6df21f94f3b7f3b1acd25178046e87a3525788db900a092d25b52bca4801cafbef03c1714409a3cca1d3d5396edbb7a062feda4a697cced49476fb306bcd9a0f5cc5d590ed93b06d08", 0x59) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 3m38.715014471s ago: executing program 0 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbfi\xd9\r\x8d\x9f\xbe\x0ei\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46]}, 0x34) 3m38.030668046s ago: executing program 0 (id=696): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00'}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = mq_open(&(0x7f0000000980)='&\x00\x12|\xd6hJ\x1e\xc6\xea\xc3\xe5\xa3\xf9\xb8Bmp\x9e\xdb \x86\x11NLd\xe8\x8b\xacg\xf4\xd9L+\x95.\xf8\x00\x16sS\xef\x15\x9eii%\x7f\xba}MO\xb3\x82\xb4\xe8d-P\x99!\x84<,\xc0\xc2\xf4\xe4\x81\x80\xe4Y\xa9l\xf3\x7ff\x96\xc0d\xd7x$\x83\xb8\x80Xh\xe4g\xcdA\x8c\x83`^De\'\xd8\x18\x99\xaf\x95\xcd+\xa6\xa7\xda\x9bmT\x96&\x93\\\x93\xca0\x88\xb5Iq\x91?\xda\xc9]>K\xf4G9\x00\x00\x00\x00\xc4\x0e\x9e\xd3\xb5\x9d]\xabe\xef%\xb9\xf6Q\xc2\xb1\"r\x1d\x11\x81\xf7\xa0\x87T\xb0\x86\xcaw\xdb\xfe8J\x86,\xaa\x0e\a\xc1ac\xf3\xddf\xa4\x05\v\xe9\xf0d\n\x00\a\xdc\xea\x87\x00\xfc^/\xbcdD\x87\xa7C\xef\x85\xdd\x95\xca\a\x87\x16\x90/\n\x14\xb9e\x15\xc4\x8f\xe7\xfd\xb6y,~\x1c\xf7\xb7\x84\x02\x82T!\xd2\x8eWL\xeb\xdd\xe4\r/\xb3M\x00\rd\xdc\x944\xdc\xb3\xbb:|\xd3\xc8\xfb<\x9c\xc3\t\xc6M\xf9\f\x8c.\xde\xf3\x16_\xc9\x15Ua)\xf2\xbe\t\xc3\xa9\xc7\xee5{\x8f\xa8Y>\b\xfco\xab\x9b\x9f\xae7\xa2\xe0\x95pVl\x914\x86\xe0\xc3\xc2\x90\x9e\x9f%\xf3^\x107\xe6\xbd}\xfazE\x85\x91Lk\xb5O\xffK\xc9\xc8\x8eo\xeb)I\xaf\xf5\xd9\xbe\xba\'\xdb{wQS\xb0&\x92W\xb0\x87\x93\xf2\n\xc8U\xe5O\x1a\xfc&\xe2\xe4g.\x00&Z:\xec\xacp\x9a1n\xa6\t\xd3uc\xad\x0f\xd2\xc7\x0e\xc13J\x9cZ\xff\xdf\x8b\xd9\x8b\xcb\xe9\x90Gc\xd4\x83\x9a@\x86_\b\x00\x00\x00\xfd\xce\xa9\xe6hjU\xb3Qt\xc5\xf4\xd0\xf3\xec\xf8\x14LH\xfa\x13\xb5\b\xbek\xd5\x04\x8f3xC\x0e\xd2\xfe\xd8\xa1\xdb\xd4\xdak3\x9a\xb1\xcfX3\xfc_\xae\xd8\xe7aRa/\xf5\xdc^\xfa\xf3\xdd\x1a\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00(\xdfJoa\x81\xaen\x88Z\x86\xc0\x05\xa8?\x86\xe9\xd2\xb43eA\x14\x01\x0f\x85Y5\xe5\xfb2\xa6\xbd{\x1d|P\x14\x82M\n\xcf\xa3\bfk\v\xb1Y\xa3\x16AE\xc6\x11>\x93\x05w\x87\xed\xb9\xd2\xb6\xa4\xfaT\xfa\xda\x91\x11\xb1*B\x17\x03\\{\xa0\xc8\xf3\xf7\xefYOs\xf7\xdc>\xd9,\xbe\x9dL\xdf\x0f\xd9\x8a~D\vU\\5\xee\xb8:\xf7\x01\xb7\xd1y\x83\x8c\xe6\xb4\xa3KY\xf1\xc5\xaf\xf2\x8dW\xaf\xf2\xae\xed\x01\xa0\x00\x87)A\x05\xdae\x9c;/\xf4/\xe4\xe9\xec\xb1ga4\xf9f\x1d*\x9aX\xff\xb7\x96t$\x05\x11y\xef\xb4+\x88db\x1a\x1e\x1f\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x80, 0x0) mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000001c0)={0x17c04, r3, 0x5000, 0x24000007, 0x2, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de71366000a1101fe8000000000000000000000000000bb000000000000000000000000000000f04e194e20000a90780000002017abde406812460680891bd0b12ec718ea088f10d3d0a17856ebb1cd805a86cab0bd7b826f99e211361a9e7dadb845bc742aa06e26e8ade47cd4bfb5d32b6bc6e660828314da11d70e71b31fb635bda98d443e65103f680cd5c891d9435a236b77eafcc03db5a787f1c09269"], 0x44) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x406, r7) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000000)=0x32, 0x4) 3m37.915919432s ago: executing program 34 (id=696): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00'}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = mq_open(&(0x7f0000000980)='&\x00\x12|\xd6hJ\x1e\xc6\xea\xc3\xe5\xa3\xf9\xb8Bmp\x9e\xdb \x86\x11NLd\xe8\x8b\xacg\xf4\xd9L+\x95.\xf8\x00\x16sS\xef\x15\x9eii%\x7f\xba}MO\xb3\x82\xb4\xe8d-P\x99!\x84<,\xc0\xc2\xf4\xe4\x81\x80\xe4Y\xa9l\xf3\x7ff\x96\xc0d\xd7x$\x83\xb8\x80Xh\xe4g\xcdA\x8c\x83`^De\'\xd8\x18\x99\xaf\x95\xcd+\xa6\xa7\xda\x9bmT\x96&\x93\\\x93\xca0\x88\xb5Iq\x91?\xda\xc9]>K\xf4G9\x00\x00\x00\x00\xc4\x0e\x9e\xd3\xb5\x9d]\xabe\xef%\xb9\xf6Q\xc2\xb1\"r\x1d\x11\x81\xf7\xa0\x87T\xb0\x86\xcaw\xdb\xfe8J\x86,\xaa\x0e\a\xc1ac\xf3\xddf\xa4\x05\v\xe9\xf0d\n\x00\a\xdc\xea\x87\x00\xfc^/\xbcdD\x87\xa7C\xef\x85\xdd\x95\xca\a\x87\x16\x90/\n\x14\xb9e\x15\xc4\x8f\xe7\xfd\xb6y,~\x1c\xf7\xb7\x84\x02\x82T!\xd2\x8eWL\xeb\xdd\xe4\r/\xb3M\x00\rd\xdc\x944\xdc\xb3\xbb:|\xd3\xc8\xfb<\x9c\xc3\t\xc6M\xf9\f\x8c.\xde\xf3\x16_\xc9\x15Ua)\xf2\xbe\t\xc3\xa9\xc7\xee5{\x8f\xa8Y>\b\xfco\xab\x9b\x9f\xae7\xa2\xe0\x95pVl\x914\x86\xe0\xc3\xc2\x90\x9e\x9f%\xf3^\x107\xe6\xbd}\xfazE\x85\x91Lk\xb5O\xffK\xc9\xc8\x8eo\xeb)I\xaf\xf5\xd9\xbe\xba\'\xdb{wQS\xb0&\x92W\xb0\x87\x93\xf2\n\xc8U\xe5O\x1a\xfc&\xe2\xe4g.\x00&Z:\xec\xacp\x9a1n\xa6\t\xd3uc\xad\x0f\xd2\xc7\x0e\xc13J\x9cZ\xff\xdf\x8b\xd9\x8b\xcb\xe9\x90Gc\xd4\x83\x9a@\x86_\b\x00\x00\x00\xfd\xce\xa9\xe6hjU\xb3Qt\xc5\xf4\xd0\xf3\xec\xf8\x14LH\xfa\x13\xb5\b\xbek\xd5\x04\x8f3xC\x0e\xd2\xfe\xd8\xa1\xdb\xd4\xdak3\x9a\xb1\xcfX3\xfc_\xae\xd8\xe7aRa/\xf5\xdc^\xfa\xf3\xdd\x1a\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00(\xdfJoa\x81\xaen\x88Z\x86\xc0\x05\xa8?\x86\xe9\xd2\xb43eA\x14\x01\x0f\x85Y5\xe5\xfb2\xa6\xbd{\x1d|P\x14\x82M\n\xcf\xa3\bfk\v\xb1Y\xa3\x16AE\xc6\x11>\x93\x05w\x87\xed\xb9\xd2\xb6\xa4\xfaT\xfa\xda\x91\x11\xb1*B\x17\x03\\{\xa0\xc8\xf3\xf7\xefYOs\xf7\xdc>\xd9,\xbe\x9dL\xdf\x0f\xd9\x8a~D\vU\\5\xee\xb8:\xf7\x01\xb7\xd1y\x83\x8c\xe6\xb4\xa3KY\xf1\xc5\xaf\xf2\x8dW\xaf\xf2\xae\xed\x01\xa0\x00\x87)A\x05\xdae\x9c;/\xf4/\xe4\xe9\xec\xb1ga4\xf9f\x1d*\x9aX\xff\xb7\x96t$\x05\x11y\xef\xb4+\x88db\x1a\x1e\x1f\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x80, 0x0) mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000001c0)={0x17c04, r3, 0x5000, 0x24000007, 0x2, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de71366000a1101fe8000000000000000000000000000bb000000000000000000000000000000f04e194e20000a90780000002017abde406812460680891bd0b12ec718ea088f10d3d0a17856ebb1cd805a86cab0bd7b826f99e211361a9e7dadb845bc742aa06e26e8ade47cd4bfb5d32b6bc6e660828314da11d70e71b31fb635bda98d443e65103f680cd5c891d9435a236b77eafcc03db5a787f1c09269"], 0x44) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x406, r7) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000000)=0x32, 0x4) 23.357376132s ago: executing program 2 (id=1220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0008000f06030000040000000000000000e0090500010007000000458f8db9e02bb3d8ffa40965"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0xa00, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r2, 0x0, 0x0, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x0) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'bond0\x00', 0x2}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) 15.357965779s ago: executing program 7 (id=1228): r0 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f00000003c0)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeffffffd}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x26, &(0x7f00000003c0)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x10049239905, 0x1afa817befb54da1) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffff8, @loopback, 0x9}}, 0x24) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000080) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x1f00) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r5, r5) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4c25c1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) write$sndseq(r7, &(0x7f00000000c0)=[{0x84, 0x0, 0x0, 0x0, @time={0xe, 0x80000425}, {0x7}, {0x7}, @raw32={[0x2, 0x6, 0x1]}}, {0x6, 0x7, 0x9, 0x3, @time={0x1, 0x2}, {0x10, 0x5}, {0xce, 0x2}, @connect={{0xf, 0x82}, {0x6, 0xb}}}, {0xf7, 0xf1, 0x0, 0x1, @tick, {0x70, 0x3c}, {0x1}, @quote={{0x5, 0x6}, 0x6}}], 0x54) 11.992831033s ago: executing program 2 (id=1231): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x96d, &(0x7f0000000540)={0x0, 0x2fe, 0x0, 0x3, 0x11}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000007c0)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000680)=@IORING_OP_SOCKET={0x2d, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, 0x1, {0x0, 0x0, 0x400}}) io_uring_enter(r1, 0x101, 0x11, 0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0xffffffff}, 0x10) 11.752153932s ago: executing program 2 (id=1235): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048890}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1e4, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0xc}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xdc6}, {0x5}, {0x6}, {0x8, 0xb, 0xa}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x101}, {0x5}, {0x6, 0x11, 0x200}, {0x8, 0xb, 0x82c}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc20}, {0x6}, {0x5}, {0x6, 0x11, 0xb}, {0x8, 0xb, 0x81}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xd357}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x10}, {0x8, 0xb, 0xba46}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20800}, 0x0) 10.689662469s ago: executing program 5 (id=1236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="0f03adbb724797c82627655914bd8f"]}]}) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x6a, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0xfffffffffffffd8e, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xd6e}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000040)={r3, 0x3, 0x801, 0x8, 0xe0bb, 0x8, 0x8, 0x80000000, {r3, @in6={{0xa, 0x4e1d, 0x7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, 0x4, 0x9, 0x4, 0xa3f2, 0x34f0}}, &(0x7f0000000100)=0xb0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000180)={'macvtap0\x00', &(0x7f0000000580)=@ethtool_eeprom={0x48, 0x3, 0x0, 0xeb, "6b4d6d534316d7fa641786f52e585d8fefe8f4660fa5fe4feb306ea3558bb3c4b0ae22e94c922e43e0d118697881750c63cce311c334c3dc54cdaff37eaf438b9fa3231a364e90f2352b16371455b6038af9fc0bccc0b2bf20f4c40d0f4934c822719548bf91cb992aaa49014042fb8530a263d56773ca471a9b063dabfddd77698ad701e1d1dd0d2ab8e981ff860b4fcf8eee26d2df3ef09513f16c5d559ecba565f82a9995ae04dab19460af76539e1aab3eb2d1b30f639a1e72f41b684907f0ff0c561898d61cb435d0959ddd7fcd2cb736a222054eca4e7805121e451ec1fa719c07f7122aba77f018"}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r4, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb6}, 0x6) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x17}, 0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="201b06c1", @ANYRES16=r5, @ANYRES64=0x0], 0x20}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffb, @loopback, 0x9}, {0xa, 0x4e26, 0x101, @remote, 0xee2e}, r7, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f00000025c0)}}, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYRES8, @ANYBLOB="07042abd7000fcdbdf2507000000080001000100ddff0b0006000100000001000000", @ANYRES64=r7], 0x28}, 0x1, 0x0, 0x0, 0x200048d1}, 0x18814) r8 = inotify_init1(0x80800) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) inotify_add_watch(r8, &(0x7f0000000440)='./file0\x00', 0x80000800) r9 = dup(r8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000480)=r9, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 9.775934206s ago: executing program 2 (id=1238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) syz_open_procfs$userns(0x0, &(0x7f0000000240)) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x4008c002, 0x0) 9.552635217s ago: executing program 6 (id=1239): timerfd_create(0x0, 0x0) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1}) iopl(0x3) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) ioctl$OCFS2_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x1, 0x1, 0x400, 0xfff, 0x9, 0x6}) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000440)='retrans\x00', &(0x7f0000000480)='1\x00', 0x0) 8.783068587s ago: executing program 2 (id=1240): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/13], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000cc0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x11, 0x4, 0x2, 0x0, r7, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) 7.870189095s ago: executing program 6 (id=1242): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x8, 0x7, 0x4, 0x3}, {0xd, 0x2, 0x8d, 0x80000001}, {0x4040, 0x2, 0xc, 0x2}, {0xfff, 0x9, 0x5, 0x6}, {0x4, 0x9, 0x9, 0x3}, {0x6, 0x3, 0x5, 0xc5}]}) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r1, &(0x7f00000000c0)=""/108, 0x6c) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x14, 0x5, 0x6, 0x200, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x44081) r3 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x3, 0x7, 0x8, 0x1, 0xffff, 0x7, 0x8}, &(0x7f0000000340)={0x10, 0x9, 0x1, 0x10000000000, 0x8, 0x5c, 0x9, 0x9}, &(0x7f0000000400)={0x8, 0xda6, 0x7fff, 0xe, 0x6, 0x2, 0x5, 0x6}, &(0x7f00000004c0), &(0x7f00000005c0)={&(0x7f0000000540)={[0x9]}, 0x8}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d002cffdbdf251100000008000300", @ANYRES32=r5, @ANYBLOB="0600280002000000"], 0x24}, 0x1, 0x0, 0x0, 0x20044848}, 0x20048000) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0x3}, {0xfffd, 0x7}, {0xfff2, 0x3}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x14) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) 7.663157625s ago: executing program 3 (id=1243): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04230d00c90001"], 0x10) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mydomain / 64\n', 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x22920, 0x2300}, [@IFLA_GROUP={0x8, 0x1b, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x94}, 0xc040) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x80) write(r2, &(0x7f00000000c0)='mydomain / 64\n', 0xe) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000080)=0x1) 7.550827127s ago: executing program 7 (id=1244): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x4, 0x7583) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mysys/module/xhci_hcd/parameters/quirks\x00', 0x0, 0x0) read(r7, &(0x7f0000000600), 0x40) syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) syz_io_uring_setup(0x3001, &(0x7f00000000c0)={0x0, 0x292b, 0x8, 0x0, 0x260, 0x0, r5}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000440)) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 7.461997282s ago: executing program 5 (id=1245): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000329bd7000ffdbdf257300000008000300", @ANYRESHEX=r1, @ANYBLOB="0800ef00e18245079e1ac33996d63c1907000000b0840af75de3525d4a3cd49e4c9a18347896334c1b4e661f2338da30d61980465c8425b2cb5550d5b9d15306969d67132b44d8238581919ace3d6a33e89d74fe1c98ebd2606e17ddce203686b66ab340df18a9a6303d9c63c5557dcf377b6fb25c38f3e2ce3c8be072daf76f71eacb884e1e8cf9b8daa6fdc76c273fd1cfe5db66f9"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x20048094) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000240), 0xfd56, 0x80800c4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 6.527442676s ago: executing program 7 (id=1246): r0 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180200000020782500000000002020207b1bf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="44100000", @ANYRES16=r3, @ANYBLOB="04002cbd7000ffdbdf25760000000c00990001000000310000000c00580032000000000000000c0058001a000000000000000c0058000300000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x40000) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'veth0_virt_wifi\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x3, 0x4005, 0x5, 0x3800000, 0x80000000, 0x1, 0x6, 0x7}}) 6.30417898s ago: executing program 5 (id=1247): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x206, 0x10b481) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RUNLINKAT(r5, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x80000) unshare(0x22020600) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) r6 = socket(0x28, 0x801, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101003) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000440)={0x53, 0xffffffffffffffff, 0x6, 0x1d, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="513d7f3020a8", 0x0, 0x800001fc, 0x10034, 0xffffffff, 0x0}) connect$vsock_stream(r6, 0x0, 0x0) shutdown(r6, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 5.578471278s ago: executing program 3 (id=1248): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) connect$unix(r5, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x67) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r6, 0x10c, 0x2, &(0x7f0000000180)=0x9, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd}) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 5.03083354s ago: executing program 5 (id=1249): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffd79) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4000004) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xd895, 0x20000000, 0x3, 0x80000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000180)={0x20, 0x16, 0x3d, "e6d0246e62036456a237eedeb661d02836c86e433c8fbd2c6e07f20fcdbe93ecb5e63101002838fbffffffffffffff00"/61}, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$evdev(&(0x7f0000000940), 0x6, 0x20a000) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000980)=""/12) timer_create(0x0, 0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f00000002c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004740), &(0x7f0000004780)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f00000047c0)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setresuid(0x0, r7, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000900)={0x24, &(0x7f00000006c0)={0x20, 0x9, 0xf5, {0xf5, 0x11, "7da3f74662cec2173a622ccfbd4c5ff0beb72f53c0b3ef2b6dee53802682a86d7772cb2ae536f3ab0894619f22dee092c0546694658276e2fb0744a9040ce879c42df9b5115fe446ec60cf4798af4dd323e54a349d1e90a580aa517cd5b5f6f764b2c927cc7c1c7ed278646e1c038e4b4a6d08c6fe1b326102f3d12dc5d71bf448dafcd5d43e356953e265dded64276c4afac726d8546afcdcfab111271f702102fe1f168b5075696583f0de389366585444f30a38cd6a1443e1410f51b960ed3a0b50e36fdb098aa2bf3df8beedfd0ced961b30b2e2cde1154f44166af62e858478b1152e3e089953f7e1fc12632091f27956"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x419}}, &(0x7f0000000880)={0x0, 0x22, 0x15, {[@global=@item_012={0x2, 0x1, 0x9, '/H'}, @global=@item_012={0x2, 0x1, 0x8, "08d3"}, @global=@item_4={0x3, 0x1, 0x0, "040d5dc3"}, @global=@item_4={0x3, 0x1, 0xb, "1135ba80"}, @global=@item_4={0x3, 0x1, 0x3, "ef16e8cd"}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf537, 0xec, 0x1, {0x22, 0xe8e}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000a00)={0x40, 0x14, 0x8b, "c3a7b37bbe09d504fc7c02620619a8f70dcb197881be996f007dafccfdeebb8e468aad5697d4d1268504eebd7e74f938542966569c04264addccac78fe692970b6c81c2249c1ef060f6e6acb2ce4d1db5f4394fee1882683ae7ab9db99c133697c6e3db205925cafd33a42bc2b8ba2e770b544504aa06c5cec009388e3eff58aa5095ac254ba23bb64394e"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x3}}) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x8}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000280)={0x2, 0xfff7, 0x2, 0xffffffff, 0x1000, 0x0, 0x8, 0x0, r8}, &(0x7f00000004c0)=0x20) 4.577610786s ago: executing program 7 (id=1250): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) fsopen(&(0x7f0000000100)='vfat\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev_mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev_mnt/ubi0\x00', 0x2, 0x0) ioctl(r3, 0x51106f03, 0x0) 4.387509953s ago: executing program 3 (id=1251): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic="7d88"]}]}, 0x1c}, 0x1, 0xf0ffffffffffff, 0x0, 0x400c801}, 0x4008094) 4.205282857s ago: executing program 6 (id=1252): syz_usb_connect$midi(0x5, 0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100300000040b4041b9340000102030109023200010118100409040000010103006d0724013c00070009050b0b20000fd74303cc0c0c"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) capset(0x0, 0x0) capget(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x7ff, 0xbe82, 0x401, 0x8, 0x9, 0x7688}) 3.06165668s ago: executing program 7 (id=1253): creat(&(0x7f00000002c0)='./file0\x00', 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000880)={0x0, 0xfffffffe, 0x800, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.995501697s ago: executing program 3 (id=1254): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000004400010028bd7000f8dbdf2502000000040048800800018004002880"], 0x20}, 0x1, 0x0, 0x0, 0x48c5}, 0x4000094) 1.965086635s ago: executing program 3 (id=1255): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x7, 0x54601) writev(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff690000000000", 0xf, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r7, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.515464563s ago: executing program 2 (id=1256): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x8001, 0x82) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) write$cgroup_devices(r0, 0x0, 0x9) syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000633fa640402000558b4d000000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) 713.219808ms ago: executing program 5 (id=1257): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) write(r1, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) r2 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="040100001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d30000000000000ac001680a8000180a4000c802b000100"], 0x104}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 630.386007ms ago: executing program 6 (id=1258): r0 = socket$inet6(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xfbf3, 0x8, 0x1, 0x2cb}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6bd8, 0x40, 0x1, 0x2e6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe890, 0x40, 0x0, 0x17}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3379, 0x2, 0x2, 0x171}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3bcd, 0x8, 0x1, 0x30c}, 0xffffffffffffffff}], 0x4, &(0x7f0000002380)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x66a, 0x0, &(0x7f0000001380)=@buf_512="668deb4cd370f9d0af9f7a1c3b8b78d9848c210326fb48ca42d49630c63c9a7bb3539d2a5e35278ae4f611d4aa5b6475db790004ff42c059a312bcc43acaee06dc170da002f2e5bc619e41e2170f0822f11bf6a5709cb1fb3fc9e43506da6eedf4fa19c0ac139fb51e7e4f628667abab29470e100945c8dd5d769f25821030a4c9ee7775f3b86d3be723029a6bf8f04554c9ee18a1d2698778ff65ca5417c7bf56093bcf0f31216d4183b89366648b62f54ed544694a70ff12b92a2feb5674eaaa543cea3d6a1bceeb06d06edec83047f70946874b3d9c818ab544108fa39c06397be901c79c305dca6fa493afbf3f8108c8e39e233a455d55370bcfbb9fdac99b37324836b277850aa8e82d4ce8ef1a6b52a39c2d11d4899f1d61db722dbb4fe7cb37210939bfc470aa25b4f82e7b164f9997c5ec020b0896f51d1b079ab0d07deeb7d7df09b6e89e6646e80bb0862e8fde4d63957fbbca5c326f8a5c6339a96eb1e7e6c51e3bbb7aedf15d5e4f61d02afa58e012d0fa923b2c8bef6179cbd2de2d3a241b9a737bf31e518d29f01a16e0f8788150da2af4f524bfc248d25687aa7bac41ddf050a86e82d3b64e081cd048325f66aa048cc5e58a60a4082cfc9f8b85f6067d620bff83259a15dd2f17a7d7cb8e72a3b0fe288c65f18006f486813ccd474f1946130528687f964ce588d19e1eb31a71b6fa137f4bf9b182d9dd46"}}, &(0x7f0000002400)) r2 = syz_io_uring_setup(0x3da8, &(0x7f0000000400)={0x0, 0x9fa2, 0x80, 0x2, 0x51, 0x0, r1}, &(0x7f00000008c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, r0, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1000000000000000060000000a010000"], 0x10}, 0x2, 0xdba90280b90ecbba, 0x1, {0x2}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006800010400000000000000000200000000000000080001000200000008000500", @ANYRES32=0x1, @ANYBLOB="9e50ca4416a64755e3357922e39ae2a13b382f7df573123a5e0fa1fd8845a3ad97c9d29a35efddbcf55597949efb9b91fa3ae83d467835fb40322d9eed8fc1b06a95ad4785c9714089cf60ce0a3814b52f8c2703a37438079c6a4a65f9e7cb093d7519c814950026af19a3d401468a7a"], 0x28}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7002, 0xffffffffffffffff}) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000004580)={0x2020}, 0x2020) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000006800010400000000fdffffff000003000000000006000300010000000c00028006000100040000001bae47c01a3092cbdd65dd2205c1ffe6b9eaff27800ad8a6b52931119c130cb194a8b746c2e60283defa7528d9375019bc89f3703f9c83804971c5444daa36e38a1ab3dbb2e33d819e179966cb3dd1483747929b0ccf1e70ae6512ab77812c1713d7def3f96d42bd6500469401b8e61c00c95aa50431045af520e6e5c3ef5600c51a72133b1e1bf6862bf963c3be20e436352131434402ae0ea43834a35eed273017d479314b2d316a36bb58f7368fad9c47f7da14152d56a2b76782102efb31aec7afbab88acaba4413c98761e8e1c63f664bd98fa5fa71b52c601d57e8c3b64bcba23537aaae"], 0x38}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r8, &(0x7f0000001280), 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x801) r10 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r10, 0xc02c563a, &(0x7f00000000c0)={0x2, {0x2, 0x9, 0x5, 0x401}, {0x8, 0x4, 0x6, 0xfffffff8}, {0x800, 0x5}}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000900)={0x3, &(0x7f00000002c0)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockname$l2tp(r7, &(0x7f0000000840)={0x2, 0x0, @multicast2}, &(0x7f0000000880)=0x10) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x209}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x4000, 0x0) 452.544927ms ago: executing program 7 (id=1259): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) modify_ldt$write(0x1, &(0x7f0000000340)={0x1, 0x20000000, 0x1000, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, "9cf3"}, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) setgid(0xee00) syz_open_procfs$pagemap(0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000077b000/0x4000)=nil, 0x4000, &(0x7f0000000300)='\x00') ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x15) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000040)={0x4, 0x1, 0xe, 0x5, 0x11, "3e0000000100"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) close_range(r2, r2, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x23, 0xd7, {0xd7, 0x21, "38b3e165238695c5d14228e1c6124f14f29e7e9803e8d147b14c6f9fbc892414d7b50a48ece3b700bd75db315e2143427069f7ef26df80b4bcffd0971f327e0c8c92b7ee3913286eada54f27551dad49a60e26b904335ed02e75037eb47534d55e484f30e8b628fc864a323daaa6dfebf0d81b7b2008c32b9ea4730b12f390f31bfc733e7e55774b46e5f5241ce37c1fa8c7b2aad7ab6eb7b7ecc6e49472f76cc3a36ed1d8f183d1fdcae69ae6f5826721737857cdb6db7276309d1db8d500204475e702f7a3f7129565a1e3d35507d567e5a66408"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="000ede000000015b7b791f6fbe07a9b00075a841b5f9e543102e8e7f9d07972bd85a7276eb572caf758de418e50928cb6840ec77388932eb7362985df189508bcf0e64cad7c55db01ce3fb44f365621ea51d97b73959a8a58e28e32451b24c3beba46927a1cebbf784f251d4b5e109b3a692cce93824223a761bc41a32d5fd7fe93f4e571de3b4f057c014c2af2e5973536d48ad3cf18158cfc0f5636ff2ec3aaebd218e114f73bae1b81620385ebf76f745837e4c9c4992b365a3f732186fc49db3fedf222af091a9dd7b0b55adb57da17a7ea8592678fe7946c17ccbbef60e97b12ba1"], &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000400)={0xc0, 0x5, 0x6, "09779a0133b2"}, &(0x7f0000000380)={0x40, 0x5, 0x4, "49641fdf"}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x20, 0x21, 0x72, {0x72, 0x24, "3c4c4ef6413e5f1acfa2a6d1e6b7d6306c94f6e674b9f806d8e0ec5cca2a05b51b0590486b630e1219ea358a8a0e6399cad9e65131f19bc6bc9f3e156c97c9ccf71b3d2b542abe896d50a29c12305f5b5f18ccbb627a205fa96fa639ed45a8d82698d39f65f328cd74f1663ffc0cb21d"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x40, 0xa, 0x6c, "c35b86956ba59e00c8da97d11fdd6437999846dffed1c350cf1587d4091b045fe4463ef2a5deda66e466bb334bc5680de6919d79347738c87a8dd6b6e4f3b5487af0d71f036de588c6682d6386870123832b28a73feab82861a08616ebecc9f7704ce2fd2e12f4c08aca05f4"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x8a}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x5, 0x4, 0x3, 0x8, 0x40, 0x200, 0x9, 0x4, 0x35, 0x3, 0x80, 0x1}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0xb2}, &(0x7f0000000740)={0x20, 0x83, 0x2}, &(0x7f0000000780)={0x20, 0x87, 0x2}, &(0x7f00000007c0)={0x20, 0x89, 0x2, 0x1}}) 334.748624ms ago: executing program 5 (id=1260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20280, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sysfs$1(0x1, &(0x7f00000000c0)=':&%\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r0, 0x0, 0x6) read$FUSE(r4, &(0x7f0000002900)={0x2020}, 0x2020) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4a320) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000100)={0x4, 0x1, 0x1, 0x9668, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x6}}, 0x0, 0x0, 0x3f8, 0x0, 0x132, 0x0, 0xc}, 0x9c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="8520000000850000002f0000007929500004000000"], &(0x7f0000000400)='syzkaller\x00', 0x2cc, 0x1b, &(0x7f0000000480)=""/27, 0x41000, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000004c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xe, 0x0, 0x5}, 0x10, 0x20e78, r7, 0x7, &(0x7f0000000680)=[0xffffffffffffffff, r4, r0, 0xffffffffffffffff, r0], &(0x7f00000006c0)=[{0x2, 0x2, 0x8, 0x8}, {0x2, 0x3, 0x2, 0x9}, {0x3, 0x3, 0x4}, {0x1, 0x1, 0x6, 0xc}, {0x1, 0x2, 0x2, 0x4}, {0x4, 0x3, 0xa, 0x1}, {0x3, 0x5, 0x1, 0x5}], 0x10, 0x62a}, 0x94) 334.329178ms ago: executing program 3 (id=1261): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0'}, 0xb) close(r1) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040810605000001000000010902190001010080320904"], 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x50) 101.219501ms ago: executing program 6 (id=1262): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4000c2, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x4141c1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) (async) write(r2, &(0x7f0000000240)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222\x00', 0x6c) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x4) 0s ago: executing program 6 (id=1263): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) kernel console output (not intermixed with test programs): C: Urb failure (status -71) [ 432.761311][ T5719] usb 7-1: NFC: Unable to get FW version [ 432.792229][ T5719] pn533_usb 7-1:0.0: probe with driver pn533_usb failed with error -90 [ 432.892073][ T9783] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.985252][ T5712] usb 7-1: USB disconnect, device number 11 [ 433.128712][ T1214] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 433.299446][ T1214] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 433.300478][ T1214] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8192, setting to 64 [ 433.302620][ T1214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 433.302634][ T1214] usb 3-1: Product: syz [ 433.302642][ T1214] usb 3-1: Manufacturer: syz [ 433.747016][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 433.747034][ T31] audit: type=1400 audit(1790641401.060:1484): avc: denied { write } for pid=9782 comm="syz.2.956" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 433.747768][ T1214] input: Samsung SUR40 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input42 [ 433.791052][ T31] audit: type=1400 audit(1790641401.110:1485): avc: denied { ioctl } for pid=9782 comm="syz.2.956" path="/196/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0x6614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 433.793129][ T9783] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 433.863647][ T1214] usb 3-1: USB disconnect, device number 45 [ 434.721561][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.721615][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.118720][ T1214] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 435.299446][ T1214] usb 3-1: Using ep0 maxpacket: 8 [ 435.305693][ T1214] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 435.306512][ T1214] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 435.306532][ T1214] usb 3-1: config 0 has no interface number 0 [ 435.306563][ T1214] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 435.306582][ T1214] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 435.306604][ T1214] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 435.306621][ T1214] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 435.306641][ T1214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.308083][ T1214] usb 3-1: config 0 descriptor?? [ 435.326509][ T1214] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 435.518915][ T5712] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 435.568242][ T1214] usb 3-1: USB disconnect, device number 46 [ 435.568343][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 435.570052][ T9796] ldusb 3-1:0.55: Couldn't submit interrupt_out_urb -19 [ 435.603315][ T1214] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 436.068705][ T5712] usb 6-1: Using ep0 maxpacket: 16 [ 436.069130][ T5712] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 436.069856][ T5712] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.069876][ T5712] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 436.069895][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.071406][ T5712] usb 6-1: config 0 descriptor?? [ 436.398714][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 436.766770][ T5606] Bluetooth: hci4: unexpected event 0x2f length: 509 > 255 [ 437.158368][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 438.203604][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 438.209213][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.209239][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.209269][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.216782][ T10] usb 3-1: config 0 descriptor?? [ 438.223075][ T10] hub 3-1:0.0: USB hub found [ 438.272088][ T31] audit: type=1400 audit(1790641405.590:1486): avc: denied { write } for pid=9822 comm="syz.6.971" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 438.317026][ T9823] input: syz0 as /devices/virtual/input/input43 [ 438.561897][ T9829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.562328][ T9829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.919168][ T10] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 439.053448][ T10] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 439.070766][ T1214] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 439.239422][ T1214] usb 7-1: Using ep0 maxpacket: 16 [ 439.240135][ T1214] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.241117][ T1214] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.241136][ T1214] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 439.241172][ T1214] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 439.243170][ T1214] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.243191][ T1214] usb 7-1: Product: syz [ 439.243204][ T1214] usb 7-1: Manufacturer: syz [ 439.243218][ T1214] usb 7-1: SerialNumber: syz [ 439.441284][ T31] audit: type=1400 audit(1790641406.740:1487): avc: denied { read write } for pid=9841 comm="syz.7.972" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 439.441335][ T31] audit: type=1400 audit(1790641406.740:1488): avc: denied { open } for pid=9841 comm="syz.7.972" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 439.441383][ T31] audit: type=1400 audit(1790641406.740:1489): avc: denied { mount } for pid=9841 comm="syz.7.972" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 439.944774][ T1214] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 439.944810][ T1214] cdc_ncm 7-1:1.0: bind() failure [ 439.947974][ T1214] usb 7-1: USB disconnect, device number 12 [ 440.025604][ T5712] usb 6-1: USB disconnect, device number 46 [ 440.073852][ T31] audit: type=1400 audit(1790641407.390:1490): avc: denied { mount } for pid=9849 comm="syz.5.975" name="/" dev="autofs" ino=27887 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 440.309011][ T31] audit: type=1400 audit(1790641407.620:1491): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 440.344508][ T31] audit: type=1400 audit(1790641407.660:1492): avc: denied { unmount } for pid=8652 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 440.422077][ T30] usb 3-1: USB disconnect, device number 47 [ 440.436869][ T31] audit: type=1400 audit(1790641407.750:1493): avc: denied { read } for pid=9851 comm="syz.6.976" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 440.436915][ T31] audit: type=1400 audit(1790641407.750:1494): avc: denied { open } for pid=9851 comm="syz.6.976" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 440.438731][ T5712] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 440.521035][ T9856] ovs-dp0: entered promiscuous mode [ 440.528032][ T31] audit: type=1400 audit(1790641407.840:1495): avc: denied { getopt } for pid=9858 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 440.547020][ T9860] ovs-dp0: left promiscuous mode [ 440.574933][ T9857] xt_l2tp: unknown flags: 17 [ 440.587749][ T31] audit: type=1400 audit(1790641407.900:1496): avc: denied { write } for pid=9858 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 440.592745][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.976'. [ 440.595945][ T9857] qnx6: unable to read the first superblock [ 440.610979][ T5712] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 440.620764][ T5712] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 440.620791][ T5712] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 440.620810][ T5712] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 440.620842][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.664390][ T9850] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 440.664492][ T9850] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 440.667675][ T5712] pl2303 6-1:1.0: pl2303 converter detected [ 440.690747][ T5712] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 441.122752][ T9861] ovs-dp0: entered promiscuous mode [ 441.152000][ T9850] pl2303 6-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 441.153290][ T9850] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 441.153573][ T9850] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 441.154105][ T9850] pl2303 6-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 441.157831][ T9850] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 442.742365][ T9850] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 442.866733][ T9850] pl2303 ttyUSB0: error sending break = -32 [ 443.338873][ T5606] Bluetooth: hci2: unexpected event 0x2f length: 509 > 255 [ 444.816485][ T25] usb 6-1: USB disconnect, device number 47 [ 444.872416][ T25] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 444.872987][ T25] pl2303 6-1:1.0: device disconnected [ 445.083483][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 445.083500][ T31] audit: type=1400 audit(1790641412.400:1507): avc: denied { create } for pid=9903 comm="syz.5.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 445.088456][ T31] audit: type=1400 audit(1790641412.400:1508): avc: denied { write } for pid=9903 comm="syz.5.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 445.266766][ T9909] jffs2: notice: (9909) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 445.324092][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.324257][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.324521][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.332121][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.332212][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.332377][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.337795][ T9905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.548574][ T31] audit: type=1400 audit(1790641412.860:1509): avc: denied { read write } for pid=9908 comm="syz.5.992" name="set_event" dev="tracefs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 445.548746][ T31] audit: type=1400 audit(1790641412.860:1510): avc: denied { open } for pid=9908 comm="syz.5.992" path="/169/trace/set_event" dev="tracefs" ino=527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 446.057815][ T9916] netlink: 68 bytes leftover after parsing attributes in process `syz.2.989'. [ 446.311639][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.428248][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.463947][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.633961][ T31] audit: type=1400 audit(1790641414.950:1511): avc: denied { read } for pid=9922 comm="syz.2.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 447.718769][ T9927] netlink: 144 bytes leftover after parsing attributes in process `syz.2.995'. [ 447.788695][ T9927] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 448.697311][ T9930] input: syz0 as /devices/virtual/input/input44 [ 448.935997][ T31] audit: type=1400 audit(1790641416.250:1512): avc: denied { bind } for pid=9933 comm="syz.7.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 448.936212][ T31] audit: type=1400 audit(1790641416.250:1513): avc: denied { name_bind } for pid=9933 comm="syz.7.998" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 448.937476][ T31] audit: type=1400 audit(1790641416.250:1514): avc: denied { node_bind } for pid=9933 comm="syz.7.998" saddr=100.1.1.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 448.940662][ T9934] lo: entered allmulticast mode [ 449.476083][ T5606] Bluetooth: hci2: unexpected event 0x2f length: 509 > 255 [ 449.742690][ T9944] 9p: Bad value for 'wfdno' [ 450.765371][ T5719] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 450.765716][ T10] net_ratelimit: 5 callbacks suppressed [ 450.765730][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.905768][ T31] audit: type=1400 audit(1790641418.220:1515): avc: denied { create } for pid=9949 comm="syz.3.997" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 450.908173][ T31] audit: type=1400 audit(1790641418.220:1516): avc: denied { read } for pid=9949 comm="syz.3.997" name="file0" dev="tmpfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 450.908495][ T31] audit: type=1400 audit(1790641418.220:1517): avc: denied { open } for pid=9949 comm="syz.3.997" path="/243/file0" dev="tmpfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 450.913529][ T5719] usb 7-1: unable to get BOS descriptor or descriptor too short [ 450.915164][ T5719] usb 7-1: not running at top speed; connect to a high speed hub [ 450.915185][ T5719] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 450.918988][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.919008][ T5719] usb 7-1: Product: 圸ꌟ娨姪꟡윽짚ꮜ᳍饦帎꧘ᇐ砻垀δ☲⺀䦚鵖죱ᕃᵀݳ⛒髆忥嚷뿕鎛戣筏ᴠ妔䄕⣱㫣㝌妙䆯ꃿ襇Ⓓ涙⦹ꑟ찥부긥힞컕 [ 450.919026][ T5719] usb 7-1: Manufacturer: ࡡ [ 450.919038][ T5719] usb 7-1: SerialNumber: 䕳 [ 450.930648][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.153017][ T31] audit: type=1400 audit(1790641418.470:1518): avc: denied { append } for pid=9932 comm="syz.6.993" name="video0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 451.322745][ T9932] lo: left allmulticast mode [ 451.327320][ T5719] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 451.528040][ T5719] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 451.550434][ T5719] usb 7-1: USB disconnect, device number 13 [ 451.577842][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.595607][ T31] audit: type=1400 audit(1790641418.900:1519): avc: denied { create } for pid=9956 comm="syz.7.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 451.674000][ T31] audit: type=1400 audit(1790641418.990:1520): avc: denied { unlink } for pid=5609 comm="syz-executor" name="file0" dev="tmpfs" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 451.811800][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'. [ 451.811831][ T9968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'. [ 451.846695][ T9965] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 451.861484][ T9965] bond0 (unregistering): Released all slaves [ 451.969107][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.053834][ T31] audit: type=1400 audit(1790641419.370:1521): avc: denied { append } for pid=9970 comm="syz.6.1007" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 452.153301][ T9971] overlayfs: failed to resolve './file2': -2 [ 452.162091][ T9975] jffs2: notice: (9975) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 452.301367][ T9973] input: syz0 as /devices/virtual/input/input45 [ 452.363953][ T9978] binfmt_misc: register: failed to install interpreter ./file0 [ 452.506108][ T31] audit: type=1400 audit(1790641419.820:1522): avc: denied { name_connect } for pid=9981 comm="syz.5.1004" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 452.568601][ T31] audit: type=1400 audit(1790641419.880:1523): avc: denied { read } for pid=9981 comm="syz.5.1004" lport=35058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 452.761197][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1010'. [ 452.761277][ T9989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1010'. [ 453.103437][ T31] audit: type=1400 audit(1790641420.410:1524): avc: denied { bind } for pid=9981 comm="syz.5.1004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 453.129313][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.579771][ T5606] Bluetooth: hci3: unexpected event 0x2f length: 509 > 255 [ 453.978301][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.212170][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.068727][ T25] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 455.185463][T10016] overlayfs: failed to resolve './file2': -2 [ 455.219324][ T25] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 455.220195][ T25] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 455.220210][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.220220][ T25] usb 6-1: config 0 has no interface number 0 [ 455.220238][ T25] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 455.220252][ T25] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 455.220263][ T25] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.220277][ T25] usb 6-1: config 0 interface 52 has no altsetting 0 [ 455.222033][ T25] usb 6-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 455.222048][ T25] usb 6-1: Product: syz [ 455.222056][ T25] usb 6-1: Manufacturer: syz [ 455.222065][ T25] usb 6-1: SerialNumber: syz [ 455.227296][ T25] usb 6-1: config 0 descriptor?? [ 455.257493][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.470921][ T25] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 455.471104][ T25] synaptics_usb 6-1:0.52: probe with driver synaptics_usb failed with error -5 [ 456.458422][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 456.458442][ T31] audit: type=1400 audit(1790641423.160:1531): avc: denied { read write } for pid=10021 comm="syz.2.1022" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 456.458505][ T31] audit: type=1400 audit(1790641423.160:1532): avc: denied { open } for pid=10021 comm="syz.2.1022" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 456.554584][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.775484][T10026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.775847][T10026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.851560][T10034] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1023'. [ 457.157384][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.569719][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.843287][ T30] usb 6-1: USB disconnect, device number 48 [ 458.609190][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.735242][T10054] netlink: 'syz.3.1030': attribute type 2 has an invalid length. [ 458.746523][ T31] audit: type=1400 audit(1790641426.060:1533): avc: denied { bind } for pid=10050 comm="syz.6.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 458.748428][ T31] audit: type=1400 audit(1790641426.060:1534): avc: denied { connect } for pid=10050 comm="syz.6.1031" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 458.821784][ T31] audit: type=1400 audit(1790641426.140:1535): avc: denied { bind } for pid=10051 comm="syz.2.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 458.822618][ T31] audit: type=1400 audit(1790641426.140:1536): avc: denied { write } for pid=10051 comm="syz.2.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 458.822661][ T31] audit: type=1400 audit(1790641426.140:1537): avc: denied { nlmsg_write } for pid=10051 comm="syz.2.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 458.822691][T10055] netlink: 556 bytes leftover after parsing attributes in process `syz.2.1025'. [ 458.824689][ T31] audit: type=1400 audit(1790641426.140:1538): avc: denied { setopt } for pid=10051 comm="syz.2.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 458.898766][ T31] audit: type=1400 audit(1790641426.210:1539): avc: denied { write } for pid=10051 comm="syz.2.1025" path="socket:[28220]" dev="sockfs" ino=28220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 459.227748][T10061] erspan0: entered promiscuous mode [ 459.238559][T10062] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1032'. [ 459.238588][T10062] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1032'. [ 459.649692][ T8964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.678845][ T30] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 459.808884][ T30] usb 3-1: device descriptor read/64, error -71 [ 459.911384][T10065] input: syz0 as /devices/virtual/input/input47 [ 460.048856][ T30] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 460.180242][ T30] usb 3-1: device descriptor read/64, error -71 [ 460.210456][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.290625][ T30] usb usb3-port1: attempt power cycle [ 461.350257][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.388809][ T1214] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 461.622587][ T30] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 461.638431][ T1214] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 461.639114][ T30] usb 3-1: device descriptor read/8, error -71 [ 461.657173][ T1214] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.657209][ T1214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.724924][ T1214] usb 7-1: selecting invalid altsetting 1 [ 461.725307][ T1214] dvb_ttusb_budget: ttusb_init_controller: error [ 461.725316][ T1214] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 461.911026][ T30] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 462.231091][ T5608] Bluetooth: hci0: command 0x0406 tx timeout [ 462.266876][ T30] usb 3-1: device not accepting address 51, error -71 [ 462.268470][ T30] usb usb3-port1: unable to enumerate USB device [ 462.370874][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.447621][ T31] audit: type=1400 audit(1790641429.760:1540): avc: denied { ioctl } for pid=10067 comm="syz.6.1034" path="socket:[29062]" dev="sockfs" ino=29062 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 462.585689][ T1214] DVB: Unable to find symbol stv0299_attach() [ 462.638149][ T31] audit: type=1400 audit(1790641429.950:1541): avc: denied { ioctl } for pid=10067 comm="syz.6.1034" path="socket:[29067]" dev="sockfs" ino=29067 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 462.686063][ T31] audit: type=1400 audit(1790641430.000:1542): avc: denied { write } for pid=10067 comm="syz.6.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 462.691757][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1034'. [ 462.691774][T10084] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1034'. [ 462.768742][ T30] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 462.799017][ T1214] DVB: Unable to find symbol tda8083_attach() [ 462.799033][ T1214] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 462.852755][ T31] audit: type=1400 audit(1790641430.170:1543): avc: denied { execute_no_trans } for pid=10082 comm="syz.2.1039" path="/210/file0" dev="tmpfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 462.918825][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 462.919934][ T30] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 462.931679][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.931700][ T30] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 462.931731][ T30] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 462.990213][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.990231][ T30] usb 6-1: Product: syz [ 462.990239][ T30] usb 6-1: Manufacturer: syz [ 462.990247][ T30] usb 6-1: SerialNumber: syz [ 463.105622][T10089] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.133145][ T25] usb 7-1: USB disconnect, device number 14 [ 463.158716][ T5705] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 463.226375][ T30] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 463.226399][ T30] cdc_ncm 6-1:1.0: bind() failure [ 463.258848][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.295426][ T30] usb 6-1: USB disconnect, device number 49 [ 463.312802][ T5705] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 463.314512][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.314536][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.411404][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.608348][ T5719] usb 3-1: USB disconnect, device number 52 [ 463.952354][T10095] openvswitch: netlink: Unknown key attributes 1 [ 464.731314][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.096273][ T5719] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 466.098305][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.278711][ T5719] usb 7-1: Using ep0 maxpacket: 16 [ 466.279227][ T5719] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 466.303091][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.306908][ T5719] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.306932][ T5719] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 466.306962][ T5719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.355639][ T5719] usb 7-1: config 0 descriptor?? [ 466.891260][ T31] audit: type=1400 audit(1790641434.200:1544): avc: denied { connect } for pid=10113 comm="syz.2.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 466.891433][ T31] audit: type=1400 audit(1790641434.200:1545): avc: denied { write } for pid=10113 comm="syz.2.1050" laddr=fe80::a8aa:aaff:feaa:aa0c lport=10339 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 467.173811][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.219072][ T31] audit: type=1400 audit(1790641434.540:1546): avc: denied { read write } for pid=10119 comm="syz.7.1051" name="sg0" dev="devtmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 467.219325][ T31] audit: type=1400 audit(1790641434.540:1547): avc: denied { open } for pid=10119 comm="syz.7.1051" path="/dev/sg0" dev="devtmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 468.212113][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.025221][T10134] openvswitch: netlink: Unknown key attributes 1 [ 469.187724][T10136] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:149 [ 469.188209][T10136] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 469.249857][ T8964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.274849][T10139] SET target dimension over the limit! [ 469.341927][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.456493][T10138] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 469.530865][T10145] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 469.656223][ T30] usb 7-1: USB disconnect, device number 15 [ 470.289438][ T8964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.290049][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 470.399833][ T31] audit: type=1400 audit(1790641437.720:1548): avc: denied { append } for pid=10152 comm="syz.2.1057" name="pfkey" dev="proc" ino=4026533451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 470.452817][T10153] FAULT_INJECTION: forcing a failure. [ 470.452817][T10153] name failslab, interval 1, probability 0, space 0, times 0 [ 470.452837][T10153] CPU: 1 UID: 0 PID: 10153 Comm: syz.2.1057 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.452853][T10153] Tainted: [L]=SOFTLOCKUP [ 470.452857][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 470.452863][T10153] Call Trace: [ 470.452867][T10153] [ 470.452871][T10153] dump_stack_lvl+0x100/0x190 [ 470.452891][T10153] should_fail_ex.cold+0x5/0xa [ 470.452907][T10153] should_failslab+0xc2/0x120 [ 470.452923][T10153] __kmalloc_cache_noprof+0x91/0x6d0 [ 470.452935][T10153] ? blk_trace_setup_prepare+0xf8/0x6c0 [ 470.452949][T10153] blk_trace_setup_prepare+0xf8/0x6c0 [ 470.452962][T10153] blk_trace_setup+0x217/0x440 [ 470.452976][T10153] ? __pfx_blk_trace_setup+0x10/0x10 [ 470.452987][T10153] ? vsnprintf+0x4c5/0x1300 [ 470.453001][T10153] ? __pfx_vsnprintf+0x10/0x10 [ 470.453019][T10153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 470.453034][T10153] ? do_vfs_ioctl+0x226/0x13e0 [ 470.453048][T10153] blk_trace_ioctl+0x245/0x320 [ 470.453061][T10153] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 470.453078][T10153] blkdev_ioctl+0x17c/0x6f0 [ 470.453094][T10153] ? __pfx_blkdev_ioctl+0x10/0x10 [ 470.453108][T10153] ? selinux_file_ioctl+0x13b/0x290 [ 470.453122][T10153] ? selinux_file_ioctl+0xb6/0x290 [ 470.453137][T10153] ? __pfx_blkdev_ioctl+0x10/0x10 [ 470.453152][T10153] __x64_sys_ioctl+0x18e/0x210 [ 470.453166][T10153] do_syscall_64+0x123/0x790 [ 470.453178][T10153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.453190][T10153] RIP: 0033:0x7f4c44d9e159 [ 470.453199][T10153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.453210][T10153] RSP: 002b:00007f4c45ca7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.453221][T10153] RAX: ffffffffffffffda RBX: 00007f4c45025fa0 RCX: 00007f4c44d9e159 [ 470.453228][T10153] RDX: 0000200000000040 RSI: 00000000c0481273 RDI: 0000000000000006 [ 470.453234][T10153] RBP: 00007f4c45ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 470.453241][T10153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.453247][T10153] R13: 00007f4c45026038 R14: 00007f4c45025fa0 R15: 00007ffe593f8e78 [ 470.453261][T10153] [ 470.925543][ T31] audit: type=1400 audit(1790641438.240:1549): avc: denied { connect } for pid=10156 comm="syz.3.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 471.865290][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.956034][T10165] jffs2: notice: (10165) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 472.310241][T10168] binfmt_misc: register: failed to install interpreter ./file0 [ 472.370317][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.916119][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.930358][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.707375][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.713311][ T5606] Bluetooth: hci4: unexpected event 0x2f length: 509 > 255 [ 475.772984][ T31] audit: type=1400 audit(1790641443.090:1550): avc: denied { write } for pid=10176 comm="syz.6.1063" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 476.022599][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.258182][ T31] audit: type=1400 audit(1790641443.560:1551): avc: denied { unlink } for pid=10176 comm="syz.6.1063" name="#11" dev="tmpfs" ino=513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 477.089000][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.129059][ T8964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.910662][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.169552][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.248326][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.409365][ T25] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 480.560754][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 480.571313][ T25] usb 7-1: unable to get BOS descriptor or descriptor too short [ 480.571340][ T25] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=b5.36 [ 480.573786][ T25] usb 7-1: config 12 has an invalid descriptor of length 225, skipping remainder of the config [ 480.573809][ T25] usb 7-1: config 12 has 0 interfaces, different from the descriptor's value: 2 [ 480.575249][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.575263][ T25] usb 7-1: Product: syz [ 480.575271][ T25] usb 7-1: Manufacturer: syz [ 480.575280][ T25] usb 7-1: SerialNumber: syz [ 480.985586][ T25] usb 7-1: USB disconnect, device number 16 [ 481.779974][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.968934][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.101264][ T31] audit: type=1400 audit(1790641449.420:1552): avc: denied { mount } for pid=10230 comm="syz.5.1076" name="/" dev="ramfs" ino=29427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 482.398783][ T5606] Bluetooth: hci4: unexpected event 0x2f length: 509 > 255 [ 482.849716][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.228554][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.898787][ T6450] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.917917][ T6450] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.918507][ T81] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.918541][ T81] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.008939][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.244035][ T31] audit: type=1400 audit(1790641452.550:1553): avc: denied { bind } for pid=10259 comm="syz.2.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 485.244086][ T31] audit: type=1400 audit(1790641452.550:1554): avc: denied { name_bind } for pid=10259 comm="syz.2.1084" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 485.244122][ T31] audit: type=1400 audit(1790641452.550:1555): avc: denied { node_bind } for pid=10259 comm="syz.2.1084" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 485.335720][ T8964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.293752][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.369948][ T8964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.862589][ T31] audit: type=1400 audit(1790641454.180:1556): avc: denied { mount } for pid=10269 comm="syz.6.1087" name="/" dev="configfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 486.902057][ T31] audit: type=1400 audit(1790641454.220:1557): avc: denied { search } for pid=10269 comm="syz.6.1087" name="/" dev="configfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 486.902104][ T31] audit: type=1400 audit(1790641454.220:1558): avc: denied { search } for pid=10269 comm="syz.6.1087" name="usb_gadget" dev="configfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 486.902125][ T31] audit: type=1400 audit(1790641454.220:1559): avc: denied { write search } for pid=10269 comm="syz.6.1087" name="usb_gadget" dev="configfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 486.902145][ T31] audit: type=1400 audit(1790641454.220:1560): avc: denied { add_name } for pid=10269 comm="syz.6.1087" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 486.902165][ T31] audit: type=1400 audit(1790641454.220:1561): avc: denied { create } for pid=10269 comm="syz.6.1087" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 487.046114][T10272] xt_MASQUERADE: bad rangesize 20224 [ 487.087616][T10272] jffs2: notice: (10272) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 487.131319][ T31] audit: type=1400 audit(1790641454.450:1562): avc: denied { write } for pid=10269 comm="syz.6.1087" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 487.180988][ T31] audit: type=1400 audit(1790641454.470:1563): avc: denied { add_name } for pid=10269 comm="syz.6.1087" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 487.181032][ T31] audit: type=1400 audit(1790641454.490:1564): avc: denied { create } for pid=10269 comm="syz.6.1087" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 487.427730][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.653897][ T31] audit: type=1400 audit(1790641454.970:1565): avc: denied { unmount } for pid=8151 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 489.256757][ T8964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.304339][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.291518][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.359368][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 490.359388][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 490.359409][T10298] netlink: 'syz.3.1093': attribute type 14 has an invalid length. [ 490.359420][T10298] netlink: 'syz.3.1093': attribute type 12 has an invalid length. [ 490.621362][ T31] audit: type=1400 audit(1790641457.930:1566): avc: denied { bind } for pid=10294 comm="syz.2.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 490.675170][ T31] audit: type=1400 audit(1790641457.990:1567): avc: denied { read } for pid=10294 comm="syz.2.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 490.770036][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.851373][ T31] audit: type=1400 audit(1790641458.170:1568): avc: denied { append } for pid=10294 comm="syz.2.1095" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 491.329303][ T8964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.458727][ T1214] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 491.628692][ T1214] usb 6-1: Using ep0 maxpacket: 16 [ 491.631204][ T1214] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.632092][ T1214] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.632113][ T1214] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 491.632149][ T1214] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 491.636991][ T1214] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.637015][ T1214] usb 6-1: Product: syz [ 491.637028][ T1214] usb 6-1: Manufacturer: syz [ 491.637041][ T1214] usb 6-1: SerialNumber: syz [ 491.713547][ T31] audit: type=1400 audit(1790641459.010:1569): avc: denied { ioctl } for pid=10310 comm="syz.6.1092" path="socket:[28582]" dev="sockfs" ino=28582 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 491.802687][ T31] audit: type=1400 audit(1790641459.110:1570): avc: denied { mounton } for pid=10311 comm="syz.3.1099" path="/268/file0" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 491.802773][T10313] 9p: Bad value for 'rfdno' [ 491.853841][ T31] audit: type=1400 audit(1790641459.170:1571): avc: denied { connect } for pid=10310 comm="syz.6.1092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 491.961423][ T1214] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 491.961463][ T1214] cdc_ncm 6-1:1.0: bind() failure [ 491.988253][ T1214] usb 6-1: USB disconnect, device number 50 [ 492.274283][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 492.274296][ T31] audit: type=1400 audit(1790641459.590:1574): avc: denied { read write } for pid=5597 comm="syz-executor" name="loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.274320][ T31] audit: type=1400 audit(1790641459.590:1575): avc: denied { open } for pid=5597 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.274342][ T31] audit: type=1400 audit(1790641459.590:1576): avc: denied { ioctl } for pid=5597 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 492.369977][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.370143][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.401858][T10324] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1103'. [ 492.402696][T10324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.457611][T10326] FAULT_INJECTION: forcing a failure. [ 492.457611][T10326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.457635][T10326] CPU: 1 UID: 0 PID: 10326 Comm: syz.2.1104 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.457651][T10326] Tainted: [L]=SOFTLOCKUP [ 492.457655][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 492.457661][T10326] Call Trace: [ 492.457665][T10326] [ 492.457669][T10326] dump_stack_lvl+0x100/0x190 [ 492.457689][T10326] should_fail_ex.cold+0x5/0xa [ 492.457705][T10326] _copy_to_user+0x32/0xd0 [ 492.457720][T10326] simple_read_from_buffer+0xcb/0x170 [ 492.457738][T10326] proc_fail_nth_read+0x1af/0x230 [ 492.457756][T10326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.457772][T10326] ? rw_verify_area+0xce/0x6d0 [ 492.457783][T10326] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.457798][T10326] vfs_read+0x1e4/0xb40 [ 492.457810][T10326] ? lock_acquire+0x1d1/0x380 [ 492.457823][T10326] ? __fget_files+0x34/0x3d0 [ 492.457838][T10326] ? __pfx_vfs_read+0x10/0x10 [ 492.457849][T10326] ? find_held_lock+0x2b/0x80 [ 492.457866][T10326] ? __fget_files+0x215/0x3d0 [ 492.457883][T10326] ? __fget_files+0x21f/0x3d0 [ 492.457901][T10326] ksys_read+0x12a/0x250 [ 492.457913][T10326] ? __pfx_ksys_read+0x10/0x10 [ 492.457929][T10326] do_syscall_64+0x123/0x790 [ 492.457943][T10326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.457954][T10326] RIP: 0033:0x7f4c44d5e98e [ 492.457963][T10326] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 492.457974][T10326] RSP: 002b:00007f4c45ca6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 492.457985][T10326] RAX: ffffffffffffffda RBX: 00007f4c45ca76c0 RCX: 00007f4c44d5e98e [ 492.457992][T10326] RDX: 000000000000000f RSI: 00007f4c45ca70a0 RDI: 0000000000000004 [ 492.457999][T10326] RBP: 00007f4c45ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 492.458005][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.458012][T10326] R13: 00007f4c45026038 R14: 00007f4c45025fa0 R15: 00007ffe593f8e78 [ 492.458026][T10326] [ 492.718520][T10329] netlink: 'syz.3.1105': attribute type 25 has an invalid length. [ 492.731192][ T31] audit: type=1400 audit(1790641460.050:1577): avc: denied { map_create } for pid=10327 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 492.732021][ T31] audit: type=1400 audit(1790641460.050:1578): avc: denied { map_read map_write } for pid=10327 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 492.760078][ T31] audit: type=1400 audit(1790641460.070:1579): avc: denied { create } for pid=10327 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 492.760121][ T31] audit: type=1400 audit(1790641460.070:1580): avc: denied { ioctl } for pid=10327 comm="syz.3.1105" path="socket:[29687]" dev="sockfs" ino=29687 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 492.760154][ T31] audit: type=1400 audit(1790641460.070:1581): avc: denied { connect } for pid=10327 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 492.760184][ T31] audit: type=1400 audit(1790641460.070:1582): avc: denied { prog_load } for pid=10327 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 492.760213][ T31] audit: type=1400 audit(1790641460.070:1583): avc: denied { create } for pid=10327 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 492.843870][T10329] lo speed is unknown, defaulting to 1000 [ 492.843916][T10329] lo speed is unknown, defaulting to 1000 [ 492.844839][T10329] lo speed is unknown, defaulting to 1000 [ 492.850456][T10329] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 492.850486][T10329] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 492.850519][T10329] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 492.998153][T10329] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 493.012430][T10338] FAULT_INJECTION: forcing a failure. [ 493.012430][T10338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.012452][T10338] CPU: 1 UID: 0 PID: 10338 Comm: syz.6.1107 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.012467][T10338] Tainted: [L]=SOFTLOCKUP [ 493.012472][T10338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 493.012478][T10338] Call Trace: [ 493.012482][T10338] [ 493.012487][T10338] dump_stack_lvl+0x100/0x190 [ 493.012506][T10338] should_fail_ex.cold+0x5/0xa [ 493.012522][T10338] _copy_from_user+0x2e/0xd0 [ 493.012536][T10338] do_ipv6_setsockopt+0x73d/0x44a0 [ 493.012555][T10338] ? avc_has_perm_noaudit+0x56/0x470 [ 493.012575][T10338] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 493.012592][T10338] ? avc_has_perm_noaudit+0x145/0x470 [ 493.012611][T10338] ? avc_has_perm+0x135/0x1e0 [ 493.012628][T10338] ? __pfx_avc_has_perm+0x10/0x10 [ 493.012646][T10338] ? get_pid_task+0x106/0x250 [ 493.012664][T10338] ? sock_has_perm+0x25a/0x2f0 [ 493.012676][T10338] ? __pfx_sock_has_perm+0x10/0x10 [ 493.012687][T10338] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 493.012704][T10338] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 493.012729][T10338] ? ipv6_setsockopt+0xcb/0x170 [ 493.012744][T10338] ipv6_setsockopt+0xcb/0x170 [ 493.012761][T10338] tcp_setsockopt+0xa7/0x100 [ 493.012775][T10338] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 493.012788][T10338] do_sock_setsockopt+0xf3/0x1d0 [ 493.012807][T10338] __sys_setsockopt+0x195/0x220 [ 493.012825][T10338] __x64_sys_setsockopt+0xbd/0x160 [ 493.012839][T10338] ? do_syscall_64+0xae/0x790 [ 493.012850][T10338] ? lockdep_hardirqs_on+0x7d/0x110 [ 493.012861][T10338] do_syscall_64+0x123/0x790 [ 493.012873][T10338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.012885][T10338] RIP: 0033:0x7f93e459e159 [ 493.012894][T10338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.012904][T10338] RSP: 002b:00007f93e548c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 493.012916][T10338] RAX: ffffffffffffffda RBX: 00007f93e4826180 RCX: 00007f93e459e159 [ 493.012922][T10338] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 493.012929][T10338] RBP: 00007f93e548c090 R08: 0000000000000020 R09: 0000000000000000 [ 493.012935][T10338] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 493.012941][T10338] R13: 00007f93e4826218 R14: 00007f93e4826180 R15: 00007ffc7ef52f38 [ 493.012955][T10338] [ 493.397270][T10329] lo speed is unknown, defaulting to 1000 [ 493.409621][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.415072][T10329] lo speed is unknown, defaulting to 1000 [ 493.488953][T10329] lo speed is unknown, defaulting to 1000 [ 493.509784][T10329] lo speed is unknown, defaulting to 1000 [ 493.521038][T10329] lo speed is unknown, defaulting to 1000 [ 493.549281][T10329] lo speed is unknown, defaulting to 1000 [ 493.870239][ T30] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 493.999810][ T30] usb 6-1: device descriptor read/64, error -71 [ 494.238783][ T30] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 494.368874][ T30] usb 6-1: device descriptor read/64, error -71 [ 494.500082][ T30] usb usb6-port1: attempt power cycle [ 494.692882][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.869245][ T30] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 494.895935][ T30] usb 6-1: device descriptor read/8, error -71 [ 495.138862][ T30] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 495.181472][ T30] usb 6-1: device descriptor read/8, error -71 [ 495.298539][ T30] usb usb6-port1: unable to enumerate USB device [ 495.462507][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.729753][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.914444][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.929090][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.929167][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.269351][ T25] libceph: connect (1)[c::]:6789 error -101 [ 496.298317][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 496.327827][ T25] libceph: connect (1)[c::]:6789 error -101 [ 496.328549][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 496.687793][ T25] libceph: connect (1)[c::]:6789 error -101 [ 496.687962][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 496.709039][T10372] ceph: No mds server is up or the cluster is laggy [ 496.776547][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.838058][T10380] syzkaller0: entered promiscuous mode [ 496.838081][T10380] syzkaller0: entered allmulticast mode [ 496.997092][T10383] random: crng reseeded on system resumption [ 497.126276][T10391] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1122'. [ 497.294226][ T31] kauditd_printk_skb: 53 callbacks suppressed [ 497.294244][ T31] audit: type=1400 audit(1790641464.600:1637): avc: denied { mount } for pid=10396 comm="syz.5.1125" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 497.387818][ T31] audit: type=1400 audit(1790641464.700:1638): avc: denied { allowed } for pid=10398 comm="syz.3.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 497.388527][ T31] audit: type=1400 audit(1790641464.700:1639): avc: denied { create } for pid=10398 comm="syz.3.1126" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 497.435292][ T31] audit: type=1400 audit(1790641464.750:1640): avc: denied { unmount } for pid=5878 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 497.436130][ T31] audit: type=1400 audit(1790641464.750:1641): avc: denied { map } for pid=10398 comm="syz.3.1126" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 497.436171][ T31] audit: type=1400 audit(1790641464.750:1642): avc: denied { read write } for pid=10398 comm="syz.3.1126" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 497.521352][ T31] audit: type=1400 audit(1790641464.840:1643): avc: denied { map } for pid=10398 comm="syz.3.1126" path="socket:[28664]" dev="sockfs" ino=28664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 498.464557][ T31] audit: type=1400 audit(1790641465.070:1644): avc: denied { create } for pid=10404 comm="syz.5.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 498.464607][ T31] audit: type=1400 audit(1790641465.080:1645): avc: denied { setopt } for pid=10404 comm="syz.5.1128" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 498.464645][ T31] audit: type=1400 audit(1790641465.090:1646): avc: denied { write } for pid=10404 comm="syz.5.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 498.511773][ T8964] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.670470][T10411] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 498.687882][ T30] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 498.852211][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 498.852871][ T30] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 498.854752][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.854773][ T30] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 498.854802][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.916110][ T30] usb 3-1: config 0 descriptor?? [ 498.939271][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.141504][T10418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1132'. [ 499.141542][T10418] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1132'. [ 499.579875][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.368929][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.618937][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.252015][T10066] Bluetooth: hci1: unexpected event 0x2f length: 509 > 255 [ 501.967405][ T5606] Bluetooth: hci0: unexpected event 0x2f length: 509 > 255 [ 501.967958][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.206784][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.936477][ T1214] usb 3-1: USB disconnect, device number 53 [ 503.009431][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.110758][T10444] syzkaller0: entered promiscuous mode [ 503.110772][T10444] syzkaller0: entered allmulticast mode [ 504.210413][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.157380][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 505.157399][ T31] audit: type=1400 audit(1790641472.470:1674): avc: denied { read write } for pid=10454 comm="syz.2.1144" name="event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 505.159064][ T31] audit: type=1400 audit(1790641472.470:1675): avc: denied { ioctl open } for pid=10454 comm="syz.2.1144" path="/dev/input/event0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 505.251784][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.259602][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.669634][ T31] audit: type=1400 audit(1790641472.970:1676): avc: denied { ioctl } for pid=10456 comm="syz.6.1145" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 506.028841][ T863] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 506.178728][ T31] audit: type=1400 audit(1790641473.490:1677): avc: denied { write } for pid=10465 comm="syz.5.1138" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 506.179194][ T863] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 506.180095][ T863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.180121][ T863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.181022][ T863] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 506.181048][ T863] usb 3-1: Manufacturer: syz [ 506.182343][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.184568][ T7697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.187137][ T863] usb 3-1: config 0 descriptor?? [ 506.187411][ T31] audit: type=1400 audit(1790641473.500:1678): avc: denied { open } for pid=10465 comm="syz.5.1138" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 506.188450][ T31] audit: type=1400 audit(1790641473.500:1679): avc: denied { ioctl } for pid=10465 comm="syz.5.1138" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x744c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 506.230801][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.267835][ T31] audit: type=1400 audit(1790641473.580:1680): avc: denied { read } for pid=10467 comm="syz.7.1139" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 506.361328][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.361576][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.058892][ T5785] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 507.209838][ T5785] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 507.216977][ T5785] usb 6-1: config index 0 descriptor too short (expected 63186, got 210) [ 507.217005][ T5785] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 507.217024][ T5785] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 507.217042][ T5785] usb 6-1: config 0 has no interface number 0 [ 507.217080][ T5785] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 507.217102][ T5785] usb 6-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 64 [ 507.217127][ T5785] usb 6-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 507.217162][ T5785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.295074][ T5785] usb 6-1: config 0 descriptor?? [ 507.297026][T10466] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 507.393425][ T5785] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 507.424560][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.638559][ T31] audit: type=1400 audit(1790641474.920:1681): avc: denied { read write } for pid=10465 comm="syz.5.1138" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 507.640791][ T31] audit: type=1400 audit(1790641474.960:1682): avc: denied { open } for pid=10465 comm="syz.5.1138" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 507.680579][ T31] audit: type=1400 audit(1790641475.000:1683): avc: denied { map } for pid=10465 comm="syz.5.1138" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 508.451023][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.454843][ T7697] usb 6-1: Failed to submit usb control message: -110 [ 508.454874][ T7697] usb 6-1: unable to send the bmi data to the device: -110 [ 508.454888][ T7697] usb 6-1: unable to get target info from device [ 508.454900][ T7697] usb 6-1: could not get target info (-110) [ 508.455150][ T7697] usb 6-1: could not probe fw (-110) [ 508.537818][ T863] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #100: -71 [ 508.537847][ T863] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 508.537857][ T863] uclogic 0003:256C:006D.000A: failed probing pen v1 parameters: -71 [ 508.537880][ T863] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 508.537923][ T863] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 508.546344][ T863] usb 3-1: USB disconnect, device number 54 [ 508.694352][ T5606] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 509.307967][T10481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.524910][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.602512][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.982284][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.061255][ T1214] usb 6-1: USB disconnect, device number 55 [ 510.175165][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 510.175182][ T31] audit: type=1400 audit(1790641477.490:1685): avc: denied { create } for pid=10509 comm="syz.5.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 510.279094][ T863] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 510.280271][ T5705] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 510.316517][T10517] netlink: 'syz.3.1155': attribute type 49 has an invalid length. [ 510.449982][ T5705] usb 3-1: Using ep0 maxpacket: 16 [ 510.450642][ T5705] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 510.453167][ T5705] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.453196][ T5705] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.453214][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.454861][ T863] usb 7-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 510.465346][ T5705] usb 3-1: config 0 descriptor?? [ 510.469622][ T863] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 142, changing to 7 [ 510.531789][ T863] usb 7-1: string descriptor 0 read error: -22 [ 510.531892][ T863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.675004][ T863] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 510.760370][ T863] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 512.692625][ T863] net_ratelimit: 1 callbacks suppressed [ 512.692638][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.098805][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.101548][ T5784] usb 7-1: USB disconnect, device number 17 [ 513.124815][ T31] audit: type=1400 audit(1790641480.440:1686): avc: denied { read write } for pid=10528 comm="syz.7.1158" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 513.124868][ T31] audit: type=1400 audit(1790641480.440:1687): avc: denied { open } for pid=10528 comm="syz.7.1158" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 513.124906][ T31] audit: type=1400 audit(1790641480.440:1688): avc: denied { mounton } for pid=10528 comm="syz.7.1158" path="/72/file0" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 513.175082][T10531] FAULT_INJECTION: forcing a failure. [ 513.175082][T10531] name failslab, interval 1, probability 0, space 0, times 0 [ 513.175110][T10531] CPU: 1 UID: 0 PID: 10531 Comm: syz.7.1158 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.175132][T10531] Tainted: [L]=SOFTLOCKUP [ 513.175137][T10531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 513.175147][T10531] Call Trace: [ 513.175152][T10531] [ 513.175158][T10531] dump_stack_lvl+0x100/0x190 [ 513.175185][T10531] should_fail_ex.cold+0x5/0xa [ 513.175207][T10531] should_failslab+0xc2/0x120 [ 513.175229][T10531] kmem_cache_alloc_noprof+0x92/0x6a0 [ 513.175249][T10531] ? do_getname+0x35/0x390 [ 513.175267][T10531] do_getname+0x35/0x390 [ 513.175284][T10531] path_listxattrat+0x2db/0x370 [ 513.175306][T10531] ? ksys_write+0x1ac/0x250 [ 513.175323][T10531] ? __pfx_path_listxattrat+0x10/0x10 [ 513.175350][T10531] do_syscall_64+0x123/0x790 [ 513.175369][T10531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.175385][T10531] RIP: 0033:0x7fb89399e159 [ 513.175401][T10531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.175415][T10531] RSP: 002b:00007fb8948bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 513.175431][T10531] RAX: ffffffffffffffda RBX: 00007fb893c26090 RCX: 00007fb89399e159 [ 513.175441][T10531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 513.175451][T10531] RBP: 00007fb8948bc090 R08: 0000000000000000 R09: 0000000000000000 [ 513.175460][T10531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.175476][T10531] R13: 00007fb893c26128 R14: 00007fb893c26090 R15: 00007ffe4c63c578 [ 513.175497][T10531] [ 513.395329][ T31] audit: type=1400 audit(1790641480.710:1689): avc: denied { mount } for pid=10528 comm="syz.7.1158" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 513.478352][ T31] audit: type=1400 audit(1790641480.790:1690): avc: denied { unmount } for pid=5878 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 513.739186][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.951359][ T31] audit: type=1400 audit(1790641481.270:1691): avc: denied { unmount } for pid=8652 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 514.106717][ T31] audit: type=1400 audit(1790641481.420:1692): avc: denied { read } for pid=10545 comm="syz.6.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 514.419301][ T31] audit: type=1400 audit(1790641481.640:1693): avc: denied { create } for pid=10558 comm="syz.5.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 514.419532][ T31] audit: type=1400 audit(1790641481.660:1694): avc: denied { mount } for pid=10553 comm="syz.6.1166" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 515.149402][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.869416][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 515.869439][ T31] audit: type=1400 audit(1790641483.190:1698): avc: denied { create } for pid=10563 comm="syz.7.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 515.926496][ T863] usb 3-1: USB disconnect, device number 55 [ 516.193873][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.210311][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.488963][T10573] FAULT_INJECTION: forcing a failure. [ 516.488963][T10573] name failslab, interval 1, probability 0, space 0, times 0 [ 516.489664][T10573] CPU: 1 UID: 0 PID: 10573 Comm: syz.2.1171 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.489692][T10573] Tainted: [L]=SOFTLOCKUP [ 516.489699][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 516.489709][T10573] Call Trace: [ 516.489716][T10573] [ 516.489723][T10573] dump_stack_lvl+0x100/0x190 [ 516.489756][T10573] should_fail_ex.cold+0x5/0xa [ 516.489782][T10573] should_failslab+0xc2/0x120 [ 516.489808][T10573] kmem_cache_alloc_noprof+0x92/0x6a0 [ 516.489831][T10573] ? skb_clone+0x190/0x400 [ 516.489861][T10573] skb_clone+0x190/0x400 [ 516.489887][T10573] netlink_deliver_tap+0xaed/0xcc0 [ 516.489916][T10573] netlink_unicast+0x6a5/0x850 [ 516.489943][T10573] ? __pfx_netlink_unicast+0x10/0x10 [ 516.489973][T10573] netlink_ack+0x655/0xb80 [ 516.490004][T10573] netlink_rcv_skb+0x333/0x420 [ 516.490029][T10573] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 516.490057][T10573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.490090][T10573] ? __rcu_read_unlock+0x26a/0x5e0 [ 516.490112][T10573] ? rcu_is_watching+0x13/0xc0 [ 516.490141][T10573] xfrm_netlink_rcv+0x71/0x90 [ 516.490166][T10573] netlink_unicast+0x585/0x850 [ 516.490194][T10573] ? __pfx_netlink_unicast+0x10/0x10 [ 516.490225][T10573] netlink_sendmsg+0x8b0/0xda0 [ 516.490254][T10573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.490280][T10573] ? selinux_socket_sendmsg+0x198/0x2f0 [ 516.490307][T10573] ____sys_sendmsg+0xa4d/0xbe0 [ 516.490325][T10573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.490350][T10573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.490375][T10573] ? __css_rstat_updated+0x1ce/0x590 [ 516.490405][T10573] ___sys_sendmsg+0x190/0x1e0 [ 516.490427][T10573] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.490447][T10573] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 516.490481][T10573] ? find_held_lock+0x2b/0x80 [ 516.490524][T10573] __sys_sendmsg+0x160/0x210 [ 516.490550][T10573] ? __pfx___sys_sendmsg+0x10/0x10 [ 516.490582][T10573] ? trace_hardirqs_off+0x70/0x170 [ 516.490614][T10573] do_syscall_64+0x123/0x790 [ 516.490651][T10573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.490670][T10573] RIP: 0033:0x7f4c44d9e159 [ 516.490684][T10573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.490700][T10573] RSP: 002b:00007f4c45c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.490719][T10573] RAX: ffffffffffffffda RBX: 00007f4c45026090 RCX: 00007f4c44d9e159 [ 516.490730][T10573] RDX: 0000000000000890 RSI: 00002000000003c0 RDI: 0000000000000006 [ 516.490741][T10573] RBP: 00007f4c45c86090 R08: 0000000000000000 R09: 0000000000000000 [ 516.490751][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.490761][T10573] R13: 00007f4c45026128 R14: 00007f4c45026090 R15: 00007ffe593f8e78 [ 516.490787][T10573] [ 517.273058][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.291510][ T31] audit: type=1400 audit(1790641484.600:1699): avc: denied { unmount } for pid=8151 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 517.314861][ T31] audit: type=1400 audit(1790641484.630:1700): avc: denied { unmount } for pid=8151 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 517.495948][ T31] audit: type=1400 audit(1790641484.810:1701): avc: denied { bind } for pid=10578 comm="syz.2.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 517.496413][T10580] Bluetooth: ISO socket layer initialized [ 517.497567][ T31] audit: type=1400 audit(1790641484.810:1702): avc: denied { write } for pid=10578 comm="syz.2.1173" path="socket:[31089]" dev="sockfs" ino=31089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 517.561438][ T31] audit: type=1400 audit(1790641484.880:1703): avc: denied { listen } for pid=10578 comm="syz.2.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 517.644938][ T31] audit: type=1400 audit(1790641484.960:1704): avc: denied { ioctl } for pid=10583 comm="syz.6.1174" path="socket:[31166]" dev="sockfs" ino=31166 ioctlcmd=0xaf84 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 517.685895][ T31] audit: type=1400 audit(1790641485.000:1705): avc: denied { create } for pid=10583 comm="syz.6.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 517.699405][ T31] audit: type=1400 audit(1790641485.010:1706): avc: denied { bind } for pid=10583 comm="syz.6.1174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 517.729570][ T30] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 517.883550][ T30] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 517.884479][ T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.884521][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.039543][T10597] bonding: no command found in bonding_masters - use +ifname or -ifname [ 518.136529][ T30] usb 6-1: USB disconnect, device number 56 [ 518.295624][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.399233][T10606] netlink: del zone limit has 4 unknown bytes [ 518.750138][ T1214] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 518.897723][ T5784] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 518.908860][ T1214] usb 7-1: Using ep0 maxpacket: 16 [ 518.909306][ T1214] usb 7-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 518.910192][ T1214] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 518.910213][ T1214] usb 7-1: config 0 has no interface number 0 [ 518.910246][ T1214] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 518.913752][ T1214] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.913773][ T1214] usb 7-1: Product: syz [ 518.913788][ T1214] usb 7-1: Manufacturer: syz [ 518.913802][ T1214] usb 7-1: SerialNumber: syz [ 518.917281][ T1214] usb 7-1: config 0 descriptor?? [ 518.996157][ T1214] cypress_m8 7-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 519.059253][ T5784] usb 3-1: Using ep0 maxpacket: 16 [ 519.060377][ T5784] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 519.066016][ T5784] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.066039][ T5784] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 519.066149][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.121199][ T5784] usb 3-1: config 0 descriptor?? [ 519.222079][ T31] audit: type=1400 audit(1790641486.540:1707): avc: denied { read } for pid=10609 comm="syz.5.1183" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 519.255020][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.397950][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.433859][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.463695][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.464576][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.544590][T10612] ip_tables: iptables: counters copy to user failed while replacing table [ 519.553156][T10612] ip_tables: iptables: counters copy to user failed while replacing table [ 519.559550][T10612] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1183'. [ 519.563182][T10612] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1183'. [ 519.929012][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.717867][ T1214] usb 7-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 521.721037][ T1214] usb 7-1: USB disconnect, device number 18 [ 521.730392][ T1214] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 521.731367][ T1214] cypress_m8 7-1:0.35: device disconnected [ 521.912891][ T863] usb 3-1: USB disconnect, device number 56 [ 522.135205][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 522.135222][ T31] audit: type=1400 audit(1790641489.450:1709): avc: denied { read } for pid=10629 comm="syz.6.1188" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 522.135453][ T31] audit: type=1400 audit(1790641489.450:1710): avc: denied { open } for pid=10629 comm="syz.6.1188" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 522.237926][ T31] audit: type=1400 audit(1790641489.550:1711): avc: denied { create } for pid=10629 comm="syz.6.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 522.249656][ T31] audit: type=1400 audit(1790641489.560:1712): avc: denied { append } for pid=10630 comm="syz.2.1190" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 522.315389][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.509750][ T31] audit: type=1400 audit(1790641489.820:1713): avc: denied { connect } for pid=10636 comm="syz.5.1193" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 522.631774][ T31] audit: type=1400 audit(1790641489.950:1714): avc: denied { mount } for pid=10640 comm="syz.2.1194" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 522.756194][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.790242][T10645] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1195'. [ 522.905959][ T31] audit: type=1400 audit(1790641490.220:1715): avc: denied { create } for pid=10646 comm="syz.5.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 522.907519][ T31] audit: type=1400 audit(1790641490.220:1716): avc: denied { connect } for pid=10646 comm="syz.5.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 522.958872][ T1214] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 523.077134][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.085287][ T31] audit: type=1400 audit(1790641490.400:1717): avc: denied { ioctl } for pid=10651 comm="syz.6.1197" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 523.120912][ T1214] usb 3-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 523.124185][ T1214] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 523.124205][ T1214] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 523.158422][ T1214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.158449][ T1214] usb 3-1: Product: syz [ 523.158462][ T1214] usb 3-1: Manufacturer: syz [ 523.158476][ T1214] usb 3-1: SerialNumber: syz [ 523.544287][T10641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.556241][T10641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.809354][ T863] net_ratelimit: 4 callbacks suppressed [ 523.809372][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.030684][T10642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.051726][T10642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.223761][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.261132][ T31] audit: type=1400 audit(1790641491.560:1718): avc: denied { unmount } for pid=10640 comm="syz.2.1194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 524.365418][T10661] nvme_fabrics: missing parameter 'transport=%s' [ 524.365434][T10661] nvme_fabrics: missing parameter 'nqn=%s' [ 524.568179][ T5606] Bluetooth: hci5: CSR: Local version failed (-71) [ 524.569318][ T5705] usb 3-1: USB disconnect, device number 57 [ 524.643612][ T30] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 524.808763][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 524.809382][ T30] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 524.812462][ T30] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.812485][ T30] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 524.812517][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.816142][ T30] usb 6-1: config 0 descriptor?? [ 524.858327][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.329450][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.625256][T10681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.701675][ T59] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.889345][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.100412][T10698] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 526.100438][T10698] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 526.105874][T10698] vhci_hcd vhci_hcd.0: Device attached [ 526.362640][ T1214] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 526.418909][ T5784] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 526.578678][ T5784] usb 7-1: Using ep0 maxpacket: 32 [ 526.579663][ T5784] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 526.580480][ T5784] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.580499][ T5784] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 526.580530][ T5784] usb 7-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 526.580558][ T5784] usb 7-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 526.580588][ T5784] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 526.580739][ T5784] usb 7-1: config 1 interface 1 has no altsetting 0 [ 526.584743][ T5784] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.584760][ T5784] usb 7-1: Product: syz [ 526.584768][ T5784] usb 7-1: Manufacturer: syz [ 526.584778][ T5784] usb 7-1: SerialNumber: syz [ 526.708104][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 526.929238][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.939467][ T59] bridge_slave_1: left allmulticast mode [ 526.939488][ T59] bridge_slave_1: left promiscuous mode [ 526.939705][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.011059][ T59] bridge_slave_0: left allmulticast mode [ 527.011103][ T59] bridge_slave_0: left promiscuous mode [ 527.011291][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.246482][T10702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.266458][T10702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.345929][T10702] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 527.345949][T10702] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 527.346004][T10702] vhci_hcd vhci_hcd.0: Device attached [ 527.355336][T10713] vhci_hcd: connection closed [ 527.380336][ T149] vhci_hcd vhci_hcd.6: stop threads [ 527.386131][ T149] vhci_hcd vhci_hcd.6: release socket [ 527.386162][ T149] vhci_hcd vhci_hcd.6: disconnect device [ 527.420055][ T5784] usb 7-1: selecting invalid altsetting 0 [ 527.425656][ T5784] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 527.426545][ T5784] usb 7-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 527.511610][ T10] usb 6-1: USB disconnect, device number 57 [ 527.715945][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.755780][ T5784] usb 7-1: USB disconnect, device number 19 [ 527.824644][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.850412][ T59] bond0 (unregistering): Released all slaves [ 527.969858][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.748694][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.009043][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.042819][ T6262] udevd[6262]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.450502][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.571134][T10699] vhci_hcd: connection reset by peer [ 529.572215][ T149] vhci_hcd vhci_hcd.7: stop threads [ 529.578435][ T149] vhci_hcd vhci_hcd.7: release socket [ 529.603185][ T149] vhci_hcd vhci_hcd.7: disconnect device [ 529.996163][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 529.996181][ T31] audit: type=1400 audit(1790641497.310:1745): avc: denied { getopt } for pid=10745 comm="syz.7.1218" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 530.049437][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.478813][ T31] audit: type=1400 audit(1790641497.770:1746): avc: denied { mounton } for pid=10749 comm="syz.2.1220" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 530.878501][T10750] omfs: Invalid superblock (0) [ 531.038232][ T31] audit: type=1400 audit(1790641498.340:1747): avc: denied { create } for pid=10749 comm="syz.2.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 531.102069][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.183210][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.189598][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.227029][T10758] tls_set_device_offload: netdev not found [ 532.258479][ T31] audit: type=1400 audit(1790641499.570:1748): avc: denied { write } for pid=10756 comm="syz.7.1222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 532.278145][ T1214] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 533.257775][ T59] hsr_slave_0: left promiscuous mode [ 533.268830][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.276708][ T59] hsr_slave_1: left promiscuous mode [ 533.277435][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.277452][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.514167][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.514188][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.592859][T10760] syz.3.1221 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 533.592885][T10760] CPU: 1 UID: 0 PID: 10760 Comm: syz.3.1221 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.592901][T10760] Tainted: [L]=SOFTLOCKUP [ 533.592905][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 533.592911][T10760] Call Trace: [ 533.592915][T10760] [ 533.592919][T10760] dump_stack_lvl+0x100/0x190 [ 533.592944][T10760] dump_header+0xfb/0x606 [ 533.592965][T10760] oom_kill_process.cold+0xd/0x380 [ 533.592981][T10760] out_of_memory+0x340/0x14f0 [ 533.593001][T10760] ? __pfx_out_of_memory+0x10/0x10 [ 533.593020][T10760] mem_cgroup_out_of_memory+0xc6/0x130 [ 533.593035][T10760] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 533.593048][T10760] ? find_held_lock+0x2b/0x80 [ 533.593068][T10760] ? do_raw_spin_unlock+0x145/0x1e0 [ 533.593083][T10760] ? _raw_spin_unlock+0x28/0x50 [ 533.593102][T10760] try_charge_memcg+0x783/0xf60 [ 533.593116][T10760] ? __pfx_try_charge_memcg+0x10/0x10 [ 533.593132][T10760] ? find_held_lock+0x2b/0x80 [ 533.593149][T10760] ? rcu_read_unlock+0x17/0x60 [ 533.593159][T10760] ? rcu_read_unlock+0x17/0x60 [ 533.593169][T10760] ? find_held_lock+0x2b/0x80 [ 533.593186][T10760] ? rcu_read_unlock+0x17/0x60 [ 533.593200][T10760] charge_memcg+0x1ae/0x210 [ 533.593211][T10760] __mem_cgroup_charge+0x2b/0x1c0 [ 533.593224][T10760] shmem_alloc_and_add_folio+0x451/0xd40 [ 533.593245][T10760] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 533.593264][T10760] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 533.593286][T10760] shmem_get_folio_gfp+0x75b/0x1980 [ 533.593307][T10760] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 533.593326][T10760] ? vm_normal_page+0x1d1/0x380 [ 533.593340][T10760] ? __pfx_vm_normal_page+0x10/0x10 [ 533.593356][T10760] shmem_write_begin+0x1a4/0x420 [ 533.593368][T10760] ? __pfx_shmem_write_begin+0x10/0x10 [ 533.593385][T10760] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 533.593401][T10760] generic_perform_write+0x292/0xa40 [ 533.593415][T10760] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 533.593433][T10760] ? __pfx_generic_perform_write+0x10/0x10 [ 533.593449][T10760] ? file_update_time_flags+0x38c/0x520 [ 533.593463][T10760] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 533.593475][T10760] shmem_file_write_iter+0x10e/0x140 [ 533.593489][T10760] __kernel_write_iter+0x2ac/0x930 [ 533.593503][T10760] ? __pfx___kernel_write_iter+0x10/0x10 [ 533.593516][T10760] ? __up_read+0x333/0x980 [ 533.593532][T10760] ? dump_user_range+0x65e/0xad0 [ 533.593548][T10760] dump_user_range+0x3f9/0xad0 [ 533.593563][T10760] ? __pfx_dump_user_range+0x10/0x10 [ 533.593581][T10760] ? __pfx_writenote+0x10/0x10 [ 533.593594][T10760] ? elf_core_dump+0x1f25/0x3d20 [ 533.593610][T10760] elf_core_dump+0x2d68/0x3d20 [ 533.593633][T10760] ? __pfx_elf_core_dump+0x10/0x10 [ 533.593646][T10760] ? kasan_save_stack+0x3f/0x50 [ 533.593659][T10760] ? kasan_save_stack+0x30/0x50 [ 533.593672][T10760] ? kasan_save_track+0x14/0x30 [ 533.593685][T10760] ? __kasan_kmalloc+0xaa/0xb0 [ 533.593698][T10760] ? vfs_coredump+0x21f6/0x54a0 [ 533.593710][T10760] ? get_signal+0x1f2a/0x21e0 [ 533.593721][T10760] ? arch_do_signal_or_restart+0x91/0x7e0 [ 533.593741][T10760] ? 0xffffffffff600000 [ 533.593767][T10760] ? lock_acquire+0x1d1/0x380 [ 533.593780][T10760] ? get_signal+0x1f2a/0x21e0 [ 533.593796][T10760] ? vfs_coredump+0x281a/0x54a0 [ 533.593809][T10760] vfs_coredump+0x281a/0x54a0 [ 533.593826][T10760] ? __pfx_vfs_coredump+0x10/0x10 [ 533.593839][T10760] ? __lock_acquire+0x5c0/0x1f40 [ 533.593855][T10760] ? __lock_acquire+0x5c0/0x1f40 [ 533.593869][T10760] ? lock_acquire+0x1d1/0x380 [ 533.593883][T10760] ? unwind_next_frame+0xbd/0x2090 [ 533.593902][T10760] ? lock_acquire+0x1d1/0x380 [ 533.593918][T10760] ? bpf_ksym_find+0x128/0x1c0 [ 533.593929][T10760] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 533.593955][T10760] ? arch_stack_walk+0xa6/0xf0 [ 533.593977][T10760] ? __sigqueue_free+0xbe/0x2a0 [ 533.593992][T10760] ? stack_trace_save+0x8e/0xc0 [ 533.594003][T10760] ? __pfx_stack_trace_save+0x10/0x10 [ 533.594015][T10760] ? stack_depot_save_flags+0x27/0x9f0 [ 533.594031][T10760] ? __lock_acquire+0x5c0/0x1f40 [ 533.594068][T10760] ? proc_coredump_connector+0x2d3/0x4f0 [ 533.594080][T10760] ? __pfx_proc_coredump_connector+0x10/0x10 [ 533.594096][T10760] ? rcu_is_watching+0x13/0xc0 [ 533.594115][T10760] get_signal+0x1f2a/0x21e0 [ 533.594133][T10760] ? __pfx_get_signal+0x10/0x10 [ 533.594149][T10760] arch_do_signal_or_restart+0x91/0x7e0 [ 533.594167][T10760] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 533.594193][T10760] irqentry_exit+0x402/0xa10 [ 533.594207][T10760] asm_exc_page_fault+0x26/0x30 [ 533.594218][T10760] RIP: 0033:0x7f407e39e161 [ 533.594228][T10760] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 533.594239][T10760] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 533.594249][T10760] RAX: 0000000000000000 RBX: 00007f407e626090 RCX: 00007f407e39e159 [ 533.594255][T10760] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 533.594262][T10760] RBP: 00007f407e43506b R08: 0000000000000000 R09: 0000000000000000 [ 533.594268][T10760] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 533.594274][T10760] R13: 00007f407e626128 R14: 00007f407e626090 R15: 00007ffcfa6ce638 [ 533.594289][T10760] [ 533.594392][T10760] memory: usage 307200kB, limit 307200kB, failcnt 33329 [ 533.594400][T10760] memory+swap: usage 408924kB, limit 9007199254740988kB, failcnt 0 [ 533.594406][T10760] kmem: usage 3164kB, limit 9007199254740988kB, failcnt 0 [ 533.594412][T10760] Memory cgroup stats for /syz3: [ 533.594496][T10760] cache 311062528 [ 533.594501][T10760] rss 249856 [ 533.594505][T10760] rss_huge 0 [ 533.594509][T10760] shmem 311054336 [ 533.594512][T10760] mapped_file 193335296 [ 533.594516][T10760] dirty 4096 [ 533.594520][T10760] writeback 0 [ 533.594524][T10760] workingset_refault_anon 1340 [ 533.594528][T10760] workingset_refault_file 467 [ 533.594532][T10760] swap 104165376 [ 533.594536][T10760] swapcached 115879936 [ 533.594540][T10760] pgpgin 1269514 [ 533.594544][T10760] pgpgout 1193508 [ 533.594547][T10760] pgfault 424751 [ 533.594551][T10760] pgmajfault 196 [ 533.594555][T10760] inactive_anon 132427776 [ 533.594559][T10760] active_anon 178876416 [ 533.594563][T10760] inactive_file 0 [ 533.594567][T10760] active_file 0 [ 533.594570][T10760] unevictable 0 [ 533.594574][T10760] hierarchical_memory_limit 314572800 [ 533.594578][T10760] hierarchical_memsw_limit 9223372036854771712 [ 533.594583][T10760] total_cache 311062528 [ 533.594587][T10760] total_rss 249856 [ 533.594591][T10760] total_rss_huge 0 [ 533.594595][T10760] total_shmem 311054336 [ 533.594599][T10760] total_mapped_file 193335296 [ 533.594603][T10760] total_dirty 4096 [ 533.594606][T10760] total_writeback 0 [ 533.594610][T10760] total_workingset_refault_anon 1340 [ 533.594615][T10760] total_workingset_refault_file 467 [ 533.594619][T10760] total_swap 104165376 [ 533.594623][T10760] total_swapcached 115879936 [ 533.594627][T10760] total_pgpgin 1269514 [ 533.594631][T10760] total_pgpgout 1193508 [ 533.594635][T10760] total_pgfault 424751 [ 533.594638][T10760] total_pgmajfault 196 [ 533.594642][T10760] total_inactive_anon 132427776 [ 533.594647][T10760] total_active_anon 178876416 [ 533.594651][T10760] total_inactive_file 0 [ 533.594655][T10760] total_active_file 0 [ 533.594658][T10760] total_unevictable 0 [ 533.594662][T10760] anon_cost 0 [ 533.594666][T10760] file_cost 0 [ 533.594670][T10760] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1155,pid=10518,uid=0 [ 533.595054][T10760] Memory cgroup out of memory: Killed process 10518 (syz.3.1155) total-vm:153464kB, anon-rss:0kB, file-rss:0kB, shmem-rss:107304kB, UID:0 pgtables:232kB oom_score_adj:0 [ 534.526535][ T31] audit: type=1400 audit(1790641501.840:1749): avc: denied { write } for pid=10727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 534.527530][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.584008][T10760] syz.3.1221 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 534.584032][T10760] CPU: 1 UID: 0 PID: 10760 Comm: syz.3.1221 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.584047][T10760] Tainted: [L]=SOFTLOCKUP [ 534.584051][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 534.584057][T10760] Call Trace: [ 534.584062][T10760] [ 534.584066][T10760] dump_stack_lvl+0x100/0x190 [ 534.584087][T10760] dump_header+0xfb/0x606 [ 534.584101][T10760] oom_kill_process.cold+0xd/0x380 [ 534.584114][T10760] out_of_memory+0x340/0x14f0 [ 534.584133][T10760] ? __pfx_out_of_memory+0x10/0x10 [ 534.584166][T10760] mem_cgroup_out_of_memory+0xc6/0x130 [ 534.584184][T10760] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 534.584197][T10760] ? find_held_lock+0x2b/0x80 [ 534.584216][T10760] ? do_raw_spin_unlock+0x145/0x1e0 [ 534.584232][T10760] ? _raw_spin_unlock+0x28/0x50 [ 534.584250][T10760] try_charge_memcg+0x783/0xf60 [ 534.584264][T10760] ? __pfx_try_charge_memcg+0x10/0x10 [ 534.584281][T10760] ? find_held_lock+0x2b/0x80 [ 534.584297][T10760] ? rcu_read_unlock+0x17/0x60 [ 534.584307][T10760] ? rcu_read_unlock+0x17/0x60 [ 534.584318][T10760] ? find_held_lock+0x2b/0x80 [ 534.584335][T10760] ? rcu_read_unlock+0x17/0x60 [ 534.584348][T10760] charge_memcg+0x1ae/0x210 [ 534.584359][T10760] __mem_cgroup_charge+0x2b/0x1c0 [ 534.584371][T10760] shmem_alloc_and_add_folio+0x451/0xd40 [ 534.584393][T10760] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 534.584412][T10760] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 534.584433][T10760] shmem_get_folio_gfp+0x75b/0x1980 [ 534.584454][T10760] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 534.584473][T10760] ? vm_normal_page+0x1d1/0x380 [ 534.584487][T10760] ? __pfx_vm_normal_page+0x10/0x10 [ 534.584504][T10760] shmem_write_begin+0x1a4/0x420 [ 534.584516][T10760] ? __pfx_shmem_write_begin+0x10/0x10 [ 534.584527][T10760] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 534.584543][T10760] generic_perform_write+0x292/0xa40 [ 534.584558][T10760] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 534.584574][T10760] ? __pfx_generic_perform_write+0x10/0x10 [ 534.584591][T10760] ? file_update_time_flags+0x38c/0x520 [ 534.584604][T10760] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 534.584616][T10760] shmem_file_write_iter+0x10e/0x140 [ 534.584630][T10760] __kernel_write_iter+0x2ac/0x930 [ 534.584644][T10760] ? __pfx___kernel_write_iter+0x10/0x10 [ 534.584657][T10760] ? __up_read+0x333/0x980 [ 534.584674][T10760] ? dump_user_range+0x65e/0xad0 [ 534.584691][T10760] dump_user_range+0x3f9/0xad0 [ 534.584706][T10760] ? __pfx_dump_user_range+0x10/0x10 [ 534.584724][T10760] ? __pfx_writenote+0x10/0x10 [ 534.584737][T10760] ? elf_core_dump+0x1f25/0x3d20 [ 534.584754][T10760] elf_core_dump+0x2d68/0x3d20 [ 534.584775][T10760] ? __pfx_elf_core_dump+0x10/0x10 [ 534.584788][T10760] ? kasan_save_stack+0x3f/0x50 [ 534.584801][T10760] ? kasan_save_stack+0x30/0x50 [ 534.584814][T10760] ? kasan_save_track+0x14/0x30 [ 534.584827][T10760] ? __kasan_kmalloc+0xaa/0xb0 [ 534.584839][T10760] ? vfs_coredump+0x21f6/0x54a0 [ 534.584851][T10760] ? get_signal+0x1f2a/0x21e0 [ 534.584862][T10760] ? arch_do_signal_or_restart+0x91/0x7e0 [ 534.584882][T10760] ? 0xffffffffff600000 [ 534.584908][T10760] ? lock_acquire+0x1d1/0x380 [ 534.584920][T10760] ? get_signal+0x1f2a/0x21e0 [ 534.584943][T10760] ? vfs_coredump+0x281a/0x54a0 [ 534.584962][T10760] vfs_coredump+0x281a/0x54a0 [ 534.584980][T10760] ? __pfx_vfs_coredump+0x10/0x10 [ 534.584992][T10760] ? __lock_acquire+0x5c0/0x1f40 [ 534.585008][T10760] ? __lock_acquire+0x5c0/0x1f40 [ 534.585022][T10760] ? lock_acquire+0x1d1/0x380 [ 534.585034][T10760] ? unwind_next_frame+0xbd/0x2090 [ 534.585053][T10760] ? lock_acquire+0x1d1/0x380 [ 534.585068][T10760] ? bpf_ksym_find+0x128/0x1c0 [ 534.585079][T10760] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 534.585096][T10760] ? arch_stack_walk+0xa6/0xf0 [ 534.585115][T10760] ? __sigqueue_free+0xbe/0x2a0 [ 534.585130][T10760] ? stack_trace_save+0x8e/0xc0 [ 534.585140][T10760] ? __pfx_stack_trace_save+0x10/0x10 [ 534.585152][T10760] ? stack_depot_save_flags+0x27/0x9f0 [ 534.585168][T10760] ? __lock_acquire+0x5c0/0x1f40 [ 534.585209][T10760] ? proc_coredump_connector+0x2d3/0x4f0 [ 534.585221][T10760] ? __pfx_proc_coredump_connector+0x10/0x10 [ 534.585237][T10760] ? rcu_is_watching+0x13/0xc0 [ 534.585255][T10760] get_signal+0x1f2a/0x21e0 [ 534.585273][T10760] ? __pfx_get_signal+0x10/0x10 [ 534.585289][T10760] arch_do_signal_or_restart+0x91/0x7e0 [ 534.585307][T10760] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 534.585333][T10760] irqentry_exit+0x402/0xa10 [ 534.585346][T10760] asm_exc_page_fault+0x26/0x30 [ 534.585357][T10760] RIP: 0033:0x7f407e39e161 [ 534.585367][T10760] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 534.585377][T10760] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 534.585387][T10760] RAX: 0000000000000000 RBX: 00007f407e626090 RCX: 00007f407e39e159 [ 534.585393][T10760] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 534.585400][T10760] RBP: 00007f407e43506b R08: 0000000000000000 R09: 0000000000000000 [ 534.585406][T10760] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 534.585412][T10760] R13: 00007f407e626128 R14: 00007f407e626090 R15: 00007ffcfa6ce638 [ 534.585427][T10760] [ 534.585431][T10760] memory: usage 307200kB, limit 307200kB, failcnt 35746 [ 534.585438][T10760] memory+swap: usage 408924kB, limit 9007199254740988kB, failcnt 0 [ 534.585445][T10760] kmem: usage 3176kB, limit 9007199254740988kB, failcnt 0 [ 534.585451][T10760] Memory cgroup stats for /syz3: [ 534.585521][T10760] cache 311066624 [ 534.585525][T10760] rss 249856 [ 534.585529][T10760] rss_huge 0 [ 534.585533][T10760] shmem 311058432 [ 534.585536][T10760] mapped_file 193331200 [ 534.585540][T10760] dirty 4096 [ 534.585544][T10760] writeback 0 [ 534.585547][T10760] workingset_refault_anon 1340 [ 534.585551][T10760] workingset_refault_file 467 [ 534.585555][T10760] swap 104165376 [ 534.585559][T10760] swapcached 115879936 [ 534.585563][T10760] pgpgin 1269515 [ 534.585567][T10760] pgpgout 1193510 [ 534.585571][T10760] pgfault 424751 [ 534.585574][T10760] pgmajfault 196 [ 534.585578][T10760] inactive_anon 205848576 [ 534.585582][T10760] active_anon 105459712 [ 534.585586][T10760] inactive_file 0 [ 534.585589][T10760] active_file 8192 [ 534.585593][T10760] unevictable 0 [ 534.585597][T10760] hierarchical_memory_limit 314572800 [ 534.585601][T10760] hierarchical_memsw_limit 9223372036854771712 [ 534.585606][T10760] total_cache 311066624 [ 534.585610][T10760] total_rss 249856 [ 534.585613][T10760] total_rss_huge 0 [ 534.585617][T10760] total_shmem 311058432 [ 534.585621][T10760] total_mapped_file 193331200 [ 534.585625][T10760] total_dirty 4096 [ 534.585629][T10760] total_writeback 0 [ 534.585633][T10760] total_workingset_refault_anon 1340 [ 534.585637][T10760] total_workingset_refault_file 467 [ 534.585641][T10760] total_swap 104165376 [ 534.585645][T10760] total_swapcached 115879936 [ 534.585649][T10760] total_pgpgin 1269515 [ 534.585653][T10760] total_pgpgout 1193510 [ 534.585657][T10760] total_pgfault 424751 [ 534.585661][T10760] total_pgmajfault 196 [ 534.585665][T10760] total_inactive_anon 205848576 [ 534.585669][T10760] total_active_anon 105459712 [ 534.585675][T10760] total_inactive_file 0 [ 534.585679][T10760] total_active_file 8192 [ 534.585682][T10760] total_unevictable 0 [ 534.585686][T10760] anon_cost 0 [ 534.585690][T10760] file_cost 0 [ 534.585693][T10760] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1221,pid=10760,uid=0 [ 534.586098][T10760] Memory cgroup out of memory: Killed process 10760 (syz.3.1221) total-vm:202740kB, anon-rss:1432kB, file-rss:20548kB, shmem-rss:81496kB, UID:0 pgtables:276kB oom_score_adj:0 [ 535.194829][ T59] veth1_macvtap: left promiscuous mode [ 535.194859][ T59] veth0_macvtap: left promiscuous mode [ 535.194943][ T59] veth1_vlan: left promiscuous mode [ 535.194996][ T59] veth0_vlan: left promiscuous mode [ 535.273417][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.575861][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.651122][ T33] oom_reaper: reaped process 10518 (syz.3.1155), now anon-rss:0kB, file-rss:0kB, shmem-rss:31520kB [ 535.848873][ T31] audit: type=1400 audit(1790641503.170:1750): avc: denied { write } for pid=10768 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.052141][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.133963][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.302369][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.769659][ T1214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.810726][ T5784] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 538.985104][ T5784] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 539.010130][ T5784] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.010321][ T5784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.353839][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.544394][ T5784] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 539.562951][ T5784] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 539.564193][ T5784] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 539.883998][ T5784] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 539.884436][ T5784] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 540.369057][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.521500][ T5784] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 540.551904][ T5784] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 540.551992][ T5784] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 540.594431][ T5784] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 540.615981][ T5784] usb 6-1: USB disconnect, device number 58 [ 540.665486][ T5784] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 540.689469][ T5784] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 540.689998][ T5784] keyspan 6-1:1.0: device disconnected [ 540.817073][ T59] team0 (unregistering): Port device team_slave_1 removed [ 540.829288][T10786] netlink: 'syz.3.1230': attribute type 10 has an invalid length. [ 540.829308][T10786] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1230'. [ 540.860396][ T59] team0 (unregistering): Port device team_slave_0 removed [ 541.135731][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 541.330712][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.426281][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.619264][ T31] audit: type=1400 audit(1790641508.930:1751): avc: denied { connect } for pid=10796 comm="syz.5.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 541.622571][ T31] audit: type=1400 audit(1790641508.940:1752): avc: denied { write } for pid=10796 comm="syz.5.1234" path="socket:[31753]" dev="sockfs" ino=31753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 542.321327][ T31] audit: type=1400 audit(1790641509.640:1753): avc: denied { mount } for pid=10799 comm="syz.3.1233" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 542.501110][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.647651][ T31] audit: type=1400 audit(1790641509.950:1754): avc: denied { ioctl } for pid=10810 comm="syz.6.1227" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31590 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 542.774538][ T59] IPVS: stop unused estimator thread 0... [ 542.851382][ T31] audit: type=1400 audit(1790641510.170:1755): avc: denied { bind } for pid=10815 comm="syz.3.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 542.851692][ T31] audit: type=1400 audit(1790641510.170:1756): avc: denied { node_bind } for pid=10815 comm="syz.3.1237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 543.038981][ T863] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 543.074877][ T31] audit: type=1400 audit(1790641510.390:1757): avc: denied { create } for pid=10815 comm="syz.3.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 543.175772][ T31] audit: type=1400 audit(1790641510.460:1758): avc: denied { getopt } for pid=10810 comm="syz.6.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 543.175933][ T31] audit: type=1400 audit(1790641510.470:1759): avc: denied { setopt } for pid=10810 comm="syz.6.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 543.176057][ T31] audit: type=1400 audit(1790641510.490:1760): avc: denied { connect } for pid=10810 comm="syz.6.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 543.258893][T10825] hub 8-0:1.0: USB hub found [ 543.261593][T10825] hub 8-0:1.0: 1 port detected [ 543.478750][ T863] usb 6-1: device descriptor read/64, error -71 [ 543.568980][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.739560][ T863] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 544.448149][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.538703][ T863] usb 6-1: device descriptor read/64, error -71 [ 544.619219][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.652856][ T863] usb usb6-port1: attempt power cycle [ 544.900928][T10841] netlink: del zone limit has 4 unknown bytes [ 545.319347][ T863] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 545.339388][ T863] usb 6-1: device descriptor read/8, error -71 [ 545.578681][ T863] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 545.616863][ T863] usb 6-1: device descriptor read/8, error -71 [ 545.650051][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.684282][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 545.719031][ T863] usb usb6-port1: unable to enumerate USB device [ 546.709330][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.731202][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 546.731218][ T31] audit: type=1400 audit(1790641514.050:1765): avc: denied { mount } for pid=10852 comm="syz.3.1243" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 547.076015][ T31] audit: type=1400 audit(1790641514.390:1766): avc: denied { write } for pid=10867 comm="syz.5.1247" name="ip_mr_vif" dev="proc" ino=4026533591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 547.155777][ T31] audit: type=1400 audit(1790641514.470:1767): avc: denied { append } for pid=10867 comm="syz.5.1247" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 547.338755][ T31] audit: type=1400 audit(1790641514.610:1768): avc: denied { read write } for pid=10867 comm="syz.5.1247" name="sg0" dev="devtmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 547.339086][ T31] audit: type=1400 audit(1790641514.610:1769): avc: denied { ioctl open } for pid=10867 comm="syz.5.1247" path="/dev/sg0" dev="devtmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 547.339286][ T31] audit: type=1400 audit(1790641514.620:1770): avc: denied { connect } for pid=10867 comm="syz.5.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 547.339450][ T31] audit: type=1400 audit(1790641514.620:1771): avc: denied { shutdown } for pid=10867 comm="syz.5.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 547.339771][ T31] audit: type=1400 audit(1790641514.620:1772): avc: denied { ioctl } for pid=10867 comm="syz.5.1247" path="socket:[31839]" dev="sockfs" ino=31839 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 547.732219][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.148835][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.528453][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.808693][ T31] audit: type=1400 audit(1790641516.120:1773): avc: denied { write } for pid=10857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.818374][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.953054][ T31] audit: type=1400 audit(1790641516.270:1774): avc: denied { write } for pid=10886 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.038324][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 549.319984][T10893] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 549.334493][ T5784] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 549.657172][ T5784] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 549.690848][T10893] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 549.716483][ T5784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.884393][ T5784] usb 6-1: config 0 descriptor?? [ 549.892321][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.953522][ T5784] cp210x 6-1:0.0: cp210x converter detected [ 550.371978][ T5784] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 550.659557][ T30] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 550.835924][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 550.837334][ T30] usb 7-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 550.889429][ T30] usb 7-1: config 1 descriptor has 1 excess byte, ignoring [ 550.939122][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.939301][ T30] usb 7-1: Product: syz [ 550.939598][ T30] usb 7-1: Manufacturer: syz [ 550.939919][ T30] usb 7-1: SerialNumber: syz [ 551.077034][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.175908][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.219923][T10911] netlink: del zone limit has 4 unknown bytes [ 551.224503][ T5784] usb 6-1: cp210x converter now attached to ttyUSB0 [ 551.227792][ T5784] usb 6-1: USB disconnect, device number 63 [ 551.235122][ T5784] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 551.243529][ T5784] cp210x 6-1:0.0: device disconnected [ 551.357921][ T30] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 552.404229][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.451208][ T30] usb 7-1: USB disconnect, device number 20 [ 552.646489][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 552.646505][ T31] audit: type=1400 audit(1790641519.960:1779): avc: denied { search } for pid=10944 comm="syz.2.1256" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 552.651236][ T31] audit: type=1400 audit(1790641519.970:1780): avc: denied { write } for pid=10944 comm="syz.2.1256" name="max_block_size" dev="nfsd" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 552.651525][ T31] audit: type=1400 audit(1790641519.970:1781): avc: denied { open } for pid=10944 comm="syz.2.1256" path="/253/nfsd/max_block_size" dev="nfsd" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 552.651723][T10948] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1257'. [ 552.651753][T10948] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 552.658346][ T31] audit: type=1400 audit(1790641519.970:1782): avc: denied { ioctl } for pid=10944 comm="syz.2.1256" path="/253/nfsd/max_block_size" dev="nfsd" ino=14 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 552.870135][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.957586][ T31] audit: type=1400 audit(1790641520.270:1783): avc: denied { write } for pid=10898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.062127][ T5784] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 553.112721][T10955] jffs2: notice: (10955) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 553.158698][ T30] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 553.185697][ T31] audit: type=1400 audit(1790641520.500:1784): avc: denied { write } for pid=10960 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.212681][ T5784] usb 3-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=4d.8b [ 553.215177][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 553.215203][ T5784] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 553.215224][ T5784] usb 3-1: config 0 interface 0 altsetting ** replaying previous printk message ** [ 553.215224][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 122, changing to 10 [ 553.215249][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 24947, setting to 1024 [ 553.215282][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.217574][ T5784] usb 3-1: config 0 descriptor?? [ 553.223861][ T5784] smsusb:smsusb_probe: board id=8, interface number 0 [ 553.231450][ T5784] smsusb:siano_media_device_register: media controller created [ 553.237283][ T5784] usb 3-1: BOGUS urb xfer, pipe 3 != type 1 [ 553.237320][ T5784] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 553.237335][ T5784] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 553.255586][ T5784] ------------[ cut here ]------------ [ 553.255617][ T5784] !PageLargeKmalloc(page) [ 553.255624][ T5784] WARNING: mm/slub.c:6733 at free_large_kmalloc+0xbf/0x100, CPU#0: kworker/0:7/5784 [ 553.303037][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 553.329120][ T30] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 553.329933][ T30] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 553.329952][ T30] usb 6-1: config 0 has no interface number 0 [ 553.329981][ T30] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 553.331989][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.332007][ T30] usb 6-1: Product: syz [ 553.332020][ T30] usb 6-1: Manufacturer: syz [ 553.332032][ T30] usb 6-1: SerialNumber: syz [ 553.348663][ T5705] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 553.419894][ T863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.434158][ T5784] Modules linked in: [ 553.438068][ T5784] CPU: 0 UID: 0 PID: 5784 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.449139][ T5784] Tainted: [L]=SOFTLOCKUP [ 553.453458][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 553.463542][ T5784] Workqueue: usb_hub_wq hub_event [ 553.468630][ T5784] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 553.474363][ T5784] Code: 28 90 0f 0b 90 80 3d 38 f6 b9 0e 00 0f 84 c4 1f b1 fe 48 8b 74 24 28 48 89 ef e8 cc 50 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 fe 9f 37 8e 5b 5d 41 5c 41 [ 553.495046][ T5784] RSP: 0018:ffffc90004a5ecd8 EFLAGS: 00010202 [ 553.496308][ T30] usb 6-1: config 0 descriptor?? [ 553.507139][ T30] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 553.515037][ T5784] RAX: 00000000000000ff RBX: ffffea0001563880 RCX: 000000000000002e [ 553.523109][ T5784] RDX: 0000000000000000 RSI: ffff8880558e2000 RDI: ffffea0001563880 [ 553.531128][ T5784] RBP: ffff8880558e2000 R08: 0000000000000005 R09: 0000000000000000 [ 553.539147][ T5784] R10: ffffffffffffffff R11: ffffffff81763b0a R12: ffff888022ee5000 [ 553.547124][ T5784] R13: ffff88807b0d3000 R14: dffffc0000000000 R15: ffff888022ee50f0 [ 553.555189][ T5784] FS: 0000000000000000(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000 [ 553.564190][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.570832][ T5784] CR2: 00007f9fa0531ec8 CR3: 000000005a6af000 CR4: 00000000003526f0 [ 553.578864][ T5784] Call Trace: [ 553.582147][ T5784] [ 553.585087][ T5784] usb_free_urb.part.0+0xf8/0x110 [ 553.590180][ T5784] usb_free_urb+0x1f/0x30 [ 553.594514][ T5784] smsusb_term_device+0x108/0x200 [ 553.599603][ T5784] smsusb_init_device+0xb4e/0xbb0 [ 553.605533][ T5784] ? __pfx_smsusb_init_device+0x10/0x10 [ 553.611750][ T5784] ? kfree+0x1e5/0x6d0 [ 553.615834][ T5784] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 553.621488][ T5784] ? usb_hcd_reset_endpoint+0xaf/0x240 [ 553.626979][ T5784] smsusb_probe+0xd7f/0xe1f [ 553.631552][ T5784] ? __pfx_smsusb_probe+0x10/0x10 [ 553.636611][ T5784] ? mark_held_locks+0x40/0x70 [ 553.641431][ T5784] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 553.641995][ T5705] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 553.644411][ T5705] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 553.644432][ T5705] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 553.649882][ T5705] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.649902][ T5705] usb 8-1: Product: syz [ 553.649915][ T5705] usb 8-1: Manufacturer: syz [ 553.649926][ T5705] usb 8-1: SerialNumber: syz [ 553.696902][ T5784] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 553.702785][ T5784] ? __pm_runtime_set_status+0x13c/0x970 [ 553.709370][ T5784] usb_probe_interface+0x386/0x9b0 [ 553.714500][ T5784] ? __pfx_usb_probe_interface+0x10/0x10 [ 553.720795][ T5784] ? kernfs_put+0x3f/0x60 [ 553.725155][ T5784] ? sysfs_create_link+0x68/0xc0 [ 553.730168][ T5784] ? __pfx_usb_probe_interface+0x10/0x10 [ 553.735809][ T5784] really_probe+0x241/0xa60 [ 553.740381][ T5784] __driver_probe_device+0x210/0x460 [ 553.745676][ T5784] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 553.751604][ T5784] driver_probe_device+0x4a/0x140 [ 553.756666][ T5784] __device_attach_driver+0x1df/0x320 [ 553.762127][ T5784] ? __pfx___device_attach_driver+0x10/0x10 [ 553.768022][ T5784] bus_for_each_drv+0x159/0x1e0 [ 553.772918][ T5784] ? __pfx_bus_for_each_drv+0x10/0x10 [ 553.778285][ T5784] ? lockdep_hardirqs_on+0x7d/0x110 [ 553.783528][ T5784] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 553.789376][ T5784] __device_attach+0x1e4/0x4d0 [ 553.794136][ T5784] ? __pfx___device_attach+0x10/0x10 [ 553.799439][ T5784] ? do_raw_spin_unlock+0x145/0x1e0 [ 553.804650][ T5784] device_initial_probe+0xaf/0xd0 [ 553.810484][ T5784] bus_probe_device+0x64/0x160 [ 553.815255][ T5784] device_add+0x121d/0x1970 [ 553.820372][ T5784] ? __pfx_device_add+0x10/0x10 [ 553.825240][ T5784] ? mark_held_locks+0x40/0x70 [ 553.830060][ T5784] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 553.835887][ T5784] usb_set_configuration+0xd97/0x1c60 [ 553.841336][ T5784] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 553.847407][ T5784] usb_generic_driver_probe+0xa1/0xe0 [ 553.852833][ T5784] usb_probe_device+0xef/0x400 [ 553.857596][ T5784] ? __pfx_usb_probe_device+0x10/0x10 [ 553.862514][ T5705] usb 8-1: Limiting number of CPorts to U8_MAX [ 553.869181][ T5784] really_probe+0x241/0xa60 [ 553.873697][ T5784] __driver_probe_device+0x210/0x460 [ 553.879020][ T5784] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 553.884840][ T5784] driver_probe_device+0x4a/0x140 [ 553.890031][ T5784] __device_attach_driver+0x1df/0x320 [ 553.895414][ T5784] ? __pfx___device_attach_driver+0x10/0x10 [ 553.901364][ T5784] bus_for_each_drv+0x159/0x1e0 [ 553.906218][ T5784] ? __pfx_bus_for_each_drv+0x10/0x10 [ 553.912361][ T5784] ? lockdep_hardirqs_on+0x7d/0x110 [ 553.917553][ T5784] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 553.924013][ T5784] __device_attach+0x1e4/0x4d0 [ 553.928834][ T5784] ? __pfx___device_attach+0x10/0x10 [ 553.934130][ T5784] ? do_raw_spin_unlock+0x145/0x1e0 [ 553.939382][ T5784] device_initial_probe+0xaf/0xd0 [ 553.944420][ T5784] bus_probe_device+0x64/0x160 [ 553.949246][ T5784] device_add+0x121d/0x1970 [ 553.953758][ T5784] ? __pfx_device_add+0x10/0x10 [ 553.958641][ T5784] ? usb_detect_static_quirks+0x335/0x3e0 [ 553.964371][ T5784] usb_new_device.part.0+0xcc2/0x1686 [ 553.969789][ T5784] ? do_raw_spin_lock+0x128/0x260 [ 553.974818][ T5784] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 553.980660][ T5784] ? mark_held_locks+0x40/0x70 [ 553.985424][ T5784] hub_event.cold+0x1e3/0xe90 [ 553.990157][ T5784] ? __pfx_hub_event+0x10/0x10 [ 553.994926][ T5784] ? __bfs+0x230/0x2a0 [ 553.999043][ T5784] ? lock_acquire+0x1d1/0x380 [ 554.003720][ T5784] ? process_one_work+0xa2c/0x1b10 [ 554.008885][ T5784] ? process_one_work+0x906/0x1b10 [ 554.014671][ T5784] ? process_one_work+0x906/0x1b10 [ 554.020465][ T5784] process_one_work+0xac7/0x1b10 [ 554.025435][ T5784] ? __pfx_process_one_work+0x10/0x10 [ 554.030853][ T5784] ? lock_acquire+0x1d1/0x380 [ 554.035552][ T5784] ? __pfx_hub_event+0x10/0x10 [ 554.040354][ T5784] worker_thread+0x5ef/0xe50 [ 554.044955][ T5784] ? __pfx_worker_thread+0x10/0x10 [ 554.050128][ T5784] ? kthread+0x13a/0x450 [ 554.054368][ T5784] ? __pfx_worker_thread+0x10/0x10 [ 554.059501][ T5784] kthread+0x373/0x450 [ 554.063574][ T5784] ? __pfx_kthread+0x10/0x10 [ 554.068200][ T5784] ret_from_fork+0x730/0xd60 [ 554.072849][ T5784] ? __pfx_ret_from_fork+0x10/0x10 [ 554.077969][ T5784] ? __switch_to+0x800/0x10f0 [ 554.082723][ T5784] ? __pfx_kthread+0x10/0x10 [ 554.087332][ T5784] ret_from_fork_asm+0x1a/0x30 [ 554.092190][ T5784] [ 554.095210][ T5784] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 554.102488][ T5784] CPU: 0 UID: 0 PID: 5784 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.113420][ T5784] Tainted: [L]=SOFTLOCKUP [ 554.117729][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 554.127775][ T5784] Workqueue: usb_hub_wq hub_event [ 554.132797][ T5784] Call Trace: [ 554.136060][ T5784] [ 554.138979][ T5784] dump_stack_lvl+0x100/0x190 [ 554.143651][ T5784] vpanic+0x553/0x970 [ 554.147627][ T5784] ? __pfx_vpanic+0x10/0x10 [ 554.152133][ T5784] panic+0xd1/0xe0 [ 554.155841][ T5784] ? __pfx_panic+0x10/0x10 [ 554.160248][ T5784] check_panic_on_warn.cold+0x19/0x34 [ 554.165607][ T5784] ? free_large_kmalloc+0xbf/0x100 [ 554.170707][ T5784] __warn.cold+0x191/0x318 [ 554.175110][ T5784] __report_bug+0x30f/0x440 [ 554.179593][ T5784] ? free_large_kmalloc+0xbf/0x100 [ 554.184692][ T5784] ? __pfx___report_bug+0x10/0x10 [ 554.189699][ T5784] ? lockdep_hardirqs_on+0x7d/0x110 [ 554.194878][ T5784] ? irqentry_exit+0x24d/0xa10 [ 554.199654][ T5784] ? free_large_kmalloc+0xbf/0x100 [ 554.204754][ T5784] ? free_large_kmalloc+0xbf/0x100 [ 554.209857][ T5784] report_bug+0xb3/0x220 [ 554.214100][ T5784] ? free_large_kmalloc+0xbf/0x100 [ 554.219200][ T5784] handle_bug+0x16a/0x2a0 [ 554.223519][ T5784] exc_invalid_op+0x17/0x50 [ 554.228015][ T5784] asm_exc_invalid_op+0x1a/0x20 [ 554.232849][ T5784] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 554.238559][ T5784] Code: 28 90 0f 0b 90 80 3d 38 f6 b9 0e 00 0f 84 c4 1f b1 fe 48 8b 74 24 28 48 89 ef e8 cc 50 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 fe 9f 37 8e 5b 5d 41 5c 41 [ 554.258159][ T5784] RSP: 0018:ffffc90004a5ecd8 EFLAGS: 00010202 [ 554.264210][ T5784] RAX: 00000000000000ff RBX: ffffea0001563880 RCX: 000000000000002e [ 554.272166][ T5784] RDX: 0000000000000000 RSI: ffff8880558e2000 RDI: ffffea0001563880 [ 554.280118][ T5784] RBP: ffff8880558e2000 R08: 0000000000000005 R09: 0000000000000000 [ 554.288071][ T5784] R10: ffffffffffffffff R11: ffffffff81763b0a R12: ffff888022ee5000 [ 554.296040][ T5784] R13: ffff88807b0d3000 R14: dffffc0000000000 R15: ffff888022ee50f0 [ 554.304009][ T5784] ? ret_from_fork_asm+0x1a/0x30 [ 554.308951][ T5784] usb_free_urb.part.0+0xf8/0x110 [ 554.313965][ T5784] usb_free_urb+0x1f/0x30 [ 554.318283][ T5784] smsusb_term_device+0x108/0x200 [ 554.323313][ T5784] smsusb_init_device+0xb4e/0xbb0 [ 554.328330][ T5784] ? __pfx_smsusb_init_device+0x10/0x10 [ 554.333867][ T5784] ? kfree+0x1e5/0x6d0 [ 554.337936][ T5784] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 554.343480][ T5784] ? usb_hcd_reset_endpoint+0xaf/0x240 [ 554.348934][ T5784] smsusb_probe+0xd7f/0xe1f [ 554.353428][ T5784] ? __pfx_smsusb_probe+0x10/0x10 [ 554.358433][ T5784] ? mark_held_locks+0x40/0x70 [ 554.363180][ T5784] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 554.368984][ T5784] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 554.374784][ T5784] ? __pm_runtime_set_status+0x13c/0x970 [ 554.380411][ T5784] usb_probe_interface+0x386/0x9b0 [ 554.385514][ T5784] ? __pfx_usb_probe_interface+0x10/0x10 [ 554.391130][ T5784] ? kernfs_put+0x3f/0x60 [ 554.395447][ T5784] ? sysfs_create_link+0x68/0xc0 [ 554.400374][ T5784] ? __pfx_usb_probe_interface+0x10/0x10 [ 554.405992][ T5784] really_probe+0x241/0xa60 [ 554.410486][ T5784] __driver_probe_device+0x210/0x460 [ 554.415757][ T5784] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 554.421554][ T5784] driver_probe_device+0x4a/0x140 [ 554.426569][ T5784] __device_attach_driver+0x1df/0x320 [ 554.431928][ T5784] ? __pfx___device_attach_driver+0x10/0x10 [ 554.437816][ T5784] bus_for_each_drv+0x159/0x1e0 [ 554.442654][ T5784] ? __pfx_bus_for_each_drv+0x10/0x10 [ 554.448012][ T5784] ? lockdep_hardirqs_on+0x7d/0x110 [ 554.453195][ T5784] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 554.458991][ T5784] __device_attach+0x1e4/0x4d0 [ 554.463744][ T5784] ? __pfx___device_attach+0x10/0x10 [ 554.469023][ T5784] ? do_raw_spin_unlock+0x145/0x1e0 [ 554.474212][ T5784] device_initial_probe+0xaf/0xd0 [ 554.479225][ T5784] bus_probe_device+0x64/0x160 [ 554.483982][ T5784] device_add+0x121d/0x1970 [ 554.488492][ T5784] ? __pfx_device_add+0x10/0x10 [ 554.493348][ T5784] ? mark_held_locks+0x40/0x70 [ 554.498116][ T5784] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 554.503920][ T5784] usb_set_configuration+0xd97/0x1c60 [ 554.509296][ T5784] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 554.515355][ T5784] usb_generic_driver_probe+0xa1/0xe0 [ 554.520717][ T5784] usb_probe_device+0xef/0x400 [ 554.525463][ T5784] ? __pfx_usb_probe_device+0x10/0x10 [ 554.530908][ T5784] really_probe+0x241/0xa60 [ 554.535403][ T5784] __driver_probe_device+0x210/0x460 [ 554.540686][ T5784] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 554.546487][ T5784] driver_probe_device+0x4a/0x140 [ 554.551513][ T5784] __device_attach_driver+0x1df/0x320 [ 554.556877][ T5784] ? __pfx___device_attach_driver+0x10/0x10 [ 554.562772][ T5784] bus_for_each_drv+0x159/0x1e0 [ 554.567613][ T5784] ? __pfx_bus_for_each_drv+0x10/0x10 [ 554.572968][ T5784] ? lockdep_hardirqs_on+0x7d/0x110 [ 554.578149][ T5784] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 554.583948][ T5784] __device_attach+0x1e4/0x4d0 [ 554.588720][ T5784] ? __pfx___device_attach+0x10/0x10 [ 554.593999][ T5784] ? do_raw_spin_unlock+0x145/0x1e0 [ 554.599197][ T5784] device_initial_probe+0xaf/0xd0 [ 554.604210][ T5784] bus_probe_device+0x64/0x160 [ 554.608959][ T5784] device_add+0x121d/0x1970 [ 554.613456][ T5784] ? __pfx_device_add+0x10/0x10 [ 554.618296][ T5784] ? usb_detect_static_quirks+0x335/0x3e0 [ 554.624017][ T5784] usb_new_device.part.0+0xcc2/0x1686 [ 554.629391][ T5784] ? do_raw_spin_lock+0x128/0x260 [ 554.634406][ T5784] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 554.640206][ T5784] ? mark_held_locks+0x40/0x70 [ 554.644958][ T5784] hub_event.cold+0x1e3/0xe90 [ 554.649643][ T5784] ? __pfx_hub_event+0x10/0x10 [ 554.654403][ T5784] ? __bfs+0x230/0x2a0 [ 554.658456][ T5784] ? lock_acquire+0x1d1/0x380 [ 554.663116][ T5784] ? process_one_work+0xa2c/0x1b10 [ 554.668306][ T5784] ? process_one_work+0x906/0x1b10 [ 554.673406][ T5784] ? process_one_work+0x906/0x1b10 [ 554.678514][ T5784] process_one_work+0xac7/0x1b10 [ 554.683449][ T5784] ? __pfx_process_one_work+0x10/0x10 [ 554.688813][ T5784] ? lock_acquire+0x1d1/0x380 [ 554.693482][ T5784] ? __pfx_hub_event+0x10/0x10 [ 554.698420][ T5784] worker_thread+0x5ef/0xe50 [ 554.702997][ T5784] ? __pfx_worker_thread+0x10/0x10 [ 554.708096][ T5784] ? kthread+0x13a/0x450 [ 554.712325][ T5784] ? __pfx_worker_thread+0x10/0x10 [ 554.717425][ T5784] kthread+0x373/0x450 [ 554.721494][ T5784] ? __pfx_kthread+0x10/0x10 [ 554.726084][ T5784] ret_from_fork+0x730/0xd60 [ 554.730659][ T5784] ? __pfx_ret_from_fork+0x10/0x10 [ 554.735753][ T5784] ? __switch_to+0x800/0x10f0 [ 554.740416][ T5784] ? __pfx_kthread+0x10/0x10 [ 554.744998][ T5784] ret_from_fork_asm+0x1a/0x30 [ 554.749755][ T5784] [ 554.752967][ T5784] Kernel Offset: disabled [ 554.757276][ T5784] Rebooting in 86400 seconds..