last executing test programs: 12m40.168052859s ago: executing program 32 (id=205): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmmsg$unix(r0, &(0x7f0000008580), 0x0, 0x0) 8m33.874593459s ago: executing program 0 (id=1278): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) read(r0, &(0x7f00000001c0)=""/117, 0x75) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4000, 0x9, @loopback, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) memfd_create(0x0, 0x3) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f00000000c0)="c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000660f381d94940400000063df", 0xdc000006, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000050018000000000008001000ffffff7f080009002205000005001900010000000800070000000000080015"], 0x64}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="09a3afc0a65717e9f391988e3735556801545f3ec0d8af3a8174b2ac8252248b"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x10, &(0x7f0000000340)={[{0x9, 0x4e00, "eed810260d04f77d10"}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x6b, {0x1a}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x0, 0x22) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r8) keyctl$link(0x8, r7, r8) keyctl$dh_compute(0x17, &(0x7f0000000800)={r7, r7, r7}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 8m30.747096947s ago: executing program 0 (id=1288): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fcffffff0000000000000000957a9e24e100000077aee3b69376262fc4c4fb65d6f433bea9e7f173a6e9d9af77ebc0f04e8912bae348636a6b0169f1597e20a49e50a2501dd9239112c352378c94cb99c449d86984313a802294377ad527a88bda095d4e14160221"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) io_setup(0x9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'gre0\x00', 0x0}) syz_io_uring_setup(0x88a, &(0x7f0000000140)={0x0, 0xa65a, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2004c044}, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0), 0x0) 8m29.864010288s ago: executing program 0 (id=1289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000400)=""/201) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x800) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000202}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x114, r3, 0x304, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbe3}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x24004001}, 0x40040) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002880)={0x14, 0x2b, 0xb, 0x0, 0x0, {0x9}}, 0x14}}, 0xc00) 8m29.758739826s ago: executing program 0 (id=1290): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f0401fa101c04"], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x20, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 8m28.858151401s ago: executing program 0 (id=1295): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x341100, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000029c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) 8m28.773687656s ago: executing program 0 (id=1296): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) 8m28.749759978s ago: executing program 5 (id=1297): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r4, r3, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0xeaa6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\"\x00'/12, @ANYRES32=r3, @ANYBLOB="d670a951a7cbcbe824cf8bb2a6300dce02bdfd44125a132e496aef108c6f8bb5", @ANYRES64=0x0], 0x20) write$char_usb(r4, &(0x7f0000000080)="e7ebb402072138b2d4b03150c549f49120c141c53be40c55f93ce7a9bb29e919d52f00a410d4239c7feca8e4b3354ac08592ddda5d41233b810601163507f697f3a5d8a2ab8e6c83ed6b5c7bb1669f5102b0fca3476a7b8b0dab1d8deb9777f610ad067a", 0x64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000010}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4048040}}], 0x2, 0x4884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5ea, 0x0}}], 0x3e8, 0x0) 8m28.428591799s ago: executing program 5 (id=1299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fcffffff0000000000000000957a9e24e100000077aee3b69376262fc4c4fb65d6f433bea9e7f173a6e9d9af77ebc0f04e8912bae348636a6b0169f1597e20a49e50a2501dd9239112c352378c94cb99c449d86984313a802294377ad527a88bda095d4e14160221"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) io_setup(0x9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'gre0\x00', 0x0}) syz_io_uring_setup(0x88a, &(0x7f0000000140)={0x0, 0xa65a, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2004c044}, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0), 0x0) 8m27.416298271s ago: executing program 5 (id=1301): r0 = syz_io_uring_setup(0x4522, &(0x7f0000000080)={0x0, 0xb5ea, 0x1, 0x1, 0x200}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_setup(0x73b3, &(0x7f0000000180)={0x0, 0xd438, 0x1, 0x1, 0x1a4, 0x0, r0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000004560100008e0100006f776e657200000000000000000000000000000000000000db21b519bf83d1fb180000000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"]}, 0x296) 8m27.298851412s ago: executing program 5 (id=1302): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES32, @ANYRES16], 0x5c}}, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0xf, 0x2, 0x80, 0x5, @tick=0xc3, {0x9, 0xca}, {0x0, 0x9}, @raw8={"5f1c4e665e21b7c4abecab2d"}}, {0x4, 0x35, 0x4, 0x8, @tick=0xf3, {0x9, 0x7}, {0x9, 0x7}, @control={0x94, 0x3, 0x8001}}], 0x38) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000fddbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="14002d800a00000001010101011f882a034828"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10) 8m26.074290477s ago: executing program 5 (id=1306): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000029c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) 8m26.012930929s ago: executing program 5 (id=1307): syz_init_net_socket$rose(0xb, 0x5, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x2, 0x8, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x0, 0x4, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x2}], 0x2, 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x210000, 0x0) readv(r1, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/217, 0xd9}, {&(0x7f0000000680)=""/176, 0xb0}, {&(0x7f0000000780)=""/7, 0x7}, {&(0x7f0000000c40)=""/247, 0xf7}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000440)=""/14, 0xe}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000d40)=""/216, 0xd8}, {&(0x7f0000000a40)=""/183, 0xb7}, {&(0x7f0000000800)=""/40, 0x28}], 0xa) r2 = getpgid(0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000540)=0x40000007) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1/file2\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x1, 0x1}, 0x18, 0x1) r6 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r6, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(r7, &(0x7f0000000080)='./file1\x00', 0x1cc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x8000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 8m23.681705076s ago: executing program 3 (id=1313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x40000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503", @ANYRES16], 0x0) 8m22.430268049s ago: executing program 3 (id=1314): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a0000001400078008001240000a0000050015"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x400060, &(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRESDEC=r0, @ANYRESDEC=r2]) 8m22.299064898s ago: executing program 3 (id=1315): fsopen(&(0x7f00000003c0)='hpfs\x00', 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={[], [{@subj_type={'subj_type', 0x3d, 'GZ\x95\x15\x12\xcbO\x1d\xd1VQ\xac\xe8\xcd2U\xa4C\xad\xa1d\xa6\xe4B\xc3\x93\xb1\x05\x99\xff\xaa\xbaI\xfa\x8b\x98\x1f\xd0d\x93\x18\r%\x1b]\xb3\xb25w@\xda\xb8\x97o^\x94Q\xdc8\x86\xc0U\xbc|\xc4 <:\xebCF]\xa3n\xb9\\q\\\xd02+Nk\x9fV\xf2\xcc-Q\xdf\x00\x1e>]&S@\t\x10\xc4\xc2\x12-#n\xf8\x8e\x06\xef\xdc\xba\xd9\xa45v\xf5\x0f\xac\xc3{\x13\xfdXy\x13\b\x80\xe5\xf8\xe3]\xac\xc8\x02\x80{\xe8\x1e2\xf3d\xee0\xdc\xfe\xb0\x8d\xfa\xfa?\t\xf2\xd6\xd0\xe0Z\x00*/\xcd\x9a\xcf\xe4\xcc\xfc'}}], 0x2f}) 8m22.298784696s ago: executing program 3 (id=1316): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000180)=0x6) (async, rerun: 64) unshare(0x2c020400) (async, rerun: 64) msgget$private(0x0, 0x240) (async) msgsnd(0x0, &(0x7f00000001c0)={0x2}, 0x8, 0x800) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) 8m22.265873624s ago: executing program 3 (id=1317): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000029c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) 8m22.230427113s ago: executing program 3 (id=1318): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f0000000480)={0x18}, 0x18) r4 = socket$inet(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) fcntl$setlease(r6, 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x12000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="3878887ef1b9"}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x58}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$FUSE_INIT(r3, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_INIT(r8, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 8m19.681701504s ago: executing program 33 (id=1271): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8m16.970956537s ago: executing program 34 (id=1285): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="019800000000000020001280080001006772650014", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x38, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r1, {0x7, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x25}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 8m13.660907012s ago: executing program 35 (id=1296): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) 8m10.627181248s ago: executing program 36 (id=1307): syz_init_net_socket$rose(0xb, 0x5, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x2, 0x8, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x0, 0x4, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x2}], 0x2, 0x0, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x210000, 0x0) readv(r1, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/217, 0xd9}, {&(0x7f0000000680)=""/176, 0xb0}, {&(0x7f0000000780)=""/7, 0x7}, {&(0x7f0000000c40)=""/247, 0xf7}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000440)=""/14, 0xe}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000d40)=""/216, 0xd8}, {&(0x7f0000000a40)=""/183, 0xb7}, {&(0x7f0000000800)=""/40, 0x28}], 0xa) r2 = getpgid(0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000540)=0x40000007) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1/file2\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f0000000300)={0x0, 0x1, 0x1}, 0x18, 0x1) r6 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r6, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(r7, &(0x7f0000000080)='./file1\x00', 0x1cc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x8000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 8m7.129894611s ago: executing program 37 (id=1318): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f0000000480)={0x18}, 0x18) r4 = socket$inet(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) fcntl$setlease(r6, 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x12000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x188c0}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="3878887ef1b9"}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x58}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$FUSE_INIT(r3, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x53b, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_INIT(r8, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0x8, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 7m35.491833318s ago: executing program 1 (id=1429): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, 0x0, &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r6, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0xeaa6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\"\x00'/12, @ANYRES32=r5, @ANYBLOB="d670a951a7cbcbe824cf8bb2a6300dce02bdfd44125a132e496aef108c6f8bb5", @ANYRES64=0x0], 0x20) write$char_usb(r6, &(0x7f0000000080)="e7ebb402072138b2d4b03150c549f49120c141c53be40c55f93ce7a9bb29e919d52f00a410d4239c7feca8e4b3354ac08592ddda5d41233b810601163507f697f3a5d8a2ab8e6c83ed6b5c7bb1669f5102b0fca3476a7b8b0dab1d8deb9777f610ad067a", 0x64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000010}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4048040}}], 0x2, 0x4884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5ea, 0x0}}], 0x3e8, 0x0) 7m34.40595976s ago: executing program 1 (id=1432): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000180)={0x2, {0x4, 0xda56, 0x9, 0xf385}}) (fail_nth: 3) 7m33.950924309s ago: executing program 1 (id=1437): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r5, r4, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0xeaa6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\"\x00'/12, @ANYRES32=r4, @ANYBLOB="d670a951a7cbcbe824cf8bb2a6300dce02bdfd44125a132e496aef108c6f8bb5", @ANYRES64=0x0], 0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000010}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4048040}}], 0x2, 0x4884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5ea, 0x0}}], 0x3e8, 0x0) 7m32.773610519s ago: executing program 1 (id=1442): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a0000000000006111880000000000189c7a000000000ee9c87300000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000100006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x6, 0x97, 0x1, {0x22, 0xee1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x1, 0x4}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030002300090006006e6f6e6500000000080008000000000008000b"], 0x58}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001600)=""/4103, 0x1007, 0x97) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x45, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf39, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ringbuf_query, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xf, 0x65, &(0x7f0000000280)=""/101, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x4, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x3, 0xd, 0x2}, {0x2, 0x4, 0xf, 0x4}], 0x10, 0x1, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000800)=@o_path={&(0x7f0000000080)='./file0\x00', r6, 0x4000, r0}, 0x18) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) fstat(r0, &(0x7f0000000a00)) stat(&(0x7f0000001180)='./file1\x00', &(0x7f00000011c0)) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r8) tkill(r8, 0x12) getresuid(&(0x7f00000039c0), &(0x7f0000003a00), &(0x7f0000003a40)) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000009800)={0x2020, 0x0, 0x0}, 0x1864) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) getpgrp(0x0) ioctl$VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000400)=@multiplanar_userptr={0x10000, 0x4, 0x4, 0x0, 0x5, {0x77359400}, {0x1, 0x8, 0x7, 0x2, 0x5, 0xe7, "214d48ac"}, 0x4, 0x2, {0x0}, 0x7}) 7m30.197066426s ago: executing program 1 (id=1448): sendmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x4a, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) 7m29.994867805s ago: executing program 1 (id=1452): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x9}}, 0x10) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r8}, 0x10) r9 = dup(0xffffffffffffffff) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r9}, &(0x7f0000000180), &(0x7f00000001c0)) landlock_restrict_self(r9, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r10, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x4) 7m14.697787257s ago: executing program 38 (id=1452): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x9}}, 0x10) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r8}, 0x10) r9 = dup(0xffffffffffffffff) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r9}, &(0x7f0000000180), &(0x7f00000001c0)) landlock_restrict_self(r9, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r10, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000140)=0x4) 3m27.353202287s ago: executing program 2 (id=2435): socket(0xf, 0x3, 0x6f4a) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @sack_perm], 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x22806d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) mmap$binder(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x2000004) r4 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3m27.178214058s ago: executing program 2 (id=2438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7, 0x9], &(0x7f0000000240)=[0x2], 0x0, 0x2}}, 0x40) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) io_setup(0x2, &(0x7f0000000200)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)) r9 = eventfd2(0x0, 0x0) io_submit(r6, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x4000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r9}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES16=r6, @ANYRESHEX], 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x200000c1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x28, r11, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x503, 0x65}}}}}, 0x28}}, 0x4000054) 3m25.37073929s ago: executing program 2 (id=2448): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x181) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fchdir(0xffffffffffffffff) r3 = syz_open_procfs(0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553ff73042486134529f62054673877e37"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0xa6ff, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) 3m24.448359461s ago: executing program 2 (id=2454): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r1, 0x100000000) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x30) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) 3m24.318881321s ago: executing program 2 (id=2455): write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100}, 0x0, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) r3 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x1}) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f000000b800)=ANY=[@ANYBLOB="0002020100"], 0x18) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x5411, &(0x7f0000000100)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0900000006000000030000000500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x2c, r7, 0x1, 0x0, 0x1000, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0400d0}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x5c, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mkdirat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x1ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) 3m23.655889687s ago: executing program 2 (id=2458): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x20f}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000c40), 0x80, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000001080)={{}, 0x3}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 3m8.592084129s ago: executing program 39 (id=2458): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x20f}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000c40), 0x80, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000001080)={{}, 0x3}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 11.145181025s ago: executing program 9 (id=3331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r4, 0x0, 0x6a) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) fcntl$setpipe(r4, 0x407, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000500)=""/137, 0x89}], 0x1) splice(r3, 0x0, r0, 0x0, 0x2008484c, 0xb) write$binfmt_elf64(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f00000005c0)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1301, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r8, &(0x7f00000006c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000300)="71d1cfd88f85d1197691475cb31ca3b752117d5610355ed2228c33afdcb9aa5693f38d047b66c470f203babedc38de726585b194cfcb68722d", 0x39}], 0x2) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r12 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fallocate(r12, 0x0, 0x0, 0x8) fcntl$addseals(r12, 0x409, 0xe) ftruncate(r12, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 8.834855896s ago: executing program 6 (id=3340): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffed2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0xfffffeb0}) fadvise64(r0, 0x101f, 0x0, 0x616bc5cd0b896b1a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) syz_open_dev$sndmidi(0x0, 0x80, 0x200) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x11) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550c, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1a, 0xa, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r6, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) 8.382750118s ago: executing program 9 (id=3344): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) (async) write$vhost_msg_v2(r1, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) (async) write$vhost_msg_v2(r1, &(0x7f0000000440)={0x2, 0x0, {&(0x7f00000004c0)=""/114, 0x72, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000b40)=""/263, 0x107, 0x0, 0x3, 0x2}}, 0x48) (async) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/201, 0xfffffe3c, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="bdb7375c5439c52526282e4132601a719c390ba3b80097c1a499b86e2543915543c060434cd7712eb5b2b097e29f1e6d6eeeff5ef48c179bbe2caddfb799055648a71eb1f536b17ede2f111dedcaebdbb405e7b99589edb93fe387a101c04a80916506db4630b9aa14cce3160fdca02d267f7de6d06f39f35f5f3d9d249399b07999fb3eadc5607823a876ad09ae2442661b1c0e6a823e3c609dcd2fee7046f02b3700e0ab022ebc4c230c668818c6e782b7a28c9cdfae03338f091692fe04fe78d6eb99f8dfd8af34361453", @ANYRES32=r1], 0x0) 8.380389591s ago: executing program 6 (id=3345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000005000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x300, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 7.706787295s ago: executing program 6 (id=3346): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a010100441405", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a68765a6c733a8eb6df2944f6c2ef07c022", 0x1f, 0xfffffffffffffffe) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xfff3, 0x4}, {0xffe0, 0x1}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@gettfilter={0x44, 0x2e, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x5, 0x4}, {0x10, 0xc}, {0x0, 0x5}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}]}, 0x44}}, 0x8000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = syz_io_uring_setup(0x236, &(0x7f0000000300)={0x0, 0xd25d, 0x13900}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x244}}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {0xfff3, 0x5}, {0x1c, 0x2613a1b406814a86}}}, 0x24}}, 0x44804) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'nicvf0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/19, @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000180)="8d6dea6aa9442367", 0x8, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r8, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b0001000000000904"], 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 6.412193071s ago: executing program 4 (id=3353): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000340)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x141000, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x20008040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r7, 0x3c10, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) 5.680982138s ago: executing program 7 (id=3354): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_io_uring_setup(0x6ae5, &(0x7f0000000380)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) unshare(0x400) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x2) 4.988913143s ago: executing program 4 (id=3356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x33, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500002500000002011190780000000000000000000000000011907841fd000136a8c7bc6965dea1"], 0x0) syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[@ANYBLOB="e904a20000000180c20000000800450000240000e00000119078000000000000000000000000002090786104000095b8bcc03582b5bbb4ac2d303991004912a0f8d96153f24c4eba4774a43db42276adc17f736ef3ebbaac54726980cfe58188ad1ca01fc5b4c66c4956100b12cc596c13889e0e126e0d"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x20000, 0x0) write$rfkill(r2, &(0x7f0000000140)={0x1, 0x2, 0x1, 0x1}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x32) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) syz_io_uring_setup(0x8006447, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.910861798s ago: executing program 9 (id=3357): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x3, 0x2, 0x0, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x22440) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3}, 0x18) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x6, @mcast2, 0x6}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1) read(r5, &(0x7f0000001400)=""/4046, 0xffd8) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x4bfa, 0x10000000000004) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r8 = eventfd(0x8001) write$eventfd(r8, &(0x7f0000000000)=0x9, 0x8) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f00000000c0)={0x4, @capture={0x1000, 0x0, {0xe, 0x40000000}, 0x5, 0x400}}) 4.691622748s ago: executing program 7 (id=3360): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000001c0)={0x10, 0x1, r2}) 4.286791127s ago: executing program 7 (id=3361): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r6, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0xeaa6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\"\x00'/12, @ANYRES32=r5, @ANYBLOB="d670a951a7cbcbe824cf8bb2a6300dce02bdfd44125a132e496aef108c", @ANYRES64=0x0], 0x20) write$char_usb(r6, &(0x7f0000000080)="e7ebb402072138b2d4b03150c549f49120c141c53be40c55f93ce7a9bb29e919d52f00a410d4239c7feca8e4b3354ac08592ddda5d41233b810601163507f697f3a5d8a2ab8e6c83ed6b5c7bb1669f5102b0fca3476a7b8b0dab1d8deb9777f610ad067a", 0x64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000010}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4048040}}], 0x2, 0x4884) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5ea, 0x0}}], 0x3e8, 0x0) 4.263456405s ago: executing program 4 (id=3362): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYBLOB="cb1515b7b1fb2ba882d65191ac1db51b1f826f05c33f1da44e9c7aca63f4c22553bbbe0123c14797a3779a8636f4e744cd5fa41677f3b11e8a746b0eef5ecddce5e639be8164882baa13d47ab6a3edee14bb2617ff70c2eebb34110c9e7140887c588e7dfb264f4f0000000038bef358fe282f70e426923e71b3533fac6517204a6ca407f536942fefdd97afbf77e693962a27c1207f088c41e31d68a8e7eecf2db1b47e537df35ccad342c049b1d7c1db2d0abd5c29d6731940f9042f892e1b14a88b652510e54dd41255fa9ce4e258c30918077d1c08a30783b2e364b986a269583d6c8555307ca9acffadb76effaa7c6b93a95d4da2aab8d26a3d8a2cff74b1c9fc38081fc941b742970976aa2cee288336cf6c169a6a7035f58d8972b3c2b5d473e052d59a34d9c7d35d75a614f767dc381bf932f422daf6bd2a358a0bd595dafd4f109df24aea5cd69a01bd842ad59478c299d968232663b4dbac65fb5b5d401bbc07a885ed06504d6865807ae596274a4a03f17dd7ab1c6aa8868d8780c9f986e5106772c3b2f8c921b8cb9e284650d38860f61885600d4373f253ba331fc0d62951ff5060f09169a943f6032d2542f939bd609a927f6af1199189289859a5576734f9a437d9be1d996e7bae4c1ecf93b49625c7508e7856a43ed6c20556767ec5e1adae1d1da3f4ed03af218cc04f076f7f96be1a222bb9b6700c1c7ee139934a5846b4a593d567631b1cd6ee90a96073c33134273df71df4275051d8c6b6c2bf7a09136829cbf450"], 0x16) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r1, 0x0, 0x10000, 0x0, 0x1, 0x35435, 0x3cde4f}) socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000580)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x5, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, r3, 0x0) futex(0x0, 0xc, 0xfffffffe, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x100}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r6, r6, 0x3, 0xfffffffffefffff8, 0x3fff}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) linkat(r10, &(0x7f00000012c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r11, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000811}, 0x4040) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x15597755c003a849}, 0x2) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010600000000ffff000019"], 0x30}}, 0x0) 3.302206241s ago: executing program 9 (id=3363): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x79, 0x0, 0x0, 0x258}, @initr0, @exit]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r7, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1cc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r0, 0x4, 0x0) 3.301293474s ago: executing program 4 (id=3364): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r5, r4, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0xeaa6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\"\x00'/12, @ANYRES32=r4, @ANYBLOB="d670a951a7cbcbe824cf8bb2a6300dce02bdfd44125a132e496aef108c6f", @ANYRES64=0x0], 0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000010}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4048040}}], 0x2, 0x4884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5ea, 0x0}}], 0x3e8, 0x0) 3.098837205s ago: executing program 6 (id=3365): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x79, 0x0, 0x0, 0x258}, @initr0, @exit]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r7, 0x2) fcntl$setstatus(r0, 0x4, 0x0) 2.600244938s ago: executing program 7 (id=3366): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000340)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x141000, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x20008040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r7, 0x3c10, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) 2.591156916s ago: executing program 8 (id=3367): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0xaec, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xabc, 0x2, [@TCA_CGROUP_ACT={0xb8, 0x1, [@m_skbmod={0xb4, 0x8, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8000}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xacf0, 0xff, 0x5, 0x9, 0x3}, 0x2}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x1c, 0x6, "1cda31c3431d2ceb5034c376cc39a39fc507b8f217b8eb85"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x3ec, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}, @TCA_EMATCH_TREE_LIST={0x33c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x1c78}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfd}]}}, @TCF_EM_IPT={0x1a8, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x1ff}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_DATA={0xba, 0x5, "70aceedc12110e53238bde43e3eb52977cb81c02d43d3366eeeec2a7b9e5737ec1b5d9dbf1f75fac12cd1503df283422c3c9f92832514bcaacd0243dfdf624fbf9d9a5bcdc21f5e58660047425811ce65b19210098109c53a03a9072c1cb1390f50b56b3c98c01b0016228c35510e41194f43603df984c58b7f017c9276efa426b21d78dffdd744f6a5dd3b10c645e097ca4ca914c0e1bc5392ec180b32fec5ba0c52232af5e30349dbb1ae33292f7ea3b58bd43f634"}, @TCA_EM_IPT_MATCH_DATA={0xaa, 0x5, "c4759cde22d0be2860faf0612f3d9e55ccab294525b573e9f05e5f6d23c2b7d14b1a97a57c7ca99d43894a2af3d8b7a9c6fee6577b8e07a007587e3c448bb0b423df4f81f18226e84546ab46f80472238ff5c6320453d9a3260c3416c66de3a083b8c9e3d68e3c268b68eea441d4d5256875a4fc4fdd29177cb515578603f73dbc9fb8a05fa3fe4793660447c78cb76b6791453881d52866997693023861f42144cf3b408489"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x3, 0x3}, {0x33c, 0x0, 0x5}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x8}, {0x0, 0xbd54, 0x8001, 0x8, 0xe, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8000, 0x8, 0x3}, {0x3, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0x8}, {0x3, 0xd, 0x3ff, 0x6, 0x5, 0x0, 0x1}}}, @TCF_EM_CONTAINER={0xec, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x4}, "d2ad1d451082e347b6e470b23b77a7c9b68e16a4d80c9667b7f9a08cb8a89cfd5aaaa1ca57287907ceabcf1166722eff2cc57c362cc05f424dd6403e901d20a0dc161beab487e04638dc35c55f4af62041864e54c768e4b31426c3070b304b461bc99fca5ac9e82411189b2b1ec6503a9156a17f3d161878ea62ed78dbf55556a3530d423bb2761609f57031205c5d4f57040e8a3f8c86dd75e22fa3fa0270a1901fd365cd9789a09d2819e292d84e5c5695e64200ab9039ef902448b186262ea61a71883cbca5e740805392cf05a9761bb4156ffa16e4f4a10c5f44cd74c965"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x40}, {{0x3, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0xe}, {0x0, 0x3, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x2}, {0x6, 0x5, 0x1, '\x00\x00\x00\x00\x00'}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x9}, {0x1, 0x200, 0x400, 0x7}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x1, 0x4, 0xd3b}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x41, 0x2}, {0x2, 0xd, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xa2}, {0x1, 0xa, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x101, 0x7, 0x1}, {{0x1, 0x1, 0x0, 0x1}, {0x3}}}}, @TCF_EM_CONTAINER={0x14, 0x3, 0x0, 0x0, {{0x800, 0x0, 0x6}, "bf0a49eaa38aea59"}}]}]}, @TCA_CGROUP_ACT={0x228, 0x1, [@m_mpls={0xc4, 0xc, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0x8f, 0x6, "6d5e38bf5ab94284617f9e3499c950b3139a2385c5ae7f419b1a8257fa9a7591ba028edfea61dedc6876a80516de316269667b266370f115c12dd81e4953c07f26ca1fab84048a55b556094c5bd94aef109bcbe9606c0f3cc978b275dac2f0e2d139366f7eb0a307b92538239fa255f47e882a589c52712608bcc782453dda6200a3e07922ad61ebb34847"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x160, 0x7, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x975, 0x400, 0x5, 0x101, 0x1}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x8, 0x3, 0x1fc}, 0x4}}]}, {0xf5, 0x6, "8e03f3f894365c7834aec023d5f984582304025ef7f8c471f4031ca55ad7303283f670029f0d3b963c0cfbcaf8bf3eaf3b17a2b39eea2298291a9c455367e8cf60f057f5cd74e88a481d445cb780f9b5d23110b22b005adaa8a3d409fd44911c29714f61cd76e9636ee6e1f549ed3fdd58383a3560e23d255a6898c347bed109f98ee2a4d880f342a2d8af16333a2417fbceb203d4d467b5855d1301adfa81424a28a82674c23abd90ffc55176509602536bc9cf8785e1a880df9d1d9855d3ae4c4cb77e9fc0c5e99fa03488eba2d1c2c20965f34c81738fc96a53d46592931827f0a201a02397cc716e52304e7e748e55"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0xf8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x30, 0x2, 0x0, 0x0, {{0x0, 0x9, 0x400}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x8, 0x2, 0xfff}, {0xff81, 0x6, 0x1, "e86dea1738be"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x5}, {0xc, 0x7, 0x2, 0x8}}}, @TCF_EM_CONTAINER={0x4c, 0x2, 0x0, 0x0, {{0x165, 0x0, 0x80}, "81b4dcfdf86f8de4c8a9ac415aea7842e1fa7922640f9ebd939f5d299d63999ee2d3bde89fffad16044717760879fadd2bbbad0823baf68854924a51da57"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x40, 0x7, 0x9}, {{0x3, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x7fff}, {{0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_IPT={0x18, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}, @TCA_CGROUP_ACT={0x2d0, 0x1, [@m_police={0x12c, 0x5, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9c}]]}, {0xef, 0x6, "22e0cde4c1cc023f71cfd4a19ecb7bdab8327286c8353d0288344ac080cb7a70e6b0ec52e3bb2eeada24fa39fd604f862ef1e6dde52747b438d3ff55c06bf136df0a05cc936e7325adf2b19164d1102b94e11a5d9097ecc75fa70c6fad0f4fd1242532332ba8089ff82e2516182e9c4a4c78da4bc64cf4f9b1b0e8c18611f059e64f19d60d5a5bb928f2728e2e4251392dc85bb00250fd109378c82c02143959ba617bab6cd59c3d70ededfc22236efbfba6652e09ae9b750061128391ea6b49250504e9fac8ef8fae61cef3346ed592958060fe126926ab6c6ee0395bcfba82dba51393b6b0af225cc3f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x1a0, 0x1d, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x1, 0x8, 0x8a35c00, 0xdc}, @remote, @multicast2}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x729, 0x3, 0x0, 0x8, 0x3}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xffffffff, 0x0, 0x0, 0x3}, @local, @rand_addr=0x64010101, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6e1, 0x0, 0x178, 0x94e8}, @remote, @multicast1, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x4, 0x5, 0x4, 0xfff}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffc, 0x1, 0x4, 0x1, 0x1}, @local, @dev={0xac, 0x14, 0x14, 0x3c}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x9, 0x8, 0x5, 0x5}, @private=0xa010100, @remote, 0xff000000}}]}, {0x5e, 0x6, "2dc80345f92b2de3e8eafd3810e73922405721473da3e12ee0ceb36a5b1a723d91a41b508197ae3fe1ff51848f74ce8dc57a0f8f784b30f23ede1a18ccb498cbcc90d99ab2b24ebc1bd8fdc98fbcc32ef5bd9d4b755ea1417629"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x24, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8}]}]}}]}, 0xaec}}, 0x810) 2.335996785s ago: executing program 4 (id=3368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x10, 0x5, 0x508, 0x210, 0x210, 0xffffffff, 0x120, 0x120, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@loopback, @ipv6=@private0, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @port, @gre_key}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000635142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e80)=0x0) sendmmsg(r2, &(0x7f0000004f00)=[{{&(0x7f0000000580)=@l2tp={0x2, 0x0, @local, 0x4}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)="73d5adf13b73f2979a176aaf58e4f926aa23e31cf14f43f78385691ac27ce03cf159763d10d91074aad6f0ed4297ad494f584619542b0167b361a37438f025dc6f41ef0c26c7cd1d493f1bf17a48f578f15f3d3d5a433086621244d69d777e658dffccca608a27acece6b16af33737f578771eaeedaeb9f519e437428318b643a22441a9a55ea4b932b258346db6a55b08776de445797485aa553fe4e805899024d65a953bfa8584a92ccc43edaa0584f492c8f470ff6a5e9d6d1bd29ffbdefe297421", 0xc3}, {&(0x7f0000000700)="0f97d14c3129bc53c5e5ceefe4a889a83c291afd84fd3b14ef45b831bd91be18da4732fe6cc8ae05c2b4e62fea745f9d1b916e414171fbb3f50027bf77aa96aabf44d3c3debdaefda5ebd1a7610092e28b4232f41759ffb1f126b3c9ee818b2b65d131db0dc0003368abfbdda10575e7732df46807e9bbf4ecc171384002213e638e3f15bb220b30e68d6dfc5e4a6743561fef448839c23f4c4e62bd0149dd047a4f0baece9af92bb72ef00745634645945c3e062f5c", 0xb6}], 0x2}}, {{&(0x7f0000000800)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000880)="75a822f49c78eeae3e75ec7351719951f08594f4235bf46f304b5b35d7076ae4a13fcb4a444b8611727f951455f8d453b46b9ca66b7b9487a4fa470a141918e8ce08156f7eee7dc717ebc18d119b652ac5c3ccbb1e2d4a066930bc1f02d2b296af35f275da5caa0fc6cf850de5864d18fc1be7b3e22199b66f97d5a38e9d131c95ff77648a7a58d85b3c1bcd52533d3e5ecc916bfeb945ebf627d1331ae4504d826588f17c8ebc35884dd5d029ad714f09caec8eb6e02d24976466d9eb4e45aa17a5383119e65233a5079c5dbe784e19e0def35a631bed99bd59daf13759f4e01ebc65f67145daf29921fcfed475", 0xee}, {&(0x7f0000000980)="da67a8886744553c56ba3f322ff372f34c1fc8389531", 0x16}, {&(0x7f00000009c0)="aad698476f8dde9a8492368b8515750c9235b36d621399e6fe855460994eb360d2bd481cde085b20a558491115e69c9a2b81fa0663c78beb60141d8a2a82355df061ef4c5b9b01854bb894bf972226bca4f33f6ad0d3e16a1fd5328b11907fdeb5677442b69b9b39c5164c34f1e6094b532f3ab2c93bc3019fdc46ab150ab5d9f57310a96fb21874fea1d9ab7c8f8e6ad3ec1a837df99123b25f5be361ce933350ec309ee28c6272ab402239207a4d639408ce95762054cb7ed3bda0558cc1b2f5d51b2dbf415d0ca65ff09091e9de654b", 0xd1}, {&(0x7f0000000ac0)="36fd1686cac501c51c807b489c0de64fb2f3920fe218c060c7651efff22ed9e235c9c37f8563862a6cba3db083aea83918ae66df0e9000799853403e5fe9ec546a7abdc528f28e94d5ec58cc2b827a3ba72553e634604355aa76532db0dd6c17b7d733134f965f8e755b2c30f66a882a62039d04cbb02dcb3afac55895945c443ad144247ae731836dd6971330f665d8bbc058755f423126fb42dcdb13", 0x9d}, {&(0x7f0000000b80)="2658db67830a61d34664659e60a8280e067da65fa80b58db32ba04fde30a8c28923eba2ee47c8f5773947b50f8e4877fae42bd5edfd08da5e9caff505253bee33592c154e8859dcd49e649d3707a8e1cae733b3c7f61f55657c424975584732e4a5541d57131d94969ec25f9329ec35edb94c9a8f1c87e46b013a74d7bb7f1379d35591a015fa77d9650b2f4cf1cdb4a313f94b00d3b44b34e041ea3896ffcede430549f10277653ad3e5bdc9b1e623a6d4a58b11f8c0e7b2e934632be63db6f1cc5e1b8dda6a51e4743984f2c855235a8cdb19bbbd8fda4e4b2b2e6702999", 0xdf}, {&(0x7f0000000c80)="4fbccc03465ecc14cc6f2f2edbcbd2186cc8b6b073b698e3e32a48e363c8ec55a656fbb3a3ca75aea3ae985caa4de8827980bfcd1b77b9e2fe90205aaf8bd691690774c696835d6818f55fd356e8c494c406e7783c", 0x55}, {&(0x7f0000000d00)="512044384e575290addd34115b9f3669a9b5b7c795757ed0cb866b34b98eb353329d02ab2c58577174db19c50c0b610c9d1a0a662ee2e062c93f764bdd56d8f857f8e64d2240586db87b084cabe0154446f83aac55d4c3ffa7045a2498c7f7e4b347fc9eb2526b860a1384cbdc9a4010b61479a49dbc2f423cfbfe00b8083c8ca3a64bbdbb983884d0237721522afba9dbe23fa4b28e63aed4c4", 0x9a}, {&(0x7f0000000dc0)="6c8466428a7e05", 0x7}], 0x8}}, {{&(0x7f0000000ec0)=@nfc={0x27, r5, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000f40)="4590de94bb444548a3f0b00facc31f0aed3f3bdbb63e094d41c8dc538c047361241c95c9161f5c91d3e513f5fba885128e739634b7a191d07d22c1ad8abb1790b908b83eed18fbaafe12ad8117a9110a18ab060d20653856e21244bc4326a7bbce5a384f90cc0700f319f192452bb932d6fdd01de771a13fc5650a8124978fc0219b91adbc06a251eb54484fdd6dccd18316cb974b96f295ab1595994bf98f8a6684548f8af8f1e2ae41b823c18abb60c5a6c289747922335e64a70c98ecd3e7117017ae2cd74a22f46186d6450e1c962d012cc2ebf668033da3f7579931db4fc4bcc8d623781b9dbc375a12a65a5099c7931c5a7343f5516d7dc5eba6910747e27fa34586c3202a1d0de9ee4abb56ef909e42fd21c9c073dbe9236e7288323bd0cff819815c5c5091d91808d8de3a1c2fd6b750a114c4404385cc831e94242368de2f6338fd005ee44a92f0db6687eaa925d16eef60cf938de13cf6647a71fd60bf0201c0c330ae0585c0dd19ed748f3d47daf81cac44c1e2f2aa12edf5b78fc43f0545e37df4fea8dd5b69547a7f5454e5a17825f82d1ceb3c748c872cc51f6131f4ffa9a73528fe54cb4c60e16e0e5b320abfc44387a535e1dfbbceeee312d13a82db4f81848340fc7fb273c6cfb44adaaf8ef90a2e221a4b5a6c23674f7403e57d350f97d67d47849b3103ef069e4f6bc023fabc4013826f7e56b158acbb1fd2a6a0264fdd366224913e90434e368a1e7aa1463fcb5cb6c0b434ac05538e7461c1b91e73f4bb1db7cc6312251796eaa493c9b788c8e1b6d464970d3f6739877c0db693a47d2262a5bc619d82464f279d3d7c30b5dcb26b3776eb0c5eaccd7a87ba8cb334a972843df0e9b984855f3d9b9ab840c9117277e1d84ce28d4e98abd310f117793d17a7f5e7a5bb730746035a74bce7744d7220698be5246c0b395c0d248f9121a22b2f98bd8b369836decb683e1465e2fe173a42110e73079d3c6894819b8ccc447abe277424e68820b910a257694df1c14ae94a7ea3490287f04fdb886b959c5b1977629b37d9f038d28bcf7dc8cb022c8293dc1de72b937a6d22a3fb4a1beb9eef553a9340e16cb87162e15c1a1948833c9b0a302a2b642b5fa6a2cda7799061c0be3c96f943c89c808fa124adaf8677315e140f6595ee75db52b37ab641d326851811e70af15dd82fcca4d780fa89f6eba0289162f2a4c928cecae3c34050dff9bf5426c0a6624d3d6cbc84dc5673a8855ca7ac6272ecbf552e36b51c149d1aa24b90eab02b1ca97e6f6323b205dcba809d73790639e0966f2533bdadbae7d332bcb25a674bac56b45f2e7b14ef60b4300c6c8e2206a796969dcd69fed89690049cfb1f2bfbe797db84428c9e48d08e266d6839621a9d18e5f915e83be641ef692844b4d21ec956dcd6f153ae64c2b94655ebef22639f0f9a037fcf2770012a2bd75e297dc899a1d6a02d63c08ea291d3d034f5622fc47f8aace4bdac9c9eccc4391abca3f1fa18753a5631c7b1a7b37b0c18a8b960933da0660cd634458604beb6fa4613559c8cc44713d6757282e6a8f5966798639e19f8017245fdd0d8bf580f316622a641da5447496c2a020cad96ba7389d2c6f9f1c19f2e75a3504a2fc53d280bbe888982aafac2ff6da5dd7ed177b027f8f0935531fa7c19b75683fe1c2659d416887f2fbe0d62afee62969a3e6a339e67c5f879d13b1abb2f4999d3396dfd5548a68c06d4323886aac8e90808e6754801b84a8043ae9534a31886e8351b550df5d521e31b3f6ed1cfaf34b410d2b32ad83f2903b3e9fb80e4cf07eee8de127625ba9a7eda02419335096f19656ee86c9c8565d6096a21c9ef8cd21d4ffa4559dbeb4f7e8f2d034d0a9d5de8b50fb7be06a678ea6851c3c2c6630cc02adea74f82a99965c86fe4d5a2367208989bd3e272a6cf09af68425df26111713be389d749051b107bda5e8d5f4654145a62405c9186d1a080f614f0e5ba64cc6cd2506dcd9a637a8162c3db2529c77c8dda4c8ea0acfd65d55d75784140cb6396e25eba1955c9c221d5d2fd14404d6e9f44b7bcc7ba52a7fd88f025f03f4290599390f444c91335e58dc0f611a2f11e30e01a60c83566e2350ae8549b47e38c5498d025731e62c8efa6d2483a80d20785a8945b46d56c91084ffd1c8cb6826771c32d1b768596dd63e1650f70458437fb546d347dcd51311ba86c406bcb9a73b6618d1368841d405b4cf6c012c01af98ab734a77379033578a4153e344c8cc710fac38adcd0fc55c15aa47126881d521516cec9b322b93469483e0b46a3619ddff6c551aa0b47a6a9ddcb03ec95f2e4426fd8eb060d84a6bc5f970a2afd12184d741ee44d8c9f47dbd627dba28c6ee0d9847b0acd60d703e18e39f721ab2e8632882160e33c39c2ace834eaebc32674582d4af71db76ec1c4941bcfceecffa57ed1abda620894a7ee46f51a28fcecd84acd1d62bb3dbbd5d4130363465cd1b65c58ebd8e852b810dcf70a55fa78c6b40304bfc816077393c36cc0899fbd7eee2ddf7cabe4c6042a9e6bfeec7e2350c1d1a46194e06efe67197d9d94580a19bda5f8aab5da09d42564542e170955d4a2592ba98fccb30560eff1809ad898a85014dfc5297d945d1f75e776e4ee69009c9ac4259cc905d3b03ebcdb89412d760531288cf3844ea09437abdc7314b6bdc70bc86361d710e25010cba6bb90bfb341df88c8b4d6568c13d3c0ada2a788e6c8280533258ac67607989e98ed3faf4d99bf80d4fdb467c6a072c563db2e93b3c621066a9306b346e82aef46264bfc356257e10593fc39c7ea9b22227a1622015a07be2d3d6034a9159d0337dad58dc858ab9b3aeafd1eb83c3798ef288d0ed85f91a9e68c85e5b78d6d52704b95c6db5d9762bfd91edfc995699569d4c9ec2b1e33e59b4365376d02b38e91ee2bc1b3aa546199a55ef3a3e4f4d974af374a29499ebf5872ea41eb092f4ca9c95fece1293a2a501dad2e7bf406c139ba1aaa9f2ef8a93b0cffea26666e7203039b71d07260c7df9b215fe33792a4cc4bcfc565725a9e5c0ac1d57fbc3ca4ec483faf29732899dbcce6f4513d9c078cb87babb83ef9132f3c2eda8c05b8e9fee2ee344ff7c2eb8f0ff5871b38613d10bf765c0262af8d4a871f6e9b2fe8b1d0aa7f8f3193bde657159f4d59efc5f6f232bc3ee178d130cd0ca080e08449332c4c77293b4ecf26a37ac9ff7b84ecc5deda67446da1dd26a5084bd42199ca718f11d3bc940ae8b309c9c9bea76375a23d5b0fbc3a348ae159dd908da08e2a846537c0c991a9efdfbffd4bfade5c49a8a9baeb189afe7771c454e319c978f8f83dbb0b090185a28a9841c5a351c80139a1a34125a1e52dfaf2672421c23f60c64ad8779999cc0d745420d20314c4d16d5e8226eb32a216c15bc0091fc7fdb52f382556e9820b6a0454371395fbe3106abbf59d1351839ed129a87feb54402e1ca1655124fbcd1ebe3dadd18bfa01ec2fcded4cefd1e9bbe7875915c9375af53cc751eded61338a3c81cfd5c002d2dbc525e5603c563d5b21482e25829e6aba6cb182f26f7fc0009ae4a4632d94b344f7d5d4d45ef16354024c2d414007142385b21d89b4dd2c22b1235a6f1175935f2e4dbea48782b51052460f7d0fa7d252bcc98958451e92169074561658773cb04cfe7c5ac22399681c1c1f31f40f7b5f80837e47b3714699b25cc1729b560010e821cbc9e368922e88161d277c30bf1b718536691d823848edd31146edb72bd4ca9b13c4a3b7cdb2a8b8ba574005c853625c8a43d9968703af66bab4ad04bbd729de706f7f3221cac3773f78fe9f2b30b9341ae27f3c8baeefeed7d6fbe05b0168d7bc10f052f37659ca3c97f7f26873ef32685e1c6131b09b83a8b8f800c9fec2889617525fbbd2e74642a5557c3f76c70d64948aaf7fd737ed2f2377c03a7147252d2daaae78d42fd6137eef324d9d43dac4082355b44fe31141b55c786951344429798b178dba6d3943c80b415e452fd9cc4ed61a409c6867e65dd6fe6dc845ee85c73abdf0c2e39c15d6f7dcc170dd9876a59510f2c00b97e51fad79fc403e5bebc2b5554e6c3fbaa79693352172a0f9f4875dee50453752dfdccfdfa66158cd95f2a4520d1aa1ca649ee77ce1b03a025cdd564da6ac71a603b4359c4e71fc1d47a2ded80df8c7044ad47d26fcb414e4e9797004d4ab62043ce2cac7a064d15d764083656a86a15613f9993a40224c404f55a9bd5f68cb799c40acbbc3d6d271595491bf78f20c5c8dc87ff6b5f937e7df7f9a5dcac0261f5ad8a0398caa32bdab78e60e4e5001df6c1a78b7ef5713ac76512877cc3712dda79e79f01f7c6a3026b4d90c119cd63c260bedb66ea518853116dbbfa2ca3b3c0f03cbde1c236a153a08a4137561e5978d68fb40b9d97ac7e0f547fbbd8aa78700426bab21b946b26cd497f964f50c39d82626c19c81f35be5a0a0e1780090992ab80b279450bf5e9e7c0a13ffa38c47cfee83a132622ae226da1136689e8ef7e1bd16242c2dafb65c1e00efb5c3c991d8f8c4b1fccff57a64fb132471c0548976e52a7e36e4d5e0aecce103335dc1802bb81289e211ea08c693c3bcad575ab29d00b0c50f0bbd6005f20d776f082086d0dd46740e26325cb533ea18c22859c7103bcc3bcddfd7a7575eb2bb288d3765975977cb6946de4d9f2bb572bc3e3fd8b667fad3b9572fcfbc67a41bee25014f749f91e1640eafd38f43160abdad207ff51f0cb6b4302eaf9d8476979189117ee1647f0a55e331cfaac5b824ebad4e14ba042836b200ffa8f58ba3bfcfed61bb06ef75b84864930abb902a4c4848064def349f8f13d1c51dd570b72e9ce539d46135f96a6cc4298bac74974aaf670b72a4a5edf06a7751b0a9609701f94b3aa3ced89ad7940ac5265cf22ff3afc15aafb08572c0f23a2be03d19506291b07bfb1f091a4cf0d6ddca670bbb32496aafa15dfa98b9eb3bdf80fb6ae6d1d64f22bf51847d91754a0d193d5b40b324e1ae243a067994e60b4379ff940bf8118a2ca39b8d61c9f0e2c4c120c76387668b927347622017303aa3548d23901ff85d9452d14fa23bf506977e2566250484ba9f9e90205a55b83680092720028efdca09ad487516c2b0eb180d2f37e24057b7a86b56829d0cb587a1dc4791d30774ec8cbb2f33bc178dc6ad76fa1d036ff7e2ca095a7fdf9434b295b9bf959c3be91f842d59dceb0d352b56f733b13059f9d82149d72d14158dd7d9639451880dac95fe98db9fe6a6cae53f32a5f05b558ca1d33be63983bb90dabc32faf3ec94e8bbfb32d5d7470f41e6951081defbc9622149a6b32b31ae9cb0357c46711ebad6d5b17f90e09ccb1c151d055a0ca14e6f6446037c67a8a9be250069373e4af677ed72871cffb77564db85a87512b87cb86514a288c60c97aec5c2728e02cb96e4280cbd2c5aeb02291b436ae850df3d77531032538214b246b2669c7032dd940ca440707bd695697cea93363c1139c4b6569119e815b0e3a187926f6ce1f20acd8f1d40c5ce4d075393d44007fd039045b4c442222a06766fbc9669de9e39f295f9323ea8eb6144a3e48524fcd59f5ae8099f7a4d65939f3e64dbf47baa49c1e30b5603ae573869f9bfa684284d7573bafba9b99d04d699a7ca8d34bd49b02b42ee5cd92a5cf1cb2023e578c2254034dcef09ea6774675ae007036b81380d97ae9cf5abdcad959d72c53be2f0ddbcce21e14856257dd106436dc5c766f20d9b9aaa0815dc173f3db484", 0x1000}, {&(0x7f0000001f40)="6631fab7d19d230c8ebfa9b08fbcc3c2c674492d346133aca312fc6e8b8f297d4934140194c969b8c514d63e099b3ed5ce21b68c9a1261b6d0138afc53cca3f8b0e60276bbc87b76f56b7b74c06493ca47094a4fe3f92ca749dea1", 0x5b}], 0x2, &(0x7f0000002000)=[{0xf8, 0x112, 0x2, "7d41f7e86163971dfceeda069692c565fc7c073bbbcf03a3bdac3498c25f0340197b24edad45fe639d24f2b7e7ef6327438b56720a2b5eeaa1798c77ad854c64edf09a9bee15fc55ea5f46b6d8ec591c635f54418752c0b8a70d0cf7b6590af1267eb5dda40d5f602954611c62c752819c8637fe371db192076fd0e5cdd9f0c323754c29d03378ea6964207924f60b249cec839f6bb8c1479a3d6de5ef4f5fd2d01771b6465047fa19b6b30472fa539d018f45a03da2bd8fd76b76da155fdd52aeaca308d69b9c030be9b3135a4a549030ec5b0ff54b771d911ad39e8ec95f7ad2affcbd03"}, {0x78, 0x1d, 0x96, "8582f3b3e18c6688d7d6b502664d81a21d30bf8ee80f998561d0b243d5954ffe0c5a19a677acafe2a4abeead98af62eda41499f46cbc040e5a29bf7fc31af3b50ca0fc9f47c8cb1ec5deec1e69b83096cd3c7bd353b881c4dba3ec198c9a9e2489d902"}, {0xc8, 0x10b, 0x2, "4ea0404aa0a1ba4e940b04dad97aadb94933f3db6ac85af2c001612b7ae166727612c6d494251159bce21bd1521ea9eca5640dd91728cca5cc6779b75db468ed898899470f4b402bf3f4fde9786b907cd709bf9d6be762ae7e0993b12176b0553e736122b6c2f47bc473e885f8b4586b25ec320938d71b5bd49db12275e85812b73b23e97aa5099c2e56fa59196a133d5e2f8d0c4f743ad71b6014be2aa01accf1f61197322505b04f18f6b1551fea1667e24b"}, {0x1010, 0x0, 0x6, "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"}, {0x38, 0x117, 0x4, "4d38939c6f60e499034329564bb35a0e6ad5f76f894f2debd289ea11c5aeb48bc18bbb340aff22"}, {0xe0, 0x8, 0x6, "08df99e2a6133bd4e4d306621e9b13acffb70d43a359c114435738f54844222cb827dea0dedfc875a667215eeabb86b88f916836c559e6dab48367cac60c7233b9cc266262f115e470a4fe9561708cba0a9924cf146066937ee57b3666e5ac56011ac0accd9f6bbe0baeaccda46fe1248153a67c7a25621d53ef9f6ba388e111ab28269c90086338ae6484c116731360ce9d1f68a00d4f9e1cee019784e79609fbd93f4e772eea3502634b5bb45ff9bf3bc907ff16fac94b9f943a367839533b73925390ae40cf0758f9613ff8"}], 0x1360}}, {{&(0x7f0000003380)=@pptp={0x18, 0x2, {0x3, @local}}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003400)="97014f538051bbf0987e91f13dc6a0e9c4181b2a97fad16ba8b97b97f662cb034ae0903025295b2d844d57c2ca88dc0d7f1ddac58ec5b07b417814c5ba5320ec57c471c5d708082c04f0361ea480f49ba487102d3c68b845e9649c8538ee0377069bcb", 0x63}, {&(0x7f0000003480)="c472a105bc8e0a1f6e0d45798eb739eb1c87350474164483f554698a20470486052092bf7b636a534a69f18570a276ec2be608e9075ab1792ee559a0b575078151af8f9997dd1c0d12099f9e7804ef97567ce1d30457e3e0786ad72a81149c685036019f5ae423cdd5516e4ef0a1f9c14f602674a57686aad5fda0d33b9f546e5e9965767eb7bbae4050819b0a5071e910288a604e314e705869d9976c6e1957d3ff4a46be", 0xa5}, {&(0x7f0000003540)="e7064a98a3ad6323300b9cd9679cd570b8c92e3dc1c8ab3dfba0a4247e56c70d1255b701304df46987a64b142d24cdf2d515a01c8d3aa928c8f4a498c3c81fc8bdf6e3c74dc1f3c3da911716b5e5d230417f56d892104fa1c62fa3f33e85b218aadc6503fa30124d786beb69d3cb86234d041dea469696d2cdc39b70d859e94be513f07d3720", 0x86}, {&(0x7f0000003600)="a87a54d3bfbaa24892ae14b229ca558d0ac5d15fadc1d3d818a1e058440770b7160975734c6083d7d81612d232d115f9b86ef7b774fce276dada63e58cadc13765976732d8c99f043b371ba4f1bbb96e1d009233b1253277796c82f8bcf2faebd8bec893d1a75a19e3d963acb5799885a130ed99fc96d2326edcecf73a0b38c0730d99e4da96001d6ceee0a29f86a271a839870e6a0020cc6d2827fcfc92b33c119a6d701dea01438b8f0b3ca3e047f936e61b1c851e2f31cef313d0f30d6b28f176e6a07b32462c55", 0xc9}, {&(0x7f0000003700)="ce12aeb3720fa907f3ab731906987202290b200d6fe91f8a35e8", 0x1a}], 0x5, &(0x7f00000037c0)=[{0x40, 0x10c, 0xfffffff7, "9e536230cd22f7b0d55b474d0e3bb03693ac09373dd861420e28063ecd99b172783faf3dec19bf41ee9182"}, {0x10, 0x118, 0x2}, {0x90, 0x88, 0x1, "6bce911d52a4c90b1dee9d2ebde20dfcf7f137df64fbabe912b2e1ca2412ca9c2b1309f6c1a7bd1bdee7a0770707ece42a5418d11a21f8003d43aa7a7256a5b0dfb964b98251679c4dcf14677535457ddd0f3c09985e0094a35c6fc112687e08a86b528cbade829b61d602981cdefe9414d51e6c4164c6506af04da188"}, {0x70, 0x109, 0x1, "ae8df06f8396354d6af676980b655f81e94ae06b7237348ea0011a4d77ed9be07df243b9504b7745dd63643d4843593bae6706c0b19467755242fad2d3f6ed432889e214c610e667f9912978d1e9af3259fd243bf2a7ff78565b6a00"}, {0xf8, 0x119, 0x2, "4e9645a9802f94c4acd0909058b23d6aade808b146a1b0e2ae9e1ee76137cec2ef918aa1b8d3ae08983a60ddebb1399f953cf747dd05275c9b1ba9fbdc5b5b1ef8d1853e73a6b70b73d087706bf2664867b4aeb8026dbab17266ff70f55ab4f0e6a30634b7917acb548439b24688835e2ca9415f53ea176d7deaae55dac10629444047a8ada689a75fd03e54cff4022b4f8f23c78b4f8aef3920b84a55c90b691cebcb86e60d2b28d34fd5461392a0713031e43d28e475f75d9a8c210b54790c1c0f24a11f863b57903b671f64ebf3d75ae145fd2fd2666f3f55cd61a4185b1e04855f53"}, {0x1010, 0x111, 0x9, "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"}], 0x1258}}, {{&(0x7f0000004a40)=@rc={0x1f, @any, 0x6}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004ac0)="562df04d6f71c72ac1c94ee209b170a2bd947df8e2370d4a10d3a424a90d6cc55cef8ebaa06a7b63b1918fd5b3d75d50ecd128754f50943853e7e6fe7f262c408e998f9b49a67d65dc2d9a3924f059eb891a42f1ac0d67726e1f72679a784400ac7b17cfd9a21591a0925d21abf6cf75c03492182baa3f945e932cb01fdb642726a2bb694dfe1ed51ef54fd4c80a47cab3b9e7f86a1ca1e72781ad4e0de1c98e7e7228421d2fd9b4bd416db66194390336ee615cb0afc89573f507e02e2a7056724b3d75dcdbe62ff87592681f8deacbd2ba758271ca8970aec2c16c32824276d298d7f89f7d", 0xe6}, {&(0x7f0000004bc0)="2ccaf0", 0x3}, {&(0x7f0000004c00)="119afe4928f96df4fa3764", 0xb}], 0x3, &(0x7f0000004c80)=[{0x38, 0x108, 0x9, "1cf9e332a0b3bf58cdcb7403c69a209c0c893f5fcaa144043c926efb509a667a558b139b56"}, {0x110, 0x110, 0x5, "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"}, {0x30, 0x103, 0x8, "f5bd249654fde4c3a4ceade42e00df85d8465aa7a0e28d9e939686176048"}, {0xe0, 0x10f, 0x9, "b38df472894711e4907d33164aba7458910fe8c4280d83239f1c8f2f21a971ac504e29a50921039a438cb26b1b321eb40e4f3e781ed789d556896f2c85118cb99db481677baeb9038e383d4d02f313d13eca9c0ae916a441349c060fd6115b455fa76d98724c83698329ce136a68a836c2e98ee29c15955c7d60ad3df8f0935b93a480b8fe11aec97f98a4fe0c5da24beb6dc8a252bbf9fc0ac78f862756c00c6d5f3d7303f4bcb6a1d28f846b24e398254705713c4338635c0bb3aa1bc66e14559a5b17f6f3ea4b4e1fea3686839e"}], 0x258}}], 0x5, 0x20000001) 2.186771441s ago: executing program 9 (id=3369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8831, r1, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r6 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x5ec7, 0x10000, 0x4, 0x30a}, &(0x7f0000000340), &(0x7f0000000300)) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000880)={0x0, 0xdff9, 0x800, 0x1000, 0x0, 0x0, r6}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4e3b947d338dce40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.171510017s ago: executing program 8 (id=3370): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) 1.521023048s ago: executing program 6 (id=3371): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.47888837s ago: executing program 7 (id=3372): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_io_uring_setup(0x6ae5, &(0x7f0000000380)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x2) 1.453779912s ago: executing program 8 (id=3373): r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000400000000a004204d289bcffff"], 0x90) 1.392983229s ago: executing program 8 (id=3374): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'batadv0\x00', 0x1}) 1.290818075s ago: executing program 8 (id=3375): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'batadv0\x00', 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000040)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="ddd5a17be30ae69e0ae3afdcdc6cd18010f927350072417b4be6ae7468de0371f0e6bd86b3407ad45f6bffde0e1024bae9f7787adcc276ea5cdf3904c35e632841c7ca86c709f9c6dc9338a23b210046d1d62c0531f4b67696aab527ba6034b702c2c578d7a815ef27346f5279465e0dba3620", 0x73}], 0x1, &(0x7f0000000400)=[{0xb0, 0x104, 0x57, "e91428143569901a66d7556cfb8f478de8136404468af12a3c5f88ef6380a0b95163c76004cbc92f0869ee14012c12e5a15f29cf16c52af432e63cb4bfd5c9125bce1175c66c3cd37ef472a158fdee92ca9dfb917d4b83b8d7b6849533a69ba107982730b4c37c80a05f7b4295c868ddf4b64cf00dbf97e3934e610330db5d265ca4bc1aaf277a0d2deb96e50a124a90c91f19a0edce8ae4046d"}, {0xf8, 0x113, 0x3, "0f5456d48800dd02f8cdd1c624d75c476919d6dbe92e679954b98ad9b816705bf0866acd75989b41177d54fa5bae7f0e0b5b374f60a74240e96609d77421b93f6968bf29717035ff09601dc4006cb03727846964330cc7129af6e045b6e2116cde84d99e21bf2d2c565f495f96057fe2df19a15fb085b350e37d8a63d8c0e1eb6eaf51dd097576cdf88ddfc9e898b1ce6c91ddca7612d518e59ec2c161b97e0ecf7677de1579edac4c4c18bf574631e349b2ac3c93c8f1bf0a12ab4783655845ea3f110a9fabf05e4ec444781d25aadb73e8dde446a3a9cf74cf6badcafed7a2757e15eb8d"}, {0x1010, 0x11, 0x980, "0f27aad12751abd5ea73f4a4704157706bfe3ddabec89a2d791c8ea2a879a10f75bad5018d2388f5fe531a18420f1bf6ff5909c7ef70b11cef722a6e828d00c3d7d8f5ff460bb5f453f5753eb866ad163ee62b3c1313c0f960300d7594fabab54e6d9ed94f3970f947da4bb4ad2b0b86ef6942421debcd83ed58c093a588563b6412a2e41e9155972614e55e0e79a9bbacd902eba6b496b554b76909b49861045a0705c3d5ab85fa4fa442c041c6bd94c54c1df0583425a0d4e3bd0e121d4ac164c638b4d331deabe701d3805a674cdacd1213e835ec4f52a0935be7699fd0dc694e69289a53dfee7d95dbe486afa73c17e54d35b8abfc87b50d0df4cded67a07247d2cae9ed8e41224f0d56813e974a4f8e1c1c727f4e9a67b510ef35ee8dda2943b4c170f26f35ce80b5b5d35c3d1e901519504423ecf0d2f30a660950cfb3d992a76bca204b0e424b16e78831b57ad004c38ce5511dff851c148fdfa53537fb435457c80b2b0509573ac45ba34e118ad76d7cdc480642c06bb2a7fb1745e162d998aadb71a4575da66e31ee960fc108d9ab3d26350ea99282c2656d1ad5e00b0d81442b8f1a9f8dc8d822481e01202ecb773bc3df0ba2be5011f3f7684b27f9f959e403f22a05e68ac5cf7bf1a1245f868666e12990280b7e0653633a80ee397d97c639186adab578533dd2d84f21b973c3e0f692e0bfb8662e8db2f24084068ef8234d9e49be4916c68c029d63df7e88c1bf773539a6007a953f39cbf14386e2560ddc7c92fae1ea1a6935202e9fe4c9eea420beb6b3aeeba6609146441a02d7b9c320b8f2579e9df1e1087ecee49f67c7d52342313f4d87588f1296acc4a27bd5eadd902608737ac185d13616a135381e12206339a42198fae23efcb3c4cc60d9fba0643d0596da84f4b7170e443b6ba1871b8d8e94c98714f0beef59e799fed9f249db2a629f08c17acc1a3114c7364a9558eb897ad09a3e6d1d03d34f8ecda5c77433d9527d0a05bf1e03ef3b903c3b76cfd076185ea61e6b57d22c0537026aa5f737c1b73cf1dc15cd0cf62dc83c683e7ad0cebf911e8208d533dca929bf37998b7b8c3064fa276f53708606d0237e5057723e1da10625d8a94d5ec8a6b73d94f155e121a8d4fbf0a686a6be559aca8bfa2bce338d3dd2840905fc98ed4ef188f7ffad34498ad02c0f38825c004f0c716e1c40a764ac91bfcf701e412c7131b0c2b183538e5aded9cea9e1fb52bf98486a2c2a8ebd846af7745e113fe4e9fa8e0590980825d74ece3f7b1a43d9e5b01d1e8c5510f8a0418d4587cbe8d7e3d66ba8669cd1e0df6f9d22736a2aec5c8abe4367dbb07fb498a02001512c581b8e12a184f093d20a5e99106c155e27fb49810f7a7599be2fb200d764e5511528e617e87427d3beccd70d01679335dfe34091db06e1533afe574930a3ed013a498094ce956f5b876941cb27d6540a75a1fafa78961d4b8175ed1fd89f987fff2a088143827824a867d5a0ca4b71be4f2d1d1ebd827ded9faf285e2a2774e03ced6104a4640684ace17aa45c5827b60bb12fe71ad8be659b7717831e50bc89eaf8735910b7da89be2b38935c33509dcaed31a8e6fc5884ce239917a5bfed68dda9cd75c5fd260c79d7ed9f18a3fdf609d28e1a4dbb4447f4cb37df1483961c1b92a9d1d511e3f4adea824a0c136c6a4f9eb8faaed9a6e958386f8233cf380da6c247684e6a6f4e2a403a69d736a28765762eaf76da28122bccec9d96c330e1be00f7e9e64d800b7442246917e5a820bdb6b001a57608f15bd2bd96fc5b4e2d34b8d5896d0568805cfc79236361b7b43884dfd980570f3ff5c6d75ecffa26e2d71a686f2e51e99a5686350c22c7da29bb3ba0d752ba9bd6cbc7d22d72f751a9c1bad215557e3abade7cc4f66a21543c1ca42cdcd4722397a32eea4fd839025176434bba63a7082260c2e76bf3a5568dac6849cacc4fd57c8fe304e1e1bbfcf754078223fec81d0059c914409e4b7e4302a835c7a19330b4494b5cf6a5153beb44fb5a8619faf08dd1c4f7461797e0966c270417ed15b948a03ea952ba2a5598dc814f7aac312d344437113d2c14ca8bcc3e0ab19579f92cd39437aec8e87686715f05333f0ee24de9799b2c18b0070ac66f1d15753b5d78acb5d069f0e3cd8004932258684147e8d1cb6fe00a67863b89be7719f048b6e834f49d9925b58e0fd0c797805d71eae24a545fe7cbe4594dde219c78eaa3eba7ca08870c700819ef51a253884c7a8d59a3a3d4d494062c318c014bad1b37d275b835c5f59957228e869d39fa7244cdab01e4fa11252c4477f2713dc45181f389984ee1bf0a8b2456b7b4ea8d4d44747ee36583ce2d527a4b2472253fa57cb5bdaf81283f67122bba3064add92ca718dc96c4f0b84fcdcb479d74e2755ed7608b05e8471697d420ca8fdf8114cfc89f7773d8d206850bc71f860d2a367704b6fb58de4fb6fd197ca83499b3cfaebc867204c0344f52c6de8059ff7952ef8456d6192158afafaecd239c7040f32759300b622effdc7d5c4d1d1fbc8ed0320e2ba021404da3af43742cfdd127c6835f97e0296e5e74d0c73cf385fe760d5b868316af37f1f5abfbc5174dd50a82c56aaf5feaef719ef21929d6a502a3f8ff556be92c613ad130e33361ea618bb8b384b72f7232592957500c5b136676b9518184c372d843c90c4b0e1c915ae06b153a1b4910cd5b0487e4b5e092588c3d47e81b3f45b692f6c57efb3b05f6877bbee036943974789360bb4f475f5c41814c503ebb0b8013c8f2511e428ae82f461d67fac04dec533bbced62cd33d8aa4d63a5442f5a77bab3c282021c26083029fe94040fc56c1eed027c5c7f5169615563df71d0be60b7da648db1237bb486934ddf11279b1167704790453a4ba1872d09e0a2d04a0c81ba07d3f5299f6f373a025f436fd7337e79b87ace416b0782bc3f7c8c6a75601d265d474eae538a32b61c3ed46d8f4a630aa6b3058c866beb80be23e35b15bb586281c09a2d6ac85b0c3a473e3cb49c414538b61ebd20617b7b01696deb2310cb7edfe560dc22aae6d32a3c64ce17d1bf0eae6599ed3d2ed2cb0f01e2e65297dacc0ca0d40682e6e1d9b7d442bfe31a8a26fdf2af883d51a4a3b29055eecaff6911eb834ad5e49857b3c51afb3fa0069239f536c811b3c7ac80c710f0920f2fac5ec7e14419821e66f892d7242894de46e7063cce268e4c48d6a5b352b391eeab85002d378de4fe438dfc7bbc0794af1906a730d44f975d29e46bae6b1610e328fe44685ad41accb557f6a85715a81d1306c5cef27c37caa5ae3eb85b9b4e27ea7b93352203db1fd73179c6ef902ba9b06fec3bc7a8aecddd223a7215ed8ee8fa13b974d6a2fcc65e12d9ee2f468a1597d6bfcfddb9e9f8988d1a65e85f7d0240f188ade21b8e4727fedb994a965a81859c461cd9e5db99b7425aae52130509c76b0a737ce6c248b19836be61ccd5c336cce535767a0926dee02e22be6f201debbb09315399eac80a57286abfc8212329c062f7de5d3c5b52a93549dd6e17e3d09e8504535a6c9433c2bbe35a015f6a3333437cc1d7710f5bade1ae176ade26d40b660278d41d16c806b6db488c2709810c414f7496ea25808fdd3a37c888a7780b57c6735f37c6a4464b656fb803631ee4eca6358eadc51a19fd3bd8b18d63d0d689c7eb198568f3a34343c720086c14ecf7f0b5746c3c743b11ea96aef1e28315fd9e5e425c34602b014c99b0fef65841a3ffae214384f468f27bbf79530bcf9fa9b5f97d2820339aed5ed5c092fb7cf96b56ee4d231104677b6704bff777a8e2e394ca2c700e50d4802e1ce25d68146e1e10000351adc870bb191a76882e26b88d8063e042653319286c5f730c6262237128ef73fb65440cc19555e3d8eca108a5c2d30107222e7ce59918f53fd7f27e031ef190883f6042c49dc9ac983a3640d3178344bd53e81282246dfa84694dd2fe158ab525c1ba7b970cca128c911b6c8f8b25592f41d846aad97ad7ce1ae16d421fd72626e4476b573cf77ee7afc2e5c531c0b8ac13bdadf022636c90d44ad71257ee7966ce3e995795f6590eb4f214192e7d9973b0c970b7cdf12a5e0ae92b45d2edf6a08518cbd96c63a99327f59da9fed3c9eef9dceb11499168966612956d9c323047cecf725348f923e77c760f2e8e59c96cfb437d2d6bf82f69a7e7941daa3c78f94e308b46951baaca577ccee2f5b3fcc9b0c0a25eea5fa58b1f04e6876a394cd9dbf34e7e10cbdc754c54ebd054437dbb226420a50b2bb0655d89e7247fa8af9abf64892a38ac1dff0742fcf28004b4d93ad79601256a9e70cf071c754a918c6b9c33163540948e186f24570351af757d2f19e2e557d4eb35b5517d636ee961b482ea0e8f874791ba9eb86672957a43bb5aa7024eb23d57e81be20561870832c707c09f5c088c429364dfb0d98b2b0b902fd5f574a0221e6390c033638ec568bff33fa6abee957ad2d61640f2b83125bc44cc63314825660db20be143df8c818e0912da26e9fb1fcb673c9b5d58b6b7983b7212b51b690290fb686effe303c605e0365468c41ae912edbce4337cec98ac5a7932d7e0461aa123981fcd9117f680be18b21d1d64b2b15bbeae9c80e8626d0c75e0ac54d05ed7f146c041bea2668fc08ae088a9cb22270d3f6c7cefab19bdea94e5b7461a0a861375610cf2835662a1aa93af1c9bf2cd9787949cd92bd4f29eb55b8294b3a0f17b92967ff2c5aadac23cda783b3bacd8d7bef740376ff184e3fed0a7a77d8769ac1dbc85632602821b9d6ba0175ed6921f5bb61ce5cbc685af1a42c3c90310ace137dec6644050cd4aaa6d023fb2aeb07efc50bf89e7f5aa9839e98025c56494b3445960c9df580904af24a028c60d15cf97d013049738944bb703fc8a558bf3163e4ff34bd21c85d7d4c9a8ac7477b68210829c7d7d7676cf51ed215aef78f4fb1902b620728c1ec526539f3a8ada4196c0421da15a05ef5da929fcaf85fb19c3f02c4aceb12f313c7ec928a678b7da4e01744e9b880e62d23db84b80d935ca0ea25d16b967a567ee75db7bd3f1e56102e15856bfee4d072244087d0ec12712d17d0fffd62604afe5ec346c4e7129ed466663eac37081cd3ee2e1e5a3eba00a61bfe277e8e709b1e96c290954c57c8faca90f3c8a17003d5ab19f900bb6cfa5993bd100ae723663b9c54f8357581b80d1393b3076d9be80e62c90c4d72be86301fc60bea8ea9c7795a6c971c8b780034c1ab6efdb0d9bb2b006fdd6de80af29f7d5f9581c365e4055eb130b88cce8f0d3c718da1e57624b5acc4869cacbd70876b5741062e63c69b676fcdcb7d4c14e0a3c0bbbe7452fd1eb29579bc4a0988c4d780421a922e80f0237cf12f7ce5162555f4d850085496aa34f34e491a808b343bc005851628def9826a67c656aeb2287f3d5d9035214ffe1204cbbc1ed9208fa21aee96db66f0b1fd46226e2c17282d17f198fe739931125c598883cac491a3306a8228c2a0041571e6a8bb0c613ae49ce3cd12201a4f345ce236f235e4b90040db602c0e079a1e7ed61bb2bfe83662c2ed8aa2b8264d5191448e337f84a971267b82ef521b480bcc0a5cb008303c022f93c982d996f7f75654d71ef4f202d20099f1a15de90b6501ca71535b412cf84aef1de23e2bb0d5a98aedc0e9978ca27b18d7c1a6f25adf6c7cf881c787b5605c675fdf85790d4a3a0f621a21b687593639dd49b3f4f338010c98062d2b668231d8b08b8e2b7"}, {0x68, 0x10f, 0xfd, "99581d0b203f6df7e058095e8ac3c5597ed5c8d85d408548006bde5ee73b89a9f54c8f71d92634bf87469b2f29c83d3f504473a6cdb449d011acddda3672fec9e740176ad090eeee3e00f387981ca85544aa"}], 0x1220}}, {{&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x2, @local, 'veth0_macvtap\x00'}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000001640)="6993692049f76109c04e725c6476f00de89ce6ef6b707c521155e43b2eaed0303249c14d81965560e590fd76527c9e76eef2629ea649b7a18e657f0470257f364a58ec9f6ea2366bdeccd730452932151bea68efacb2cc045aac0a56aea0505a4674d3a91c06352a19490363e10456d9f00bda868ca6b304dc7d5265851de894cf267a6c11bed8221fb590495278e236f2003a7ee6a70011fbae3d1d76a73f16230c20d910bc265173952eb97f71f0bb6866ed88d7c1ab3011d54037d6bb6412318fd33d61ffd42d", 0xc8}], 0x1}}, {{&(0x7f0000000340)=@xdp={0x2c, 0xe, 0x0, 0xe}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001740)="3095c084ca6d8a820d20c4d27fe609a6ca541d00a7a6388b24f9258cd055500818142680e7484ec84ab3b6dc0be4f411bb702146d22c6018087048164d31ef", 0x3f}], 0x1, &(0x7f00000017c0)=[{0x58, 0x10a, 0x7fffffff, "9e7b1996a698dfa69fb84611cd295710ca50d733bcd69327242a8f26100f920082fce3da8d32060aabb702d7c9aad8b14f6b86dae200da23b52f5f891b8d53fe7fc12c"}], 0x58}}, {{&(0x7f0000001880)=@xdp={0x2c, 0x2, r0, 0x40}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001900)="be3063685672ed421ce1941c5c13e1805c2ffc998afa247da5ceb61e559f1b9b47bc369ae115685f2dbc10f33a2786169cb535ce13f5e7d52fc95e041b3da2c0", 0x40}], 0x1}}], 0x4, 0xc000) r1 = getpid() r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x2) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket(0xa, 0x6, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 801.044415ms ago: executing program 9 (id=3376): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r6, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0xeaa6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\"\x00'/12, @ANYRES32=r5, @ANYBLOB="d670a951a7cbcbe824cf8bb2a6300dce02bdfd44125a132e496aef108c", @ANYRES64=0x0], 0x20) write$char_usb(r6, &(0x7f0000000080)="e7ebb402072138b2d4b03150c549f49120c141c53be40c55f93ce7a9bb29e919d52f00a410d4239c7feca8e4b3354ac08592ddda5d41233b810601163507f697f3a5d8a2ab8e6c83ed6b5c7bb1669f5102b0fca3476a7b8b0dab1d8deb9777f610ad067a", 0x64) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000010}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4048040}}], 0x2, 0x4884) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5ea, 0x0}}], 0x3e8, 0x0) 798.295716ms ago: executing program 4 (id=3377): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000340)) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x141000, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x20008040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) prlimit64(r4, 0x6, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x3c10, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) 237.70961ms ago: executing program 6 (id=3378): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r5, r4, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0xeaa6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\"\x00'/12, @ANYRES32=r4, @ANYBLOB="d670a951a7cbcbe824cf8bb2a6300dce02bdfd44125a132e496aef108c6f", @ANYRES64=0x0], 0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000010}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4048040}}], 0x2, 0x4884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5ea, 0x0}}], 0x3e8, 0x0) 232.192867ms ago: executing program 7 (id=3379): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r6, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0xeaa6}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\"\x00'/12, @ANYRES32=r5, @ANYBLOB="d670a951a7cbcbe824cf8bb2a6300dce02bdfd44125a132e496aef10", @ANYRES64=0x0], 0x20) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000010}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4048040}}], 0x2, 0x4884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5ea, 0x0}}], 0x3e8, 0x0) 0s ago: executing program 8 (id=3380): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff", @ANYRES32, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000001840000006"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000005240)=[{{&(0x7f0000004780)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @rand_addr=0x64010100}, 0x2, 0x4, 0x3, 0x1}}, 0x80, &(0x7f0000004880)=[{&(0x7f0000004800)="583dec1a433cdcbaaff503bb43da9c498165dec0ffeed9b4ca22cfc7e1d543393217d75ff5f13ca37dc69655fbf21a19f2f7c6b64a6397c08f23d2619472f624faaca22093c1eb15e2cff63c31e1c1efe7a30b1fc95e967783f44429985e1e2e", 0x60}, {&(0x7f0000000340)="04aa4d1e014663b11aac51702038168ace8ba4f6a6dd7312", 0x18}, {&(0x7f0000001500)="baabf925980546da8c15c82bb7f8db68cf9d22ce102448db0c70fae6f5a0997f385f8403", 0x24}], 0x3, &(0x7f00000048c0)=[{0x88, 0x113, 0x80000001, "acd6464f70f052c04d4236238909af9484595d0997d24c61a1a698c43803c20d4bc258972fbe4869e8b4dba5706649c1f68120b7fdbbc1c63fe05589573291e5b85a6557e6463d190d61ac7a044850d231aa5a3fe8d162429120da290a28cce35279b3c17a47d94385e75405464b9a2367117d7f1014"}, {0x88, 0x101, 0x6e31, "161260d2de66f31ba238a92e02984468215a19bedf252de9fb333c94c2ad75e4c7bdcd3ac14a2571dc7105d103eb97b5fbbdb34325f5b99d0086de264e31bad86dbb9bfbb4dc007581d67cedd194e679de829300b16711d69ccd05c9b777cfd9a988b75f0f6cd582d2fef041b4a7c732eda4382805383a"}, {0x40, 0x118, 0x2, "907e203c8b7e62589d7858316591a633745bd5fdfc1562d496aca94ea412a96f9bedb598de3d9223f8dad2caf0904695"}, {0x108, 0x103, 0xe, "d5ca94c2f55ce02967d4327dcd39f2726c4668cf66c6a6c12181ef7d3b1e805a8406a04e8e0c5b5495a72a459160f8d9068a707d78366c6efe45a86c0080bbeba97fb8f3f536b353113bb353cd9e153af33d55e3fffe799a2c23811683cd07a661b31f02b85b2802d05d4af35b8b7980dcf0b1c0816dc23d7c8e000d25f26ab0c3eb858fb087d612edd78fe139b8f6fdad27ab15113861910ad8f2909bc973b387df49119f12b6d312fb83ccc0c8b16cd80a91c5be6b87554b9eb743c1e5934dd37025c964282d6c2ed19879bf671034918de2a531d6e2d25737d0d278d68fe300f0369dda52cfe763973a1d7f8fd24154eaec3684"}], 0x258}}, {{0x0, 0x0, &(0x7f0000004d40)=[{&(0x7f0000004b40)="62c11aa8e2ee386c5205a621a3bf6ea7874e28c83d8e6bbfacc22a4a1b783aa89c0543e5c9b9bbb658212714e9f8440af92cd0a2d9b78d9d739af0ae01ec59e02d089eacbb319db92fc5e11f204aa4b60fb5c1763c0c617c74b5bb7593a99b93e5e5b2566fa04b249b20180bda47a728ca6656feb100a19cf065faec49dcf96872bf3fddf2349d6bf89ac5f2a99282d54ba849597c2d43fb996d79186cbf8b1da6af901cca", 0xa5}, {&(0x7f0000004c00)="be76e317c784257b2a3ac9cb0cf7f000a42b5df2dc00fcf7b608548a5ee1bcd14e92f82cd17bbc7a284993e97fe4896ce37ca84d2226cbd11e58e5b541ef", 0x3e}, {&(0x7f0000004c40)="402c8bbed2ccb9a74f66a823c97acfb930da0436f839330823494749112d9475ede3738542138ca45203ce4fa92125108a2dab5add1afed4fd6ab5abd3149c4f2be367d59adb9246145e754a5a60ef2bb4f62411fe5a19a0a5d61e47eb60fd386150888c3f7f7dd808db699c4c7833646a7400f34999935ad4a6b74c07a02372d196e4dc68db18611ed725c3b6081a8b62c7da2d5c362564e8e7b082b8", 0x9d}, {&(0x7f0000004d00)="fdc04f81f0063ffad3b818e47da51be32f0633f1ee3aefd6cc643403fbe636f1d021cd2aa872dfeb44c4cb", 0x2b}], 0x4, &(0x7f0000004d80)=[{0x110, 0x111, 0x6, "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"}, {0xd8, 0x108, 0xf0ea, "ec14d0a255f6f371cd5c0858b3eb9d3bbca2beaf911f740a04ba8c1718aefdc82b36c673ea742f71f06703869683bf7bc6175b5b9af3192488a859f5f0ee6942ba12ef971e3ccf122003b7b8cbbdc4ae1329320d485a3396dc26f1854b0c46b47b9e21a0e27266352c2cb2663286dac1a5fc94eca2f14f8eb13453fafab1cc878bc712fd72c5c70bf00a4a2ea382bad6c1db419ce178c128a0c64e84650ffffe2dd4883342c1006678fac95567b6e5f4db60c41e4d3948b75a541678c904f14b38a9578c7c"}, {0x98, 0x10f, 0x4, "ae2d8b07d52753d3acc80d8d76daa43901ba58a83d23021cc0c2b59b3e55c542701729ff1e4b4f8fa8e188eb2c8291221c52de9e779bc35eea7476b994ef30f526fc1179b88a0579ab12bd870618026d8e42fc9c9168aa04f1b01f9ebc1e4ba0ec031a0d93d71e782b582758d4a764ad68eda502a020650321ba90e515e46f325548f611e7d98e"}, {0x110, 0x119, 0x2, "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"}, {0x48, 0x104, 0x80000001, "6b6fa3aa673da1b7b30d930428c43eb672915cd84ae1def6b829b183981039a3cae0a0796988ebd2ada05e53aadd61822531"}, {0xa0, 0x10e, 0x8, "9e15cdd63445d4daffac1685d5186ba52d743cbc19633b3f5349c2192405857fc790ede7cab789e7c2340cfd5bc1f17b7a31b6c10f1ded52064ec5c8e32739f7c98095d86cda9a53e7210b284205b00f6866cbd2e3f43aef95eb556fcfd85dee47d3eb43e2565cb0606105265759bc02e7f09b85a7388c397f26e38455795dcb38e34bf1eae543934e31f294018b01"}, {0x18, 0x10f, 0xdb6, "b468382e9db73c"}], 0x490}}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x40, 0x101) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) semop(0x0, &(0x7f0000000ac0), 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f00000052c0)={'tunl0\x00', 0x0, 0x10, 0x7, 0x4, 0x1000, {{0x13, 0x4, 0x2, 0x1, 0x4c, 0x67, 0x0, 0x3, 0x0, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x91, [@broadcast, @dev={0xac, 0x14, 0x14, 0x34}]}, @ssrr={0x89, 0x17, 0x76, [@rand_addr=0x64010101, @empty, @empty, @rand_addr=0x64010100, @local]}, @generic={0x88, 0x12, "514a0270fdd9e6ac9fbf10250414c674"}]}}}}}) sendmsg$inet(r0, &(0x7f0000000d00)={&(0x7f0000000540)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000001580)="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", 0x1000}, {&(0x7f00000006c0)="58772e3f03662ebf9d4983648a6970e93c14278448e0bf03d79340421fb1d62870f725726fd3a5572692c5e258edbce8424da6a91ae58f2c36f6b47330374fad5c4efca9dd5ff872af2efa27d1003ec975f9d01d6cde1287d47acdd00398046dd99cd57240125a19eed8429b5fc350e3531a90ef7dd513a9f2228784cf3abe245fae6e261594ad3dfa6b1d07a38871e5c054e546be549d84f1a58d1c6a12ebfb3e635969f9d4dfa03ed5d24baa3c1b3dd5d2306c11ec861f331bd17650f4ddb3fcae9a", 0xc3}, {&(0x7f00000007c0)="c0934a1e79492768661bf2026ab30ea492144aa680208effddee6bac9d1c5fbe5d09cd954bac070a1b67c6b999ea674d39138ea2b70fda793596f90692922d3ca0d7678a27a3c3253a7525b20fba93f69fdd152d6f22d79c1f2fc2f7eabbde8e5674b0aed2d754cb0fe07ca4c0ac4511fa7d329bf2a3f0fc2ae545850e812887f87d932a68327e7ad70bdee19446c9d9ba70b03f808bc1544f92cf31501c9a5d7a189407fa919a21c86242b0750b574b56027eea91bd21f25781fcf6ca58d773f4cc928adece52e0dfb642f3fb6df360c06b93a4", 0xd4}, {&(0x7f0000000600)="638be067b9eff09cf2bf6a9094e4f5b9daabe9c7b98878a5eb4c793fb87c964629e33e952f506cb86262d68e9fe8b9148677c724201051737b45d745331a8e1e5db1d94b8b3de9dc375081", 0x4b}, {&(0x7f00000008c0)="5456f591ce91ebf4a3e6e599e9aa816dc2ab7f58e94889b2779764f8a0646b582d8ea06036dca0503ef4beadac88a6af8751d610fac05dee0e742f2978cb550fcd6fd65a5608dfbc05b4cfda1b8fde1758f459bc85631d5723412aab1ce94cf676ab06240c03ba0f72fed2c1bbb5369a19e2323d2f820c2097acf89958b934a30bf431", 0x83}, {&(0x7f0000000980)="f6b598fc5a6052abd44919437149385a6723e4dffda37d9544cdeaabddda9acfa39fe43e679f2ac347fe0f06a18d3b043e9cd8ccecd2709a8ecc2444892d01d937d75ccfae7a93e55e65e78dbd4885869d2bc88aff043b528154dc59960d3658251fce41cc0c55f81623b8f3d2abd775934725e521b93f43623bbe178f43712e30d2fc3d79bc412668c4ed6642f1d031ea54ed78c685d7be7ccd17fec7bc2dbc79f6c4641d842c", 0xa7}, {&(0x7f0000002580)="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", 0x1000}], 0x7, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="ac0000aaffffffff00000000141e000000000000000000000100000005000000ff7f00dd13000000000000000000000002000000610100000000000714000000000000000000000002000000000000000000006d7cf96e7800010000000000000002000000030000"], 0x1b8}, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x427, 0x4000000, 0x1, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x2, 0xfff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x20044080) recvmmsg(r4, &(0x7f0000004680)=[{{&(0x7f0000000d40)=@generic, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000dc0)=""/157, 0x9d}, 0x1}, {{&(0x7f0000000e80)=@alg, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f00)=""/130, 0x82}, {&(0x7f0000000fc0)=""/211, 0xd3}, {&(0x7f0000000680)=""/12, 0xc}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x4, &(0x7f0000001100)=""/102, 0x66}, 0x6}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001180)=""/215, 0xd7}], 0x1}, 0x85ec}, {{&(0x7f00000012c0)=@tipc=@id, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001340)=""/45, 0x2d}, {&(0x7f0000001380)=""/115, 0x73}, {&(0x7f0000001400)=""/160, 0xa0}], 0x3, &(0x7f0000004580)=""/244, 0xf4}, 0x63}], 0x4, 0x40000002, 0x0) kernel console output (not intermixed with test programs): ][T16501] netlink: 'syz.4.2602': attribute type 1 has an invalid length. [ 716.331498][T16501] netlink: 'syz.4.2602': attribute type 1 has an invalid length. [ 716.341403][T16501] netlink: 'syz.4.2602': attribute type 1 has an invalid length. [ 716.350274][T16506] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2605'. [ 716.450893][T16506] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 716.457438][T16506] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 716.466450][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 716.477507][T16506] vhci_hcd vhci_hcd.0: Device attached [ 716.483312][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 716.498857][ T10] usb 7-1: New USB device found, idVendor=16d0, idProduct=14b8, bcdDevice=de.8e [ 716.509343][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.240766][ T10] usb 7-1: Product: syz [ 717.250766][ T10] usb 7-1: Manufacturer: syz [ 717.259156][ T10] usb 7-1: SerialNumber: syz [ 717.268251][ T30] audit: type=1400 audit(1745684177.363:1226): avc: denied { write } for pid=5169 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.301230][ T30] audit: type=1400 audit(1745684177.363:1227): avc: denied { remove_name } for pid=5169 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.308908][ T10] usb 7-1: config 0 descriptor?? [ 717.338051][ T30] audit: type=1400 audit(1745684177.363:1228): avc: denied { rename } for pid=5169 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 717.361691][ T30] audit: type=1400 audit(1745684177.363:1229): avc: denied { add_name } for pid=5169 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.382631][T12203] usb 48-1: SetAddress Request (18) to port 0 [ 717.385131][ T30] audit: type=1400 audit(1745684177.863:1230): avc: denied { unlink } for pid=5169 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 717.390678][T12203] usb 48-1: new SuperSpeed USB device number 18 using vhci_hcd [ 717.412691][ C1] vkms_vblank_simulate: vblank timer overrun [ 717.520231][ T30] audit: type=1400 audit(1745684177.863:1231): avc: denied { create } for pid=5169 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 717.726622][T16528] Invalid option length (0) for dns_resolver key [ 717.868576][ T30] audit: type=1400 audit(1745684178.493:1232): avc: denied { remount } for pid=16520 comm="syz.9.2608" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 718.087401][ T5864] usb 7-1: USB disconnect, device number 30 [ 718.109503][T16523] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2609'. [ 718.474816][T16538] siw: device registration error -23 [ 718.981245][T16538] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 718.994171][T16538] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2611'. [ 719.203953][ T30] audit: type=1400 audit(1745684179.833:1233): avc: denied { write } for pid=16540 comm="syz.8.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 719.390480][T16508] vhci_hcd: connection reset by peer [ 719.469848][ T72] vhci_hcd: stop threads [ 719.474813][ T72] vhci_hcd: release socket [ 719.479333][ T72] vhci_hcd: disconnect device [ 720.034916][T16557] siw: device registration error -23 [ 720.239574][T16557] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 720.306251][T16557] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2617'. [ 720.635153][T16565] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2618'. [ 720.772231][T16569] FAULT_INJECTION: forcing a failure. [ 720.772231][T16569] name failslab, interval 1, probability 0, space 0, times 0 [ 720.814523][T16569] CPU: 0 UID: 0 PID: 16569 Comm: syz.6.2623 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 720.814549][T16569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 720.814559][T16569] Call Trace: [ 720.814565][T16569] [ 720.814572][T16569] dump_stack_lvl+0x16c/0x1f0 [ 720.814596][T16569] should_fail_ex+0x512/0x640 [ 720.814617][T16569] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 720.814643][T16569] should_failslab+0xc2/0x120 [ 720.814660][T16569] __kmalloc_cache_noprof+0x6a/0x3e0 [ 720.814684][T16569] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 720.814709][T16569] snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 720.814732][T16569] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 720.814755][T16569] ? snd_pcm_oss_change_params_locked+0x958/0x3b40 [ 720.814779][T16569] snd_pcm_oss_change_params_locked+0x9cd/0x3b40 [ 720.814802][T16569] ? rcu_watching_snap_stopped_since+0xc7/0x110 [ 720.814832][T16569] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 720.814854][T16569] ? __pfx___mutex_lock+0x10/0x10 [ 720.814890][T16569] snd_pcm_oss_make_ready+0xe6/0x1b0 [ 720.814911][T16569] snd_pcm_oss_set_trigger.isra.0+0x211/0x6b0 [ 720.814932][T16569] ? lockdep_hardirqs_on+0x7c/0x110 [ 720.814954][T16569] snd_pcm_oss_poll+0x549/0xaf0 [ 720.814973][T16569] ? __pfx___pollwait+0x10/0x10 [ 720.814998][T16569] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 720.815015][T16569] ? __fget_files+0x20e/0x3c0 [ 720.815044][T16569] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 720.815065][T16569] do_select+0xd67/0x17d0 [ 720.815105][T16569] ? __pfx_do_select+0x10/0x10 [ 720.815129][T16569] ? __pfx___pollwait+0x10/0x10 [ 720.815154][T16569] ? __pfx_pollwake+0x10/0x10 [ 720.815178][T16569] ? __pfx_pollwake+0x10/0x10 [ 720.815204][T16569] ? __pfx_pollwake+0x10/0x10 [ 720.815228][T16569] ? __pfx_pollwake+0x10/0x10 [ 720.815252][T16569] ? __pfx_pollwake+0x10/0x10 [ 720.815299][T16569] ? find_held_lock+0x2b/0x80 [ 720.815318][T16569] ? __might_fault+0xe3/0x190 [ 720.815333][T16569] ? __might_fault+0xe3/0x190 [ 720.815355][T16569] ? __might_fault+0x13b/0x190 [ 720.815380][T16569] ? core_sys_select+0x440/0xbe0 [ 720.815404][T16569] core_sys_select+0x440/0xbe0 [ 720.815435][T16569] ? __pfx_core_sys_select+0x10/0x10 [ 720.815488][T16569] ? set_user_sigmask+0x21b/0x2b0 [ 720.815508][T16569] ? __pfx_set_user_sigmask+0x10/0x10 [ 720.815533][T16569] do_pselect.constprop.0+0x19f/0x1e0 [ 720.815559][T16569] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 720.815596][T16569] __x64_sys_pselect6+0x182/0x240 [ 720.815623][T16569] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 720.815646][T16569] ? rcu_is_watching+0x12/0xc0 [ 720.815673][T16569] do_syscall_64+0xcd/0x260 [ 720.815695][T16569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.815712][T16569] RIP: 0033:0x7f0112d8e969 [ 720.815727][T16569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.815744][T16569] RSP: 002b:00007f0113b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 720.815762][T16569] RAX: ffffffffffffffda RBX: 00007f0112fb5fa0 RCX: 00007f0112d8e969 [ 720.815774][T16569] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 720.815785][T16569] RBP: 00007f0113b37090 R08: 0000200000000280 R09: 0000000000000000 [ 720.815795][T16569] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000002 [ 720.815806][T16569] R13: 0000000000000000 R14: 00007f0112fb5fa0 R15: 00007ffc671f2978 [ 720.815830][T16569] [ 721.337353][T16574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2622'. [ 721.616187][T16573] siw: device registration error -23 [ 722.259669][T16587] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 722.641098][T12203] usb 48-1: device descriptor read/8, error -110 [ 723.361816][T12203] usb usb48-port1: attempt power cycle [ 723.373163][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 723.373177][ T30] audit: type=1400 audit(1745684183.993:1239): avc: denied { unlink } for pid=16599 comm="syz.7.2633" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 723.520268][T16604] ip6t_srh: unknown srh match flags 4000 [ 723.571678][T16604] netlink: 'syz.7.2634': attribute type 4 has an invalid length. [ 723.579554][T16604] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2634'. [ 723.927394][T12203] usb usb48-port1: unable to enumerate USB device [ 724.326466][T16604] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 724.399964][T16604] syzkaller1: linktype set to 780 [ 724.607456][ T30] audit: type=1804 audit(1745684185.233:1240): pid=16622 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.9.2638" name="/newroot/254/file0" dev="tmpfs" ino=1364 res=1 errno=0 [ 725.218758][T16630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2639'. [ 725.227921][T16630] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2639'. [ 725.556923][ T30] audit: type=1400 audit(1745684186.183:1241): avc: denied { setopt } for pid=16631 comm="syz.6.2642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 725.692043][ T30] audit: type=1400 audit(1745684186.223:1242): avc: denied { ioctl } for pid=16631 comm="syz.6.2642" path="socket:[53116]" dev="sockfs" ino=53116 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 725.769177][ T30] audit: type=1400 audit(1745684186.393:1243): avc: denied { map } for pid=16633 comm="syz.9.2641" path="socket:[51730]" dev="sockfs" ino=51730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 725.783345][T16631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.803715][T16640] x_tables: duplicate underflow at hook 1 [ 725.811438][T16640] bridge0: port 3(gretap0) entered blocking state [ 725.817998][T16640] bridge0: port 3(gretap0) entered disabled state [ 725.824567][T16640] gretap0: entered allmulticast mode [ 725.831441][T16640] gretap0: entered promiscuous mode [ 725.836997][T16640] bridge0: port 3(gretap0) entered blocking state [ 725.843609][T16640] bridge0: port 3(gretap0) entered forwarding state [ 725.853596][T16640] gretap0: left allmulticast mode [ 725.858625][T16640] gretap0: left promiscuous mode [ 725.863682][T16640] bridge0: port 3(gretap0) entered disabled state [ 725.902661][ T30] audit: type=1400 audit(1745684186.393:1244): avc: denied { read write accept } for pid=16633 comm="syz.9.2641" path="socket:[51730]" dev="sockfs" ino=51730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 725.965751][ T30] audit: type=1400 audit(1745684186.573:1245): avc: denied { connect } for pid=16645 comm="syz.7.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 726.031774][ T30] audit: type=1400 audit(1745684186.573:1246): avc: denied { read } for pid=16645 comm="syz.7.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 726.481438][T16653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2645'. [ 726.853354][ T30] audit: type=1804 audit(1745684187.483:1247): pid=16659 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2650" name="/newroot/224/file0" dev="tmpfs" ino=1212 res=1 errno=0 [ 727.023106][T16662] syz_tun: entered allmulticast mode [ 727.330170][T16660] syz_tun: left allmulticast mode [ 727.416864][ T30] audit: type=1400 audit(1745684188.043:1248): avc: denied { ioctl } for pid=16666 comm="syz.7.2653" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 729.162633][T16705] ip6t_srh: unknown srh match flags 4000 [ 729.170664][T16705] netlink: 'syz.4.2662': attribute type 4 has an invalid length. [ 729.178462][T16705] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2662'. [ 729.253689][T16705] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 729.259631][T16705] syzkaller1: linktype set to 780 [ 729.451011][T16709] block nbd0: server does not support multiple connections per device. [ 729.459871][T16709] block nbd0: shutting down sockets [ 730.274187][T16725] siw: device registration error -23 [ 730.305178][T16725] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2668'. [ 730.656224][T16728] siw: device registration error -23 [ 730.712686][T16728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2669'. [ 730.891553][T12203] IPVS: starting estimator thread 0... [ 730.980986][T16729] IPVS: using max 40 ests per chain, 96000 per kthread [ 733.240976][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 733.240991][ T30] audit: type=1400 audit(1745684193.873:1250): avc: denied { create } for pid=16761 comm="syz.6.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 733.557496][T16772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 734.352895][T16784] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2684'. [ 734.384490][T16784] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 734.391022][T16784] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 734.401541][T16756] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2679'. [ 734.413785][T16784] vhci_hcd vhci_hcd.0: Device attached [ 734.735150][T12203] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 734.782979][ T5867] usb 52-1: SetAddress Request (14) to port 0 [ 734.789126][ T5867] usb 52-1: new SuperSpeed USB device number 14 using vhci_hcd [ 734.961414][T12203] usb 10-1: Using ep0 maxpacket: 8 [ 735.077484][T12203] usb 10-1: config 0 has no interfaces? [ 735.091889][T12203] usb 10-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 735.121007][T12203] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.129111][T12203] usb 10-1: Product: syz [ 735.137345][ T30] audit: type=1400 audit(1745684195.763:1251): avc: denied { write } for pid=16795 comm="syz.4.2688" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 735.208631][T12203] usb 10-1: Manufacturer: syz [ 735.224643][ T30] audit: type=1400 audit(1745684195.763:1252): avc: denied { open } for pid=16795 comm="syz.4.2688" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 735.230894][T12203] usb 10-1: SerialNumber: syz [ 735.257627][ T30] audit: type=1400 audit(1745684195.883:1253): avc: denied { bind } for pid=16795 comm="syz.4.2688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 735.290524][T12203] usb 10-1: config 0 descriptor?? [ 735.295854][ T30] audit: type=1400 audit(1745684195.903:1254): avc: denied { read } for pid=16802 comm="syz.7.2691" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 735.319008][ C1] vkms_vblank_simulate: vblank timer overrun [ 735.813585][T12203] usb 10-1: USB disconnect, device number 37 [ 735.828325][T16785] vhci_hcd: connection reset by peer [ 735.843103][ T12] vhci_hcd: stop threads [ 735.854537][ T12] vhci_hcd: release socket [ 735.895216][ T12] vhci_hcd: disconnect device [ 736.942472][T16818] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2696'. [ 737.290327][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2699'. [ 737.369349][T16828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16828 comm=syz.4.2699 [ 737.661413][T12260] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 737.854721][T12260] usb 5-1: Using ep0 maxpacket: 16 [ 738.311318][T16840] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2701'. [ 738.334763][ T30] audit: type=1400 audit(1745684198.593:1255): avc: denied { append } for pid=16838 comm="syz.9.2704" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 738.625922][T12260] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 738.739217][T12260] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 738.750627][T12260] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 738.763782][T12260] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 738.773008][T12260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.781100][T12260] usb 5-1: Product: syz [ 738.785354][T12260] usb 5-1: Manufacturer: syz [ 738.790405][T12260] usb 5-1: SerialNumber: syz [ 739.871589][T12260] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 740.001096][ T5867] usb 52-1: device descriptor read/8, error -110 [ 740.038762][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2708'. [ 740.450819][ T5867] usb usb52-port1: attempt power cycle [ 740.853825][T12260] usb 5-1: current rate 9222429 is different from the runtime rate 9338507 [ 741.165281][T16870] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 741.171825][T16870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 741.192289][T12260] usb 5-1: USB disconnect, device number 22 [ 741.198335][T16870] vhci_hcd vhci_hcd.0: Device attached [ 741.242680][ T30] audit: type=1326 audit(1745684201.853:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16869 comm="syz.9.2712" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f614898e969 code=0x0 [ 742.006292][ T30] audit: type=1400 audit(1745684202.573:1257): avc: denied { append } for pid=16879 comm="syz.7.2714" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 742.033944][T16881] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2711'. [ 742.060902][ T5864] usb 51-1: new high-speed USB device number 2 using vhci_hcd [ 743.347489][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2719'. [ 743.377146][T16902] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 743.383666][T16902] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 743.394422][T16902] vhci_hcd vhci_hcd.0: Device attached [ 743.548856][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2723'. [ 743.642109][ T872] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 746.048186][ T872] usb 10-1: Using ep0 maxpacket: 8 [ 746.061770][ T872] usb 10-1: config 0 has no interfaces? [ 746.069817][ T872] usb 10-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 746.176646][ T5924] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 746.184308][ T872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.193477][ T872] usb 10-1: Product: syz [ 746.197949][ T872] usb 10-1: Manufacturer: syz [ 746.203008][ T872] usb 10-1: SerialNumber: syz [ 746.209700][ T872] usb 10-1: config 0 descriptor?? [ 746.349957][ T872] usb 10-1: USB disconnect, device number 38 [ 746.788227][T16905] vhci_hcd: connection closed [ 746.801998][ T3557] vhci_hcd: stop threads [ 746.813900][T16926] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 746.834865][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 746.836542][ T3557] vhci_hcd: release socket [ 746.935223][ T5924] usb 5-1: device descriptor read/all, error -71 [ 746.965881][ T3557] vhci_hcd: disconnect device [ 747.939156][T16940] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 748.289240][ T872] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 748.311164][T16941] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2731'. [ 748.850877][ T872] usb 10-1: Using ep0 maxpacket: 16 [ 748.907195][ T872] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 748.924641][ T872] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 748.974805][ T872] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 749.192393][ T872] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 749.203877][ T872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.228645][ T872] usb 10-1: Product: syz [ 749.234207][ T872] usb 10-1: Manufacturer: syz [ 749.238902][ T872] usb 10-1: SerialNumber: syz [ 749.356180][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2732'. [ 750.003929][ T872] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 750.030151][T16960] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2737'. [ 750.049275][T16960] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 750.055807][T16960] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 750.064701][T16960] vhci_hcd vhci_hcd.0: Device attached [ 750.092354][T16962] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 750.208526][ T53] vhci_hcd: stop threads [ 750.214171][ T53] vhci_hcd: release socket [ 750.218728][ T53] vhci_hcd: disconnect device [ 750.901982][ T872] usb 10-1: current rate 9222429 is different from the runtime rate 9338507 [ 751.893389][ T872] usb 10-1: USB disconnect, device number 39 [ 752.032607][T16988] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 752.133754][T16988] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 752.903237][T16995] siw: device registration error -23 [ 753.244423][T16994] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 753.264432][T16994] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2746'. [ 753.558296][T17004] ip6t_srh: unknown srh match flags 4000 [ 753.625519][T17004] netlink: 'syz.4.2749': attribute type 4 has an invalid length. [ 753.637800][T17004] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2749'. [ 753.688397][T17014] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2752'. [ 753.765676][T17014] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 753.772228][T17014] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 753.867635][T17020] macvtap1: entered allmulticast mode [ 753.873476][T17020] veth0_macvtap: entered allmulticast mode [ 754.226483][T17014] vhci_hcd vhci_hcd.0: Device attached [ 754.251404][T17016] vhci_hcd: connection closed [ 754.253449][T10835] vhci_hcd: stop threads [ 754.264256][T10835] vhci_hcd: release socket [ 754.268813][T10835] vhci_hcd: disconnect device [ 754.285865][T17004] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 754.292497][T17004] syzkaller1: linktype set to 780 [ 754.309277][T17029] siw: device registration error -23 [ 754.327187][T17029] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 754.335289][T17029] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2755'. [ 754.376513][T17031] ip6t_srh: unknown srh match flags 4000 [ 754.389171][T17031] netlink: 'syz.8.2756': attribute type 4 has an invalid length. [ 754.417486][T17031] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.2756'. [ 754.560922][T12260] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 754.664415][T17038] siw: device registration error -23 [ 754.722333][T12260] usb 7-1: Using ep0 maxpacket: 16 [ 754.767758][T17038] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2757'. [ 754.769822][T12260] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 755.540919][T12260] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 755.551539][T12260] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 755.577380][T12260] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 755.589456][T12260] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.597563][T12260] usb 7-1: Product: syz [ 755.602655][T12260] usb 7-1: Manufacturer: syz [ 755.607294][T12260] usb 7-1: SerialNumber: syz [ 756.064030][T17065] siw: device registration error -23 [ 756.329029][T17065] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 756.342375][T17065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2764'. [ 756.435194][ T30] audit: type=1400 audit(1745684217.063:1258): avc: denied { name_bind } for pid=17052 comm="syz.9.2763" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 756.436091][T17053] netlink: 'syz.9.2763': attribute type 2 has an invalid length. [ 756.464923][T12260] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 756.511254][T17053] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2763'. [ 756.520509][T17053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.763743][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2769'. [ 757.003073][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.016493][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.441127][T12260] usb 7-1: current rate 9222429 is different from the runtime rate 9338507 [ 757.499387][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.525029][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.533695][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.542205][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.550416][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.560019][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.586682][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.605021][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.614913][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.633914][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.642665][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.652915][ T30] audit: type=1400 audit(1745684218.273:1259): avc: denied { load_policy } for pid=17082 comm="syz.9.2771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 757.658705][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.853151][T12260] usb 7-1: USB disconnect, device number 31 [ 757.876493][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2772'. [ 757.898729][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 757.921705][T17086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17086 comm=syz.8.2772 [ 757.938532][T17083] SELinux: ebitmap: truncated map [ 757.963459][ T5862] hid-generic FFF9:0000:0203.000B: unknown main item tag 0x0 [ 758.048251][ T5862] hid-generic FFF9:0000:0203.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 758.092441][T17083] SELinux: failed to load policy [ 758.145661][T17092] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2774'. [ 758.435407][ T30] audit: type=1400 audit(1745684219.063:1260): avc: denied { read } for pid=17094 comm="syz.8.2777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 758.460789][T12260] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 758.670760][T12260] usb 5-1: Using ep0 maxpacket: 32 [ 758.685327][T12260] usb 5-1: config 0 has an invalid interface number: 61 but max is 0 [ 758.698949][T12260] usb 5-1: config 0 has an invalid interface number: 210 but max is 0 [ 758.707650][T12260] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 758.716968][T12260] usb 5-1: config 0 has no interface number 0 [ 758.733106][T12260] usb 5-1: config 0 has no interface number 1 [ 758.757941][T12260] usb 5-1: config 0 interface 61 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 758.769051][T12260] usb 5-1: config 0 interface 61 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 758.779102][T12260] usb 5-1: config 0 interface 61 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 758.789360][T12260] usb 5-1: config 0 interface 61 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 758.809050][T12260] usb 5-1: config 0 interface 61 altsetting 0 endpoint 0x3 has invalid maxpacket 1007, setting to 64 [ 758.820819][T12260] usb 5-1: config 0 interface 61 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 758.836951][T12260] usb 5-1: config 0 interface 61 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 758.879545][T12260] usb 5-1: config 0 interface 61 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 758.892618][T12260] usb 5-1: config 0 interface 61 altsetting 0 has 11 endpoint descriptors, different from the interface descriptor's value: 14 [ 758.937807][T12260] usb 5-1: too many endpoints for config 0 interface 210 altsetting 123: 180, using maximum allowed: 30 [ 759.017637][T12260] usb 5-1: config 0 interface 210 altsetting 123 endpoint 0x6 has invalid maxpacket 36705, setting to 1024 [ 759.077807][T12260] usb 5-1: config 0 interface 210 altsetting 123 bulk endpoint 0x6 has invalid maxpacket 1024 [ 759.150276][T12260] usb 5-1: config 0 interface 210 altsetting 123 has a duplicate endpoint with address 0xB, skipping [ 759.183192][T12260] usb 5-1: config 0 interface 210 altsetting 123 has 3 endpoint descriptors, different from the interface descriptor's value: 180 [ 759.199992][T12260] usb 5-1: config 0 interface 210 has no altsetting 0 [ 759.218641][T12260] usb 5-1: New USB device found, idVendor=12d1, idProduct=a3e7, bcdDevice= 6.be [ 759.232126][T12260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.240264][T12260] usb 5-1: Product: syz [ 759.246371][T12260] usb 5-1: Manufacturer: syz [ 759.251196][T12260] usb 5-1: SerialNumber: syz [ 759.259010][T12260] usb 5-1: config 0 descriptor?? [ 759.269304][T17093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 759.282499][T17093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 759.289795][T17093] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 759.308658][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2781'. [ 759.325640][T12260] option 5-1:0.61: GSM modem (1-port) converter detected [ 759.555802][T12260] usb 5-1: USB disconnect, device number 25 [ 760.236151][T17126] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2780'. [ 760.403005][T12260] option 5-1:0.61: device disconnected [ 760.641740][ T30] audit: type=1400 audit(1745684221.273:1261): avc: denied { ioctl } for pid=17136 comm="syz.4.2788" path="socket:[55629]" dev="sockfs" ino=55629 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 761.204593][T17137] syz.4.2788 (17137): drop_caches: 2 [ 761.233614][ T30] audit: type=1400 audit(1745684221.323:1262): avc: denied { getopt } for pid=17136 comm="syz.4.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 761.524646][T17149] lo speed is unknown, defaulting to 1000 [ 761.593376][ T30] audit: type=1326 audit(1745684222.223:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17146 comm="syz.9.2791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f614898e969 code=0x0 [ 761.619330][ T872] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 761.633799][T17157] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 761.737001][T17149] input: syz0 as /devices/virtual/input/input24 [ 761.749899][T17149] input: failed to attach handler leds to device input24, error: -6 [ 761.800752][ T872] usb 7-1: Using ep0 maxpacket: 8 [ 761.813929][T17163] netlink: 'syz.4.2794': attribute type 10 has an invalid length. [ 761.821977][T17163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2794'. [ 762.015598][T17163] team0: Port device geneve0 added [ 762.673072][ T872] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 762.694893][ T872] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 762.762804][ T872] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 762.782252][ T872] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 762.820864][ T872] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 762.890745][ T872] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 762.899920][ T872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.586649][ T872] usb 7-1: GET_CAPABILITIES returned 0 [ 763.600789][ T872] usbtmc 7-1:16.0: can't read capabilities [ 763.664448][T17144] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2790'. [ 763.870990][ T872] usb 7-1: USB disconnect, device number 32 [ 764.165005][T17186] tipc: Enabled bearer , priority 10 [ 764.176116][T17186] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2800'. [ 764.390989][T17195] siw: device registration error -23 [ 764.504677][T17195] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 764.542920][T17195] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2803'. [ 764.654773][T17198] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 764.784057][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2805'. [ 764.801652][ T30] audit: type=1400 audit(1745684225.413:1264): avc: denied { write } for pid=17203 comm="syz.8.2805" lport=45058 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 765.173034][T17212] siw: device registration error -23 [ 765.194278][T17212] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 765.201762][T17212] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2807'. [ 765.215833][ T30] audit: type=1400 audit(1745684225.553:1265): avc: denied { connect } for pid=17205 comm="syz.4.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 765.270547][ T30] audit: type=1400 audit(1745684225.603:1266): avc: denied { write } for pid=17205 comm="syz.4.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 765.369438][T17221] siw: device registration error -23 [ 765.410525][T17221] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 765.424820][T17221] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2809'. [ 765.699750][T17222] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 765.713222][T17222] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2808'. [ 765.940587][T17224] FAULT_INJECTION: forcing a failure. [ 765.940587][T17224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.975567][T17224] CPU: 0 UID: 0 PID: 17224 Comm: syz.4.2810 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 765.975594][T17224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 765.975605][T17224] Call Trace: [ 765.975611][T17224] [ 765.975618][T17224] dump_stack_lvl+0x16c/0x1f0 [ 765.975646][T17224] should_fail_ex+0x512/0x640 [ 765.975672][T17224] _copy_from_user+0x2e/0xd0 [ 765.975697][T17224] copy_msghdr_from_user+0x98/0x160 [ 765.975723][T17224] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 765.975760][T17224] ___sys_sendmsg+0xfe/0x1d0 [ 765.975788][T17224] ? __pfx____sys_sendmsg+0x10/0x10 [ 765.975845][T17224] __sys_sendmsg+0x16d/0x220 [ 765.975871][T17224] ? __pfx___sys_sendmsg+0x10/0x10 [ 765.975910][T17224] ? rcu_is_watching+0x12/0xc0 [ 765.975933][T17224] do_syscall_64+0xcd/0x260 [ 765.975954][T17224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.975970][T17224] RIP: 0033:0x7f9a2818e969 [ 765.975984][T17224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.976001][T17224] RSP: 002b:00007f9a29029038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.976017][T17224] RAX: ffffffffffffffda RBX: 00007f9a283b5fa0 RCX: 00007f9a2818e969 [ 765.976029][T17224] RDX: 0000000020000844 RSI: 00002000000002c0 RDI: 0000000000000003 [ 765.976039][T17224] RBP: 00007f9a29029090 R08: 0000000000000000 R09: 0000000000000000 [ 765.976049][T17224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.976059][T17224] R13: 0000000000000000 R14: 00007f9a283b5fa0 R15: 00007ffda23e8ab8 [ 765.976083][T17224] [ 766.464766][T17233] block nbd0: shutting down sockets [ 766.582027][T17247] block nbd0: server does not support multiple connections per device. [ 766.590442][T17247] block nbd0: shutting down sockets [ 766.641116][ T872] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 766.694141][T17253] siw: device registration error -23 [ 766.705529][T17253] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 766.713061][T17253] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2822'. [ 766.759846][T17259] FAULT_INJECTION: forcing a failure. [ 766.759846][T17259] name failslab, interval 1, probability 0, space 0, times 0 [ 766.781541][T17259] CPU: 1 UID: 0 PID: 17259 Comm: syz.6.2825 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 766.781567][T17259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 766.781578][T17259] Call Trace: [ 766.781583][T17259] [ 766.781590][T17259] dump_stack_lvl+0x16c/0x1f0 [ 766.781616][T17259] should_fail_ex+0x512/0x640 [ 766.781637][T17259] ? fs_reclaim_acquire+0xae/0x150 [ 766.781662][T17259] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 766.781685][T17259] should_failslab+0xc2/0x120 [ 766.781703][T17259] __kmalloc_noprof+0xd2/0x510 [ 766.781735][T17259] tomoyo_realpath_from_path+0xc2/0x6e0 [ 766.781761][T17259] ? tomoyo_profile+0x47/0x60 [ 766.781790][T17259] tomoyo_path_number_perm+0x245/0x580 [ 766.781809][T17259] ? tomoyo_path_number_perm+0x237/0x580 [ 766.781832][T17259] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 766.781854][T17259] ? find_held_lock+0x2b/0x80 [ 766.781898][T17259] ? find_held_lock+0x2b/0x80 [ 766.781923][T17259] ? hook_file_ioctl_common+0x145/0x410 [ 766.781955][T17259] ? __fget_files+0x20e/0x3c0 [ 766.781986][T17259] security_file_ioctl+0x9b/0x240 [ 766.782010][T17259] __x64_sys_ioctl+0xb7/0x200 [ 766.782033][T17259] do_syscall_64+0xcd/0x260 [ 766.782055][T17259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.782072][T17259] RIP: 0033:0x7f0112d8e969 [ 766.782086][T17259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.782102][T17259] RSP: 002b:00007f0113b37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 766.782119][T17259] RAX: ffffffffffffffda RBX: 00007f0112fb5fa0 RCX: 00007f0112d8e969 [ 766.782130][T17259] RDX: 0000200000000000 RSI: 0000000000008b0b RDI: 0000000000000003 [ 766.782140][T17259] RBP: 00007f0113b37090 R08: 0000000000000000 R09: 0000000000000000 [ 766.782150][T17259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.782159][T17259] R13: 0000000000000000 R14: 00007f0112fb5fa0 R15: 00007ffc671f2978 [ 766.782184][T17259] [ 766.782191][T17259] ERROR: Out of memory at tomoyo_realpath_from_path. [ 766.820533][ T872] usb 10-1: Using ep0 maxpacket: 8 [ 766.892574][T17260] siw: device registration error -23 [ 766.998683][T17267] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 767.015505][T17260] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2827'. [ 767.144593][ T30] audit: type=1400 audit(1745684227.763:1267): avc: denied { ioctl } for pid=17270 comm="syz.8.2830" path="socket:[55273]" dev="sockfs" ino=55273 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 767.191567][ T872] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 767.199949][ T872] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 767.224556][ T872] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 767.247981][ T872] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 767.272778][ T30] audit: type=1400 audit(1745684227.873:1268): avc: denied { getopt } for pid=17276 comm="syz.4.2832" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 767.289802][T17277] lo speed is unknown, defaulting to 1000 [ 767.302819][ T872] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 767.346384][ T872] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 767.376621][ T872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.395045][T17279] lo speed is unknown, defaulting to 1000 [ 767.601202][T17282] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2828'. [ 767.626627][ T872] usb 10-1: GET_CAPABILITIES returned 0 [ 767.644142][ T872] usbtmc 10-1:16.0: can't read capabilities [ 767.846297][T12260] usb 10-1: USB disconnect, device number 40 [ 767.964665][T17288] sctp: [Deprecated]: syz.4.2834 (pid 17288) Use of int in max_burst socket option. [ 767.964665][T17288] Use struct sctp_assoc_value instead [ 767.967120][ T30] audit: type=1400 audit(1745684228.583:1269): avc: denied { getopt } for pid=17287 comm="syz.4.2834" lport=54482 faddr=::ffff:172.20.20.41 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 768.310802][ T872] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 768.461046][ T872] usb 5-1: Using ep0 maxpacket: 32 [ 768.483415][ T872] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 768.497692][ T872] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 768.618485][ T872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.950740][ T872] usb 5-1: Product: syz [ 768.954946][ T872] usb 5-1: Manufacturer: syz [ 768.959548][ T872] usb 5-1: SerialNumber: syz [ 768.968937][ T872] usb 5-1: config 0 descriptor?? [ 768.977377][T17291] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 768.985705][ T872] hub 5-1:0.0: bad descriptor, ignoring hub [ 768.992143][ T872] hub 5-1:0.0: probe with driver hub failed with error -5 [ 769.002850][ T872] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input25 [ 769.023237][ T30] audit: type=1400 audit(1745684229.653:1270): avc: denied { read } for pid=5172 comm="acpid" name="mouse1" dev="devtmpfs" ino=3572 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 769.048800][ T30] audit: type=1400 audit(1745684229.653:1271): avc: denied { open } for pid=5172 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3572 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 769.072568][ T30] audit: type=1400 audit(1745684229.653:1272): avc: denied { ioctl } for pid=5172 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3572 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 769.223621][T12260] usb 5-1: USB disconnect, device number 26 [ 769.223684][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 769.811528][ T30] audit: type=1326 audit(1745684230.443:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17307 comm="syz.4.2841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a2818e969 code=0x0 [ 770.969778][T17324] FAULT_INJECTION: forcing a failure. [ 770.969778][T17324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.002026][T17324] CPU: 1 UID: 0 PID: 17324 Comm: syz.9.2846 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 771.002052][T17324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 771.002068][T17324] Call Trace: [ 771.002075][T17324] [ 771.002082][T17324] dump_stack_lvl+0x16c/0x1f0 [ 771.002106][T17324] should_fail_ex+0x512/0x640 [ 771.002130][T17324] _copy_from_iter+0x2a4/0x15b0 [ 771.002151][T17324] ? __alloc_skb+0x200/0x380 [ 771.002168][T17324] ? __pfx__copy_from_iter+0x10/0x10 [ 771.002184][T17324] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 771.002200][T17324] netlink_sendmsg+0x829/0xdd0 [ 771.002213][T17324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.002227][T17324] ? ____sys_sendmsg+0x203/0xc70 [ 771.002240][T17324] ? __sanitizer_cov_trace_pc+0x66/0x70 [ 771.002254][T17324] ____sys_sendmsg+0xa95/0xc70 [ 771.002267][T17324] ? copy_msghdr_from_user+0x10a/0x160 [ 771.002283][T17324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 771.002299][T17324] ? lockdep_hardirqs_on+0x20/0x110 [ 771.002314][T17324] ___sys_sendmsg+0x134/0x1d0 [ 771.002331][T17324] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.002366][T17324] __sys_sendmsg+0x16d/0x220 [ 771.002382][T17324] ? __pfx___sys_sendmsg+0x10/0x10 [ 771.002408][T17324] do_syscall_64+0xcd/0x260 [ 771.002422][T17324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.002433][T17324] RIP: 0033:0x7f614898e969 [ 771.002443][T17324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.002454][T17324] RSP: 002b:00007f6149755038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.002465][T17324] RAX: ffffffffffffffda RBX: 00007f6148bb5fa0 RCX: 00007f614898e969 [ 771.002471][T17324] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000005 [ 771.002478][T17324] RBP: 00007f6149755090 R08: 0000000000000000 R09: 0000000000000000 [ 771.002484][T17324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.002490][T17324] R13: 0000000000000000 R14: 00007f6148bb5fa0 R15: 00007ffdd804b8d8 [ 771.002504][T17324] [ 771.648207][ T30] audit: type=1400 audit(1745684232.273:1274): avc: denied { watch } for pid=17328 comm="syz.9.2849" path="/294/file0" dev="tmpfs" ino=1575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 771.798472][T17332] ip6t_srh: unknown srh match flags 4000 [ 772.047226][T17336] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 772.066328][T17336] syzkaller1: linktype set to 780 [ 772.124005][T17339] ip6t_srh: unknown srh match flags 4000 [ 773.038163][T17339] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 773.045002][T17339] syzkaller1: linktype set to 780 [ 773.113390][T17359] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 773.550717][ T30] audit: type=1326 audit(1879901964.160:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.4.2857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a2818e969 code=0x0 [ 774.026627][T17375] FAULT_INJECTION: forcing a failure. [ 774.026627][T17375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.073640][T17372] netlink: 'syz.8.2862': attribute type 30 has an invalid length. [ 774.111048][T17375] CPU: 1 UID: 0 PID: 17375 Comm: syz.7.2863 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 774.111075][T17375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 774.111085][T17375] Call Trace: [ 774.111092][T17375] [ 774.111099][T17375] dump_stack_lvl+0x16c/0x1f0 [ 774.111125][T17375] should_fail_ex+0x512/0x640 [ 774.111149][T17375] _copy_to_user+0x32/0xd0 [ 774.111174][T17375] copy_siginfo_to_user+0x27/0xc0 [ 774.111199][T17375] x64_setup_rt_frame+0x811/0xcf0 [ 774.111232][T17375] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 774.111264][T17375] arch_do_signal_or_restart+0x5e6/0x7d0 [ 774.111289][T17375] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 774.111321][T17375] ? __pfx_do_readv+0x10/0x10 [ 774.111342][T17375] ? rcu_is_watching+0x12/0xc0 [ 774.111366][T17375] syscall_exit_to_user_mode+0x150/0x2a0 [ 774.111388][T17375] do_syscall_64+0xda/0x260 [ 774.111410][T17375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.111427][T17375] RIP: 0033:0x7ff3ae18e967 [ 774.111440][T17375] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 774.111456][T17375] RSP: 002b:00007ff3aef57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 774.111474][T17375] RAX: 0000000000000013 RBX: 00007ff3ae3b5fa0 RCX: 00007ff3ae18e969 [ 774.111485][T17375] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 774.111495][T17375] RBP: 00007ff3aef57090 R08: 0000000000000000 R09: 0000000000000000 [ 774.111504][T17375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 774.111514][T17375] R13: 0000000000000000 R14: 00007ff3ae3b5fa0 R15: 00007fff26e51c18 [ 774.111538][T17375] [ 774.434660][T17383] ip6t_srh: unknown srh match flags 4000 [ 774.635072][T17383] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 774.653064][T17383] syzkaller1: linktype set to 780 [ 775.320909][ T5862] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 775.340967][ T30] audit: type=1400 audit(1879901965.950:1276): avc: denied { write } for pid=17401 comm="syz.7.2871" name="fdinfo" dev="proc" ino=56276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 775.385865][ T30] audit: type=1400 audit(1879901965.950:1277): avc: denied { add_name } for pid=17401 comm="syz.7.2871" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 775.386090][ T30] audit: type=1400 audit(1879901965.970:1278): avc: denied { create } for pid=17401 comm="syz.7.2871" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 775.488419][ T30] audit: type=1400 audit(1879901965.970:1279): avc: denied { associate } for pid=17401 comm="syz.7.2871" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 775.579594][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.671210][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.770803][ T5862] usb 7-1: Using ep0 maxpacket: 16 [ 775.795937][ T5862] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 775.861400][ T5862] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 775.924345][ T5862] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 776.036953][ T5862] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 776.062704][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.102368][ T5862] usb 7-1: Product: syz [ 776.116826][ T5862] usb 7-1: Manufacturer: syz [ 776.130775][ T5862] usb 7-1: SerialNumber: syz [ 776.144449][T17412] lo speed is unknown, defaulting to 1000 [ 776.180747][ T30] audit: type=1400 audit(1879901966.790:1280): avc: denied { write } for pid=17409 comm="syz.9.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 776.285801][ T30] audit: type=1326 audit(1879901966.790:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17409 comm="syz.9.2876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f614898e969 code=0x0 [ 776.327311][T17425] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 776.357491][T17424] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 776.388544][ T30] audit: type=1400 audit(1879901967.010:1282): avc: denied { accept } for pid=17419 comm="syz.8.2877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 776.408809][T17424] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 776.598455][ T5862] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 776.987470][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2881'. [ 777.038447][T17437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17437 comm=syz.4.2881 [ 777.446452][T17442] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 777.453087][T17442] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 777.464335][T17442] vhci_hcd vhci_hcd.0: Device attached [ 777.753814][ T5862] usb 7-1: current rate 9222429 is different from the runtime rate 9338507 [ 777.802354][T17444] vhci_hcd: connection closed [ 777.807622][ T53] vhci_hcd: stop threads [ 777.870572][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2883'. [ 777.876064][ T53] vhci_hcd: release socket [ 777.883981][ T53] vhci_hcd: disconnect device [ 777.901547][ T2144] usb 48-1: enqueue for inactive port 0 [ 778.107473][ T5862] usb 7-1: USB disconnect, device number 33 [ 778.387667][T17454] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2885'. [ 778.490086][T17457] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 778.496613][T17457] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 778.518669][ T2144] usb usb48-port1: attempt power cycle [ 778.524302][T17457] vhci_hcd vhci_hcd.0: Device attached [ 779.038875][ T5862] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 779.121466][ T2144] usb usb48-port1: unable to enumerate USB device [ 779.265272][ T5862] usb 10-1: Using ep0 maxpacket: 8 [ 779.331958][ T5862] usb 10-1: config 0 has no interfaces? [ 779.350861][ T5862] usb 10-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 779.401260][ T5862] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.485237][ T5862] usb 10-1: Product: syz [ 779.492802][ T5862] usb 10-1: Manufacturer: syz [ 779.497833][ T5862] usb 10-1: SerialNumber: syz [ 779.506200][ T5862] usb 10-1: config 0 descriptor?? [ 779.530662][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2890'. [ 780.183821][T17459] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 780.191185][T12203] usb 10-1: USB disconnect, device number 41 [ 780.197797][ T8305] vhci_hcd: stop threads [ 780.209563][ T8305] vhci_hcd: release socket [ 780.215290][ T8305] vhci_hcd: disconnect device [ 780.235980][T17480] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2892'. [ 780.310867][ T872] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 780.346540][T17482] lo speed is unknown, defaulting to 1000 [ 780.422423][ T30] audit: type=1326 audit(1879901971.050:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17481 comm="syz.8.2893" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4f858e969 code=0x0 [ 780.490783][ T872] usb 7-1: Using ep0 maxpacket: 8 [ 780.503276][ T872] usb 7-1: config 0 has no interfaces? [ 780.511070][ T872] usb 7-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 780.521928][ T872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.529949][ T872] usb 7-1: Product: syz [ 780.535431][ T872] usb 7-1: Manufacturer: syz [ 780.540069][ T872] usb 7-1: SerialNumber: syz [ 780.550941][ T872] usb 7-1: config 0 descriptor?? [ 780.789322][ T872] usb 7-1: USB disconnect, device number 34 [ 782.355303][T17513] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2896'. [ 782.516880][ T30] audit: type=1400 audit(1879901973.140:1284): avc: denied { mounton } for pid=17508 comm="syz.6.2902" path="/file0" dev="ramfs" ino=57475 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 782.669406][ T30] audit: type=1400 audit(1879901973.170:1285): avc: denied { setopt } for pid=17508 comm="syz.6.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 783.070837][ T5862] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 783.196643][ T872] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 783.250810][ T5862] usb 7-1: Using ep0 maxpacket: 32 [ 783.260971][ T5862] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 783.269085][ T5862] usb 7-1: config 0 has no interface number 0 [ 783.275387][ T5862] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 783.691594][ T872] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 783.737532][ T5862] usb 7-1: config 0 interface 85 has no altsetting 0 [ 783.747589][ T5862] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 783.756737][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.764966][ T5862] usb 7-1: Product: syz [ 783.767685][ T30] audit: type=1400 audit(1879901974.390:1286): avc: denied { ioctl } for pid=17533 comm="syz.8.2910" path="socket:[57498]" dev="sockfs" ino=57498 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 783.769136][ T5862] usb 7-1: Manufacturer: syz [ 783.794188][ T872] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.807423][ T872] usb 10-1: Product: syz [ 783.809639][T17534] sctp: [Deprecated]: syz.8.2910 (pid 17534) Use of int in maxseg socket option. [ 783.809639][T17534] Use struct sctp_assoc_value instead [ 783.825200][ T872] usb 10-1: Manufacturer: syz [ 783.828557][ T5862] usb 7-1: SerialNumber: syz [ 783.832466][ T872] usb 10-1: SerialNumber: syz [ 783.838028][ T5862] usb 7-1: config 0 descriptor?? [ 783.855598][ T872] usb 10-1: config 0 descriptor?? [ 783.868587][ T872] i2c-tiny-usb 10-1:0.0: version 6d.cc found at bus 010 address 042 [ 784.082655][T17544] siw: device registration error -23 [ 784.089456][T17544] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 784.097018][T17544] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2914'. [ 784.267692][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2907'. [ 784.276928][T17525] tipc: Enabling of bearer rejected, failed to enable media [ 784.294925][T17525] dummy0: entered promiscuous mode [ 784.320874][ T5924] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 784.470778][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 784.477375][ T5924] usb 5-1: config 0 has an invalid interface number: 193 but max is 0 [ 784.485942][ T5924] usb 5-1: config 0 has no interface number 0 [ 784.527364][ T5862] appletouch 7-1:0.85: Geyser mode initialized. [ 784.538446][ T5862] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input26 [ 784.781512][ T2144] usb 7-1: USB disconnect, device number 35 [ 784.828503][ T2144] appletouch 7-1:0.85: input: appletouch disconnected [ 785.148997][ T5924] usb 5-1: config 0 interface 193 has no altsetting 0 [ 785.156021][ T872] i2c i2c-1: failure reading functionality [ 785.168540][ T5924] usb 5-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.5d [ 785.191921][ T872] i2c i2c-1: connected i2c-tiny-usb device [ 785.263656][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.293072][ T872] usb 10-1: USB disconnect, device number 42 [ 785.385513][ T5924] usb 5-1: Product: syz [ 785.481568][ T5924] usb 5-1: Manufacturer: syz [ 785.492621][ T5924] usb 5-1: SerialNumber: syz [ 785.499302][ T5924] usb 5-1: config 0 descriptor?? [ 785.506455][ T5924] ftdi_sio 5-1:0.193: FTDI USB Serial Device converter detected [ 785.521507][ T5924] ftdi_sio ttyUSB0: unknown device type: 0xa45d [ 785.717242][ T2144] usb 5-1: USB disconnect, device number 27 [ 785.730404][ T30] audit: type=1400 audit(1879901976.350:1287): avc: denied { setopt } for pid=17556 comm="syz.8.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 786.890278][ T30] audit: type=1400 audit(1879901976.350:1288): avc: denied { getopt } for pid=17556 comm="syz.8.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 786.912469][ T2144] ftdi_sio 5-1:0.193: device disconnected [ 787.048358][T17570] lo speed is unknown, defaulting to 1000 [ 788.565145][ T30] audit: type=1400 audit(1879901978.930:1289): avc: denied { create } for pid=17585 comm="syz.6.2925" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 788.590126][ T30] audit: type=1400 audit(1879901978.940:1290): avc: denied { mounton } for pid=17585 comm="syz.6.2925" path="/314/file0" dev="tmpfs" ino=1679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 788.806774][ T30] audit: type=1400 audit(1879901979.430:1291): avc: denied { unlink } for pid=10709 comm="syz-executor" name="file0" dev="tmpfs" ino=1679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 789.801058][ T5863] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 789.891715][T17609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=17609 comm=syz.6.2931 [ 790.024070][ T5863] usb 10-1: unable to get BOS descriptor or descriptor too short [ 790.114582][ T5863] usb 10-1: not running at top speed; connect to a high speed hub [ 790.147231][T17619] siw: device registration error -23 [ 790.300720][ T5863] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 790.350755][ T5863] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 790.391610][ T5863] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 790.422303][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.430883][T17622] ip6t_srh: unknown srh match flags 4000 [ 790.450794][ T5863] usb 10-1: Product: syz [ 790.465681][ T5863] usb 10-1: Manufacturer: syz [ 790.492547][ T5863] usb 10-1: SerialNumber: syz [ 790.919675][T17631] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 790.931733][ T5863] usb 10-1: 0:2 : does not exist [ 791.169731][ T5863] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 791.192035][ T5863] usb 10-1: 5:0: cannot get min/max values for control 2 (id 5) [ 791.204761][ T5863] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 791.216857][ T5863] usb 10-1: 5:0: failed to get current value for ch 1 (-22) [ 791.318035][ T5863] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5) [ 791.363194][ T5863] usb 10-1: 5:0: cannot get min/max values for control 2 (id 5) [ 791.387228][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2944'. [ 791.389532][ T5863] usb 10-1: USB disconnect, device number 43 [ 791.416671][T17638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2944'. [ 791.774031][T17647] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.926364][T17656] lo speed is unknown, defaulting to 1000 [ 791.981175][ T5924] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 792.010595][ T30] audit: type=1326 audit(1879901982.620:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17655 comm="syz.9.2951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f614898e969 code=0x0 [ 792.084952][T17661] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17661 comm=syz.8.2950 [ 792.100244][ T30] audit: type=1400 audit(1879901982.690:1293): avc: denied { bind } for pid=17650 comm="syz.8.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 792.271537][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 792.373229][ T5924] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 792.390884][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.399160][ T5924] usb 5-1: Product: syz [ 792.405154][ T5924] usb 5-1: Manufacturer: syz [ 792.411748][ T5924] usb 5-1: SerialNumber: syz [ 792.418794][ T5924] r8152-cfgselector 5-1: Unknown version 0x0000 [ 792.437346][ T5924] r8152-cfgselector 5-1: config 0 descriptor?? [ 792.520084][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2953'. [ 792.545978][T17671] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 792.552484][T17671] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 792.579418][T17671] vhci_hcd vhci_hcd.0: Device attached [ 792.830757][ T872] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 792.840805][ T5863] usb 46-1: SetAddress Request (18) to port 0 [ 792.846933][ T5863] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd [ 793.028139][T12260] r8152-cfgselector 5-1: USB disconnect, device number 28 [ 793.043405][ T872] usb 7-1: Using ep0 maxpacket: 8 [ 793.436790][ T872] usb 7-1: config 0 has no interfaces? [ 793.445001][ T872] usb 7-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 793.465414][ T872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.474481][ T872] usb 7-1: Product: syz [ 793.478936][ T872] usb 7-1: Manufacturer: syz [ 793.808250][ T872] usb 7-1: SerialNumber: syz [ 793.847923][ T872] usb 7-1: config 0 descriptor?? [ 793.890168][T17684] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2957'. [ 793.950277][T17684] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 793.956809][T17684] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 794.015181][T17684] vhci_hcd vhci_hcd.0: Device attached [ 794.137840][T17672] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 5 [ 794.267801][ T3557] vhci_hcd: stop threads [ 794.272238][ T3557] vhci_hcd: release socket [ 794.281232][ T3557] vhci_hcd: disconnect device [ 794.373189][ T5813] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 794.414343][ T5924] usb 7-1: USB disconnect, device number 36 [ 794.530718][ T5813] usb 10-1: Using ep0 maxpacket: 8 [ 794.576234][ T5813] usb 10-1: config 0 has no interfaces? [ 794.586242][ T5813] usb 10-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 795.214389][ T30] audit: type=1400 audit(1879901985.820:1294): avc: denied { unlink } for pid=17693 comm="syz.7.2959" name="#16" dev="tmpfs" ino=1524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 795.247683][ T5813] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.350385][ T5813] usb 10-1: Product: syz [ 795.377703][ T5813] usb 10-1: Manufacturer: syz [ 795.437003][T17708] siw: device registration error -23 [ 795.486222][T17708] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 795.507716][T17708] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2964'. [ 795.555988][ T5813] usb 10-1: SerialNumber: syz [ 795.609725][ T5813] usb 10-1: config 0 descriptor?? [ 795.849379][T17685] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 795.859610][ T5813] usb 10-1: USB disconnect, device number 44 [ 795.885160][ T12] vhci_hcd: stop threads [ 795.889728][ T12] vhci_hcd: release socket [ 796.002725][ T12] vhci_hcd: disconnect device [ 796.609257][T12260] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 796.609727][T17715] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2963'. [ 796.977386][T12260] usb 7-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 797.000766][T12260] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 797.028933][T12260] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 797.055181][T17719] tipc: Enabling of bearer rejected, already enabled [ 797.066027][T12260] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.084737][T17719] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2968'. [ 797.156966][T12260] usb 7-1: Product: syz [ 797.181975][T12260] usb 7-1: Manufacturer: syz [ 797.201118][T12260] usb 7-1: SerialNumber: syz [ 797.255448][T12260] usb 7-1: config 0 descriptor?? [ 797.410854][T17727] lo speed is unknown, defaulting to 1000 [ 797.428830][ T30] audit: type=1326 audit(1879901988.050:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17722 comm="syz.9.2970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f614898e969 code=0x0 [ 797.565035][ T30] audit: type=1400 audit(1879901988.180:1296): avc: denied { read } for pid=17711 comm="syz.6.2967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 798.279702][ T5863] usb 46-1: device descriptor read/8, error -110 [ 798.772934][ T5863] usb usb46-port1: attempt power cycle [ 798.807832][T12260] mos7840 7-1:0.0: required endpoints missing [ 798.821625][T12260] usb 7-1: USB disconnect, device number 37 [ 798.850435][ T30] audit: type=1326 audit(1879901989.470:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.8.2975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4f858e969 code=0x0 [ 798.876471][T17748] FAULT_INJECTION: forcing a failure. [ 798.876471][T17748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.919297][T17751] Cannot find set identified by id 0 to match [ 798.923513][T17745] lo speed is unknown, defaulting to 1000 [ 798.933469][T17748] CPU: 0 UID: 0 PID: 17748 Comm: syz.7.2976 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 798.933491][T17748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 798.933500][T17748] Call Trace: [ 798.933505][T17748] [ 798.933511][T17748] dump_stack_lvl+0x16c/0x1f0 [ 798.933533][T17748] should_fail_ex+0x512/0x640 [ 798.933557][T17748] _copy_from_user+0x2e/0xd0 [ 798.933578][T17748] __sys_bpf+0x21d/0x4d80 [ 798.933600][T17748] ? __pfx___sys_bpf+0x10/0x10 [ 798.933619][T17748] ? ksys_write+0x190/0x240 [ 798.933645][T17748] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 798.933678][T17748] ? fput+0x70/0xf0 [ 798.933693][T17748] ? ksys_write+0x1b9/0x240 [ 798.933714][T17748] ? __pfx_ksys_write+0x10/0x10 [ 798.933734][T17748] ? rcu_is_watching+0x12/0xc0 [ 798.933765][T17748] __x64_sys_bpf+0x78/0xc0 [ 798.933784][T17748] ? lockdep_hardirqs_on+0x7c/0x110 [ 798.933801][T17748] do_syscall_64+0xcd/0x260 [ 798.933821][T17748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.933837][T17748] RIP: 0033:0x7ff3ae18e969 [ 798.933849][T17748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.933864][T17748] RSP: 002b:00007ff3aef57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 798.933879][T17748] RAX: ffffffffffffffda RBX: 00007ff3ae3b5fa0 RCX: 00007ff3ae18e969 [ 798.933890][T17748] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 798.933899][T17748] RBP: 00007ff3aef57090 R08: 0000000000000000 R09: 0000000000000000 [ 798.933908][T17748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.933917][T17748] R13: 0000000000000000 R14: 00007ff3ae3b5fa0 R15: 00007fff26e51c18 [ 798.933939][T17748] [ 799.425133][ T5863] usb usb46-port1: unable to enumerate USB device [ 799.554875][T17764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2980'. [ 799.567178][T17764] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 799.573698][T17764] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 799.589083][T17764] vhci_hcd vhci_hcd.0: Device attached [ 800.629060][ T5863] usb 42-1: SetAddress Request (2) to port 0 [ 800.635165][ T5924] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 800.675624][ T5863] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 800.850731][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 800.862111][ T5924] usb 5-1: config 0 has no interfaces? [ 800.903993][ T5924] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 800.922459][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.930529][ T5924] usb 5-1: Product: syz [ 800.938777][ T5924] usb 5-1: Manufacturer: syz [ 800.943736][ T5924] usb 5-1: SerialNumber: syz [ 800.944124][T17793] FAULT_INJECTION: forcing a failure. [ 800.944124][T17793] name failslab, interval 1, probability 0, space 0, times 0 [ 800.963617][T17793] CPU: 0 UID: 0 PID: 17793 Comm: syz.7.2988 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 800.963640][T17793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 800.963650][T17793] Call Trace: [ 800.963661][T17793] [ 800.963668][T17793] dump_stack_lvl+0x16c/0x1f0 [ 800.963692][T17793] should_fail_ex+0x512/0x640 [ 800.963712][T17793] ? fs_reclaim_acquire+0xae/0x150 [ 800.963734][T17793] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 800.963756][T17793] should_failslab+0xc2/0x120 [ 800.963773][T17793] __kmalloc_noprof+0xd2/0x510 [ 800.963804][T17793] tomoyo_realpath_from_path+0xc2/0x6e0 [ 800.963829][T17793] ? tomoyo_profile+0x47/0x60 [ 800.963854][T17793] tomoyo_path_number_perm+0x245/0x580 [ 800.963872][T17793] ? tomoyo_path_number_perm+0x237/0x580 [ 800.963894][T17793] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 800.963913][T17793] ? find_held_lock+0x2b/0x80 [ 800.963957][T17793] ? find_held_lock+0x2b/0x80 [ 800.963975][T17793] ? hook_file_ioctl_common+0x145/0x410 [ 800.964007][T17793] ? __fget_files+0x20e/0x3c0 [ 800.964037][T17793] security_file_ioctl+0x9b/0x240 [ 800.964061][T17793] __x64_sys_ioctl+0xb7/0x200 [ 800.964086][T17793] do_syscall_64+0xcd/0x260 [ 800.964109][T17793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.964126][T17793] RIP: 0033:0x7ff3ae18e969 [ 800.964139][T17793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.964156][T17793] RSP: 002b:00007ff3aef57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 800.964172][T17793] RAX: ffffffffffffffda RBX: 00007ff3ae3b5fa0 RCX: 00007ff3ae18e969 [ 800.964184][T17793] RDX: 0000200000000040 RSI: 0000000000008b19 RDI: 0000000000000005 [ 800.964195][T17793] RBP: 00007ff3aef57090 R08: 0000000000000000 R09: 0000000000000000 [ 800.964206][T17793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.964215][T17793] R13: 0000000000000000 R14: 00007ff3ae3b5fa0 R15: 00007fff26e51c18 [ 800.964241][T17793] [ 800.964916][ T5924] usb 5-1: config 0 descriptor?? [ 801.039637][T17793] ERROR: Out of memory at tomoyo_realpath_from_path. [ 801.264514][T17795] sp0: Synchronizing with TNC [ 801.305940][ T30] audit: type=1400 audit(1879901991.910:1298): avc: denied { setopt } for pid=17794 comm="syz.9.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 801.796394][ T2144] usb 5-1: USB disconnect, device number 29 [ 801.821259][T17766] vhci_hcd: connection reset by peer [ 801.827290][ T5863] usb 42-1: device descriptor read/8, error -71 [ 801.919523][T17794] [U] [ 802.277748][ T2981] vhci_hcd: stop threads [ 802.295443][ T2981] vhci_hcd: release socket [ 802.301273][ T2981] vhci_hcd: disconnect device [ 802.785219][ T5863] usb usb42-port1: attempt power cycle [ 803.255310][T17816] tipc: Started in network mode [ 803.260210][T17816] tipc: Node identity 4, cluster identity 4711 [ 803.266491][T17816] tipc: Node number set to 4 [ 803.653834][ T5863] usb usb42-port1: unable to enumerate USB device [ 804.200053][T17834] can0: slcan on ptm0. [ 804.245123][T17836] siw: device registration error -23 [ 804.259812][T17836] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 804.269917][T17836] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3000'. [ 804.456483][T17839] siw: device registration error -23 [ 804.523282][ T30] audit: type=1400 audit(1879901995.150:1299): avc: denied { listen } for pid=17840 comm="syz.9.3003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 805.046085][T10500] Bluetooth: hci1: unexpected event for opcode 0x1c10 [ 805.082657][T17833] can0 (unregistered): slcan off ptm0. [ 807.600036][T17886] ip6t_srh: unknown srh match flags 4000 [ 807.683391][T17890] ip6t_srh: unknown srh match flags 4000 [ 808.006604][T17886] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 808.016583][T17886] syzkaller1: linktype set to 780 [ 808.096044][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3021'. [ 808.575755][T17909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3024'. [ 808.598621][T17909] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 808.605154][T17909] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 808.630809][T17909] vhci_hcd vhci_hcd.0: Device attached [ 808.794525][T17920] siw: device registration error -23 [ 808.807692][T17920] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 808.815253][T17920] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3029'. [ 808.881204][ T5863] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 808.905900][ T5924] usb 42-1: SetAddress Request (6) to port 0 [ 808.974379][ T5924] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 809.130949][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 809.190384][ T5863] usb 5-1: config 0 has no interfaces? [ 809.224348][ T5863] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 809.236129][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.247641][ T5863] usb 5-1: Product: syz [ 809.257317][ T5863] usb 5-1: Manufacturer: syz [ 809.267386][ T5863] usb 5-1: SerialNumber: syz [ 809.283649][ T30] audit: type=1400 audit(1879901999.900:1300): avc: denied { mount } for pid=17929 comm="syz.8.3032" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 809.285675][T17930] xt_connbytes: Forcing CT accounting to be enabled [ 809.313623][T17930] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 809.326422][ T5863] usb 5-1: config 0 descriptor?? [ 809.335271][T17930] xt_bpf: check failed: parse error [ 809.470067][T17936] syz.9.3033 (17936): attempted to duplicate a private mapping with mremap. This is not supported. [ 809.502898][T17936] lo speed is unknown, defaulting to 1000 [ 809.820807][T17910] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 809.841996][ T12] vhci_hcd: stop threads [ 809.843603][T12089] usb 5-1: USB disconnect, device number 30 [ 809.846346][ T12] vhci_hcd: release socket [ 809.887891][ T12] vhci_hcd: disconnect device [ 810.765151][T17941] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3035'. [ 811.962142][ T30] audit: type=1400 audit(1879902002.570:1301): avc: denied { ioctl } for pid=17962 comm="syz.9.3041" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 812.231968][T17970] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 812.251080][T17961] block nbd0: server does not support multiple connections per device. [ 812.260512][T17961] block nbd0: shutting down sockets [ 812.353251][T17974] fuse: Bad value for 'fd' [ 812.473266][ T47] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 812.766368][ T2144] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 812.790910][ T47] usb 7-1: Using ep0 maxpacket: 32 [ 812.812751][ T47] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 812.821690][ T47] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 812.833310][ T47] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 812.842645][ T47] usb 7-1: config 1 has no interface number 0 [ 812.848786][ T47] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 812.860918][ T47] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 812.874412][ T47] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 812.883818][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.945700][ T47] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 812.955705][ T2144] usb 5-1: unable to get BOS descriptor or descriptor too short [ 812.964278][ T2144] usb 5-1: not running at top speed; connect to a high speed hub [ 812.975817][ T2144] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 812.984281][ T2144] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 812.994616][ T2144] usb 5-1: config 4 has no interface number 0 [ 813.003271][ T2144] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 813.012564][ T2144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.020656][ T2144] usb 5-1: Product: syz [ 813.025096][ T2144] usb 5-1: Manufacturer: syz [ 813.029773][ T2144] usb 5-1: SerialNumber: syz [ 813.481299][ T30] audit: type=1400 audit(1879902003.840:1302): avc: denied { append } for pid=17981 comm="syz.9.3048" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 813.655849][ T30] audit: type=1400 audit(1879902004.280:1303): avc: denied { accept } for pid=17967 comm="syz.6.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 813.679035][ T47] snd_usb_pod 7-1:1.1: set_interface failed [ 813.686221][ T47] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 813.697374][ T47] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 813.941678][ T47] usb 7-1: USB disconnect, device number 38 [ 814.034526][ T2144] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 814.081063][ T5924] usb 42-1: device descriptor read/8, error -110 [ 814.092227][ T2144] usb 5-1: No streaming interface found for terminal 6. [ 814.136447][ T2144] usb 5-1: USB disconnect, device number 31 [ 815.212649][T17999] cgroup: No subsys list or none specified [ 815.746452][ T5924] usb usb42-port1: attempt power cycle [ 816.210933][ T2144] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 816.391817][T18022] capability: warning: `syz.9.3057' uses 32-bit capabilities (legacy support in use) [ 816.405964][T18022] sg_read: process 1094 (syz.9.3057) changed security contexts after opening file descriptor, this is not allowed. [ 816.533591][ T5924] usb usb42-port1: unable to enumerate USB device [ 816.790861][ T2144] usb 7-1: Using ep0 maxpacket: 16 [ 816.797653][ T2144] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 816.820168][ T2144] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 816.840115][ T2144] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 816.866254][ T2144] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 816.879036][ T2144] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.894891][ T2144] usb 7-1: Product: syz [ 816.899170][ T2144] usb 7-1: Manufacturer: syz [ 816.903857][ T2144] usb 7-1: SerialNumber: syz [ 817.610692][T18026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3055'. [ 817.879519][ T2144] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 818.850763][T12089] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 819.133620][T12089] usb 10-1: Using ep0 maxpacket: 32 [ 819.159898][T12089] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.213065][T12089] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 819.249647][T12089] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 819.267669][T12089] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.276512][T12089] usb 10-1: Product: syz [ 819.281227][T12089] usb 10-1: Manufacturer: syz [ 819.285940][T12089] usb 10-1: SerialNumber: syz [ 819.366649][T12089] usb 10-1: config 0 descriptor?? [ 819.408632][ T30] audit: type=1400 audit(1879902009.960:1304): avc: denied { mounton } for pid=18043 comm="syz.4.3065" path="/96/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 819.474321][T12089] hub 10-1:0.0: bad descriptor, ignoring hub [ 819.506329][T12089] hub 10-1:0.0: probe with driver hub failed with error -5 [ 819.605194][ T2144] usb 7-1: current rate 9222429 is different from the runtime rate 9338507 [ 819.645461][T18030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.656111][T18030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.675226][ T30] audit: type=1400 audit(1879902010.300:1305): avc: denied { append } for pid=18029 comm="syz.9.3060" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 819.713896][ T2144] usb 7-1: USB disconnect, device number 39 [ 819.728356][ T30] audit: type=1400 audit(1879902010.350:1306): avc: denied { bind } for pid=18029 comm="syz.9.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 820.333498][T18058] lo speed is unknown, defaulting to 1000 [ 820.374231][ T30] audit: type=1326 audit(1879902011.000:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18057 comm="syz.6.3069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0112d8e969 code=0x0 [ 821.127071][T12089] usb 10-1: USB disconnect, device number 45 [ 821.240843][ T30] audit: type=1326 audit(1879902011.850:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18078 comm="syz.4.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2818e969 code=0x7ffc0000 [ 821.340851][ T30] audit: type=1326 audit(1879902011.850:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18078 comm="syz.4.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2818e969 code=0x7ffc0000 [ 821.794527][ T30] audit: type=1326 audit(1879902011.850:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18078 comm="syz.4.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f9a2818e969 code=0x7ffc0000 [ 821.819943][T18083] xt_hashlimit: max too large, truncated to 1048576 [ 821.929279][ T30] audit: type=1326 audit(1879902011.850:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18078 comm="syz.4.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2818e969 code=0x7ffc0000 [ 822.005024][ T30] audit: type=1326 audit(1879902011.850:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18078 comm="syz.4.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2818e969 code=0x7ffc0000 [ 822.149053][T18090] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3073'. [ 822.339917][ T30] audit: type=1326 audit(1879902011.850:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18078 comm="syz.4.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f9a2818e969 code=0x7ffc0000 [ 822.995380][T16873] schedule_timeout: wrong timeout value fffffffffffffff8 [ 823.005683][T16873] CPU: 1 UID: 0 PID: 16873 Comm: vivid-000-vid-c Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 823.005710][T16873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 823.005721][T16873] Call Trace: [ 823.005726][T16873] [ 823.005733][T16873] dump_stack_lvl+0x16c/0x1f0 [ 823.005758][T16873] schedule_timeout+0x1c9/0x290 [ 823.005785][T16873] ? __pfx_schedule_timeout+0x10/0x10 [ 823.005823][T16873] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 823.005840][T16873] ? prepare_to_wait_event+0xd0/0x6a0 [ 823.005865][T16873] ? __init_waitqueue_head+0xca/0x150 [ 823.005886][T16873] vivid_thread_vid_cap+0x8fc/0xda0 [ 823.005916][T16873] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 823.005940][T16873] ? __pfx_autoremove_wake_function+0x10/0x10 [ 823.005965][T16873] ? find_held_lock+0x2b/0x80 [ 823.005995][T16873] ? __kthread_parkme+0x19e/0x250 [ 823.006019][T16873] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 823.006039][T16873] kthread+0x3c2/0x780 [ 823.006055][T16873] ? __pfx_kthread+0x10/0x10 [ 823.006069][T16873] ? __pfx_kthread+0x10/0x10 [ 823.006083][T16873] ? __pfx_kthread+0x10/0x10 [ 823.006098][T16873] ? __pfx_kthread+0x10/0x10 [ 823.006112][T16873] ? rcu_is_watching+0x12/0xc0 [ 823.006132][T16873] ? __pfx_kthread+0x10/0x10 [ 823.006148][T16873] ret_from_fork+0x45/0x80 [ 823.006164][T16873] ? __pfx_kthread+0x10/0x10 [ 823.006180][T16873] ret_from_fork_asm+0x1a/0x30 [ 823.006220][T16873] [ 823.916903][ T2144] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 823.946949][T18113] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 823.953561][T18113] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 823.961721][T18113] vhci_hcd vhci_hcd.0: Device attached [ 824.201366][ T2144] usb 7-1: Using ep0 maxpacket: 16 [ 824.208734][ T2144] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 824.220916][ T2144] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 824.230933][ T2144] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 824.247242][ T2144] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 824.257479][ T2144] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.266698][ T2144] usb 7-1: Product: syz [ 824.271445][ T2144] usb 7-1: Manufacturer: syz [ 824.276312][ T2144] usb 7-1: SerialNumber: syz [ 824.381020][T18114] vhci_hcd: connection closed [ 824.802584][ T53] vhci_hcd: stop threads [ 824.822282][ T53] vhci_hcd: release socket [ 824.832022][ T53] vhci_hcd: disconnect device [ 824.966999][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 824.967014][ T30] audit: type=1326 audit(1879902015.590:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18078 comm="syz.4.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2818e969 code=0x7ffc0000 [ 825.021904][ T30] audit: type=1326 audit(1879902015.620:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18078 comm="syz.4.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2818e969 code=0x7ffc0000 [ 825.046031][ T30] audit: type=1326 audit(1879902015.630:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18078 comm="syz.4.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f9a2818e969 code=0x7ffc0000 [ 825.069646][ T30] audit: type=1326 audit(1879902015.630:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18078 comm="syz.4.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2818e969 code=0x7ffc0000 [ 825.097754][ T30] audit: type=1326 audit(1879902015.630:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18078 comm="syz.4.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2818e969 code=0x7ffc0000 [ 825.151348][ T2144] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 825.155531][T18126] siw: device registration error -23 [ 825.164356][ T30] audit: type=1326 audit(1879902015.640:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18078 comm="syz.4.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a2818e969 code=0x7ffc0000 [ 825.336797][ T30] audit: type=1326 audit(1879902015.640:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18078 comm="syz.4.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2818e969 code=0x7ffc0000 [ 825.337444][T18126] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 825.630791][ T30] audit: type=1326 audit(1879902015.640:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18078 comm="syz.4.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2818e969 code=0x7ffc0000 [ 826.187074][ T2144] usb 7-1: current rate 9222429 is different from the runtime rate 9338507 [ 826.350325][ T30] audit: type=1326 audit(1879902016.970:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18139 comm="syz.8.3092" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4f858e969 code=0x0 [ 826.962445][T18124] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3087'. [ 826.983338][ T2144] usb 7-1: USB disconnect, device number 40 [ 827.183535][T18148] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3094'. [ 828.260767][ T5924] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 828.560544][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 828.690290][ T30] audit: type=1400 audit(1879902019.310:1346): avc: denied { lock } for pid=18170 comm="syz.9.3100" path="socket:[59185]" dev="sockfs" ino=59185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 828.769958][T18175] netlink: 'syz.9.3100': attribute type 29 has an invalid length. [ 828.820760][ T5924] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 829.000069][T18173] netlink: 'syz.9.3100': attribute type 29 has an invalid length. [ 829.008296][T18179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3103'. [ 829.108612][T18173] netlink: 500 bytes leftover after parsing attributes in process `syz.9.3100'. [ 829.249018][ T5924] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 829.626955][T18175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 829.788861][ T5924] usb 5-1: Manufacturer: syz [ 830.087382][ T5924] usb 5-1: SerialNumber: syz [ 830.409272][ T5924] usb 5-1: config 0 descriptor?? [ 832.334423][ T30] audit: type=1400 audit(1879902019.910:1347): avc: denied { ioctl } for pid=18170 comm="syz.9.3100" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 832.412357][ T5924] usb 5-1: can't set config #0, error -71 [ 832.493448][ T5924] usb 5-1: USB disconnect, device number 32 [ 832.685069][ T30] audit: type=1326 audit(1879902023.140:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18188 comm="syz.8.3106" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4f858e969 code=0x0 [ 832.779346][T18194] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 832.788604][T18194] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3107'. [ 833.091760][T12089] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 833.103219][ T5924] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 833.353538][T12089] usb 10-1: Using ep0 maxpacket: 16 [ 833.380875][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 833.391392][T12089] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 833.476519][T12089] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 833.486847][T12089] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 833.499851][ T5924] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 833.518660][ T5924] usb 5-1: config 0 has no interface number 0 [ 833.527436][ T5924] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 833.537954][T12089] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 833.549156][T12089] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.558357][ T5924] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 833.568739][T12089] usb 10-1: Product: syz [ 833.573108][ T5924] usb 5-1: config 0 interface 126 has no altsetting 0 [ 833.579963][T12089] usb 10-1: Manufacturer: syz [ 833.584910][T12089] usb 10-1: SerialNumber: syz [ 833.589988][T18211] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 833.591497][ T5924] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 833.596494][T18211] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 833.600935][T18211] vhci_hcd vhci_hcd.0: Device attached [ 833.606370][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.628369][ T5924] usb 5-1: Product: syz [ 833.636075][ T5924] usb 5-1: Manufacturer: syz [ 833.643945][ T5924] usb 5-1: SerialNumber: syz [ 833.649898][ T5924] usb 5-1: config 0 descriptor?? [ 833.655952][T18193] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 833.664980][T18193] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 833.890732][ T2144] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 833.898432][ T47] usb 46-1: SetAddress Request (22) to port 0 [ 833.905012][ T47] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 834.042343][T12089] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 834.060846][ T2144] usb 7-1: Using ep0 maxpacket: 8 [ 834.067442][ T2144] usb 7-1: config 0 has no interfaces? [ 834.084371][ T5924] ir_usb 5-1:0.126: IR Dongle converter detected [ 834.084449][ T2144] usb 7-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 834.101842][ T2144] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.109892][ T2144] usb 7-1: Product: syz [ 834.117341][ T2144] usb 7-1: Manufacturer: syz [ 834.122049][ T2144] usb 7-1: SerialNumber: syz [ 834.128308][ T2144] usb 7-1: config 0 descriptor?? [ 834.294121][ T5924] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 834.338260][T18212] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 6 [ 834.347633][ T53] vhci_hcd: stop threads [ 834.352813][ T2144] usb 7-1: USB disconnect, device number 41 [ 834.353683][ T53] vhci_hcd: release socket [ 834.366063][ T53] vhci_hcd: disconnect device [ 834.870986][T12089] usb 10-1: current rate 9222429 is different from the runtime rate 9338507 [ 835.017193][T18240] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3119'. [ 835.040858][ T30] audit: type=1400 audit(1879902025.580:1349): avc: denied { read } for pid=18233 comm="syz.7.3119" dev="sockfs" ino=59327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 835.107771][ T30] audit: type=1400 audit(1879902025.650:1350): avc: denied { ioctl } for pid=18233 comm="syz.7.3119" path="socket:[59346]" dev="sockfs" ino=59346 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 835.242465][T18242] siw: device registration error -23 [ 835.287300][T18242] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 835.300777][T18242] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3120'. [ 835.365764][T12089] usb 10-1: USB disconnect, device number 46 [ 835.759799][ T5813] usb 5-1: USB disconnect, device number 33 [ 836.147589][ T5813] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 836.181441][ T5813] ir_usb 5-1:0.126: device disconnected [ 836.952105][ T30] audit: type=1326 audit(1879902027.550:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18266 comm="syz.7.3129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3ae18e969 code=0x0 [ 837.039385][T18270] lo speed is unknown, defaulting to 1000 [ 839.072082][ T47] usb 46-1: device descriptor read/8, error -110 [ 839.283394][T18307] ip6t_srh: unknown srh match flags 4000 [ 839.491727][ T47] usb usb46-port1: attempt power cycle [ 840.301736][ T47] usb usb46-port1: unable to enumerate USB device [ 841.622118][T18352] siw: device registration error -23 [ 841.630317][T18352] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 841.638402][T18352] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3151'. [ 841.845531][T18356] ip6t_srh: unknown srh match flags 4000 [ 843.482935][T18383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18383 comm=syz.4.3162 [ 843.489247][T18381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3162'. [ 843.614630][T18384] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3154'. [ 843.995100][T18396] ip6t_srh: unknown srh match flags 4000 [ 844.048689][T18396] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 844.172832][T18396] syzkaller1: linktype set to 780 [ 845.942525][T18436] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3178'. [ 847.615876][T18459] siw: device registration error -23 [ 848.176455][T18466] netlink: 'syz.4.3188': attribute type 10 has an invalid length. [ 848.214886][T18466] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 848.275984][ T30] audit: type=1800 audit(1879902038.880:1352): pid=18455 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3184" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 848.297296][ C1] vkms_vblank_simulate: vblank timer overrun [ 849.656040][T18492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 850.375689][ T30] audit: type=1400 audit(1879902040.300:1353): avc: denied { create } for pid=18485 comm="syz.8.3195" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 850.779013][T18496] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3199'. [ 853.340055][T18535] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3211'. [ 853.448544][T18537] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 853.457513][T18537] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 853.471311][T18537] netdevsim netdevsim9: Falling back to sysfs fallback for: . [ 854.775616][T18558] sp0: Synchronizing with TNC [ 855.030726][ T2144] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 855.040307][T18564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3222'. [ 855.117893][ T5826] block nbd0: Receive control failed (result -104) [ 855.202479][ T2144] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.235707][ T2144] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.271269][ T2144] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 855.291842][ T2144] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.354610][ T2144] usb 7-1: config 0 descriptor?? [ 855.514424][T18572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18572 comm=syz.4.3225 [ 855.620555][ T30] audit: type=1400 audit(1879902046.240:1354): avc: denied { ioctl } for pid=18571 comm="syz.4.3225" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 856.377040][T18579] ip6t_srh: unknown srh match flags 4000 [ 856.404032][T18579] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 856.404527][ T2144] uclogic 0003:256C:006D.000C: interface is invalid, ignoring [ 856.417922][T18557] [U] [ 856.421261][T18579] syzkaller1: linktype set to 780 [ 856.429005][ T2144] usb 7-1: USB disconnect, device number 42 [ 857.081791][ T30] audit: type=1400 audit(1879902047.280:1355): avc: denied { mount } for pid=18581 comm="syz.4.3228" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 857.130063][ T30] audit: type=1400 audit(1879902047.280:1356): avc: denied { mounton } for pid=18581 comm="syz.4.3228" path="/126/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 857.217006][ T30] audit: type=1400 audit(1879902047.840:1357): avc: denied { listen } for pid=18590 comm="syz.7.3230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 857.243524][ T30] audit: type=1400 audit(1879902047.840:1358): avc: denied { accept } for pid=18590 comm="syz.7.3230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 857.336110][ T30] audit: type=1400 audit(1879902047.960:1359): avc: denied { unmount } for pid=16327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 857.461701][ T5826] block nbd1: Receive control failed (result -104) [ 858.073047][T18617] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 858.096136][T18617] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 858.589356][T18624] ip6t_srh: unknown srh match flags 4000 [ 858.692429][T18624] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 858.714614][T18624] syzkaller1: linktype set to 780 [ 859.925781][T18646] tipc: Enabling of bearer rejected, already enabled [ 859.944913][T18646] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3247'. [ 860.073234][T18653] Bluetooth: MGMT ver 1.23 [ 860.078778][ T30] audit: type=1400 audit(1879902050.700:1360): avc: denied { write } for pid=18640 comm="syz.4.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 861.046516][T18673] ip6t_srh: unknown srh match flags 4000 [ 861.104943][T18673] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 861.206033][T18673] syzkaller1: linktype set to 780 [ 861.300311][T18680] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 861.763141][T18686] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 861.769694][T18686] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 861.890391][T18686] vhci_hcd vhci_hcd.0: Device attached [ 862.160760][T12260] usb 48-1: SetAddress Request (27) to port 0 [ 862.166958][T12260] usb 48-1: new SuperSpeed USB device number 27 using vhci_hcd [ 862.503003][T18703] overlayfs: failed to clone lowerpath [ 863.281011][T12089] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 863.451582][T18716] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 863.458203][T18716] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 863.617376][T18716] vhci_hcd vhci_hcd.0: Device attached [ 863.832226][T12089] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 863.852659][T12089] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 863.871140][T12089] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.895395][T12089] usb 7-1: config 0 descriptor?? [ 863.915589][T18718] vhci_hcd: connection closed [ 863.916684][ T72] vhci_hcd: stop threads [ 863.925440][T18706] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 863.926275][ T72] vhci_hcd: release socket [ 863.940749][ T5863] usb 42-1: SetAddress Request (10) to port 0 [ 863.946875][ T5863] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 863.947179][ T72] vhci_hcd: disconnect device [ 863.990876][ T5863] usb 42-1: enqueue for inactive port 0 [ 864.374225][T12089] elan 0003:04F3:0755.000D: unknown main item tag 0x3 [ 864.391732][ T5863] usb usb42-port1: attempt power cycle [ 864.411047][T12089] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 864.557096][T18730] ip6t_srh: unknown srh match flags 4000 [ 864.605021][T12089] usb 7-1: USB disconnect, device number 43 [ 864.692285][T18730] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 864.704055][T18730] syzkaller1: linktype set to 780 [ 864.765469][T18689] vhci_hcd: connection reset by peer [ 864.831073][T10835] vhci_hcd: stop threads [ 864.835380][T10835] vhci_hcd: release socket [ 864.903046][T18737] overlayfs: failed to clone lowerpath [ 864.978880][ T5863] usb usb42-port1: unable to enumerate USB device [ 865.030285][T10835] vhci_hcd: disconnect device [ 865.498490][T18747] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 866.699232][T18758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3273'. [ 866.771641][ T30] audit: type=1400 audit(1879902057.400:1361): avc: denied { listen } for pid=18763 comm="syz.9.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 866.809453][T18765] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 867.101171][ T5863] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 867.203440][T12260] usb 48-1: device descriptor read/8, error -110 [ 867.280828][ T5863] usb 10-1: Using ep0 maxpacket: 16 [ 867.305882][ T5863] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 867.332475][T18779] /dev/nullb0: Can't open blockdev [ 867.367038][ T5863] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 867.391658][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.402557][T18778] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3278'. [ 867.420078][ T5863] usb 10-1: Product: ы [ 867.424004][T18778] xt_CT: You must specify a L4 protocol and not use inversions on it [ 867.427586][ T5863] usb 10-1: Manufacturer: С [ 867.436726][T18778] syz.8.3278: attempt to access beyond end of device [ 867.436726][T18778] loop17: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 867.452085][T18778] EXT4-fs (loop17): unable to read superblock [ 867.567869][T18781] ip6t_srh: unknown srh match flags 4000 [ 867.676719][T12260] usb usb48-port1: attempt power cycle [ 868.051290][T18773] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 868.434214][T12260] usb usb48-port1: unable to enumerate USB device [ 868.600238][ T5863] cdc_ncm 10-1:1.0: bind() failure [ 868.617815][ T5863] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 868.627226][ T5863] cdc_ncm 10-1:1.1: bind() failure [ 868.668897][ T5863] usb 10-1: USB disconnect, device number 47 [ 868.724212][T18796] FAULT_INJECTION: forcing a failure. [ 868.724212][T18796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.752310][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3283'. [ 868.780944][T18796] CPU: 1 UID: 0 PID: 18796 Comm: syz.4.3282 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 868.780972][T18796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 868.780982][T18796] Call Trace: [ 868.780988][T18796] [ 868.780996][T18796] dump_stack_lvl+0x16c/0x1f0 [ 868.781021][T18796] should_fail_ex+0x512/0x640 [ 868.781047][T18796] _copy_to_user+0x32/0xd0 [ 868.781073][T18796] simple_read_from_buffer+0xcb/0x170 [ 868.781101][T18796] proc_fail_nth_read+0x197/0x270 [ 868.781127][T18796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 868.781153][T18796] ? rw_verify_area+0xcf/0x680 [ 868.781174][T18796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 868.781203][T18796] vfs_read+0x1de/0xc70 [ 868.781231][T18796] ? __pfx___mutex_lock+0x10/0x10 [ 868.781251][T18796] ? __pfx_vfs_read+0x10/0x10 [ 868.781282][T18796] ? __fget_files+0x20e/0x3c0 [ 868.781313][T18796] ksys_read+0x12a/0x240 [ 868.781336][T18796] ? __pfx_ksys_read+0x10/0x10 [ 868.781358][T18796] ? rcu_is_watching+0x12/0xc0 [ 868.781386][T18796] do_syscall_64+0xcd/0x260 [ 868.781409][T18796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.781426][T18796] RIP: 0033:0x7f9a2818d37c [ 868.781440][T18796] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 868.781456][T18796] RSP: 002b:00007f9a29029030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 868.781473][T18796] RAX: ffffffffffffffda RBX: 00007f9a283b5fa0 RCX: 00007f9a2818d37c [ 868.781485][T18796] RDX: 000000000000000f RSI: 00007f9a290290a0 RDI: 0000000000000004 [ 868.781494][T18796] RBP: 00007f9a29029090 R08: 0000000000000000 R09: 0000000000000014 [ 868.781505][T18796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.781514][T18796] R13: 0000000000000000 R14: 00007f9a283b5fa0 R15: 00007ffda23e8ab8 [ 868.781539][T18796] [ 868.788554][T18797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18797 comm=syz.7.3283 [ 869.417736][T18805] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 869.737623][T18811] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 870.860946][ T5862] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 871.026114][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 871.027543][T18825] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 871.040729][ T5863] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 871.098023][ T5862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.134064][ T5862] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 871.152781][ T5862] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 871.180753][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.199120][ T5862] usb 5-1: Product: 婆⩥鷖滛⋶ɾ蟃れ䒔鞾䝯ꒈ孿쏌넺鉷㦷排ꯛ瞪ᦕ얷復啟⼤㿝䰊铻欦쨄௩ꗅ [ 871.220798][ T5862] usb 5-1: Manufacturer: С [ 871.221233][ T5863] usb 10-1: Using ep0 maxpacket: 16 [ 871.297214][ T5863] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 871.312465][ T5863] usb 10-1: config 0 has no interface number 0 [ 871.319613][ T5863] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 871.343421][ T5863] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 871.357000][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.362351][T18823] netlink: 'syz.8.3292': attribute type 5 has an invalid length. [ 871.366531][ T5863] usb 10-1: Product: syz [ 871.378068][ T5863] usb 10-1: Manufacturer: syz [ 871.394490][ T5863] usb 10-1: SerialNumber: syz [ 871.455527][ T5863] usb 10-1: config 0 descriptor?? [ 871.521502][T18829] vivid-000: disconnect [ 871.658890][ T5862] cdc_ncm 5-1:1.0: bind() failure [ 871.673737][ T5862] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 871.688005][ T5862] cdc_ncm 5-1:1.1: bind() failure [ 871.693278][ T5863] usbtouchscreen 10-1:0.214: Failed to read FW rev: -71 [ 871.709546][ T5862] usb 5-1: USB disconnect, device number 34 [ 871.714267][ T5863] usbtouchscreen 10-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 871.750452][ T5863] usb 10-1: USB disconnect, device number 48 [ 871.998450][T18834] siw: device registration error -23 [ 872.039174][T18834] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 872.092793][T18834] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3294'. [ 872.199604][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3295'. [ 872.209889][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3295'. [ 872.234603][T18836] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.243979][T18836] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.252756][T18836] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.261506][T18836] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 872.831503][T18845] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 874.577470][T18874] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3301'. [ 874.750929][T18876] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 874.757548][T18876] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 874.765312][T18876] vhci_hcd vhci_hcd.0: Device attached [ 874.773580][T18877] vhci_hcd: connection closed [ 874.774057][ T6540] vhci_hcd: stop threads [ 874.860722][ T6540] vhci_hcd: release socket [ 874.865288][ T6540] vhci_hcd: disconnect device [ 875.945586][ T5826] block nbd2: Receive control failed (result -104) [ 875.993004][T18888] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3309'. [ 876.851961][T18911] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 876.904451][ T30] audit: type=1400 audit(1879902067.530:1362): avc: denied { accept } for pid=18901 comm="syz.6.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 877.240861][ T5861] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 877.498098][ T30] audit: type=1400 audit(1879902068.120:1363): avc: denied { create } for pid=18923 comm="syz.6.3320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 877.980700][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 877.996256][ T5861] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 878.077981][ T5861] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 878.093614][ T5861] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 878.112482][ T5861] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 878.124834][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.133307][ T5861] usb 5-1: Product: syz [ 878.137551][ T5861] usb 5-1: Manufacturer: syz [ 878.145611][ T5861] usb 5-1: SerialNumber: syz [ 878.768681][ T5861] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 879.768239][T18949] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 880.207459][T18955] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 880.266312][ T5861] usb 5-1: current rate 9222429 is different from the runtime rate 9338507 [ 880.474333][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3330'. [ 880.499697][T18959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18959 comm=syz.8.3330 [ 880.513667][ T5861] usb 5-1: USB disconnect, device number 35 [ 881.157168][T18961] tipc: Enabled bearer , priority 0 [ 881.166165][T18961] syzkaller0: entered promiscuous mode [ 881.171882][T18961] syzkaller0: entered allmulticast mode [ 881.872510][T18960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.677208][T18989] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 883.201371][T18996] netlink: 'syz.8.3341': attribute type 2 has an invalid length. [ 883.680967][T19008] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 884.110565][T12089] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 884.140421][T19022] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 884.723446][ T5863] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 884.732467][T12089] usb 10-1: device descriptor read/64, error -71 [ 884.786073][ T30] audit: type=1400 audit(1879902075.410:1364): avc: denied { listen } for pid=19025 comm="syz.4.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 885.052169][ T5863] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.066481][ T5863] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 885.079594][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.090994][T12089] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 885.113938][ T5863] usb 7-1: Product: syz [ 885.123454][ T5863] usb 7-1: Manufacturer: syz [ 885.135060][ T5863] usb 7-1: SerialNumber: syz [ 885.145212][ T5863] usb 7-1: config 0 descriptor?? [ 885.154282][ T5863] usb 7-1: no audio or video endpoints found [ 885.728088][T12089] usb 10-1: device descriptor read/64, error -71 [ 885.919523][T12089] usb usb10-port1: attempt power cycle [ 886.656033][T19049] siw: device registration error -23 [ 886.666804][T19049] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 886.675312][T19049] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3355'. [ 886.900250][ T2144] usb 7-1: USB disconnect, device number 44 [ 887.022200][ T30] audit: type=1400 audit(1879902077.640:1365): avc: denied { connect } for pid=19051 comm="syz.9.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 887.127330][T10500] Bluetooth: hci5: command 0x0406 tx timeout [ 887.791518][T19073] overlayfs: failed to clone lowerpath [ 888.001047][T19075] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 889.135996][T19091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3367'. [ 889.146125][T19091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19091 comm=syz.8.3367 [ 889.604320][T19096] ip6t_srh: unknown srh match flags 4000 [ 889.886349][T19103] overlayfs: overlapping lowerdir path [ 890.832783][ T30] audit: type=1326 audit(1879902081.450:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19118 comm="syz.8.3375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4f858e969 code=0x0 [ 891.296198][T19131] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 891.561076][ T31] INFO: task kworker/0:5:5867 blocked for more than 143 seconds. [ 891.568923][ T31] Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 [ 891.583391][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 892.119693][ T31] task:kworker/0:5 state:D stack:18392 pid:5867 tgid:5867 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 892.164013][ T31] Workqueue: usb_hub_wq hub_event [ 892.169262][ T31] Call Trace: [ 892.172630][ T31] [ 892.177806][ T31] __schedule+0x116f/0x5de0 [ 892.182957][ T31] ? kasan_save_stack+0x42/0x60 [ 892.187925][ T31] ? kasan_save_stack+0x33/0x60 [ 892.194159][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 892.199390][ T31] ? __pfx___schedule+0x10/0x10 [ 892.206581][ T31] ? find_held_lock+0x2b/0x80 [ 892.214212][ T31] ? schedule+0x2d7/0x3a0 [ 892.219007][ T31] schedule+0xe7/0x3a0 [ 892.227055][ T31] schedule_preempt_disabled+0x13/0x30 [ 892.238771][ T31] __mutex_lock+0x6c7/0xb90 [ 892.243589][ T31] ? hub_event+0x292b/0x4fa0 [ 892.248386][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 892.253662][ T31] ? kfree+0x252/0x4d0 [ 892.257751][ T31] ? kfree_const+0x55/0x60 [ 892.263301][ T31] ? kobject_put+0x210/0x5a0 [ 892.268130][ T31] ? hub_event+0x292b/0x4fa0 [ 892.273137][ T31] hub_event+0x292b/0x4fa0 [ 892.277939][ T31] ? __pfx_hub_event+0x10/0x10 [ 892.282950][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 892.292464][T19147] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 892.314155][ T31] ? rcu_is_watching+0x12/0xc0 [ 892.393418][ T31] process_one_work+0x9cc/0x1b70 [ 892.398399][ T31] ? __pfx_usb_gadget_state_work+0x10/0x10 [ 892.420675][ T31] ? __pfx_process_one_work+0x10/0x10 [ 892.426091][ T31] ? assign_work+0x1a0/0x250 [ 892.439528][ T31] worker_thread+0x6c8/0xf10 [ 892.445529][ T31] ? __kthread_parkme+0x19e/0x250 [ 892.455310][ T31] ? __pfx_worker_thread+0x10/0x10 [ 892.460679][ T31] kthread+0x3c2/0x780 [ 892.464949][ T31] ? __pfx_kthread+0x10/0x10 [ 892.469730][ T31] ? __pfx_kthread+0x10/0x10 [ 892.477427][ T31] ? __pfx_kthread+0x10/0x10 [ 892.482389][ T31] ? __pfx_kthread+0x10/0x10 [ 892.487177][ T31] ? rcu_is_watching+0x12/0xc0 [ 892.493097][ T31] ? __pfx_kthread+0x10/0x10 [ 892.498280][ T31] ret_from_fork+0x45/0x80 [ 892.502932][ T31] ? __pfx_kthread+0x10/0x10 [ 892.507721][ T31] ret_from_fork_asm+0x1a/0x30 [ 892.512731][ T31] [ 892.600770][ T31] [ 892.600770][ T31] Showing all locks held in the system: [ 892.608514][ T31] 1 lock held by khungtaskd/31: [ 892.633261][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 892.660802][ T31] 2 locks held by getty/5570: [ 892.665502][ T31] #0: ffff8880368420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 892.693507][ T31] #1: ffffc900030062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 892.707630][ T31] 5 locks held by kworker/1:6/5864: [ 892.715957][ T31] #0: ffff888145295148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 892.733442][ T31] #1: ffffc90004587d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 892.744899][ T31] #2: ffff88802a792198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 892.753990][ T31] #3: ffff88802a7b4510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 892.764109][ T31] #4: ffff888028559968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 892.773971][ T31] 5 locks held by kworker/0:5/5867: [ 892.779160][ T31] #0: ffff888145295148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 892.790228][ T31] #1: ffffc90004597d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 892.801832][ T31] #2: ffff88802a795198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 892.810898][ T31] #3: ffff88802a7f8510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 892.821040][ T31] #4: ffff888028559968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 892.833632][ T31] 1 lock held by syz-executor/10840: [ 892.838921][ T31] #0: ffffffff8e3caaf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 892.850261][ T31] 1 lock held by syz.7.3379/19146: [ 892.856350][ T31] [ 892.858672][ T31] ============================================= [ 892.858672][ T31] [ 892.877879][ T31] NMI backtrace for cpu 0 [ 892.877892][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 892.877911][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 892.877921][ T31] Call Trace: [ 892.877928][ T31] [ 892.877935][ T31] dump_stack_lvl+0x116/0x1f0 [ 892.877959][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 892.877983][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 892.878002][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 892.878020][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 892.878047][ T31] watchdog+0xf70/0x12c0 [ 892.878070][ T31] ? __pfx_watchdog+0x10/0x10 [ 892.878084][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 892.878104][ T31] ? __kthread_parkme+0x19e/0x250 [ 892.878129][ T31] ? __pfx_watchdog+0x10/0x10 [ 892.878145][ T31] kthread+0x3c2/0x780 [ 892.878161][ T31] ? __pfx_kthread+0x10/0x10 [ 892.878175][ T31] ? __pfx_kthread+0x10/0x10 [ 892.878189][ T31] ? __pfx_kthread+0x10/0x10 [ 892.878203][ T31] ? __pfx_kthread+0x10/0x10 [ 892.878218][ T31] ? rcu_is_watching+0x12/0xc0 [ 892.878239][ T31] ? __pfx_kthread+0x10/0x10 [ 892.878255][ T31] ret_from_fork+0x45/0x80 [ 892.878272][ T31] ? __pfx_kthread+0x10/0x10 [ 892.878288][ T31] ret_from_fork_asm+0x1a/0x30 [ 892.878324][ T31] [ 892.878331][ T31] Sending NMI from CPU 0 to CPUs 1: [ 893.016225][ C1] NMI backtrace for cpu 1 [ 893.016240][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 893.016255][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 893.016263][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 893.016281][ C1] Code: 95 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 aa 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 893.016293][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 893.016304][ C1] RAX: 0000000004065e8d RBX: 0000000000000001 RCX: ffffffff8b6c4419 [ 893.016312][ C1] RDX: 0000000000000000 RSI: ffffffff8dbdf8b9 RDI: ffffffff8bf47de0 [ 893.016320][ C1] RBP: ffffed1003b5a488 R08: 0000000000000001 R09: ffffed10170a65bd [ 893.016328][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 893.016336][ C1] R13: ffff88801dad2440 R14: ffffffff9084f010 R15: 0000000000000000 [ 893.016344][ C1] FS: 0000000000000000(0000) GS:ffff888124ae4000(0000) knlGS:0000000000000000 [ 893.016357][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 893.016365][ C1] CR2: 0000555592e785c8 CR3: 000000007ae58000 CR4: 00000000003526f0 [ 893.016374][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 893.016382][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 893.016389][ C1] Call Trace: [ 893.016394][ C1] [ 893.016398][ C1] default_idle+0x13/0x20 [ 893.016414][ C1] default_idle_call+0x6d/0xb0 [ 893.016428][ C1] do_idle+0x391/0x510 [ 893.016444][ C1] ? __pfx_do_idle+0x10/0x10 [ 893.016459][ C1] ? do_idle+0x1c/0x510 [ 893.016474][ C1] cpu_startup_entry+0x4f/0x60 [ 893.016488][ C1] start_secondary+0x21d/0x2b0 [ 893.016507][ C1] ? __pfx_start_secondary+0x10/0x10 [ 893.016527][ C1] common_startup_64+0x13e/0x148 [ 893.016546][ C1] [ 893.017427][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 893.210890][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(full) [ 893.222676][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 893.232713][ T31] Call Trace: [ 893.235975][ T31] [ 893.238891][ T31] dump_stack_lvl+0x3d/0x1f0 [ 893.243469][ T31] panic+0x71c/0x800 [ 893.247358][ T31] ? __pfx_panic+0x10/0x10 [ 893.251761][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 893.257116][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 893.263076][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 893.268432][ T31] ? watchdog+0xdda/0x12c0 [ 893.272829][ T31] ? watchdog+0xdcd/0x12c0 [ 893.277231][ T31] watchdog+0xdeb/0x12c0 [ 893.281464][ T31] ? __pfx_watchdog+0x10/0x10 [ 893.286120][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 893.291302][ T31] ? __kthread_parkme+0x19e/0x250 [ 893.296488][ T31] ? __pfx_watchdog+0x10/0x10 [ 893.301147][ T31] kthread+0x3c2/0x780 [ 893.305202][ T31] ? __pfx_kthread+0x10/0x10 [ 893.309771][ T31] ? __pfx_kthread+0x10/0x10 [ 893.314342][ T31] ? __pfx_kthread+0x10/0x10 [ 893.318910][ T31] ? __pfx_kthread+0x10/0x10 [ 893.323482][ T31] ? rcu_is_watching+0x12/0xc0 [ 893.328232][ T31] ? __pfx_kthread+0x10/0x10 [ 893.332802][ T31] ret_from_fork+0x45/0x80 [ 893.337208][ T31] ? __pfx_kthread+0x10/0x10 [ 893.341777][ T31] ret_from_fork_asm+0x1a/0x30 [ 893.346538][ T31] [ 893.349649][ T31] Kernel Offset: disabled [ 893.353948][ T31] Rebooting in 86400 seconds..