last executing test programs: 24m2.796138464s ago: executing program 32 (id=813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x10, 0x1, 0x0, 0x8f}, 0x3, 0x2, [{0x5, 0x1, 0xffffffc0, 0x800, 0x9, 0xfffff77a}]}, [{0x2, 0x765, 0x800, 0x3ff, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x6, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x2, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x8, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffffff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3000, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x800, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x4, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x80, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x5, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x5}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x9, 0x8f24}, {0x8000, 0x0, 0x6e73, 0x9, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x8, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0x8, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x200, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xf, 0x2, 0x3, 0x2, 0x1, 0xd3}, {0x8, 0xdf3, 0x2, 0xfffffffc, 0x3}, {0xfffffffd, 0x2, 0xff, 0xd7c, 0xffffff7c, 0xd}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x8, 0x6612, 0xfffffff8, 0x3, 0x99, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x6, 0x4, 0x47, 0x2}, {0x3, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x200, 0x0, 0x7a5e, 0x80000000, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x6b10cf10, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0xb1b, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0x5, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x4}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x9, 0x2}, {0xffff, 0xc23, 0x0, 0x8, 0xfff, 0x1ff}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x0, 0xf, 0x5}, {0x1000, 0x7, 0x1, 0x1, 0x4, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0x1, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xb2f, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xfffffffc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x9, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x4, 0x0, 0x800, 0x7}, {0x8, 0x80, 0x1, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0xb5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x602, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x101, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x8, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1ff, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x7}, {0x2, 0x7f, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x7}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x1, 0xfffffffe, 0x1, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0x8000, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x10, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x5, 0x7}, {0x5, 0x3, 0x3882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x5}, {0x5}, {0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x6c, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a, 0x1, 0x1, 0x81, 0x0, 0xb9, "", [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0x2a, {{0x7, 0x24, 0x6, 0x0, 0x0, '@0'}, {0x5, 0x24, 0x0, 0xfffa}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x200, 0x80, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x472e, 0x810d}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xe, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x5, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xe, 0x3, 0x51}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0xff, 0x1}}}}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0xf, 0xd, 0x2, 0xc7, 0x1}, 0x4d, &(0x7f00000002c0)={0x5, 0xf, 0x4d, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x2, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0xd, 0xff00, 0x8}, @wireless={0xb, 0x10, 0x1, 0x2, 0x97, 0x80, 0x4, 0x8, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x2, 0x7, 0x4f5}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x9, 0xe10f, 0x8, [0xffff00, 0xffffc0, 0xff0018, 0xf, 0x3f00]}]}, 0x9, [{0x33, &(0x7f0000000340)=@string={0x33, 0x3, "12caaf792fe71d5f46fa64c43c1536d7fc254260de743b3f334d4a9fb6eda9f6dc0e739147a75b66ef85f63289c4e79439"}}, {0x101, &(0x7f0000000380)=@string={0x101, 0x3, "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"}}, {0x25, &(0x7f0000000500)=@string={0x25, 0x3, "8c821d509a2f549c2efa0149887bf414884cd07cd861785af1bf829c8b6703ec8002c2"}}, {0xb9, &(0x7f0000000780)=@string={0xb9, 0x3, "786178bc8045cbce908540756e585168b6bd6eff5bed09b42afbc7a428f6c0f7b47f418813dcda16b280338850762bf396bf9ee2170110218d5489a41169e39cffc6c55adc4cdbb92e08f16fe6631eb4eb05e6b24ced4eee2e07fd1e39e0064ed844a82d07efad10d94610135f7f6c3227a0a98ecdee68e2afdcb673ec70e457bb35d6d38864043615df3fa71e0d7e902f77fca38603945150620ad85c5359d929cd624096a84c4b80085a9ef897f84dc1ab95c29e96ea"}}, {0xc4, &(0x7f0000000840)=@string={0xc4, 0x3, "a19a2891211f14654f21a7a8554ddfd40ee25347c7ddaf696acbe05e72d637c30624ce7e940eea4c73900e175cec7be2fe75e62e2708ec9ca32b2a5ad22b6d3faeeb2c27d320a7a0fcd16268b0bd17f9ec1ba729c956d6b3fcb492156d4673ea6c4a66c5f9fe65ca654a7200e7b4bfae396132ee142689aebd276a996fe833b17689645b38505bce7750eb971d86dd6fc5aa660745c548d1dba32d11a8fcfea4c0245715f3051f57e0d14cc351efd51500136c9f988a417225fd784a5bb856bae257"}}, {0xb2, &(0x7f0000000940)=@string={0xb2, 0x3, "11d559f23baa5303f2124276ed75aa3e918c289eb9789ffeb6febcbe8d4387893b27d5eb34f5df30b723922e1160a7bc0698b9ee4918c3122a1eaa883b3dc9d8efc9d771bdd2795161c92b8f1112988d638d3152485eee6d66edf9b5b54e42d56d67fe4c93ea3f609637386feb6d7c2c2c81b3004174aa748a642ebb630bc22c8c592757838cfeec9b766595076fe857a98786ab771826c5d3b29753bfdad5a343f6526e07309b1693654eaef367c02c"}}, {0x13, &(0x7f0000000a00)=@string={0x13, 0x3, "8205055ade8efe61e81570112ab23cf2e5"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x4c0a}}]}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323bac0c45b45602067fffffff81004e22030d00ff00289242a8002000eaa57b00090080020e1b05000000000000ff0004f0c70f000800ffffffffffffffffff0300e7ee0000000000000000020000", 0x58}], 0x1) 17m38.944213988s ago: executing program 33 (id=1595): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ffdbdf250900020073797a3000000f2008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) 17m31.69731095s ago: executing program 34 (id=1633): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0) mount$afs(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000380), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendfile(r2, r2, 0x0, 0x20ffa1) 11m25.574159475s ago: executing program 35 (id=2483): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x12b341) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x2}, 0x8) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) syz_open_dev$usbfs(&(0x7f0000000100), 0x5, 0x290600) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x2, 0x2, "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"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000003740)={0x60, 0xe, 0x8, 0x1, 0x0, 0x1, 0x0}) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) openat$incfs(r2, &(0x7f00000000c0)='.pending_reads\x00', 0x40, 0x24) 11m25.103919402s ago: executing program 4 (id=2526): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x48, 0x33, 0x57}, {0x28, 0x1, 0xf7, 0xfffff00c}, {0x6, 0x6, 0x0, 0xfffffffd}]}, 0x10) sendto$unix(r0, &(0x7f00000001c0)="5157bb57", 0x4, 0x4040800, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=0x0, @ANYBLOB="01000000000500050009000000050002000400000005000500040000000c00018008000300000400001c0001800800faff000000000000000000", @ANYRES32=0x0, @ANYBLOB="080003000200000008000300020000003c0001801400020070696d36726567300000000000000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000"], 0x90}}, 0x40) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x24040810) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x5, 0x6, {{0x2d, 0x4, 0x1, 0x0, 0xb4, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x30, 0x2, [{0x7, 0xc, "20ca2bb2ed5461a66089"}, {0x1, 0xc, "59f852b61ab03dbc8957"}, {0x2, 0x12, "a252b0d06b2d8e0862711bba20715fa5"}]}, @lsrr={0x83, 0x7, 0x4b, [@local]}, @timestamp={0x44, 0xc, 0xb9, 0x0, 0x8, [0x8414, 0x0]}, @lsrr={0x83, 0x2b, 0x7d, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback, @multicast1, @empty, @broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @lsrr={0x83, 0xf, 0x43, [@multicast2, @local, @broadcast]}, @ssrr={0x89, 0xb, 0x24, [@loopback, @local]}, @rr={0x7, 0xb, 0x5c, [@private=0xa010101, @loopback]}, @timestamp={0x44, 0x8, 0x4e, 0x0, 0x8, [0x1]}, @ra={0x94, 0x4}]}}}}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000110", @ANYRES16=r3, @ANYBLOB="00042dbd7000fcdbdf250000000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x40890) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r7, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 11m23.811581141s ago: executing program 4 (id=2529): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) (async) r0 = creat(&(0x7f00000001c0)='./nfsd\x00', 0x63) sendto$unix(r0, &(0x7f0000000240)="680634243aa129eae5bdac7465279b57f2afb4847da709a1bfadd63044139f6d9fb84c7b726365b1747a40", 0x2b, 0x41, &(0x7f00000002c0)=@file={0x1, './nfsd\x00'}, 0x6e) (async) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) ioctl$FIONCLEX(r3, 0x5450) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) (async) write(r1, &(0x7f00000000c0)='mydomain 64\n', 0xe) 11m22.160033013s ago: executing program 4 (id=2531): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00005ec000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x3, 0x33b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000100)=0xffffffffffffff78) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sysfs$2(0x2, 0x8, &(0x7f0000000180)=""/25) recvmmsg(r3, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/250, 0xfa}], 0x1}, 0xffff}], 0x1, 0x40000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) 11m20.586629945s ago: executing program 4 (id=2535): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, 0x4e24, 0x9, 0x4e23, 0x8009, 0x2, 0x80, 0x80, 0x89}, {0x1, 0x98, 0x5, 0x5, 0x1, 0x8, 0x4, 0x5}, {0xffffffffffffff22, 0xe0, 0x823}, 0x68a4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d3, 0x3c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3501, 0x1, 0x2, 0x1, 0xffff7fff, 0x3}}, 0xe8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='./sys\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3c00000058001f000307f4f9002304000a04d649080001000201000204000380050000009ddb973b91aa05797251725df7", 0x31) syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000305bfdd082e0c0007f4d40102030109022400016406200b0904ad8e02df30059e09050e124000fafa01090583"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000459000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x0, 0xa, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x34b}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 11m14.799546152s ago: executing program 4 (id=2547): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc98f64b0955508297fd52a126a7a4d0d3337b9d21c387af2e358a5c59d8289283bbb00370b41105349a3c05d3449c52e6010000000000005c17befac190ef8fa1edf7487b3c3927773a85681119f454e5d5f46cd4a19c878285915ce9145aa887dc0a417d07dfe5b5dd1a2ba1a4c0f7435a5a41d2683c561204a109eeebc8c746caaefe9aed289c47c04c6e612c5832a1669e99dca4f1e1eba2730e1491f3d1934981c488a0f09c14b714806c418f1bcc2ec5e800016f7e47a6", @ANYRES16=r2, @ANYBLOB], 0x38}}, 0x0) listen(r0, 0xc) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet(0x2, 0x1, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) write(r5, &(0x7f0000000600)='/,0x7f0000800000,0x7', 0x14) shutdown(r4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r7, &(0x7f00000005c0)=ANY=[], 0xfffffeff) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3006c016) 11m14.310548922s ago: executing program 4 (id=2548): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584"], 0x0}, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 11m14.125105852s ago: executing program 36 (id=2548): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584"], 0x0}, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 11m6.579371897s ago: executing program 5 (id=2565): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f00000000c0)=[{r0, 0x9f712fd3135d632f}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 2) 11m6.308974535s ago: executing program 5 (id=2566): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getdents64(0xffffffffffffffff, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x1, 0x7, 0x2) futex(&(0x7f000000cffc)=0x1, 0xd, 0xfffffffe, 0x0, 0x0, 0x6fd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000002}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x3970, 0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x0, 0xe}, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0x2, 0x9, "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", 0x2, 0x8, 0xc7, 0x39, 0x2, 0x7, 0x3, 0x1}}}, 0x120) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 11m4.328111917s ago: executing program 5 (id=2570): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r1, 0x4b45, 0x4) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)="aafa11", 0x3}], 0x1) 11m3.79147533s ago: executing program 5 (id=2571): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) getpeername$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) prlimit64(r0, 0x9, 0x0, &(0x7f0000000240)) io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, r3}) syz_ublk_setup_io_uring(0x5846, &(0x7f0000000440)={0x0, 0xd1e4, 0x0, 0x0, 0x125, 0x0, r3}, &(0x7f0000000340), &(0x7f0000000100), &(0x7f0000000400)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r3, 0x20, 0x0, 0x1) pipe(0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x585f, 0x400, 0x100, 0x0, 0x5, 0xa6, 0x40}, 0xc) 10m59.480650909s ago: executing program 5 (id=2584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x9, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x41, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x22800000, &(0x7f0000000280)=0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) io_setup(0xa, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, 0x0}]) 10m58.046642867s ago: executing program 5 (id=2587): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x4, 0x7, 0x6}) r2 = socket$inet6(0x10, 0x2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42801, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg(0xffffffffffffffff, 0x0, 0x0) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0) ioctl$PTP_EXTTS_REQUEST2(r11, 0xc0403d11, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x4) sendmmsg$inet(r3, &(0x7f0000000100)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 10m42.920433694s ago: executing program 37 (id=2587): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0x9}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x4, 0x7, 0x6}) r2 = socket$inet6(0x10, 0x2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42801, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r6, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg(0xffffffffffffffff, 0x0, 0x0) r11 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a00, 0x0) ioctl$PTP_EXTTS_REQUEST2(r11, 0xc0403d11, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x4) sendmmsg$inet(r3, &(0x7f0000000100)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 8m41.642499497s ago: executing program 7 (id=2959): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x3ff, 0x21c0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000001a00)=0x1ff) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfff8}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x40000002, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0xfffffffe, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x204, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x242, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x1, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x8, 0x1, 0xff, 0x3d, 0x7be, 0x5bea93c3, 0xd, 0x5, 0x2, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x3, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x84, 0x2], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0x200000bf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x0, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x6, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x33a, 0x1, 0x1, 0x3f, 0x0, @broadcast}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {r1, 0x400}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0xc054, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180000000009"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0xffffff8b) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "6d0f1c45", "340f000000004000"}, 0x28) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "3e41a5978d19d779", "e5a94f23978dd784de88505ec735f189", "d37ceffe"}, 0x28) mount(0x0, &(0x7f0000000180)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000006140)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0) madvise(&(0x7f000079d000/0x4000)=nil, 0x4000, 0x17) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="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"], 0x74}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 8m39.982185689s ago: executing program 7 (id=2963): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) faccessat(0xffffffffffffffff, 0x0, 0xd1039a5a45420abb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x4, 0x7f, 0x8000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffd}, 0x50) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000407d1e502d0000000000010902240000000080010904000002030002000921fd7f000122eb00090581031200f60000"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000900)=r4, 0x4) (async) getpid() (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) listen(r0, 0x7c2) (async) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x10000) ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205) (async) fchmod(r0, 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4000, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xf5b439e5fa041319, 0xc3}}}}}}, 0x0) 8m36.645414294s ago: executing program 7 (id=2977): r0 = openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000400)={{r0}, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a4d04f, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000300)={0x1c, r5, 0x62c21a4ade68aba1, 0x70bd28, 0x0, {{0x32}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20004040) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x91, 0xb7, 0x77, 0x40, 0xeb1, 0x7007, 0x210, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xfa, 0x40, 0xf, "", [{{0x9, 0x4, 0xc6, 0x5, 0x0, 0xb, 0xbf, 0xd9, 0x6a}}]}}]}}, 0x0) 8m33.435341267s ago: executing program 7 (id=2981): setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0xcb}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) setsockopt(r1, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000d5}, 0x4c040) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000280000000000069078ac1414bbac1414aa4e224001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6512010090780008"], 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000010c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRESHEX=r0, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='uid_map\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000001080)={{0x1, 0x1, 0x18, r6, {0x1}}, './bus\x00'}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2e) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100250080000000ffbf68b959c7316cd4523307f0e8fc48b0df89b445e2c21885fe91a2cac146be011dc7b2b6865e2a06000000", @ANYRES32=r5, @ANYBLOB="0c00990001000000420000000a000600ffffffffffff00000a0006000802110000010000"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x4048804) pread64(r6, &(0x7f0000000000)=""/212, 0xfffffffffffffec0, 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000140)='uid_map\x00', &(0x7f0000000180)='./file0\x00', r6) ptrace$setsig(0x4203, r7, 0x6, 0x0) 8m31.807040296s ago: executing program 7 (id=2987): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x4861, 0x80000, 0xfffffffd, 0x1f3}, &(0x7f0000000600), &(0x7f0000000280), &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3000000, 0x12, r3, 0x100000000) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) unshare(0x2040400) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r4, &(0x7f0000002680)={0x18, 0xffffffffffffffda, r5, {0x9}}, 0x18) ioctl$UBLK_U_CMD_START_DEV(r4, 0xc0207506, &(0x7f00000001c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) fcntl$lock(r1, 0x4b, &(0x7f0000000300)={0x0, 0x1, 0x6, 0x3, r6}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x7ff}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) 8m28.068144517s ago: executing program 7 (id=2995): setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80782, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000009) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(0x0, 0x0, &(0x7f0000000340)="cde5b6ee2baa4bc6b13615b8bfa3a2fd954167b223ee2878845d090bbd89b19720b1", 0x22, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)="2be281d6a91fe1e9805df4f32a4fc7bca63531274f5fe3b98c91e4bea93b05c1a9cbf8205b7400d390919d614d98c4625b0c29cbe1d42f4b93e7dde00fb1541da3433cf30aea52ded6d27d8e64e662cfdbd24d7fa9496953e752855a76c210a988b0c4fb880dc8a4bfa27190865a8d6caa4af968850a5cd12029cfc8146889006d4b084a263933c7a037", 0x8a, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000640)={r4, 0x0, r5}, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'wp384\x00'}}) (fail_nth: 10) 8m27.251629474s ago: executing program 38 (id=2995): setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80782, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000009) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(0x0, 0x0, &(0x7f0000000340)="cde5b6ee2baa4bc6b13615b8bfa3a2fd954167b223ee2878845d090bbd89b19720b1", 0x22, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000580)="2be281d6a91fe1e9805df4f32a4fc7bca63531274f5fe3b98c91e4bea93b05c1a9cbf8205b7400d390919d614d98c4625b0c29cbe1d42f4b93e7dde00fb1541da3433cf30aea52ded6d27d8e64e662cfdbd24d7fa9496953e752855a76c210a988b0c4fb880dc8a4bfa27190865a8d6caa4af968850a5cd12029cfc8146889006d4b084a263933c7a037", 0x8a, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000640)={r4, 0x0, r5}, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'wp384\x00'}}) (fail_nth: 10) 4m10.390987809s ago: executing program 9 (id=3869): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) shutdown(r5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x3a, 0x2, 0x0, 0x0, 0x0, 0x7e, 0x8, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x8, 0x0, 0x80000065, [0x2, 0x89ff]}}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/xfrm_stat\x00') read$eventfd(r8, &(0x7f0000000080), 0x51) fanotify_mark(r3, 0x0, 0x8003032, r7, &(0x7f0000000040)='./file0\x00') setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x0, 0x600}, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0) writev(r4, &(0x7f0000001e80)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="32ef796c3fd3d3e3c228bd023eb7f2994a2402d2b6c9ca3f41061909c26dce9ef0889980f134eb0932bbf8ad40449ea1a308d307eb9c80efd78a59b5434783963656896ace3983d15405d5fd0e66a668c30468e784338aea4215a1cf55a1de254b8d83a34e92877c1ab40d2b2898c36b468a5af4980991071bc6aabc1f1670bd905238462489d8cc57050df04190df543078838376aa7a84517cd4d119f79ac70f9979c8bb410d1e4fc199cc9b1cb921ec07a167476bb0abad6c8a70e52eb0ebdc556251d8325f21a6c3b2ad36d14218fc0f0c4fd67d15b5b749d43b10e849081a6e2208dabe9220edce3590350924", 0xef}, {&(0x7f0000001b00)="1540af90d10c353b55f33c727bf7ac1361ee489566f8f3c1106606eb1020e2815bbaa1668d8c671e607f52d81add74b38db064c74b5d43f0eb22d0df1eeae80d34636aa6bd37b13cd97e86b3d4785f53a461457b83563c8aa4907ff92c75c67ca36382451ef98093f94b595937799656841dfab63b4e60df0884dd413dcb60889109f4676a6b6fbb74c91287eada9ae9a957cb17a412b50048fca1fa6dcd843dd5d081179e5fabb99d4d311415c755728387eaacc8fcf0bed1850ca9621a358d031c96f0db1ee552b8edf39fc3f4a1bcbfa98101c829", 0xd6}, {&(0x7f0000001c00)="c1562dd072ecb3417844c939c75ef4c35cf0e49313848c523ab632bae00ddad8e89f389c001788cb9887217d75361b6085113a5bcf746cf46a4aef83e4b764f888a0fa86c41750a7840103c4337881795229eb4552e8cca81de52569db6e17cc9c1d9fb4902e7384ef20ee96c90ddc9c363657e30907a02cc2245e58fcc079272583120c19915a6c332fb81c80760e6b75451be85f6440e9e3365528e0223d9637034bf3829d99293be6c5f67d547ae9caf2abdf2d53fa08833ee0719d276869b40db1298ee36df094f34b077b9c0fb68b44", 0xd2}, {&(0x7f0000001d00)="240da7a30905e9f36580b7abb3d87cd8cbbe5907ba75960b12928e2726eacfaea8b93152ae1e6df5d2f37de186b60a0a7ffcb058b31208e4efc357f1d8c6eb60c425f965021c9691cc6ce505edcf38c48b0710c8e531b70c5ce2acf2df3900ac99915086d99440cd37cfe7fba2cb5b48d715d33bd5fa9b305042d5deb651e5631a79a27fb660246af62a2faf246b044161f51b7f9bfbdb20244353dc8566a8cffe517b", 0xa3}, {&(0x7f0000001dc0)="0f8497436cd23f5b4c8fe01de1dc52f66b8d38166c6398ff0ab92cf249b4c996b10f4186747161563bcbe1bffb8a49c4e28ffe82bce8101d2867362b498e023223396d3f9db9aa1095c73b885d732afc1722d901e6f067e12a88e288cf361077a1430641a0368470995720c8702ae828fe69875ecb1005eb51132f50db54bef5c3f7eb1a166b6864b62f3639c225ba1989ddb146bc90687191a4f429537c6f5825bee538c0f8ec46946f9e9af57a7da17c41", 0xb2}], 0x6) 4m8.756020905s ago: executing program 9 (id=3871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000280)="63df33c9f7b98600000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m7.410212132s ago: executing program 9 (id=3875): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') pread64(r1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x4, 0x98f, 0x10, 0x10000, r2, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xc0000000, 0x3, 0x4}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20402}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 4m6.559063502s ago: executing program 9 (id=3881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x7000, 0x40, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_test', 0x82802, 0x1f8) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r7) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r8, 0x0, 0x600}, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf90000000900030000000000ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601aaba5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}}) write(r5, &(0x7f0000000300)='k', 0x1) mkdir(0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7, @empty, 0xffff}], 0x1c) setxattr$incfs_id(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) r9 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_disconnect(r9) r10 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r3}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_open_dev$I2C(0x0, 0x1, 0x402) close_range(r0, 0xffffffffffffffff, 0x0) 4m2.217043564s ago: executing program 9 (id=3889): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) r5 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0xff08, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0xff08, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0xfffffffffffffea0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001800800010005b60000260002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x3e0, 0x0, 0xe8, 0xffffffff, 0x260, 0x1b8, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x5, 0x0, 0xa, 0x2, 0x4, 0x4], 0x6, 0x3}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x4, @multicast2, @remote, @port=0x4e23, @icmp_id=0x66}}}}, {{@ip={@local, @empty, 0x0, 0xffffffff, 'ip_vti0\x00', 'bond_slave_0\x00', {}, {}, 0xc, 0x2, 0x18}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "8734"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x15, @rand_addr=0x64010100, @empty, @icmp_id=0x65, @gre_key=0xe239}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x2, @icmp_id=0x68}}}}, {{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'netpci0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x62, 0x2, 0x2}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x4, 0x4, 0x5, 0x1, 0x5, 0x2], 0x0, 0x4}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1b, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x7, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 4m0.847128631s ago: executing program 9 (id=3892): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xe0a8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa}, 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r5, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x6c, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000000)={0xa, &(0x7f0000000380)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r2, &(0x7f0000002080)=0x58, 0x12) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000"], 0xf8}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x9, 0x0, 0xb931}) bind$802154_dgram(r9, &(0x7f0000000140)={0x24, @none={0x0, 0x1}}, 0x14) 3m45.250005947s ago: executing program 39 (id=3892): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0xe0a8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa}, 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r5, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x6c, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000000)={0xa, &(0x7f0000000380)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r2, &(0x7f0000002080)=0x58, 0x12) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000"], 0xf8}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x9, 0x0, 0xb931}) bind$802154_dgram(r9, &(0x7f0000000140)={0x24, @none={0x0, 0x1}}, 0x14) 3m43.684050616s ago: executing program 3 (id=3944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) sendmsg$nl_generic(r0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000b80)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r3, 0x5, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r7) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0/file0', [{0x20, 'keyring\x00'}], 0xa, "c607d2d9aac4c03f10c5db9437673063645b4cf6ca6b69e549675032d1e1ecff8ce82c2a1bccb70fc1059e3fac2e0f98f8f8e7b939bab8eea8732070ed239e64455e20a7df7f85caf56ce3cec6144b8a2d60d24cff3b27922c40be19e439b62390b2e5e101d156ecdb7f7b0d8d6b819f8e3a8e7ab6b6aa7388b4736711e1277fc85c8a5b33"}, 0x9f) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) madvise(&(0x7f00001ae000/0x1000)=nil, 0x1000, 0xb) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000680)={0x48}) 3m42.786582883s ago: executing program 3 (id=3946): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x100000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x7fe, 0x4) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x408, 0x1040087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000003590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x21a440, 0x0) mount(0x0, 0x0, 0x0, 0x320081a, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x9, &(0x7f0000000080)=0x114c, 0x4) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0xfffffffd, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 3m40.867554944s ago: executing program 3 (id=3949): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async, rerun: 32) syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') (async, rerun: 32) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r1) (async) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) (async, rerun: 32) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = dup(0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0xb, 0x5, 0xfff, 0x80000000, 0x8, 0x80000000, 0x200, 0x9}}) ftruncate(0xffffffffffffffff, 0x300004) sendfile(r8, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x800841, 0x0) 1m23.277942742s ago: executing program 2 (id=4403): syz_open_dev$evdev(&(0x7f00000003c0), 0x7fffffffffffffff, 0x8400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095b1e2237f354db7cf833e5d573c2a25282b8dbd443884c7403c1dc9d7a19deb78df337bcbef9208808ffd24a08278f0ef8372aee9ee45bb341afc0a4765c90c13f94146540a8d8161df7ffa3f63691f0851fb7ae6327d6589aae6499354d74b0871dc6ced19f6ade893d6b599c468265798ec4dcdbf99f74cf1062d0708d64b2e3b01ce775ebbeb09102c4be62eb89d78727d8b13c8ba532808a0ca9c229077198f29817a9cee817a65b905fd02e9df1bdc8fbf682f3f62c06369b13ee93e4dfd67fcdced287b", @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x2b, 0x80000, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0xc80ec000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d031, 0xffffffffffffffff, 0x0) select(0xfffffffffffffead, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x2710}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x200000c, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x3a, 0x19, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r7, 0x560f, &(0x7f0000000140)) ioctl$VT_DISALLOCATE(r7, 0x5608) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000bff000/0x400000)=nil) getpid() r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1m22.623085598s ago: executing program 1 (id=4406): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000019c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x13}]}}]}, 0x3c}, 0x1, 0x3000000}, 0x20000000) 1m22.490307918s ago: executing program 1 (id=4407): clock_settime(0x3, &(0x7f0000000180)={0x77359400}) sendmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="695b151ce712243b182d33dcb769b58f3a42373c885f31ea68433396e15a51f1604830c7c29d404235fdb736e825a30cddff70dce532f00a0615499a30f2b8a1a9c1a8ff4eedd974901861d15b1120aa1df6cc85f7bc457b37bfe871eab0e9f8cb76dd05b28a36ae5c", 0x69}], 0x1}}], 0x1, 0x4004005) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000940)={0x4, 0x0, 0x1f, 0x6, 0x100, &(0x7f0000000440)="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"}) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fdatasync(0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x9e9d1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x10, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xb, 0x4, 0x9, 0x9, 0x3, 0x5e10, 0x9, 0xe6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/bus/pci/devices\x00', 0x0, 0x0) read(r6, &(0x7f0000000040)=""/31, 0x1f) 1m22.318641435s ago: executing program 6 (id=4408): io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60080, 0x0) r1 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x30, 0x2e]}}, 0x0, 0x1d, 0x0, 0x1}, 0x28) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x22020600) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) socket$nl_route(0x10, 0x3, 0x0) close(r0) socket(0x28, 0x5, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="e1ffffff0000000000000000000058f771627440c437ef97a4e0c1e6be0111eb714f3f20b7c25c33473523c6ecb6f8ce101baf1ff624e80dea6884972eb8a5058c530000000000000036411a154c3a110974286daf5bf99b0b826e9066b700ae9beb97f706e2bf9eb1f0ab85584af0f34cbb7c09185f466ec3e2d7aa40c41afeb8c15d38d19205bd16d4812f9b2784a204204332f24964e62eab60b11d19884cf7f15800e6a37b1ab40ef17ea5c542f49f78167c0158af5f221b052bdd90e2143536928e76e5617260e6228bb132df192ca7002c182149659ce1b969c7da4157369e43b936b49ac3f2ed0824"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) epoll_create1(0x80000) 1m21.654213633s ago: executing program 1 (id=4409): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x0, 0x177}, &(0x7f0000ffe000)=0x0, &(0x7f0000ffe000)=0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109"], 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e16"], 0x19) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000100)=0x9) syz_io_uring_modify_offsets$flags(r1, r2, 0x68, 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000030000000000000000000000850000009700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open_tree(r3, &(0x7f0000000240)='./file0\x00', 0x1400) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) 1m21.290402875s ago: executing program 6 (id=4411): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000100}) r0 = syz_open_pts(0xffffffffffffffff, 0x400000) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) ioctl$TIOCMBIC(r0, 0x5417, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x200, 0x38e41e62, 0x64}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848300000", 0x17}], 0x1, 0x0, 0x0, 0x60}, 0x40044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20008040) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000240)=0xfffffffffffffe9b) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="9614f281b311e635b7601754b4287e5d60a1ddfd844050b3a28aaffb92c3fa0ba4b1b077e20464d49f22a531adeeaf4c9375602e6b486141d4c817c7a3e0b82ee5a4f10c1e9c33ece75bf1d40db32a59ba5e9db20525e1ea39b27546ec7b9544722900c01c1e3c29d022ad340c6bd30e332f0090f32fcd9034f8ad49b835"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x40c8880) 1m20.030323519s ago: executing program 0 (id=4412): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1000000}}}}]}]}, 0x60}}, 0x0) 1m19.864098181s ago: executing program 6 (id=4413): syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x2000000000000060, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000240)=0x4) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x1, 0x0, 0x1, 0x0, 0xd, 0x87b, 0x2, 0x0, 0x1, 0x0, 0x3, 0x6, 0x1, 0x2], 0x70000, 0x203c1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m19.80428486s ago: executing program 0 (id=4414): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r6, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r9, 0x5609, &(0x7f0000000040)={0x400, 0x8, 0x2000}) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001d005f0214ffffffffff", 0xe) r10 = syz_open_dev$evdev(&(0x7f0000000b80), 0x3, 0x2400) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSKEYCODE_V2(r10, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "207d3d00000055c51b08700c1e0adb4f000000001200000000000900"}) r11 = dup(r6) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x800) preadv2(r13, &(0x7f0000000300)=[{&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f00000001c0)=""/215, 0xd7}], 0x2, 0x6, 0x803, 0x6) shutdown(r11, 0x1) r15 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r15, 0xffffffffffffffff, 0x0) 1m19.555716775s ago: executing program 8 (id=4415): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./mnt\x00', &(0x7f0000001600)='binder\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@sg0, &(0x7f0000000340)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80c019, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000700)='source', &(0x7f0000000000)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x18ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe04c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\r\xa8&t&A0\xa7\xef\x9cL\x8e1K\f\xeb|%o\xf4v\xad~\x1a\xf3~\xeeI\tv\xe5\x11\xb7\x8f\xfa\xe0\xa6W#S\xaa-\x93\xcb\xc2\x1d\xff\xe9A,+?H\x91\xeeo\x1f\xd6A\xd1\x95\xe92\x06\x00o\xee\x14\xb9\v8\xa0\x91\'Jb\xb7\x92\xb1\xb3\xb9\x83\x98\x8aB\xf3<\x1b\x98\xa8B\xb1\xf73\x94<]\\\xb1T\x03\x9a%>\xd4\xe7=\\q\xd7\xbd\xb7\x19d\xb7\xd7\xc8\xb0\x84\x85\xbdI\xa6\xb0\x15@\xab\x8d\x8dW\xe2\xc5Yg\xaf&\x1b\xa7\xfd\xfc\xbc\x84\xefK\xfe\v\xd0\xc3Xp!2\n\xd4\xcf/[W\"h\xafC\x992x[\x9b\xfb26\xe48\v\x9bJ<\xee\x8cE\x9f\xa1\xc6\xb9\x93\xa5\x1dp\xfbPJ0\x057\xec\xa5cg2\xfc-\xe24\xf61J-hn\x83\'FVz|\x16\x95 {/\xe3\xef\x91/\xbco\xfe\xb9\xef\x84F\xaaL\xc0\x00\xa5\xa4\x90\a\xb5\xda\v|\xd5\xff\x1a\x0f\xad\xd1+M\x93\x14\x10C\xec\xd9\xcb\x0f\x11S9\x03\xb2\xaaG\"\xd6\a\xefI\xc0\"\xf8\xa42\x17X\t#\x1e0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) memfd_create(&(0x7f0000000000)='pagemap\x00', 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r7, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r6, 0x0}]) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x27, r8, 0x0, 0x6}, 0x10) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x2, 0x5004) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x840) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r9) 1m17.024692198s ago: executing program 8 (id=4418): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r8) ioctl$KVM_SET_IRQCHIP(r6, 0x400caed0, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xffffffff, 0x296d, 0x4, 0x6, 0x0, [{0x98, 0x5d, 0x7f, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0x3}, {0xf, 0x5, 0x2, '\x00', 0x13}, {0x3, 0x3e, 0x8, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x0, '\x00', 0xac}, {0x3, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x6, '\x00', 0x67}, {0x2, 0x7, 0x2, '\x00', 0x8}, {0x8, 0x4, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x2, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000000000", 0x39}], 0x1) 1m16.808214494s ago: executing program 0 (id=4419): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r1 = creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x109040, 0x0) getpid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80000001b00010326bd7000fcdbdf250a010101000000000000000000000000ac1414aa0000000000000000000000004e2400004f2000450200c02032000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="b2035d39b3b7409a890000b889e702fd6f0e00000065784391b078bb964755517a849e8f000000000000ff010000000000000200000000000000000000000000002880000000000000000400000000001f0006000000000000000500006d00000000000000000000000102940000000000000000000000000c001500bf000000090000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) pread64(r4, 0x0, 0x0, 0xc) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r7, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r8}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0x7000, 0x100000}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r10, 0xffffffffffffffff, 0xcc0, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=r0, 0x10}}, 0x20) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2840, 0x0) 1m16.743342188s ago: executing program 2 (id=4420): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x30}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x100000, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) read(r0, &(0x7f00000002c0)=""/10, 0x5b) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x6, 0x4) 1m15.67325662s ago: executing program 6 (id=4421): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000980)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x7f, 0x0, 0x2, 0x2, 0x1, 0x9, 0x79, 0x6, 0x8, 0x9, 0xf800, 0x4}}, &(0x7f0000000880)={0x20, 0x85, 0x4}, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x21, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200ae0e850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m14.502159476s ago: executing program 8 (id=4422): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f00000000c0)='dax\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='2', 0x1) 1m14.248110692s ago: executing program 2 (id=4423): syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) writev(r2, &(0x7f0000001bc0)=[{&(0x7f0000001780)="873d357afd0f5313d750ff6c4a7c49f010b00f154f2d0cfa391a88dd61359f1629913a76088b2ff75518cad6c3632abc852a632148c0e66893a3e2c97588296c49196273f12cd67cd7ab4a6c58cdf0df75ab17c9bde99a0239cd7080e71df423cb5cbabf072df2a34d20f64594e0654acd2260f436ab47184d866f0e4e599834c18e1b7e0543ecd8c1b47572de185e4d6a1bf4386de96873", 0x98}, {&(0x7f0000001900)="651370715b5af5bef6318034b40aca444e43086bb57b5ea23a5133e8af0c2d02d66890b47ccfa4cf83f71d1dc9d5f423396f4e990c379a054e53923f9d6fe77c52a219b05fa12038046121f3a251d802a0b550d6e15c5e61e81b2b44538f049ae341f01f7aed85d676942c177b2d5d5d84837951e5c3c84e23c4ae3965aa949592", 0x81}, {&(0x7f00000019c0)="9b199ed277c60057690306e845599c7217c7078c9981516b842e34d8d960a7403b9249c456ed5a40995881227613d2810eee34945c992ff42e4d300b2680b47efe383ddfd2730a063b565690b5603f762ebb6b80bf4e3beae4246884e73a1547b7318b94e652c9224402668d8c9bcd9bf3cc4b6df25168bd09db41c27abfc95755a06e19163ddd6518d0dc8d34db0f6df69fe09ecb632ebf0a00d8285647cbcbfdfd86d683edfe80329ab0128d1b94e765b54f20e3b5ae15f718791829dce1829678cc631034a21ae470d1c6a4d6c5e5359137096c", 0xd5}, {&(0x7f0000001ac0)="6e193fc96c58e40a354d486359dba87f1c245abcbad83b51241a5ebb533d96", 0x1f}, {&(0x7f0000001b00)="616d1870dc780893a0b0561d1cafe3842bc4caee1391d14a738fb65f7c9aceb5762caf9ef158378e3c445a1123e2add06fb5f43471747d9da4803c3db37bdfb257153a183c6b094b24ae926cec43cb7e4c9c56a2c9a48eaf48522e0080053f55df33f1eb00569fbff5e1884a7d3340fdee3e474b65d1cde294addda63832b5e8", 0x80}, {&(0x7f0000001b80)="15c5", 0x2}], 0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x147) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=ANY=[@ANYBLOB="030315"], 0xb, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x141400) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000140)=0x12) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000580)=0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) execveat$binfmt(r3, 0x0, &(0x7f0000001480)={[&(0x7f0000000ec0)='\x00', &(0x7f0000001140)='bridge\x00', &(0x7f00000012c0)='\xff\xff\xff\xff\xff\xff', &(0x7f0000001300)='/dev/video#\x00', &(0x7f0000001340)='\x00', &(0x7f0000001380)='^[[@\x00', &(0x7f00000013c0)='/dev/video#\x00', &(0x7f0000001400)='/dev/radio#\x00', &(0x7f0000001440)='{\\\x00']}, &(0x7f0000001700)={[&(0x7f0000001500)='/dev/video#\x00', &(0x7f0000001540)='\xff\xff\xff\xff\xff\xff', &(0x7f0000001580)='bridge\x00', &(0x7f00000015c0)='\x00', &(0x7f0000001600)='[-^}@[!*&#%\x00', &(0x7f0000001640)='}/#\xa0^./,)!\x00', &(0x7f0000001680)='\\\x00', &(0x7f00000016c0)='$.\x99(\\@\x00']}, 0x800) r5 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_connect$uac3(0x2, 0xa3, &(0x7f0000000380)=ANY=[@ANYBLOB="12491001000000208205650040000102030109637b372e12a1c422080b0002012630000904000000010130000a24010c0a00010000000904010000010230000904010101010230000c240201530309ee555e9f80090501091000027a17e4572505000000030700090402000001023000090402010101023000172401005f6a0000970b010000000000000008030500f60905820900040802060a252500000000060600"], 0x0) syz_usb_ep_write(r5, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") syz_usb_control_io(r5, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x40, 0x9, 0x5a, {0x5a, 0x4, "4a2c1c937c5f46148dbfa8f739a17939641a160c178c2de1a3d076ca536524aa5f630d17d28c9c8b7524ffd34ae246e0479d39e1ede4068fbd5154ecb3e9ecbcf6d36fc07463b9840dc6964cd2c2728de37aff41d6db88c3"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="37589cf46a4ebe8f2c04"], &(0x7f0000000240)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xf0, "1e55dece2dcbc4f72b1a920f3b807bbf"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x4, 0x1, 0x9, "53a36b6a", "407a8f89"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x2, 0x3, 0x9, 0x3, 0x7, 0xffff}}}, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x40, 0x5, 0xcd, "9014908dc8f71ebc3dbd47237cdf6ad93879fec24d516378ab0c2ae4cabb3f93de73e9f20702dad1293b1d7e4c642729411284298aa77b233aa1f9a30765e21cda7648a9d4d1385caf0c2801a182a3911503396debb8ec234f6d955095c2d6f49a1b267e34eeaa9d5ee0fdec329a086a335ea32c3f5b60ce427f89f5d53509ca5740d29d21d3405fe64ab34f09d000559bdbffa8fdb647f88cfbb75113bc75d58e560e74a5824060a79521600a2858e5ff1c16deb4372cf2827debf8070354403968ba595fd62d451530af9f6b"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0xa0}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0xb, 0x2, ',t'}, &(0x7f0000000740)={0x40, 0xf, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, &(0x7f0000000800)={0x40, 0x19, 0x2, '0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) syz_open_dev$loop(&(0x7f0000000040), 0x216, 0x40000) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r11, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000200000004000000000000000e503000000000000000000002c9f38000004"], 0x78) close(r11) io_uring_register$IORING_UNREGISTER_RING_FDS(r11, 0x15, &(0x7f0000003dc0)=[{0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/247, 0xf7}, {&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f0000004000)=""/104, 0x68}]}, {0x100, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/216, 0xd8}]}, {0x36, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000980)=""/123, 0x7b}, {&(0x7f0000000a00)=""/208, 0xd0}, {&(0x7f0000000b00)=""/147, 0x93}]}, {0x8, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c40)=""/176, 0xb0}, {&(0x7f0000000d00)=""/216, 0xd8}, {&(0x7f0000000e00)=""/197, 0xc5}]}, {0x7fffffff, 0x0, &(0x7f0000002180)=[{&(0x7f0000000f40)=""/86, 0x56}, {&(0x7f0000000fc0)=""/19, 0x13}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f0000001040)=""/34, 0x22}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/31, 0x1f}, {&(0x7f00000020c0)}, {&(0x7f0000002100)=""/92, 0x5c}]}, {0x7, 0x0, &(0x7f00000025c0)=[{&(0x7f0000003840)=""/126, 0x7e}, {&(0x7f0000002280)=""/237, 0xed}, {&(0x7f0000002380)=""/128, 0x80}, {&(0x7f0000002400)=""/73, 0x49}, {&(0x7f0000000440)=""/36, 0x24}, {&(0x7f00000024c0)=""/202, 0xca}]}, {0x8, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000002740)=""/21, 0x15}, {&(0x7f0000002780)=""/78, 0x4e}, {&(0x7f0000002800)=""/46, 0x2e}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000004080)=""/81, 0x51}, {&(0x7f00000038c0)=""/151, 0x97}, {&(0x7f0000003980)=""/128, 0x80}]}, {0x8000, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003a80)=""/191, 0xbf}, {&(0x7f0000003b40)=""/217, 0xd9}, {&(0x7f0000003c40)=""/13, 0xd}, {&(0x7f0000003c80)=""/70, 0x46}]}, {0x5, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003d40)=""/7, 0x7}]}], 0x9) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r11, 0x0, 0x4004814) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r11, 0x3309) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003e80)={{r10}, &(0x7f00000001c0), &(0x7f00000020c0)=r2}, 0x20) 1m13.275780053s ago: executing program 2 (id=4425): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)='a', 0x4101}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0) lseek(r2, 0x4, 0x3) 1m12.076293667s ago: executing program 0 (id=4426): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x8, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x840) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'lock', ' ', 'none'}, 0xa) fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0) (fail_nth: 7) 1m12.075800966s ago: executing program 2 (id=4427): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10200258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_80211_inject_frame(0x0, 0x0, 0x0) nanosleep(0x0, &(0x7f0000000480)) syz_80211_inject_frame(0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES8=r1, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10200258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_80211_inject_frame(0x0, 0x0, 0x0) (async) nanosleep(0x0, &(0x7f0000000480)) (async) syz_80211_inject_frame(0x0, 0x0, 0x0) (async) dup(0xffffffffffffffff) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) (async) 1m12.022514866s ago: executing program 1 (id=4428): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x1}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="9c", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x1, @loopback, 0x5}, 0x1c) mount(&(0x7f0000000200)=@md0, &(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)='xfs\x00', 0x151082, &(0x7f0000000500)=')\x00') sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000000c0)={0x64f, 0x1, 0x774f1f1d, 0x3, 0x8, 0x9}) r2 = socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000090601020000000000000000000000000900020073797a31000000000500010007000000100007800c596ed28f03a7e5878db32a"], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) r5 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, 0x0, 0x1) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) sendmsg$inet_sctp(r6, &(0x7f00000001c0)={&(0x7f0000000100)=@in={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="6438baf59509bd313af85b68cb286c51fe3faeda89a6bd777b896c2cac7e853ec37153a7c7c006cafe4aec264cbfa0f2f472008f9a424c87116d4744fd740b6bf52409c926044cfee68026e6d61ae00331d074f60c79b004908374c256f412877a041c31d30bbffe7f4ce7bc034b23b9ef0e9eb589ac0b4df1583a0defbbe6dfbb72efa612e4c5d494fb3c2c1426b153c0a2c217023d82dfe920f8dd0c5771e9b5c91c27c92edb74f070d7cf5193259fe104a5c2f2fea690b1e495e6a68a979ba035040730b313a1c0523d3985305a2f8e545b", 0xd3}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000840000000600000001000000000000001800000000000000840000000600000003000000000000001800000000000000840000000700e7ff7e0000010000000018000000000000000300000000000000df00030002000a00"], 0x60, 0x48800}, 0x80) 1m11.658220405s ago: executing program 1 (id=4429): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)={@fallback=r1, r1, 0x36}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800efd6c3287637000000000000000000ee950000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000010c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r6, 0xa) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='task\x00') lseek(r7, 0x4, 0x2) listen(r6, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="14002c800c"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='afs\x00', 0x40, &(0x7f00000000c0)='&.\\$^,#:/+%\\\x00') syz_emit_ethernet(0x15e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaa33ffffffffffff88474515015000650000082f90787f000001ac1e01010c20880b00000003080008000d0086dd79699683dda90fe4860bef645de3ef4aa7c73b15e50491ddf62ef8114f7e3db1f9acf9897a4852add2288596daff278c0e5f091d61db28e365a56dafaa5234eb4993a8862aaf8877027b4387e8d26b9871f7a5cdc03294c033e73c71cb686c859cc6d11287a3c2d669ae0ff7a4a28f23ecd05a8366d92c6ffe9d6ff03e52b0acc47cce69700fb7991ae63cf67c8b90aee0612725c0c8b5f1e18ba3ce1baeb56878de2e4d3c9802e89ceae8bc69f541e33fd87cbe272552fab40844dd0494e767c2f61dc99d92e4e403517d75be87839feb17331acb7b8013c7c859b48ec71c916600aa580490e3259bba525f36dacf0db69f83080088be000000031709540b0100000000000002080022eb0000000026068fc3020000000000000500059f1d0800655800000001"], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000030801010000000a04e2038006000240884800000500109f018e8888"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) 1m1.191597488s ago: executing program 6 (id=4430): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_ublk_setup_io_uring(0x5, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0xd45, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x2810) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r9}, &(0x7f0000001a40), &(0x7f0000001bc0)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r9, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) r12 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r13 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r12) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r13}, &(0x7f00000008c0)=ANY=[], 0x0, 0x0) syz_ublk_setup_queues(r11, r7, &(0x7f0000000180)={0x0, 0xe038, 0x0, 0x3, 0x352}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x369}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r6, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000082505a1a44033eb7b7f010902740002010890020904000001020d00000524060001052400ffff0d240f0100000000000000000006391addff000c241ba10210008500efff0808241c7f000701000424012e0f2ba767a98cb46c"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) dup3(r1, r0, 0x80000) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r15 = socket$netlink(0x10, 0x3, 0x15) r16 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r16, 0x84, 0x1e, &(0x7f0000000780)=0x5, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000280)=[@decrefs={0x400c630e}], 0x0, 0x0, 0x0}) 1m0.255150372s ago: executing program 0 (id=4431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf657464657673696d0000000f0002006e657464657673696d300000080003000100000000000000000000000000f7326ab3"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x5127, &(0x7f0000000040)={0x0, 0x2153, 0x0, 0x7, 0x2cf}) writev(r2, &(0x7f00000001c0), 0x0) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000cc0), 0x2, 0x44080) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x5, 0x46d, 0xb012}}, 0x118) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 1m0.016399365s ago: executing program 8 (id=4432): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKTRACESTART(r3, 0x1274, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_ublk_setup_io_uring(0xc6a, &(0x7f0000000180)={0x0, 0xfffffffc, 0x0, 0x3}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) read(r9, &(0x7f0000000480)=""/99, 0x63) syz_ublk_setup_queues(r3, r11, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfffffffd, 0x69, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbbea, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xfffffffc}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000020c0)=""/4116, &(0x7f00000003c0)=0x1037) 58.241016412s ago: executing program 2 (id=4433): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x0, 0x44, 0x48, 0xcf, 0x7}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000001800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r1, 0x5428) syz_usb_control_io$uac2(r0, &(0x7f00000020c0)={0x14, 0x0, &(0x7f0000002000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x20, 0x9, 0x1, "d2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000003ac0)={0x44, &(0x7f0000003880)={0x40, 0x17, 0x9, "7098615c0db74dfa1a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 56.681745286s ago: executing program 1 (id=4434): socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x0, 0x8a}, 0x0) (async) setrlimit(0xd, &(0x7f0000000000)={0x0, 0x2}) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x44000) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB='O\x00\x00\x00\x00\x00\x00\x00\x00J\x00'/20, @ANYRES32=0x0, @ANYBLOB="7f15100000000000140012800b0001056261746164766b00dbde376945a0fbd81c196a0400"], 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x20000840) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x4000) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, 0x0, 0x20d, 0x60bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc051}, 0x4004) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040014}, 0x20000040) (async) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x6a062000) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000200)=@unlock_all, 0xb) (async, rerun: 64) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 39.772500722s ago: executing program 41 (id=4430): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_ublk_setup_io_uring(0x5, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x95}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10010001, 0xffffffffffffffff, 0x0, 0xcd}}}, &(0x7f0000000480)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0xd45, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x2810) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r9}, &(0x7f0000001a40), &(0x7f0000001bc0)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r9, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) r12 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r13 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r12) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r13}, &(0x7f00000008c0)=ANY=[], 0x0, 0x0) syz_ublk_setup_queues(r11, r7, &(0x7f0000000180)={0x0, 0xe038, 0x0, 0x3, 0x352}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x369}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r6, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000082505a1a44033eb7b7f010902740002010890020904000001020d00000524060001052400ffff0d240f0100000000000000000006391addff000c241ba10210008500efff0808241c7f000701000424012e0f2ba767a98cb46c"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) dup3(r1, r0, 0x80000) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r15 = socket$netlink(0x10, 0x3, 0x15) r16 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r16, 0x84, 0x1e, &(0x7f0000000780)=0x5, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000280)=[@decrefs={0x400c630e}], 0x0, 0x0, 0x0}) 31.943292048s ago: executing program 42 (id=4431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf657464657673696d0000000f0002006e657464657673696d300000080003000100000000000000000000000000f7326ab3"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x5127, &(0x7f0000000040)={0x0, 0x2153, 0x0, 0x7, 0x2cf}) writev(r2, &(0x7f00000001c0), 0x0) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000cc0), 0x2, 0x44080) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x5, 0x46d, 0xb012}}, 0x118) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 23.962096014s ago: executing program 43 (id=4433): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x0, 0x44, 0x48, 0xcf, 0x7}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000001800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCCBRK(r1, 0x5428) syz_usb_control_io$uac2(r0, &(0x7f00000020c0)={0x14, 0x0, &(0x7f0000002000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000340)={0x20, 0x9, 0x1, "d2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000003ac0)={0x44, &(0x7f0000003880)={0x40, 0x17, 0x9, "7098615c0db74dfa1a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.638225046s ago: executing program 44 (id=4432): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKTRACESTART(r3, 0x1274, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_ublk_setup_io_uring(0xc6a, &(0x7f0000000180)={0x0, 0xfffffffc, 0x0, 0x3}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) read(r9, &(0x7f0000000480)=""/99, 0x63) syz_ublk_setup_queues(r3, r11, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfffffffd, 0x69, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbbea, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xfffffffc}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000020c0)=""/4116, &(0x7f00000003c0)=0x1037) 0s ago: executing program 45 (id=4434): socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x0, 0x8a}, 0x0) (async) setrlimit(0xd, &(0x7f0000000000)={0x0, 0x2}) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x44000) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB='O\x00\x00\x00\x00\x00\x00\x00\x00J\x00'/20, @ANYRES32=0x0, @ANYBLOB="7f15100000000000140012800b0001056261746164766b00dbde376945a0fbd81c196a0400"], 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x20000840) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x4000) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, 0x0, 0x20d, 0x60bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc051}, 0x4004) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040014}, 0x20000040) (async) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x6a062000) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000200)=@unlock_all, 0xb) (async, rerun: 64) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): link: 4560 bytes leftover after parsing attributes in process `syz.2.3950'. [ 1699.141373][T22087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1699.151528][T22087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1699.560264][T12269] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1699.776542][T12269] usb 9-1: device descriptor read/64, error -71 [ 1700.122306][T12269] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1700.254394][T12269] usb 9-1: device descriptor read/64, error -71 [ 1700.316934][ T30] audit: type=1400 audit(1788088936.127:2487): avc: denied { write } for pid=22089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1700.363044][T12269] usb usb9-port1: attempt power cycle [ 1700.628553][ T30] audit: type=1400 audit(1788088936.437:2488): avc: denied { write } for pid=22109 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1700.714459][T12269] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1700.746258][T12269] usb 9-1: device descriptor read/8, error -71 [ 1700.882444][ T5624] Bluetooth: hci5: command tx timeout [ 1700.982286][T12269] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1701.012912][T12269] usb 9-1: device descriptor read/8, error -71 [ 1701.122692][T12269] usb usb9-port1: unable to enumerate USB device [ 1702.215163][T22120] fuse: Unknown parameter '' [ 1702.424872][T22127] input: syz1 as /devices/virtual/input/input64 [ 1702.662134][T22125] kAFS: bad VL server IP address [ 1702.754058][T22140] jffs2: notice: (22140) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1702.962971][ T5624] Bluetooth: hci5: command tx timeout [ 1703.917478][ T30] audit: type=1400 audit(1788088939.727:2489): avc: denied { write } for pid=22117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1704.227801][ T30] audit: type=1400 audit(1788088940.037:2490): avc: denied { write } for pid=22149 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1704.570078][T22152] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3967'. [ 1705.312767][ T30] audit: type=1400 audit(1788088941.107:2491): avc: denied { write } for pid=22166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1706.504012][T22181] kAFS: No cell specified [ 1706.561200][ T30] audit: type=1400 audit(1788088942.367:2492): avc: denied { write } for pid=22180 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1707.790704][T22185] block2mtd: error: cannot open device /dev/loop0 [ 1707.995356][T22196] overlayfs: failed to clone upperpath [ 1708.450509][ T30] audit: type=1400 audit(1788088944.267:2493): avc: denied { write } for pid=22186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1708.755496][ T30] audit: type=1400 audit(1788088944.567:2494): avc: denied { write } for pid=22208 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1709.194970][ T30] audit: type=1400 audit(1788088944.997:2495): avc: denied { getopt } for pid=22218 comm="syz.8.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1709.869215][ T30] audit: type=1400 audit(1788088945.677:2496): avc: denied { write } for pid=22217 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.150798][ T30] audit: type=1400 audit(1788088945.957:2497): avc: denied { write } for pid=22244 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1710.287789][T22247] ip_tables: iptables: counters copy to user failed while replacing table [ 1710.884911][T20948] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1711.018052][ T30] audit: type=1400 audit(1788088946.827:2498): avc: denied { write } for pid=22248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1711.044551][T12270] usb 9-1: new full-speed USB device number 66 using dummy_hcd [ 1711.182508][T12270] usb 9-1: device descriptor read/64, error -71 [ 1711.297845][ T30] audit: type=1400 audit(1788088947.107:2499): avc: denied { write } for pid=22267 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1711.422866][T12270] usb 9-1: new full-speed USB device number 67 using dummy_hcd [ 1711.553724][T12270] usb 9-1: device descriptor read/64, error -71 [ 1711.663207][T12270] usb usb9-port1: attempt power cycle [ 1712.003456][T12270] usb 9-1: new full-speed USB device number 68 using dummy_hcd [ 1712.024365][T12270] usb 9-1: device descriptor read/8, error -71 [ 1712.262474][T12270] usb 9-1: new full-speed USB device number 69 using dummy_hcd [ 1712.283293][T12270] usb 9-1: device descriptor read/8, error -71 [ 1712.337478][ T30] audit: type=1400 audit(1788088948.147:2500): avc: denied { write } for pid=22270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1712.392637][T12270] usb usb9-port1: unable to enumerate USB device [ 1712.616982][ T30] audit: type=1400 audit(1788088948.427:2501): avc: denied { write } for pid=22281 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1714.350748][T22290] block2mtd: error: cannot open device /dev/loop0 [ 1714.495596][T22027] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1714.524887][T22027] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1714.525430][T22027] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1714.565007][T22027] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1714.576163][T22027] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1714.598924][T22027] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1714.610189][T22027] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1714.636573][T22027] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1714.887463][T22027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1714.921213][ T30] audit: type=1400 audit(1788088950.717:2502): avc: denied { write } for pid=22287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1714.954081][T22027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.972490][T20952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.972555][T20952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1715.002314][T12311] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1715.011341][T20952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.011411][T20952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1715.152944][T12311] usb 9-1: Using ep0 maxpacket: 32 [ 1715.158980][T12311] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1715.172560][T12311] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1715.172593][T12311] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1715.172614][T12311] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1715.172641][T12311] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1715.172656][T12311] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1715.172672][T12311] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1715.172698][T12311] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.249038][T12311] usb 9-1: config 0 descriptor?? [ 1715.388228][ T30] audit: type=1400 audit(1788088951.197:2503): avc: denied { write } for pid=22316 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1715.476037][T12311] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1715.739578][T22299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1715.756927][T22299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.950213][T12311] usb 9-1: USB disconnect, device number 70 [ 1715.971351][T12311] usblp0: removed [ 1716.143725][T22335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1716.143970][T22335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1716.178605][T22336] ip_tables: iptables: counters copy to user failed while replacing table [ 1716.528501][ T30] audit: type=1400 audit(1788088952.337:2504): avc: denied { write } for pid=22324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1716.716032][ T30] audit: type=1400 audit(1788088952.527:2505): avc: denied { write } for pid=22350 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1716.759143][T22027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1716.977205][T22027] veth0_vlan: entered promiscuous mode [ 1717.116016][T22027] veth1_vlan: entered promiscuous mode [ 1717.141772][T22358] overlayfs: failed to clone lowerpath [ 1717.990330][T22361] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3991'. [ 1718.126891][T22357] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3990'. [ 1718.137371][T22027] veth0_macvtap: entered promiscuous mode [ 1718.256120][T22027] veth1_macvtap: entered promiscuous mode [ 1718.339048][T22027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1718.367984][T22027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1718.413633][T20943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.413675][T20943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.422596][T20943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.422620][T20943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.459977][T22367] block2mtd: error: cannot open device /dev/loop0 [ 1719.763555][T17988] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1719.799465][T17988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1719.814033][T17988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1719.824441][T17988] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1719.833548][T17988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1720.082846][T20951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.094081][T20951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.122958][T22386] atomic_op ffff88805585d9e0 conn xmit_atomic 0000000000000000 [ 1720.277322][T20950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.277347][T20950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.471355][ T30] audit: type=1400 audit(1788088956.277:2506): avc: denied { remount } for pid=22387 comm="syz.0.3997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1720.577010][T22395] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20001 [ 1720.602006][ T30] audit: type=1400 audit(1788088956.407:2507): avc: denied { write } for pid=22360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1720.629683][T22395] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002 [ 1720.914728][T22406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1720.934867][T22404] kvm: apic: phys broadcast and lowest prio [ 1720.982721][T20875] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1721.018759][T22409] wg1: Caught tx_queue_len zero misconfig [ 1721.036822][ T30] audit: type=1400 audit(1788088956.847:2508): avc: denied { write } for pid=22407 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1721.145685][T20875] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1721.164302][T20875] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.164330][T20875] usb 9-1: Product: syz [ 1721.164348][T20875] usb 9-1: Manufacturer: syz [ 1721.164360][T20875] usb 9-1: SerialNumber: syz [ 1721.411136][T22416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1721.411378][T22416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1721.495170][T22416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4001'. [ 1721.510033][T22406] input: syz1 as /devices/virtual/input/input66 [ 1721.573918][T20875] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1721.851764][T12269] usb 9-1: USB disconnect, device number 71 [ 1721.924692][T17988] Bluetooth: hci2: command tx timeout [ 1722.079239][T20952] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.197921][T22381] lo speed is unknown, defaulting to 1000 [ 1722.331645][T20952] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.654580][T20875] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1722.654704][T20875] ath9k_htc: Failed to initialize the device [ 1722.668184][T12269] usb 9-1: ath9k_htc: USB layer deinitialized [ 1722.764773][T22434] block2mtd: error: cannot open device /dev/loop0 [ 1722.987064][T22439] fuse: Unknown parameter '' [ 1723.018586][T20952] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.135714][ T30] audit: type=1400 audit(1788088958.947:2509): avc: denied { write } for pid=22422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1723.375559][ T30] audit: type=1400 audit(1788088959.187:2510): avc: denied { write } for pid=22450 comm="syz.0.4008" name="c.1" dev="configfs" ino=28317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1723.375606][ T30] audit: type=1400 audit(1788088959.187:2511): avc: denied { write } for pid=22450 comm="syz.0.4008" name="c.1" dev="configfs" ino=28317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1723.445482][T20952] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.512731][ T30] audit: type=1400 audit(1788088959.327:2512): avc: denied { write } for pid=22454 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1723.802710][T12269] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1723.859575][T22463] /dev/loop0: Can't open blockdev [ 1723.906180][T22466] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4011'. [ 1723.963000][T12269] usb 2-1: Using ep0 maxpacket: 32 [ 1723.968570][T12269] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1723.982992][T12269] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1723.983020][T12269] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1723.983035][T12269] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1723.983063][T12269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1723.983077][T12269] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1723.983092][T12269] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1723.983116][T12269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.011750][T17988] Bluetooth: hci2: command tx timeout [ 1724.065138][T12269] usb 2-1: config 0 descriptor?? [ 1724.325684][T12269] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1725.556394][T22453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.567412][T22453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1725.594885][ T10] usb 2-1: USB disconnect, device number 44 [ 1725.624972][ T10] usblp0: removed [ 1726.029647][T22475] could not allocate digest TFM handle hmac(sha1-ni) [ 1726.069809][ T30] audit: type=1400 audit(1788088961.877:2513): avc: denied { write } for pid=22465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.093920][T17988] Bluetooth: hci2: command tx timeout [ 1726.646122][ T30] audit: type=1400 audit(1788088962.447:2514): avc: denied { write } for pid=22497 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1727.035827][T20952] bridge_slave_1: left allmulticast mode [ 1727.035868][T20952] bridge_slave_1: left promiscuous mode [ 1727.036011][T20952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.063594][T20952] bridge_slave_0: left allmulticast mode [ 1727.071265][T20952] bridge_slave_0: left promiscuous mode [ 1727.071423][T20952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.370409][T22525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1727.588751][T22525] input: syz1 as /devices/virtual/input/input67 [ 1727.725913][ T30] audit: type=1400 audit(1788088963.527:2515): avc: denied { write } for pid=22509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1727.886958][ T30] audit: type=1400 audit(1788088963.697:2516): avc: denied { write } for pid=22539 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1727.938748][T20952] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1727.949831][T20952] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1727.959995][T20952] .` (unregistering): Released all slaves [ 1728.038685][T22381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.045436][T22381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.045553][T22381] bridge_slave_0: entered allmulticast mode [ 1728.070962][T22381] bridge_slave_0: entered promiscuous mode [ 1728.072698][T22381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.072752][T22381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.072840][T22381] bridge_slave_1: entered allmulticast mode [ 1728.073657][T22381] bridge_slave_1: entered promiscuous mode [ 1728.164493][T17988] Bluetooth: hci2: command tx timeout [ 1728.186673][T22542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1728.233201][T22542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4025'. [ 1728.344823][T22381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.366637][T22381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1728.556393][T22550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1728.565918][T22550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1728.574677][T20952] hsr_slave_0: left promiscuous mode [ 1728.582187][T20952] hsr_slave_1: left promiscuous mode [ 1728.589965][T20952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1728.597573][T20952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1728.631860][T20952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1728.631887][T20952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1728.655791][T20952] veth1_macvtap: left promiscuous mode [ 1728.655835][T20952] veth0_macvtap: left promiscuous mode [ 1728.655899][T20952] veth1_vlan: left promiscuous mode [ 1728.655938][T20952] veth0_vlan: left promiscuous mode [ 1729.193676][T12269] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1729.230018][T22559] kAFS: unable to lookup cell 'ÿ' [ 1729.282012][T22564] kAFS: unable to lookup cell '(,c¾Ì' [ 1729.325719][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1729.354296][T12269] usb 9-1: Using ep0 maxpacket: 32 [ 1729.361325][T12269] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1729.372784][T12269] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 1729.372811][T12269] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1729.372830][T12269] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1729.372861][T12269] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1729.372876][T12269] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1729.372891][T12269] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1729.372916][T12269] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.453771][T12269] usb 9-1: config 0 descriptor?? [ 1729.493964][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1729.499616][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1729.511832][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1729.511880][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.536124][ T10] usb 2-1: config 0 descriptor?? [ 1729.629175][ T30] audit: type=1400 audit(1788088965.437:2517): avc: denied { write } for pid=22555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1729.661088][T20952] team0 (unregistering): Port device team_slave_1 removed [ 1729.697461][T12269] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1729.716694][T20952] team0 (unregistering): Port device team_slave_0 removed [ 1729.815316][ T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1729.867126][T22562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1729.867392][T22562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1729.931810][ T30] audit: type=1400 audit(1788088965.737:2518): avc: denied { write } for pid=22580 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1729.977445][ T10] usb 2-1: USB disconnect, device number 45 [ 1730.086723][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.127873][T22381] team0: Port device team_slave_0 added [ 1730.153203][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1730.167645][T12269] usb 9-1: USB disconnect, device number 72 [ 1730.182521][T22381] team0: Port device team_slave_1 added [ 1730.184763][T12269] usblp0: removed [ 1730.270419][T22381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1730.277685][T22381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.277718][T22381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1730.331983][T22381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1730.332008][T22381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.332031][T22381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1730.505954][T22381] hsr_slave_0: entered promiscuous mode [ 1730.506495][T22381] hsr_slave_1: entered promiscuous mode [ 1730.525742][T22381] debugfs: 'hsr0' already exists in 'hsr' [ 1730.525769][T22381] Cannot create hsr debugfs directory [ 1730.637602][T22589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1730.637839][T22589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.667747][T22589] netlink: 'syz.0.4034': attribute type 1 has an invalid length. [ 1730.840486][T20952] IPVS: stop unused estimator thread 0... [ 1730.918819][T22589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4034'. [ 1730.957783][T22593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1730.973528][T22593] bond1: (slave bond2): making interface the new active one [ 1731.017709][T22593] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1731.080997][T22595] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1731.111229][T22589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1731.201658][T22594] ip6erspan0: entered allmulticast mode [ 1731.220054][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4035'. [ 1731.232181][T22600] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 1731.504786][ T30] audit: type=1400 audit(1788088967.307:2519): avc: denied { write } for pid=22587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.783362][ T30] audit: type=1400 audit(1788088967.597:2520): avc: denied { write } for pid=22620 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1732.049194][T22628] block2mtd: error: cannot open device /dev/loop0 [ 1732.242844][ T10] usb 9-1: new full-speed USB device number 73 using dummy_hcd [ 1732.385195][ T10] usb 9-1: device descriptor read/64, error -71 [ 1732.479937][T22381] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.622718][ T10] usb 9-1: new full-speed USB device number 74 using dummy_hcd [ 1732.681187][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1732.815005][ T10] usb 9-1: device descriptor read/64, error -71 [ 1732.925915][ T10] usb usb9-port1: attempt power cycle [ 1733.067210][T22645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.067450][T22645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1733.196273][T22381] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.264892][ T10] usb 9-1: new full-speed USB device number 75 using dummy_hcd [ 1733.274075][T22645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.274319][T22645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1733.318233][ T10] usb 9-1: device descriptor read/8, error -71 [ 1733.564200][ T10] usb 9-1: new full-speed USB device number 76 using dummy_hcd [ 1733.591162][ T10] usb 9-1: device descriptor read/8, error -71 [ 1733.649053][T22381] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.698553][ T10] usb usb9-port1: unable to enumerate USB device [ 1734.847173][ T30] audit: type=1400 audit(1788088970.657:2521): avc: denied { write } for pid=22643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1734.950048][T22381] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1735.100997][T22663] netlink: 'syz.0.4047': attribute type 1 has an invalid length. [ 1735.376145][ T30] audit: type=1400 audit(1788088971.177:2522): avc: denied { write } for pid=22667 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1735.511320][T22669] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4050'. [ 1735.666869][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1735.975163][T22679] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1736.776076][T22699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4048'. [ 1736.795036][ T30] audit: type=1400 audit(1788088972.607:2523): avc: denied { write } for pid=22678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1737.036129][T22675] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1737.050854][ T30] audit: type=1400 audit(1788088972.867:2524): avc: denied { write } for pid=22706 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1737.297646][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1737.802766][ T10] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1737.856212][T22722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1737.866769][T22722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1737.886811][T22722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1737.944571][T22701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4048'. [ 1737.944613][T22701] nbd: nbd64 already in use [ 1737.964875][ T10] usb 9-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00 [ 1737.976345][ T10] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1737.976375][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1737.976450][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.007499][ T10] usb 9-1: config 0 descriptor?? [ 1738.131109][T22381] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1738.155617][T22381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1738.156205][T22381] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1738.197342][T22381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1738.208030][T22381] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1738.220955][T22381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1738.229597][T22381] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1738.256805][T22724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4061'. [ 1738.269255][T22381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1738.506325][T22381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1738.530654][ T10] speedlink 0003:1AE7:9001.0023: hidraw0: USB HID v0.00 Joystick [HID 1ae7:9001] on usb-dummy_hcd.8-1/input0 [ 1738.569054][T22381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1738.591622][T14975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.591688][T14975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1738.608633][T14975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.608697][T14975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1738.623515][T12311] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1738.677668][T20875] usb 9-1: USB disconnect, device number 77 [ 1738.782986][T12311] usb 2-1: Using ep0 maxpacket: 32 [ 1738.789335][T12311] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1738.805296][T12311] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1738.805339][T12311] usb 2-1: config 0 has no interface number 0 [ 1738.827243][T12311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.827273][T12311] usb 2-1: Product: syz [ 1738.827301][T12311] usb 2-1: Manufacturer: syz [ 1738.827313][T12311] usb 2-1: SerialNumber: syz [ 1738.861135][T12311] usb 2-1: config 0 descriptor?? [ 1738.870420][T12311] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1739.087767][T22739] fido_id[22739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1739.110489][T12311] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1739.136402][T12311] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1739.378176][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1739.391005][T12311] usb 2-1: USB disconnect, device number 46 [ 1739.398421][T22743] block2mtd: error: cannot open device /dev/loop0 [ 1739.538673][T12311] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1739.570744][T12311] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1739.571123][T12311] quatech2 2-1:0.51: device disconnected [ 1740.061420][T22761] vivid-000: disconnect [ 1740.100710][T22760] vivid-000: reconnect [ 1740.185614][T22766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4070'. [ 1740.279824][T22381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1740.407169][T22766] ip6erspan0: entered allmulticast mode [ 1740.416896][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4070'. [ 1740.567652][T22777] FAULT_INJECTION: forcing a failure. [ 1740.567652][T22777] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.582042][T22777] CPU: 0 UID: 0 PID: 22777 Comm: syz.8.4071 Tainted: G L syzkaller #0 PREEMPT(full) [ 1740.582063][T22777] Tainted: [L]=SOFTLOCKUP [ 1740.582068][T22777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1740.582075][T22777] Call Trace: [ 1740.582080][T22777] [ 1740.582085][T22777] dump_stack_lvl+0x100/0x190 [ 1740.582108][T22777] should_fail_ex.cold+0x5/0xa [ 1740.582125][T22777] should_failslab+0xc2/0x120 [ 1740.582140][T22777] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1740.582152][T22777] ? security_file_alloc+0x34/0x2c0 [ 1740.582167][T22777] security_file_alloc+0x34/0x2c0 [ 1740.582179][T22777] init_file+0x95/0x480 [ 1740.582197][T22777] alloc_empty_file+0x79/0x1c0 [ 1740.582213][T22777] alloc_file_pseudo+0x183/0x290 [ 1740.582228][T22777] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1740.582244][T22777] ? hugetlbfs_get_inode+0x3f5/0x700 [ 1740.582256][T22777] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1740.582271][T22777] hugetlb_file_setup+0x2a8/0x5b0 [ 1740.582286][T22777] ksys_mmap_pgoff+0x242/0x610 [ 1740.582301][T22777] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1740.582312][T22777] ? fput+0x7c/0x100 [ 1740.582325][T22777] ? ksys_write+0x1ac/0x250 [ 1740.582356][T22777] ? __pfx_ksys_write+0x10/0x10 [ 1740.582369][T22777] __x64_sys_mmap+0x125/0x190 [ 1740.582384][T22777] do_syscall_64+0x123/0x790 [ 1740.582399][T22777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.582411][T22777] RIP: 0033:0x7fce3c59e159 [ 1740.582423][T22777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.582434][T22777] RSP: 002b:00007fce3d478028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1740.582447][T22777] RAX: ffffffffffffffda RBX: 00007fce3c826090 RCX: 00007fce3c59e159 [ 1740.582455][T22777] RDX: 0000000000000002 RSI: 0000000000400000 RDI: 0000200000000000 [ 1740.582462][T22777] RBP: 00007fce3d478090 R08: ffffffffffffffff R09: 0000000000200000 [ 1740.582469][T22777] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 1740.582477][T22777] R13: 00007fce3c826128 R14: 00007fce3c826090 R15: 00007fffcf6442b8 [ 1740.582493][T22777] [ 1740.717200][T22778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4072'. [ 1741.163619][T22381] veth0_vlan: entered promiscuous mode [ 1741.196298][T22381] veth1_vlan: entered promiscuous mode [ 1741.272165][T22381] veth0_macvtap: entered promiscuous mode [ 1741.302929][T22756] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1741.312131][T22381] veth1_macvtap: entered promiscuous mode [ 1741.374856][T22381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1741.401481][T22381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1741.455259][T20947] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.455301][T20947] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.455331][T20947] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.455353][T20947] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1741.494790][T22756] usb 2-1: Using ep0 maxpacket: 32 [ 1741.500532][T22756] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1741.533371][T22756] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1741.533404][T22756] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1741.533426][T22756] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1741.533453][T22756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.581331][T22756] usb 2-1: config 0 descriptor?? [ 1741.796054][T22797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1741.805312][T22797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1741.900550][T22797] netlink: 'syz.0.4079': attribute type 2 has an invalid length. [ 1741.945575][T20951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1741.945603][T20951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.030761][T22756] hid (null): invalid report_size 25705 [ 1742.075149][T22756] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0024/input/input73 [ 1742.247545][T22756] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0024/input/input74 [ 1742.264754][T22786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1742.264999][T22786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.288661][T20950] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1742.324587][T22797] : entered promiscuous mode [ 1742.378302][T22756] kye 0003:0458:5011.0024: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 1742.467842][T22756] usb 2-1: USB disconnect, device number 47 [ 1742.697833][T14975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1742.697862][T14975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1742.736243][T22808] fido_id[22808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1743.119568][T22813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.134555][T22813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.652435][T22756] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1744.804167][T22756] usb 2-1: Using ep0 maxpacket: 32 [ 1744.810786][T22756] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1744.827810][T22756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.843578][T22756] usb 2-1: config 0 descriptor?? [ 1744.858696][T22756] as10x_usb: device has been detected [ 1744.865184][T22756] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1744.920991][T22756] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1745.097728][T22756] as10x_usb: error during firmware upload part1 [ 1745.098045][T22756] Registered device nBox DVB-T Dongle [ 1745.232801][T22824] lo speed is unknown, defaulting to 1000 [ 1745.360639][T20875] usb 2-1: USB disconnect, device number 48 [ 1745.456016][T22843] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1745.477954][T22843] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1745.490500][T22843] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1745.505748][T22843] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 1745.593921][T22756] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1745.753116][T22756] usb 9-1: Using ep0 maxpacket: 16 [ 1745.758908][T22756] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1745.771324][T22756] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.771363][T22756] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1745.771389][T22756] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1745.771404][T22756] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1745.771419][T22756] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1745.833587][T22756] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1745.833616][T22756] usb 9-1: Manufacturer: syz [ 1745.860136][T22756] usb 9-1: config 0 descriptor?? [ 1745.879926][T20875] Unregistered device nBox DVB-T Dongle [ 1745.887839][T20875] as10x_usb: device has been disconnected [ 1746.021164][T22856] netlink: 'syz.0.4094': attribute type 32 has an invalid length. [ 1746.030087][T22856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4094'. [ 1746.053656][T22856] bond3: Setting coupled_control to off (0) [ 1746.129072][T22856] lo speed is unknown, defaulting to 1000 [ 1746.175925][T22756] rc_core: IR keymap rc-hauppauge not found [ 1746.175981][T22756] Registered IR keymap rc-empty [ 1746.176065][T22756] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1746.196819][T22756] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1746.214950][T22756] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1746.231098][T22756] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input75 [ 1746.248298][T22756] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1746.273557][T22756] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1746.293595][T22756] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1746.315653][T22756] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1746.335365][T22756] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1746.352341][T22756] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1746.373448][T22756] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1746.393770][T22756] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1746.415031][T22756] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1746.432343][T22756] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1746.454657][T22756] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1746.465361][T22756] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1746.650345][T22756] usb 9-1: USB disconnect, device number 78 [ 1746.851944][T22866] loop9: detected capacity change from 0 to 7 [ 1746.868683][T22866] Dev loop9: unable to read RDB block 7 [ 1746.868723][T22866] loop9: unable to read partition table [ 1746.868840][T22866] loop9: partition table beyond EOD, truncated [ 1746.868863][T22866] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1747.553351][T22756] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1747.753204][T22756] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 1747.764555][T22756] usb 2-1: config 1 interface 0 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1747.782772][T22756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.782801][T22756] usb 2-1: Product: syz [ 1747.782819][T22756] usb 2-1: Manufacturer: syz [ 1747.782831][T22756] usb 2-1: SerialNumber: syz [ 1748.821223][T22902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1749.073689][T22756] usb 2-1: USB disconnect, device number 49 [ 1749.133623][ T30] audit: type=1400 audit(1788088984.947:2525): avc: denied { write } for pid=22890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1749.265154][T22912] fuse: fd is not a fuse device [ 1749.446508][ T30] audit: type=1400 audit(1788088985.257:2526): avc: denied { write } for pid=22913 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1749.533734][T22902] FAULT_INJECTION: forcing a failure. [ 1749.533734][T22902] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.533770][T22902] CPU: 0 UID: 0 PID: 22902 Comm: syz.8.4104 Tainted: G L syzkaller #0 PREEMPT(full) [ 1749.533788][T22902] Tainted: [L]=SOFTLOCKUP [ 1749.533793][T22902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1749.533801][T22902] Call Trace: [ 1749.533806][T22902] [ 1749.533811][T22902] dump_stack_lvl+0x100/0x190 [ 1749.533833][T22902] should_fail_ex.cold+0x5/0xa [ 1749.533848][T22902] ? __netlink_lookup+0x652/0x900 [ 1749.533867][T22902] should_failslab+0xc2/0x120 [ 1749.533882][T22902] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1749.533894][T22902] ? skb_clone+0x190/0x400 [ 1749.533909][T22902] skb_clone+0x190/0x400 [ 1749.533920][T22902] netlink_deliver_tap+0xaed/0xcc0 [ 1749.533940][T22902] netlink_unicast+0x62b/0x850 [ 1749.533959][T22902] ? __pfx_netlink_unicast+0x10/0x10 [ 1749.533980][T22902] netlink_sendmsg+0x8b0/0xda0 [ 1749.534002][T22902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1749.534021][T22902] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1749.534042][T22902] ____sys_sendmsg+0xa4d/0xbe0 [ 1749.534055][T22902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1749.534073][T22902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1749.534095][T22902] ___sys_sendmsg+0x190/0x1e0 [ 1749.534111][T22902] ? __pfx____sys_sendmsg+0x10/0x10 [ 1749.534133][T22902] ? __rcu_read_unlock+0x26a/0x5e0 [ 1749.534157][T22902] __sys_sendmsg+0x160/0x210 [ 1749.534175][T22902] ? __pfx___sys_sendmsg+0x10/0x10 [ 1749.534201][T22902] do_syscall_64+0x123/0x790 [ 1749.534216][T22902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.534229][T22902] RIP: 0033:0x7fce3c59e159 [ 1749.534240][T22902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1749.534252][T22902] RSP: 002b:00007fce3d499028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1749.534264][T22902] RAX: ffffffffffffffda RBX: 00007fce3c825fa0 RCX: 00007fce3c59e159 [ 1749.534272][T22902] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1749.534279][T22902] RBP: 00007fce3d499090 R08: 0000000000000000 R09: 0000000000000000 [ 1749.534287][T22902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.534294][T22902] R13: 00007fce3c826038 R14: 00007fce3c825fa0 R15: 00007fffcf6442b8 [ 1749.534310][T22902] [ 1749.955126][T22902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1749.955157][T22902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1749.978963][T22902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1749.978989][T22902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1750.286772][ T30] audit: type=1326 audit(1788088986.097:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.0.4109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09799e159 code=0x7ffc0000 [ 1750.317294][ T30] audit: type=1326 audit(1788088986.127:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.0.4109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09799e159 code=0x7ffc0000 [ 1750.317338][ T30] audit: type=1326 audit(1788088986.127:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.0.4109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09799e159 code=0x7ffc0000 [ 1750.373559][ T30] audit: type=1326 audit(1788088986.187:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.0.4109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff09799e159 code=0x7ffc0000 [ 1750.426236][ T30] audit: type=1326 audit(1788088986.237:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.0.4109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff09795e98e code=0x7ffc0000 [ 1750.457495][ T30] audit: type=1326 audit(1788088986.267:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.0.4109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff09795e98e code=0x7ffc0000 [ 1750.492032][ T30] audit: type=1326 audit(1788088986.307:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.0.4109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff09795e98e code=0x7ffc0000 [ 1750.521145][ T30] audit: type=1326 audit(1788088986.337:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22924 comm="syz.0.4109" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff09795e98e code=0x7ffc0000 [ 1750.611745][T22935] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1751.218571][T22952] ip6erspan0: entered allmulticast mode [ 1751.242110][T22958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4116'. [ 1751.262760][T22958] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 1751.444386][T20875] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1751.605759][T20875] usb 9-1: Using ep0 maxpacket: 32 [ 1751.616274][T20875] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1751.635421][T20875] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.635456][T20875] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.635478][T20875] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1751.635505][T20875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.796401][T20875] usb 9-1: config 0 descriptor?? [ 1752.834832][T22980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1752.835130][T22980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1753.327164][T22987] loop5: detected capacity change from 0 to 7 [ 1753.341923][T22987] Dev loop5: unable to read RDB block 7 [ 1753.341960][T22987] loop5: unable to read partition table [ 1753.342083][T22987] loop5: partition table beyond EOD, truncated [ 1753.342104][T22987] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1753.378717][T20875] hid (null): invalid report_size 25705 [ 1753.478333][T20875] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.0025/input/input76 [ 1753.586635][T22960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1753.596194][T22960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1753.641049][T20875] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.0025/input/input77 [ 1753.775977][T20875] kye 0003:0458:5011.0025: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.8-1/input0 [ 1753.921348][T20875] usb 9-1: USB disconnect, device number 79 [ 1754.215355][T22996] fido_id[22996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1754.616355][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 1754.616382][ T30] audit: type=1326 audit(1788088990.427:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23000 comm="syz.1.4125" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568019e159 code=0x7ffc0000 [ 1754.651405][ T30] audit: type=1326 audit(1788088990.467:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23000 comm="syz.1.4125" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568019e159 code=0x7ffc0000 [ 1754.653113][ T30] audit: type=1326 audit(1788088990.467:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23000 comm="syz.1.4125" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f568019e159 code=0x7ffc0000 [ 1754.756835][ T30] audit: type=1326 audit(1788088990.567:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23000 comm="syz.1.4125" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568019e159 code=0x7ffc0000 [ 1754.794563][ T30] audit: type=1400 audit(1788088990.607:2607): avc: denied { write } for pid=22985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1754.919659][T20875] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1755.062352][T20875] usb 9-1: device descriptor read/64, error -71 [ 1755.302448][T20875] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1755.432450][T20875] usb 9-1: device descriptor read/64, error -71 [ 1755.542573][T20875] usb usb9-port1: attempt power cycle [ 1756.162829][T20875] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1756.212523][T20875] usb 9-1: device descriptor read/8, error -71 [ 1756.552311][T20875] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1756.592752][T20875] usb 9-1: device descriptor read/8, error -71 [ 1756.702798][T20875] usb usb9-port1: unable to enumerate USB device [ 1756.918461][ T30] audit: type=1326 audit(1788088992.737:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23000 comm="syz.1.4125" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f568019e159 code=0x7ffc0000 [ 1756.949648][ T30] audit: type=1400 audit(1788088992.767:2609): avc: denied { write } for pid=23017 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1757.633267][T20875] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1757.862519][T20875] usb 2-1: Using ep0 maxpacket: 32 [ 1757.868616][T20875] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1757.878595][T20875] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1757.878635][T20875] usb 2-1: config 0 has no interface number 0 [ 1757.894792][T20875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.894818][T20875] usb 2-1: Product: syz [ 1757.894835][T20875] usb 2-1: Manufacturer: syz [ 1757.894845][T20875] usb 2-1: SerialNumber: syz [ 1758.080807][T20875] usb 2-1: config 0 descriptor?? [ 1758.095359][T20875] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1758.311436][T20875] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1758.331666][T20875] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1758.600404][ T30] audit: type=1400 audit(1788088994.407:2610): avc: denied { write } for pid=23028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1758.767401][ T30] audit: type=1400 audit(1788088994.577:2611): avc: denied { read } for pid=23025 comm="syz.1.4129" path="socket:[82436]" dev="sockfs" ino=82436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1758.819122][T23026] fuse: Bad value for 'group_id' [ 1758.819146][T23026] fuse: Bad value for 'group_id' [ 1758.834823][ T30] audit: type=1400 audit(1788088994.647:2612): avc: denied { ioctl } for pid=23025 comm="syz.1.4129" path="/23/trace/set_event" dev="tracefs" ino=3431 ioctlcmd=0x4161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1758.904044][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1758.913496][T20875] usb 2-1: USB disconnect, device number 50 [ 1758.933145][T20875] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1758.954380][T20875] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1758.971116][T20875] quatech2 2-1:0.51: device disconnected [ 1759.036301][T23049] ip6erspan0: entered allmulticast mode [ 1759.061355][T23058] lo: Caught tx_queue_len zero misconfig [ 1759.069928][T23058] netlink: 252 bytes leftover after parsing attributes in process `syz.2.4136'. [ 1759.084725][T23053] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4133'. [ 1759.098788][T23053] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 1759.112176][T23058] netlink: 'syz.2.4136': attribute type 11 has an invalid length. [ 1759.112625][T23058] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4136'. [ 1759.725617][T23073] overlayfs: failed to clone upperpath [ 1759.734513][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1759.734538][ T30] audit: type=1400 audit(1788088995.547:2614): avc: denied { ioctl } for pid=23074 comm="syz.8.4142" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1759.770886][ T30] audit: type=1400 audit(1788088995.587:2615): avc: denied { setopt } for pid=23074 comm="syz.8.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1759.871011][T23079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1759.881510][T23079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1760.037378][T22756] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1760.883459][T22756] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1760.893404][ T30] audit: type=1326 audit(1788088996.697:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23088 comm="syz.8.4148" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce3c59e159 code=0x0 [ 1760.920990][T22756] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1760.921006][T22756] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1760.946004][T22756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1760.946032][T22756] usb 2-1: SerialNumber: syz [ 1761.227417][T23077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1761.227716][T23077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.559408][T22756] usb 2-1: invalid UAC_HEADER (v1) [ 1761.620754][T23102] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4151'. [ 1761.800338][T22756] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1761.828095][T22756] usb 2-1: USB disconnect, device number 51 [ 1761.878134][T23106] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4153'. [ 1761.911714][T21670] udevd[21670]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1763.424858][T23117] ip6erspan0: entered allmulticast mode [ 1763.470492][T23117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4157'. [ 1763.489438][T23117] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 1763.594773][ T30] audit: type=1326 audit(1788088999.407:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23118 comm="syz.6.4158" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6664d9e159 code=0x0 [ 1763.656287][T23127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1763.678892][T23106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1763.687743][T17988] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1763.688049][T17988] Bluetooth: hci5: Injecting HCI hardware error event [ 1763.695517][ T5624] Bluetooth: hci5: hardware error 0x00 [ 1763.699622][T23106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1764.599312][T23141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4162'. [ 1764.684546][T23145] ip_tables: iptables: counters copy to user failed while replacing table [ 1764.822824][ T5858] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1764.974036][ T5858] usb 9-1: Using ep0 maxpacket: 32 [ 1764.979904][ T5858] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1764.994811][ T5858] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1764.994842][ T5858] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1764.994871][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.028884][ T5858] usb 9-1: config 0 descriptor?? [ 1765.995257][ T5624] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1767.678025][ T5858] corsair-cpro 0003:1B1C:0C10.0026: unknown main item tag 0x0 [ 1767.678065][ T5858] corsair-cpro 0003:1B1C:0C10.0026: unknown main item tag 0x0 [ 1767.678091][ T5858] corsair-cpro 0003:1B1C:0C10.0026: unknown main item tag 0x0 [ 1767.678109][ T5858] corsair-cpro 0003:1B1C:0C10.0026: unknown main item tag 0x0 [ 1767.678126][ T5858] corsair-cpro 0003:1B1C:0C10.0026: unknown main item tag 0x0 [ 1767.727039][T23172] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1767.738047][ T5858] corsair-cpro 0003:1B1C:0C10.0026: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.8-1/input0 [ 1767.801563][ T30] audit: type=1400 audit(1788089003.607:2618): avc: denied { listen } for pid=23168 comm="syz.2.4171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1767.836817][ T30] audit: type=1400 audit(1788089003.647:2619): avc: denied { write } for pid=23168 comm="syz.2.4171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1768.134514][ T5858] corsair-cpro 0003:1B1C:0C10.0026: probe with driver corsair-cpro failed with error -110 [ 1768.161045][ T5858] usb 9-1: USB disconnect, device number 84 [ 1768.659420][ T30] audit: type=1400 audit(1788089004.467:2620): avc: denied { read } for pid=23196 comm="syz.8.4176" path="socket:[82859]" dev="sockfs" ino=82859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1768.742697][T23201] netlink: 'syz.8.4176': attribute type 10 has an invalid length. [ 1768.758017][T23201] syz_tun: entered promiscuous mode [ 1769.280306][T23201] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1769.613547][ T5858] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1769.909254][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 1769.929570][ T5858] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1770.654078][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1770.654124][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1770.654158][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1770.654181][ T5858] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1770.654197][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1770.733874][ T5858] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1770.733903][ T5858] usb 2-1: Manufacturer: syz [ 1770.757387][ T5858] usb 2-1: config 0 descriptor?? [ 1770.842958][T23211] binder: 23209:23211 ioctl c018620c 2000000001c0 returned -1 [ 1770.945622][T23215] fuse: Bad value for 'fd' [ 1770.989799][ T30] audit: type=1326 audit(1788089006.797:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23212 comm="syz.6.4181" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6664d9e159 code=0x7fdc0000 [ 1771.111643][T23201] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1771.201547][T23211] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1771.201835][T23211] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1771.201885][T23211] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1771.243986][T23211] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1771.271600][T23211] hwrng_fill thread creation failed [ 1772.182720][ T5858] rc_core: IR keymap rc-hauppauge not found [ 1772.182744][ T5858] Registered IR keymap rc-empty [ 1772.182826][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1772.202332][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1772.223012][ T5858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1772.240573][ T5858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input78 [ 1772.258084][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1772.283474][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1772.303845][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1772.328080][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1772.344884][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1772.362985][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1772.388317][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1772.412964][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1772.437236][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1772.453637][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1772.475800][ T5858] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1772.488423][ T5858] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1772.519034][ T5858] usb 2-1: USB disconnect, device number 52 [ 1772.963593][T17988] Bluetooth: hci4: command 0x0c1a tx timeout [ 1773.037626][ T30] audit: type=1400 audit(1788089008.847:2622): avc: denied { associate } for pid=23246 comm="syz.8.4189" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1773.075420][ T30] audit: type=1400 audit(1788089008.887:2623): avc: denied { map } for pid=23246 comm="syz.8.4189" path="/proc/1155/task/1156/ns" dev="proc" ino=83258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1773.141410][T23250] lo speed is unknown, defaulting to 1000 [ 1773.282797][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 1774.079527][T23259] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4191'. [ 1774.169629][T23266] sock: sock_timestamping_bind_phc: sock not bind to device [ 1774.442593][T22756] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1774.592389][T22756] usb 9-1: Using ep0 maxpacket: 32 [ 1774.598124][T22756] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1774.608416][T22756] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1774.616744][T22756] usb 9-1: config 0 has no interface number 0 [ 1774.638578][ T5858] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1774.668480][T22756] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.677055][T22756] usb 9-1: Product: syz [ 1774.677083][T22756] usb 9-1: Manufacturer: syz [ 1774.677095][T22756] usb 9-1: SerialNumber: syz [ 1774.694394][T22756] usb 9-1: config 0 descriptor?? [ 1774.793101][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 1774.798795][ T5858] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1774.810528][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1774.810566][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1774.810607][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1774.810623][ T5858] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1774.810638][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1774.844219][ T5858] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1774.844237][ T5858] usb 2-1: Manufacturer: syz [ 1774.856563][ T5858] usb 2-1: config 0 descriptor?? [ 1774.900917][ T9663] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1775.123601][T22756] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1775.123635][T22756] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1775.182320][ T5858] rc_core: IR keymap rc-hauppauge not found [ 1775.182343][ T5858] Registered IR keymap rc-empty [ 1775.182439][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1775.202940][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1775.225491][T23267] ima: policy update failed [ 1775.250118][ T5858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1775.273704][ T5858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input79 [ 1775.295032][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1775.315770][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1775.332560][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1775.350141][ T30] audit: type=1802 audit(1788089011.137:2624): pid=23267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.4192" res=0 errno=0 [ 1775.370585][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 1775.370741][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1775.386247][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1775.402486][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1775.410687][T23266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.410971][T23266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.427847][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1775.444264][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1775.459337][T22756] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1775.459518][T22756] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1775.472941][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1775.492361][ T5858] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1775.515493][ T5858] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1775.532375][ T5858] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1775.554787][T22756] usb 9-1: USB disconnect, device number 85 [ 1775.611776][ T10] usb 2-1: USB disconnect, device number 53 [ 1776.045150][T23298] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4201'. [ 1776.150340][T23302] sockfs: Unknown parameter 'lowerdir' [ 1776.311275][T22381] ffs_data_put(): freeing [ 1777.442517][ T5624] Bluetooth: hci2: command 0x0c1a tx timeout [ 1777.626934][ T30] audit: type=1400 audit(1788089013.437:2625): avc: denied { ioctl } for pid=23303 comm="syz.8.4204" path="socket:[83590]" dev="sockfs" ino=83590 ioctlcmd=0x5604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1780.438175][T23347] jffs2: notice: (23347) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1780.711132][T23357] binder: Unknown parameter 'áÿÿÿ' [ 1780.914342][T22756] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 1781.073042][T22756] usb 9-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1781.084519][T22756] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1781.084546][T22756] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1781.084577][T22756] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.361827][T22756] usb 9-1: USB disconnect, device number 86 [ 1781.379734][T23372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.407022][T23372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.802343][T23378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4225'. [ 1784.058561][T23391] netlink: 'syz.8.4227': attribute type 61 has an invalid length. [ 1784.058603][T23391] netlink: 'syz.8.4227': attribute type 62 has an invalid length. [ 1784.399407][T23396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.399649][T23396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.517844][T23396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.518102][T23396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.935134][T23410] ipvlan2: entered allmulticast mode [ 1784.935162][T23410] ip6gretap0: entered allmulticast mode [ 1785.384368][T22756] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1785.635967][T22756] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1785.646148][T22756] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1785.646173][T22756] usb 2-1: config 0 has no interface number 0 [ 1785.646197][T22756] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1785.646215][T22756] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1785.646233][T22756] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1785.844006][T22756] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1785.844035][T22756] usb 2-1: Product: syz [ 1785.844046][T22756] usb 2-1: SerialNumber: syz [ 1785.866259][T22756] usb 2-1: config 0 descriptor?? [ 1785.890868][T22756] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1785.901966][T22756] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input80 [ 1786.071252][T23429] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4238'. [ 1786.564714][T23435] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4239'. [ 1786.771021][T23439] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1786.783527][T23439] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1786.802594][T17988] Bluetooth: hci2: command 0x0c1a tx timeout [ 1786.959975][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1786.969535][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1786.977023][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1786.984566][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1786.984917][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1786.985183][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1786.985724][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1786.985892][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1786.986062][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1786.986258][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1786.987906][ T5858] usb 2-1: USB disconnect, device number 54 [ 1786.995807][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1787.186208][ T5858] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1787.258833][T23449] mmap: syz.2.4243 (23449): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1787.377964][ T30] audit: type=1400 audit(1788089023.187:2626): avc: denied { map } for pid=23450 comm="syz.0.4244" path="/dev/ublkc4" dev="devtmpfs" ino=4771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1788.726135][T23453] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4245'. [ 1788.726357][T23453] syz_tun: Device is already in use. [ 1789.041374][T23468] FAULT_INJECTION: forcing a failure. [ 1789.041374][T23468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.056607][T23468] CPU: 0 UID: 0 PID: 23468 Comm: syz.8.4250 Tainted: G L syzkaller #0 PREEMPT(full) [ 1789.056635][T23468] Tainted: [L]=SOFTLOCKUP [ 1789.056640][T23468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1789.056647][T23468] Call Trace: [ 1789.056653][T23468] [ 1789.056659][T23468] dump_stack_lvl+0x100/0x190 [ 1789.056682][T23468] should_fail_ex.cold+0x5/0xa [ 1789.056700][T23468] _copy_from_iter+0x1f4/0x1690 [ 1789.056720][T23468] ? __asan_memset+0x23/0x50 [ 1789.056738][T23468] ? __pfx__copy_from_iter+0x10/0x10 [ 1789.056755][T23468] ? __pfx___alloc_skb+0x10/0x10 [ 1789.056779][T23468] netlink_sendmsg+0x808/0xda0 [ 1789.056800][T23468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1789.056818][T23468] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1789.056839][T23468] ____sys_sendmsg+0xa4d/0xbe0 [ 1789.056852][T23468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1789.056870][T23468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1789.056887][T23468] ? lock_acquire+0x1d1/0x380 [ 1789.056899][T23468] ? get_pid_task+0x2a/0x250 [ 1789.056917][T23468] ___sys_sendmsg+0x190/0x1e0 [ 1789.056932][T23468] ? __pfx____sys_sendmsg+0x10/0x10 [ 1789.056947][T23468] ? get_pid_task+0x106/0x250 [ 1789.056967][T23468] ? find_held_lock+0x2b/0x80 [ 1789.056993][T23468] __sys_sendmsg+0x160/0x210 [ 1789.057011][T23468] ? __pfx___sys_sendmsg+0x10/0x10 [ 1789.057037][T23468] do_syscall_64+0x123/0x790 [ 1789.057053][T23468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.057066][T23468] RIP: 0033:0x7fce3c59e159 [ 1789.057077][T23468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1789.057088][T23468] RSP: 002b:00007fce3d499028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1789.057101][T23468] RAX: ffffffffffffffda RBX: 00007fce3c825fa0 RCX: 00007fce3c59e159 [ 1789.057109][T23468] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1789.057116][T23468] RBP: 00007fce3d499090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.057123][T23468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1789.057131][T23468] R13: 00007fce3c826038 R14: 00007fce3c825fa0 R15: 00007fffcf6442b8 [ 1789.057147][T23468] [ 1789.459263][T23467] ip6erspan0: entered allmulticast mode [ 1789.616951][T23469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4251'. [ 1789.768115][T23470] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 1789.860385][T23478] netlink: 'syz.1.4249': attribute type 5 has an invalid length. [ 1790.692288][ T30] audit: type=1400 audit(1788089026.497:2627): avc: denied { ioctl } for pid=23484 comm="syz.2.4255" path="socket:[84398]" dev="sockfs" ino=84398 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1790.791074][T23489] random: crng reseeded on system resumption [ 1790.950278][T23491] FAULT_INJECTION: forcing a failure. [ 1790.950278][T23491] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.950317][T23491] CPU: 0 UID: 0 PID: 23491 Comm: syz.6.4257 Tainted: G L syzkaller #0 PREEMPT(full) [ 1790.950335][T23491] Tainted: [L]=SOFTLOCKUP [ 1790.950339][T23491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1790.950347][T23491] Call Trace: [ 1790.950352][T23491] [ 1790.950357][T23491] dump_stack_lvl+0x100/0x190 [ 1790.950381][T23491] should_fail_ex.cold+0x5/0xa [ 1790.950399][T23491] should_failslab+0xc2/0x120 [ 1790.950414][T23491] __kmalloc_cache_noprof+0x91/0x6d0 [ 1790.950431][T23491] ? __lock_acquire+0x4c5/0x1ec0 [ 1790.950443][T23491] ? __vb2_init_fileio+0x18f/0x1000 [ 1790.950475][T23491] __vb2_init_fileio+0x18f/0x1000 [ 1790.950497][T23491] vb2_core_poll+0x611/0x740 [ 1790.950514][T23491] vb2_poll+0x4b/0xe0 [ 1790.950531][T23491] vb2_fop_poll+0x10e/0x350 [ 1790.950547][T23491] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1790.950562][T23491] v4l2_poll+0x15f/0x220 [ 1790.950578][T23491] ? __pfx_v4l2_poll+0x10/0x10 [ 1790.950591][T23491] do_sys_poll+0x6e5/0xe90 [ 1790.950603][T23491] ? is_bpf_text_address+0x8a/0x1a0 [ 1790.950624][T23491] ? __pfx_do_sys_poll+0x10/0x10 [ 1790.950635][T23491] ? unwind_get_return_address+0x59/0xa0 [ 1790.950666][T23491] ? lock_acquire+0x1d1/0x380 [ 1790.950677][T23491] ? __might_fault+0xc5/0x140 [ 1790.950697][T23491] ? __pfx_pollwake+0x10/0x10 [ 1790.950710][T23491] ? __pfx_pollwake+0x10/0x10 [ 1790.950724][T23491] ? __pfx_pollwake+0x10/0x10 [ 1790.950737][T23491] ? __pfx_pollwake+0x10/0x10 [ 1790.950751][T23491] ? __pfx_pollwake+0x10/0x10 [ 1790.950763][T23491] ? __pfx_pollwake+0x10/0x10 [ 1790.950777][T23491] ? __pfx_pollwake+0x10/0x10 [ 1790.950790][T23491] ? __pfx_pollwake+0x10/0x10 [ 1790.950803][T23491] ? __pfx_pollwake+0x10/0x10 [ 1790.950817][T23491] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1790.950831][T23491] ? set_user_sigmask+0x1e1/0x270 [ 1790.950850][T23491] ? __pfx_set_user_sigmask+0x10/0x10 [ 1790.950868][T23491] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1790.950882][T23491] ? __fget_files+0x21f/0x3d0 [ 1790.950897][T23491] __x64_sys_ppoll+0x2b5/0x350 [ 1790.950912][T23491] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1790.950924][T23491] ? ksys_write+0x1ac/0x250 [ 1790.950935][T23491] ? __pfx_ksys_write+0x10/0x10 [ 1790.950950][T23491] do_syscall_64+0x123/0x790 [ 1790.950969][T23491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.950982][T23491] RIP: 0033:0x7f6664d9e159 [ 1790.950997][T23491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.951009][T23491] RSP: 002b:00007f6665c1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1790.951022][T23491] RAX: ffffffffffffffda RBX: 00007f6665025fa0 RCX: 00007f6664d9e159 [ 1790.951030][T23491] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1790.951038][T23491] RBP: 00007f6665c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.951045][T23491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1790.951053][T23491] R13: 00007f6665026038 R14: 00007f6665025fa0 R15: 00007fff03d19258 [ 1790.951072][T23491] [ 1791.000544][ T5858] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1791.171479][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 1791.381721][ T5858] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1791.381762][ T5858] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1791.409524][ T5858] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 179, changing to 7 [ 1791.436427][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.436457][ T5858] usb 2-1: Product: syz [ 1791.436475][ T5858] usb 2-1: Manufacturer: syz [ 1791.436486][ T5858] usb 2-1: SerialNumber: syz [ 1791.508209][ T5858] snd-ua101 2-1:1.0: invalid num_altsetting [ 1791.524890][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.639288][T23496] 9p: Bad value for 'rfdno' [ 1791.760050][ T30] audit: type=1400 audit(1788089027.567:2628): avc: denied { nlmsg_read } for pid=23498 comm="syz.6.4261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1792.786835][T23504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4263'. [ 1792.839011][T23504] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4263'. [ 1792.839060][T23504] nbd: device at index 64 is going down [ 1793.940353][T22810] udevd[22810]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1794.016296][T21670] udevd[21670]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1794.141985][T12270] usb 2-1: USB disconnect, device number 55 [ 1794.312403][ T5858] usb 9-1: new full-speed USB device number 87 using dummy_hcd [ 1794.465160][ T5858] usb 9-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 1794.479156][ T5858] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.487327][ T5858] usb 9-1: Product: syz [ 1794.493382][ T5858] usb 9-1: Manufacturer: syz [ 1794.498353][ T5858] usb 9-1: SerialNumber: syz [ 1795.820185][ T5858] usb 9-1: Can't get UAC3 power state for id 10 [ 1795.838627][ T5858] usb 9-1: BAAD MICROPHONE c_chmask mismatch [ 1795.874737][T23516] X25: received unknown 00 with LCI 000 [ 1795.880732][ T30] audit: type=1400 audit(1788089031.687:2629): avc: denied { bind } for pid=23515 comm="syz.1.4266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1796.103906][ T5858] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1796.146701][ T5858] usb 9-1: USB disconnect, device number 87 [ 1796.279871][T22809] udevd[22809]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1796.431509][T23523] sit0: entered promiscuous mode [ 1796.447812][T23523] netlink: 'syz.6.4268': attribute type 1 has an invalid length. [ 1796.447838][T23523] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4268'. [ 1796.567397][T23534] netlink: 'syz.2.4270': attribute type 10 has an invalid length. [ 1796.614225][T23534] team0: Device wg2 is of different type [ 1796.821739][ T30] audit: type=1400 audit(1788089032.627:2630): avc: denied { write } for pid=23524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1796.929732][T23542] rnbd_client L607: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 1797.098538][T23551] FAULT_INJECTION: forcing a failure. [ 1797.098538][T23551] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.098573][T23551] CPU: 0 UID: 0 PID: 23551 Comm: syz.1.4273 Tainted: G L syzkaller #0 PREEMPT(full) [ 1797.098591][T23551] Tainted: [L]=SOFTLOCKUP [ 1797.098596][T23551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1797.098603][T23551] Call Trace: [ 1797.098607][T23551] [ 1797.098613][T23551] dump_stack_lvl+0x100/0x190 [ 1797.098635][T23551] should_fail_ex.cold+0x5/0xa [ 1797.098650][T23551] ? __netlink_lookup+0x652/0x900 [ 1797.098668][T23551] should_failslab+0xc2/0x120 [ 1797.098682][T23551] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1797.098695][T23551] ? skb_clone+0x190/0x400 [ 1797.098709][T23551] skb_clone+0x190/0x400 [ 1797.098720][T23551] netlink_deliver_tap+0xaed/0xcc0 [ 1797.098740][T23551] netlink_unicast+0x62b/0x850 [ 1797.098759][T23551] ? __pfx_netlink_unicast+0x10/0x10 [ 1797.098780][T23551] netlink_sendmsg+0x8b0/0xda0 [ 1797.098799][T23551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1797.098818][T23551] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1797.098839][T23551] ____sys_sendmsg+0xa4d/0xbe0 [ 1797.098852][T23551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1797.098870][T23551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1797.098888][T23551] ? lock_acquire+0x1d1/0x380 [ 1797.098900][T23551] ? get_pid_task+0x2a/0x250 [ 1797.098918][T23551] ___sys_sendmsg+0x190/0x1e0 [ 1797.098933][T23551] ? __pfx____sys_sendmsg+0x10/0x10 [ 1797.098948][T23551] ? get_pid_task+0x106/0x250 [ 1797.098969][T23551] ? find_held_lock+0x2b/0x80 [ 1797.098995][T23551] __sys_sendmsg+0x160/0x210 [ 1797.099013][T23551] ? __pfx___sys_sendmsg+0x10/0x10 [ 1797.099039][T23551] do_syscall_64+0x123/0x790 [ 1797.099054][T23551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.099067][T23551] RIP: 0033:0x7f568019e159 [ 1797.099078][T23551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1797.099089][T23551] RSP: 002b:00007f56810e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1797.099101][T23551] RAX: ffffffffffffffda RBX: 00007f5680425fa0 RCX: 00007f568019e159 [ 1797.099109][T23551] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 0000000000000003 [ 1797.099123][T23551] RBP: 00007f56810e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.099130][T23551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.099137][T23551] R13: 00007f5680426038 R14: 00007f5680425fa0 R15: 00007ffdab326c38 [ 1797.099154][T23551] [ 1797.407864][ T30] audit: type=1400 audit(1788089033.217:2631): avc: denied { write } for pid=23549 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1799.058207][ T30] audit: type=1400 audit(1788089034.867:2632): avc: denied { bind } for pid=23568 comm="syz.1.4276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1799.058252][ T30] audit: type=1400 audit(1788089034.867:2633): avc: denied { name_bind } for pid=23568 comm="syz.1.4276" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1799.058283][ T30] audit: type=1400 audit(1788089034.867:2634): avc: denied { node_bind } for pid=23568 comm="syz.1.4276" src=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1800.376610][T23542] rtrs_client L2095: : Failed to resolve address, err: -ENODEV [ 1800.437216][T23588] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1800.478930][T23542] rtrs_client L2636: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 1800.517072][T23588] netlink: 16399 bytes leftover after parsing attributes in process `syz.6.4280'. [ 1800.596316][ T30] audit: type=1400 audit(1788089036.397:2635): avc: denied { write } for pid=23562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1800.943774][ T30] audit: type=1400 audit(1788089036.757:2636): avc: denied { write } for pid=23605 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1801.064441][T23612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4285'. [ 1801.711293][ T30] audit: type=1400 audit(1788089037.517:2637): avc: denied { getopt } for pid=23630 comm="syz.2.4291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1806.556048][T20951] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1806.844655][T23677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1806.844891][T23677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.367546][ T30] audit: type=1400 audit(1788089043.177:2638): avc: denied { module_load } for pid=23684 comm="syz.2.4294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1807.785635][ T30] audit: type=1400 audit(1788089043.587:2639): avc: denied { write } for pid=23689 comm="syz.0.4303" name="functions" dev="configfs" ino=10389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1811.429044][ T30] audit: type=1400 audit(1788089047.237:2640): avc: denied { bind } for pid=23713 comm="syz.6.4307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1812.805332][T23731] can0: slcan on ptm0. [ 1813.890430][T23744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4316'. [ 1814.162706][T23729] can0 (unregistered): slcan off ptm0. [ 1814.366238][T20875] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 1814.552014][ T30] audit: type=1400 audit(1788089050.357:2641): avc: denied { append } for pid=23752 comm="syz.1.4320" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1814.922395][T22756] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1815.062635][ T30] audit: type=1400 audit(1788089050.877:2642): avc: denied { ioctl } for pid=23763 comm="syz.8.4324" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x7509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1815.102758][T22756] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1815.113092][T22756] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.131135][T22756] usb 2-1: config 0 descriptor?? [ 1815.144546][T23766] bridge0: port 3(ipvlan3) entered blocking state [ 1815.155762][T23766] bridge0: port 3(ipvlan3) entered disabled state [ 1815.165408][T23766] ipvlan3: entered allmulticast mode [ 1815.170936][T23766] bridge0: entered allmulticast mode [ 1815.187159][T23766] ipvlan3: left allmulticast mode [ 1815.197723][T23766] bridge0: left allmulticast mode [ 1815.382357][T22756] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1815.390070][T22756] [drm:udl_init] *ERROR* Selecting channel failed [ 1815.436921][T22756] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 1815.447029][T22756] [drm] Initialized udl on minor 1 [ 1815.469765][T22756] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1815.606997][T22756] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1815.639962][T22756] usb 2-1: USB disconnect, device number 56 [ 1815.694043][T23779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1815.694300][T23779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1815.833898][T23781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1815.833923][T23781] IPv6: NLM_F_CREATE should be set when creating new route [ 1817.134600][T17988] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 1817.320489][T23802] sctp: [Deprecated]: syz.0.4333 (pid 23802) Use of int in maxseg socket option. [ 1817.320489][T23802] Use struct sctp_assoc_value instead [ 1817.432844][T12270] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1817.572391][T12270] usb 2-1: device descriptor read/64, error -71 [ 1817.628840][T23811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1818.185339][T20875] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1819.156532][T23813] overlayfs: missing 'lowerdir' [ 1819.157253][T23813] overlayfs: conflicting lowerdir path [ 1819.188159][T12270] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1819.284373][T20875] usb 9-1: Using ep0 maxpacket: 32 [ 1819.290045][T20875] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1819.300704][T20875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.319390][T20875] usb 9-1: config 0 descriptor?? [ 1819.326120][T12270] usb 2-1: device descriptor read/64, error -71 [ 1819.353007][T20875] as10x_usb: device has been detected [ 1819.358918][T20875] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1819.394717][T20875] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1819.432509][T12270] usb usb2-port1: attempt power cycle [ 1819.449784][T20875] as10x_usb: error during firmware upload part1 [ 1819.460160][T20875] Registered device nBox DVB-T Dongle [ 1819.604784][T23819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4341'. [ 1819.696645][T23821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4341'. [ 1819.996980][T23823] netlink: 6040 bytes leftover after parsing attributes in process `syz.6.4342'. [ 1820.147545][ T5858] usb 9-1: USB disconnect, device number 89 [ 1820.198788][ T5858] Unregistered device nBox DVB-T Dongle [ 1820.199779][ T5858] as10x_usb: device has been disconnected [ 1820.224725][T12270] kernel read not supported for file /usbmon9 (pid: 12270 comm: kworker/0:6) [ 1820.560927][T23834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.570933][T23834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.754165][ T5858] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 1820.935007][ T5858] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1820.946117][ T5858] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.946158][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.971952][ T5858] mdc800 2-1:1.0: probe fails -> wrong Interface [ 1821.177704][ T5858] usb 2-1: USB disconnect, device number 60 [ 1821.519453][T23854] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1821.544985][ T30] audit: type=1400 audit(1788089057.357:2643): avc: denied { relabelto } for pid=23853 comm="syz.2.4348" name="391" dev="tmpfs" ino=2195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1821.572807][ T30] audit: type=1400 audit(1788089057.387:2644): avc: denied { associate } for pid=23853 comm="syz.2.4348" name="391" dev="tmpfs" ino=2195 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 1821.623633][ T30] audit: type=1400 audit(1788089057.437:2645): avc: denied { mounton } for pid=23853 comm="syz.2.4348" path="/391" dev="tmpfs" ino=2195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1821.652035][T23854] tmpfs: Unknown parameter 'rootqontext' [ 1821.716865][ T30] audit: type=1400 audit(1788089057.517:2646): avc: denied { write } for pid=16351 comm="syz-executor" name="391" dev="tmpfs" ino=2195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1821.754334][ T30] audit: type=1400 audit(1788089057.567:2647): avc: denied { remove_name } for pid=16351 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1821.788652][ T30] audit: type=1400 audit(1788089057.597:2648): avc: denied { write } for pid=16351 comm="syz-executor" name="391" dev="tmpfs" ino=2195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1821.816000][ T30] audit: type=1400 audit(1788089057.637:2649): avc: denied { write } for pid=16351 comm="syz-executor" name="391" dev="tmpfs" ino=2195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1821.845437][ T30] audit: type=1400 audit(1788089057.657:2650): avc: denied { write } for pid=16351 comm="syz-executor" name="391" dev="tmpfs" ino=2195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1821.879899][ T30] audit: type=1400 audit(1788089057.687:2651): avc: denied { rmdir } for pid=16351 comm="syz-executor" name="391" dev="tmpfs" ino=2195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1822.005731][T23859] netlink: 'syz.0.4350': attribute type 11 has an invalid length. [ 1822.005761][T23859] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4350'. [ 1822.057805][T23859] 0: reclassify loop, rule prio 0, protocol 03 [ 1822.320481][T23868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1822.320737][T23868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1823.160815][T23868] overlayfs: missing 'lowerdir' [ 1823.188631][T23868] overlayfs: conflicting lowerdir path [ 1823.255021][T23871] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1823.407108][T23873] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1823.427992][T23876] syzkaller1: entered promiscuous mode [ 1823.428025][T23876] syzkaller1: entered allmulticast mode [ 1823.451874][T23876] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 22 [ 1824.958460][T23889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4360'. [ 1825.023176][T23893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=23893 comm=syz.1.4363 [ 1825.316912][T23894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1825.319934][T23894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1825.347288][T23895] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4362'. [ 1825.677611][T23889] FAULT_INJECTION: forcing a failure. [ 1825.677611][T23889] name failslab, interval 1, probability 0, space 0, times 0 [ 1825.677646][T23889] CPU: 0 UID: 0 PID: 23889 Comm: syz.6.4360 Tainted: G L syzkaller #0 PREEMPT(full) [ 1825.677664][T23889] Tainted: [L]=SOFTLOCKUP [ 1825.677669][T23889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1825.677676][T23889] Call Trace: [ 1825.677681][T23889] [ 1825.677686][T23889] dump_stack_lvl+0x100/0x190 [ 1825.677708][T23889] should_fail_ex.cold+0x5/0xa [ 1825.677726][T23889] should_failslab+0xc2/0x120 [ 1825.677740][T23889] __kmalloc_noprof+0xfc/0x840 [ 1825.677752][T23889] ? __pfx_dynamic_dname+0x10/0x10 [ 1825.677764][T23889] ? tomoyo_encode2+0xfb/0x3c0 [ 1825.677779][T23889] tomoyo_encode2+0xfb/0x3c0 [ 1825.677793][T23889] tomoyo_encode+0x29/0x50 [ 1825.677804][T23889] tomoyo_realpath_from_path+0x18c/0x690 [ 1825.677820][T23889] tomoyo_path_number_perm+0x23c/0x580 [ 1825.677836][T23889] ? tomoyo_path_number_perm+0x22e/0x580 [ 1825.677853][T23889] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1825.677876][T23889] ? __lock_acquire+0x4c5/0x1ec0 [ 1825.677896][T23889] ? __fget_files+0x34/0x3d0 [ 1825.677909][T23889] ? find_held_lock+0x2b/0x80 [ 1825.677924][T23889] ? hook_file_ioctl_common+0x140/0x440 [ 1825.677942][T23889] ? __fget_files+0x21f/0x3d0 [ 1825.677957][T23889] security_file_ioctl+0xd3/0x230 [ 1825.677976][T23889] __x64_sys_ioctl+0xb7/0x210 [ 1825.677995][T23889] do_syscall_64+0x123/0x790 [ 1825.678011][T23889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.678024][T23889] RIP: 0033:0x7f6664d9e159 [ 1825.678035][T23889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1825.678046][T23889] RSP: 002b:00007f6665c1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1825.678058][T23889] RAX: ffffffffffffffda RBX: 00007f6665025fa0 RCX: 00007f6664d9e159 [ 1825.678066][T23889] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000007 [ 1825.678073][T23889] RBP: 00007f6665c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1825.678081][T23889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1825.678088][T23889] R13: 00007f6665026038 R14: 00007f6665025fa0 R15: 00007fff03d19258 [ 1825.678104][T23889] [ 1825.678125][T23889] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1826.420015][T23897] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1826.465670][ T30] audit: type=1400 audit(1788089062.277:2652): avc: denied { append } for pid=23906 comm="syz.6.4367" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1827.681806][T23920] FAULT_INJECTION: forcing a failure. [ 1827.681806][T23920] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.681843][T23920] CPU: 0 UID: 0 PID: 23920 Comm: syz.0.4359 Tainted: G L syzkaller #0 PREEMPT(full) [ 1827.681861][T23920] Tainted: [L]=SOFTLOCKUP [ 1827.681866][T23920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1827.681874][T23920] Call Trace: [ 1827.681878][T23920] [ 1827.681884][T23920] dump_stack_lvl+0x100/0x190 [ 1827.681905][T23920] should_fail_ex.cold+0x5/0xa [ 1827.681923][T23920] should_failslab+0xc2/0x120 [ 1827.681937][T23920] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1827.681949][T23920] ? d_instantiate+0x8a/0xb0 [ 1827.681965][T23920] ? alloc_empty_file+0x5b/0x1c0 [ 1827.681982][T23920] alloc_empty_file+0x5b/0x1c0 [ 1827.681997][T23920] alloc_file_pseudo+0x183/0x290 [ 1827.682013][T23920] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1827.682029][T23920] ? _raw_spin_unlock+0x28/0x50 [ 1827.682046][T23920] ? alloc_fd+0x471/0x7a0 [ 1827.682061][T23920] __anon_inode_getfile+0xe8/0x280 [ 1827.682081][T23920] __anon_inode_getfd+0x5c/0xe0 [ 1827.682101][T23920] __x64_sys_fsopen+0x190/0x220 [ 1827.682120][T23920] do_syscall_64+0x123/0x790 [ 1827.682134][T23920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.682147][T23920] RIP: 0033:0x7ff09799e159 [ 1827.682157][T23920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1827.682168][T23920] RSP: 002b:00007ff0987a5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1827.682180][T23920] RAX: ffffffffffffffda RBX: 00007ff097c25fa0 RCX: 00007ff09799e159 [ 1827.682190][T23920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 1827.682197][T23920] RBP: 00007ff0987a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1827.682205][T23920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1827.682212][T23920] R13: 00007ff097c26038 R14: 00007ff097c25fa0 R15: 00007ffdf3cb7f18 [ 1827.682228][T23920] [ 1828.029322][ T30] audit: type=1400 audit(1788089063.837:2653): avc: denied { write } for pid=23919 comm="syz.6.4369" name="strings" dev="configfs" ino=28318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1828.331605][T23934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4374'. [ 1828.488290][T23936] syzkaller0: entered promiscuous mode [ 1828.488326][T23936] syzkaller0: entered allmulticast mode [ 1828.511137][ T30] audit: type=1400 audit(1788089064.317:2654): avc: denied { accept } for pid=23932 comm="syz.6.4373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1828.564510][T22756] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1828.641304][T23945] overlayfs: missing 'lowerdir' [ 1828.724142][T22756] usb 9-1: Using ep0 maxpacket: 8 [ 1828.729615][T22756] usb 9-1: New USB device found, idVendor=056a, idProduct=037b, bcdDevice= 0.00 [ 1828.743581][T22756] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1828.757326][T22756] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1828.757367][T22756] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.791264][T22756] usb 9-1: config 0 descriptor?? [ 1828.830193][T23955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4376'. [ 1829.215484][T22756] wacom 0003:056A:037B.0027: Unknown device_type for 'HID 056a:037b'. Assuming pen. [ 1829.233383][T22756] wacom 0003:056A:037B.0027: hidraw0: USB HID v80.03 Joystick [HID 056a:037b] on usb-dummy_hcd.8-1/input0 [ 1829.256424][T22756] input: Wacom One by Wacom M Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:037B.0027/input/input81 [ 1829.467851][T23963] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4377'. [ 1829.484861][T23929] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4370'. [ 1829.578804][T23958] Process accounting resumed [ 1829.767889][T23970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1829.777947][T23970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1829.860811][T23972] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1830.063346][T23975] batman_adv: batadv0: Adding interface: veth0 [ 1830.063370][T23975] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1830.063396][T23975] batman_adv: batadv0: Interface activated: veth0 [ 1830.670366][ T30] audit: type=1400 audit(1788089066.477:2655): avc: denied { write } for pid=23977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1830.874993][ T30] audit: type=1400 audit(1788089066.687:2656): avc: denied { write } for pid=23994 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1830.974294][T24002] FAULT_INJECTION: forcing a failure. [ 1830.974294][T24002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1830.974327][T24002] CPU: 0 UID: 0 PID: 24002 Comm: syz.1.4386 Tainted: G L syzkaller #0 PREEMPT(full) [ 1830.974344][T24002] Tainted: [L]=SOFTLOCKUP [ 1830.974349][T24002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1830.974356][T24002] Call Trace: [ 1830.974361][T24002] [ 1830.974366][T24002] dump_stack_lvl+0x100/0x190 [ 1830.974389][T24002] should_fail_ex.cold+0x5/0xa [ 1830.974407][T24002] _copy_from_user+0x2e/0xd0 [ 1830.974426][T24002] l2cap_sock_setsockopt+0x196b/0x2390 [ 1830.974444][T24002] ? __pfx_sock_has_perm+0x10/0x10 [ 1830.974463][T24002] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 1830.974481][T24002] ? find_held_lock+0x2b/0x80 [ 1830.974497][T24002] ? __fget_files+0x215/0x3d0 [ 1830.974513][T24002] ? selinux_socket_setsockopt+0x6a/0x80 [ 1830.974529][T24002] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 1830.974545][T24002] do_sock_setsockopt+0xf3/0x1d0 [ 1830.974568][T24002] __sys_setsockopt+0x195/0x220 [ 1830.974589][T24002] __x64_sys_setsockopt+0xbd/0x160 [ 1830.974605][T24002] ? do_syscall_64+0xae/0x790 [ 1830.974619][T24002] ? lockdep_hardirqs_on+0x7d/0x110 [ 1830.974631][T24002] do_syscall_64+0x123/0x790 [ 1830.974645][T24002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1830.974658][T24002] RIP: 0033:0x7f568019e159 [ 1830.974669][T24002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1830.974680][T24002] RSP: 002b:00007f56810e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1830.974693][T24002] RAX: ffffffffffffffda RBX: 00007f5680425fa0 RCX: 00007f568019e159 [ 1830.974701][T24002] RDX: 0000000000000003 RSI: 0000000000000006 RDI: 0000000000000004 [ 1830.974708][T24002] RBP: 00007f56810e0090 R08: 0000000000000004 R09: 0000000000000000 [ 1830.974716][T24002] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1830.974724][T24002] R13: 00007f5680426038 R14: 00007f5680425fa0 R15: 00007ffdab326c38 [ 1830.974740][T24002] [ 1831.291687][ T5271] veth1_vlan: left promiscuous mode [ 1831.323701][ T5858] usb 9-1: USB disconnect, device number 90 [ 1831.720250][T24009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1832.201260][ T30] audit: type=1400 audit(1788089068.007:2657): avc: denied { write } for pid=24017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1832.530161][ T30] audit: type=1400 audit(1788089068.337:2658): avc: denied { write } for pid=24036 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1832.611339][T24039] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1836.124474][T24082] befs: (nbd8): unable to read superblock [ 1836.140834][T24083] FAULT_INJECTION: forcing a failure. [ 1836.140834][T24083] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.160887][T24083] CPU: 0 UID: 0 PID: 24083 Comm: syz.1.4404 Tainted: G L syzkaller #0 PREEMPT(full) [ 1836.160909][T24083] Tainted: [L]=SOFTLOCKUP [ 1836.160914][T24083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1836.160921][T24083] Call Trace: [ 1836.160926][T24083] [ 1836.160931][T24083] dump_stack_lvl+0x100/0x190 [ 1836.160953][T24083] should_fail_ex.cold+0x5/0xa [ 1836.160975][T24083] should_failslab+0xc2/0x120 [ 1836.160990][T24083] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1836.161002][T24083] ? d_instantiate+0x8a/0xb0 [ 1836.161018][T24083] ? alloc_empty_file+0x5b/0x1c0 [ 1836.161035][T24083] alloc_empty_file+0x5b/0x1c0 [ 1836.161050][T24083] alloc_file_pseudo+0x183/0x290 [ 1836.161066][T24083] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1836.161082][T24083] ? _raw_spin_unlock+0x28/0x50 [ 1836.161099][T24083] ? alloc_fd+0x471/0x7a0 [ 1836.161114][T24083] __anon_inode_getfile+0xe8/0x280 [ 1836.161134][T24083] __anon_inode_getfd+0x5c/0xe0 [ 1836.161161][T24083] __x64_sys_fsopen+0x190/0x220 [ 1836.161180][T24083] do_syscall_64+0x123/0x790 [ 1836.161194][T24083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.161207][T24083] RIP: 0033:0x7f568019e159 [ 1836.161218][T24083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1836.161229][T24083] RSP: 002b:00007f56810e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1836.161241][T24083] RAX: ffffffffffffffda RBX: 00007f5680425fa0 RCX: 00007f568019e159 [ 1836.161250][T24083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000014c0 [ 1836.161257][T24083] RBP: 00007f56810e0090 R08: 0000000000000000 R09: 0000000000000000 [ 1836.161264][T24083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1836.161272][T24083] R13: 00007f5680426038 R14: 00007f5680425fa0 R15: 00007ffdab326c38 [ 1836.161288][T24083] [ 1837.958081][T24099] futex_wake_op: syz.6.4411 tries to shift op by 144; fix this program [ 1838.330141][T20948] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1839.086574][T24099] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4411'. [ 1839.308288][ T30] audit: type=1400 audit(1788089075.117:2659): avc: denied { read } for pid=24105 comm="syz.6.4413" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1839.669005][T24115] /dev/sg0: Can't lookup blockdev [ 1840.815466][T20875] libceph: connect (1)[c::]:6789 error -101 [ 1840.815597][T20875] libceph: mon0 (1)[c::]:6789 connect error [ 1841.259553][T12270] libceph: connect (1)[c::]:6789 error -101 [ 1841.259684][T12270] libceph: mon0 (1)[c::]:6789 connect error [ 1841.923419][T20875] libceph: connect (1)[c::]:6789 error -101 [ 1841.923585][T20875] libceph: mon0 (1)[c::]:6789 connect error [ 1841.966524][T24118] ceph: No mds server is up or the cluster is laggy [ 1844.722954][T22756] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1845.150841][ T30] audit: type=1400 audit(1788089080.957:2660): avc: denied { write } for pid=24146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1845.233087][ T10] usb 9-1: new low-speed USB device number 91 using dummy_hcd [ 1845.330350][ T30] audit: type=1400 audit(1788089081.137:2661): avc: denied { write } for pid=24169 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1845.372926][ T10] usb 9-1: device descriptor read/64, error -71 [ 1845.612877][ T10] usb 9-1: new low-speed USB device number 92 using dummy_hcd [ 1845.742433][ T10] usb 9-1: device descriptor read/64, error -71 [ 1845.853169][ T10] usb usb9-port1: attempt power cycle [ 1845.880797][T24182] overlayfs: failed to resolve './cgroup': -2 [ 1845.943692][ T30] audit: type=1400 audit(1788089081.757:2662): avc: denied { write } for pid=24172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1846.088816][ T30] audit: type=1400 audit(1788089081.897:2663): avc: denied { write } for pid=24186 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1846.192861][ T10] usb 9-1: new low-speed USB device number 93 using dummy_hcd [ 1846.213199][ T10] usb 9-1: device descriptor read/8, error -71 [ 1846.455194][ T10] usb 9-1: new low-speed USB device number 94 using dummy_hcd [ 1846.487073][ T10] usb 9-1: device descriptor read/8, error -71 [ 1846.593254][ T10] usb usb9-port1: unable to enumerate USB device [ 1847.017617][T22756] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1847.017656][T22756] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1847.037570][T22756] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1847.037594][T22756] usb 2-1: can't read configurations, error -71 [ 1847.139238][T24190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1847.151197][T24203] FAULT_INJECTION: forcing a failure. [ 1847.151197][T24203] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.177877][T24203] CPU: 0 UID: 0 PID: 24203 Comm: syz.0.4426 Tainted: G L syzkaller #0 PREEMPT(full) [ 1847.177899][T24203] Tainted: [L]=SOFTLOCKUP [ 1847.177904][T24203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1847.177912][T24203] Call Trace: [ 1847.177917][T24203] [ 1847.177922][T24203] dump_stack_lvl+0x100/0x190 [ 1847.177945][T24203] should_fail_ex.cold+0x5/0xa [ 1847.177962][T24203] should_failslab+0xc2/0x120 [ 1847.177977][T24203] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1847.177989][T24203] ? alloc_empty_file+0x5b/0x1c0 [ 1847.178007][T24203] alloc_empty_file+0x5b/0x1c0 [ 1847.178022][T24203] alloc_file_pseudo+0x183/0x290 [ 1847.178038][T24203] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1847.178051][T24203] ? do_raw_spin_unlock+0x53/0x1e0 [ 1847.178067][T24203] ? _raw_spin_unlock+0x28/0x50 [ 1847.178085][T24203] ? alloc_fd+0x471/0x7a0 [ 1847.178100][T24203] __anon_inode_getfile+0xe8/0x280 [ 1847.178125][T24203] __anon_inode_getfd+0x5c/0xe0 [ 1847.178145][T24203] __x64_sys_fsopen+0x190/0x220 [ 1847.178164][T24203] do_syscall_64+0x123/0x790 [ 1847.178179][T24203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.178192][T24203] RIP: 0033:0x7ff09799e159 [ 1847.178203][T24203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1847.178215][T24203] RSP: 002b:00007ff098784028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1847.178227][T24203] RAX: ffffffffffffffda RBX: 00007ff097c26090 RCX: 00007ff09799e159 [ 1847.178235][T24203] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 1847.178243][T24203] RBP: 00007ff098784090 R08: 0000000000000000 R09: 0000000000000000 [ 1847.178250][T24203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1847.178258][T24203] R13: 00007ff097c26128 R14: 00007ff097c26090 R15: 00007ffdf3cb7f18 [ 1847.178274][T24203] [ 1853.200352][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1870.354372][ T4337] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1902.888075][T16695] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1914.478145][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.308350][T15803] process 19517 (syz.8.3246) no longer affine to cpu1 [ 1936.210873][ T183] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1947.007945][T17988] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1947.118591][T17988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1947.147278][T17988] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1947.322033][T17988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1947.408964][T17988] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1949.803742][T17988] Bluetooth: hci0: command tx timeout [ 1951.848734][T17988] Bluetooth: hci0: command tx timeout [ 1953.925493][T17988] Bluetooth: hci0: command tx timeout [ 1956.023050][T17988] Bluetooth: hci0: command tx timeout [ 1967.885394][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1968.107645][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1968.216833][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1968.509716][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1968.943420][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1970.200936][T23782] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1971.293375][ T5624] Bluetooth: hci4: command tx timeout [ 1973.363652][T17988] Bluetooth: hci4: command tx timeout [ 1974.624657][T17988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1974.688803][T17988] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1974.807215][T17988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1975.453866][T17988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1975.454620][T17988] Bluetooth: hci4: command tx timeout [ 1975.553784][T17988] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1975.921650][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.560878][ T5624] Bluetooth: hci4: command tx timeout [ 1978.215579][ T5624] Bluetooth: hci6: command tx timeout [ 1980.302509][ T5624] Bluetooth: hci6: command tx timeout [ 1982.364857][ T5624] Bluetooth: hci6: command tx timeout [ 1983.816784][T24248] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1983.976396][T24248] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1984.015851][T24248] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1984.199502][T24248] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1984.338346][T24248] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1984.415779][T24248] Bluetooth: hci6: command tx timeout [ 1986.965159][ T5624] Bluetooth: hci7: command tx timeout [ 1989.073684][ T5624] Bluetooth: hci7: command tx timeout [ 1991.184638][ T5624] Bluetooth: hci7: command tx timeout [ 1993.203410][ T5624] Bluetooth: hci7: command tx timeout [ 2002.814683][ T9749] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2011.100171][T24248] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2011.244113][T24248] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2011.297495][T24248] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2011.516596][T24248] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2011.644561][T24248] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2014.171092][T24248] Bluetooth: hci8: command tx timeout [ 2016.243511][T24248] Bluetooth: hci8: command tx timeout [ 2018.359399][T24248] Bluetooth: hci8: command tx timeout [ 2020.419975][T24248] Bluetooth: hci8: command tx timeout [ 2036.017461][T20951] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2037.420268][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2070.100199][T24248] Bluetooth: hci0: command 0x0406 tx timeout [ 2095.913594][T24248] Bluetooth: hci4: command 0x0406 tx timeout [ 2098.821761][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2101.139889][T24275] Bluetooth: hci6: command 0x0406 tx timeout [ 2111.241213][T24277] Bluetooth: hci7: command 0x0406 tx timeout [ 2134.422226][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2134.429223][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20946 [ 2134.436597][ C0] rcu: (detected by 0, t=10502 jiffies, g=226737, q=4952 ncpus=1) [ 2134.444464][ C0] task:kworker/u8:20 state:R running task stack:23064 pid:20946 tgid:20946 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 2134.458019][ C0] Workqueue: netns cleanup_net [ 2134.462772][ C0] Call Trace: [ 2134.466039][ C0] [ 2134.468874][ C0] sched_show_task+0x471/0x610 [ 2134.473623][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2134.478979][ C0] ? __pfx_sched_show_task+0x10/0x10 [ 2134.484252][ C0] ? __printk_deferred_exit+0x1a/0x30 [ 2134.489604][ C0] ? rcu_dump_cpu_stacks+0x38c/0x510 [ 2134.494906][ C0] rcu_sched_clock_irq+0x1ca2/0x2450 [ 2134.500249][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 2134.505875][ C0] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 2134.511754][ C0] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 2134.518036][ C0] ? rcu_is_watching+0x13/0xc0 [ 2134.522804][ C0] update_process_times+0x16c/0x2d0 [ 2134.528009][ C0] ? __pfx_update_process_times+0x10/0x10 [ 2134.533738][ C0] tick_nohz_handler+0x27b/0x690 [ 2134.538660][ C0] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 2134.544641][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2134.550101][ C0] ? do_raw_spin_unlock+0x53/0x1e0 [ 2134.555205][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 2134.560653][ C0] __hrtimer_run_queues+0x13f/0x9c0 [ 2134.565901][ C0] hrtimer_interrupt+0x441/0xaa0 [ 2134.570890][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 2134.576862][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 2134.582489][ C0] [ 2134.585394][ C0] [ 2134.588330][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2134.594292][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x70 [ 2134.600429][ C0] Code: 00 00 5b e9 12 a2 1d 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 05 ec d8 7f 12 48 8b 34 24 <65> 48 8b 15 d0 d8 7f 12 48 63 c8 a9 00 01 00 ff 74 1e f6 c4 01 74 [ 2134.620009][ C0] RSP: 0018:ffffc900033fecc0 EFLAGS: 00000202 [ 2134.626050][ C0] RAX: 8000000000000203 RBX: ffff8880750e45f0 RCX: 0000000000000203 [ 2134.634010][ C0] RDX: ffff888028668000 RSI: ffffffff820e6d00 RDI: ffff888028668000 [ 2134.641956][ C0] RBP: 00000000000005e0 R08: 0000000000000004 R09: 000000000000002c [ 2134.649906][ C0] R10: 00000000000012c0 R11: 0000000000017ecf R12: 00000000000018a0 [ 2134.657852][ C0] R13: 000000000000002c R14: 000001f0f575754a R15: ffff8880750e4010 [ 2134.665841][ C0] ? rb_read_data_buffer.isra.0+0x330/0x470 [ 2134.671740][ C0] rb_read_data_buffer.isra.0+0x330/0x470 [ 2134.677477][ C0] check_buffer+0x282/0x820 [ 2134.681990][ C0] ? __pfx_check_buffer+0x10/0x10 [ 2134.687041][ C0] ? __pfx_trace_clock_local+0x10/0x10 [ 2134.692499][ C0] __rb_reserve_next.constprop.0+0x486/0x1640 [ 2134.698604][ C0] ring_buffer_lock_reserve+0x49a/0x1220 [ 2134.704285][ C0] ? __pfx_ring_buffer_lock_reserve+0x10/0x10 [ 2134.710330][ C0] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 2134.716132][ C0] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 2134.722483][ C0] trace_event_buffer_lock_reserve+0x123/0x6f0 [ 2134.728655][ C0] trace_event_buffer_reserve+0x1f9/0x350 [ 2134.734388][ C0] trace_event_raw_event_lock+0x124/0x2b0 [ 2134.740095][ C0] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 2134.746313][ C0] ? lock_acquire+0x1d1/0x380 [ 2134.750997][ C0] ? lock_acquire+0x1d1/0x380 [ 2134.755653][ C0] ? unwind_next_frame+0xbd/0x2090 [ 2134.760756][ C0] ? unwind_next_frame+0x3be/0x2090 [ 2134.765945][ C0] lock_release+0x218/0x310 [ 2134.770451][ C0] unwind_next_frame+0x3c3/0x2090 [ 2134.775461][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 2134.780483][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2134.786638][ C0] arch_stack_walk+0x94/0xf0 [ 2134.791244][ C0] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 2134.797318][ C0] stack_trace_save+0x8e/0xc0 [ 2134.801993][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2134.807388][ C0] kasan_save_stack+0x30/0x50 [ 2134.812042][ C0] ? kasan_save_stack+0x30/0x50 [ 2134.816865][ C0] ? kasan_save_track+0x14/0x30 [ 2134.821689][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 2134.826887][ C0] kasan_save_track+0x14/0x30 [ 2134.831556][ C0] __kasan_slab_alloc+0x89/0x90 [ 2134.836395][ C0] kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 2134.842274][ C0] ? __alloc_skb+0x140/0x710 [ 2134.846878][ C0] __alloc_skb+0x140/0x710 [ 2134.851279][ C0] ? __alloc_skb+0x5b7/0x710 [ 2134.855853][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 2134.860788][ C0] ? find_held_lock+0x2b/0x80 [ 2134.865459][ C0] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 2134.871279][ C0] ? atomic_notifier_call_chain+0x9e/0x1c0 [ 2134.877132][ C0] __vxlan_fdb_notify+0x82/0x160 [ 2134.882114][ C0] vxlan_fdb_notify+0x1ec/0x280 [ 2134.886983][ C0] ? __pfx_vxlan_fdb_notify+0x10/0x10 [ 2134.892518][ C0] vxlan_fdb_destroy+0xc7a/0x12d0 [ 2134.897535][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2134.902934][ C0] vxlan_flush+0x886/0xe50 [ 2134.907355][ C0] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 2134.913627][ C0] vxlan_dellink+0xaa/0x2a0 [ 2134.918122][ C0] ? __pfx_vxlan_dellink+0x10/0x10 [ 2134.923296][ C0] vxlan_exit_rtnl+0xd8/0x160 [ 2134.927960][ C0] ? __pfx_vxlan_exit_rtnl+0x10/0x10 [ 2134.933233][ C0] ops_undo_list+0x896/0xab0 [ 2134.937832][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 2134.942917][ C0] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 2134.950363][ C0] ? idr_destroy+0x62/0x2e0 [ 2134.954876][ C0] cleanup_net+0x499/0x920 [ 2134.959288][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 2134.964202][ C0] ? process_one_work+0xa2c/0x1b10 [ 2134.969320][ C0] ? process_one_work+0x906/0x1b10 [ 2134.974440][ C0] process_one_work+0xac7/0x1b10 [ 2134.979419][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2134.984780][ C0] ? lock_acquire+0x1d1/0x380 [ 2134.989497][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 2134.994461][ C0] worker_thread+0x5ef/0xe50 [ 2134.999090][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2135.004200][ C0] ? kthread+0x13a/0x450 [ 2135.008429][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2135.013528][ C0] kthread+0x373/0x450 [ 2135.017586][ C0] ? __pfx_kthread+0x10/0x10 [ 2135.022169][ C0] ret_from_fork+0x730/0xd60 [ 2135.026748][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2135.031847][ C0] ? __switch_to+0x800/0x10f0 [ 2135.036508][ C0] ? __pfx_kthread+0x10/0x10 [ 2135.041091][ C0] ret_from_fork_asm+0x1a/0x30 [ 2135.045914][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2136.970999][ T30] audit: type=1400 audit(1788089372.597:2664): avc: denied { write } for pid=5593 comm="syz-executor" path="pipe:[4771]" dev="pipefs" ino=4771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2141.713738][T24285] Bluetooth: hci8: command 0x0406 tx timeout [ 2141.799902][T24285] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2141.850393][T24285] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2142.104158][T24285] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2142.135359][T24285] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2142.369846][T24286] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2142.393955][T24286] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2143.229741][T24286] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2143.231130][T24286] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2143.659015][T24285] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2143.660293][T24285] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2