last executing test programs: 5m10.976637844s ago: executing program 3 (id=3302): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x4}, @TCA_CAKE_RTT={0x8, 0x7, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x40, 0x0, 0x47, [0xfffffffc, 0x80]}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x28}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) r8 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', '', [{0x20, '#! '}, {0x20, 'net/udp6\x00'}]}, 0x12) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(serpent)\x00'}, 0x3f) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 5m10.963793003s ago: executing program 3 (id=3311): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x8000000, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0xa1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x168, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x1]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) close(r0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000000)={0x6, 0x8}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x1) 5m9.711447529s ago: executing program 3 (id=3314): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f00000014"], 0x20) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x4e95c004790412fc, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce8f18ef", @ANYBLOB="efc32ff3d5ad2586beb3318cacf8578425581536a2fc732ec407fe6ec7653659c3fce64bd1b2f3bd64b417f488cab0bfc665e18b902e3195a89ba5b78a7f853f5d0268ecb66a014c65ec6848fa116798cd8ca9946dd4651feea42fd461fd50c61a434fce94320483331de43d18b3a5cc9d37e4d3d84354", @ANYRESHEX], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) pipe2$watch_queue(0x0, 0x80) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x50f94f5bdcbd707) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x0, 0x1, 0x1, 0x2, 0x2}}) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x300, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = syz_open_dev$vivid(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f000054f000/0x2000)=nil, 0x2000, 0x9) mmap(&(0x7f000024a000/0x2000)=nil, 0x2000, 0x14, 0x100010, 0xffffffffffffffff, 0xa8067000) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d00"], 0x0) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000f8ffffff000000000000000085000000360000001800000003000000000000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 5m5.823828766s ago: executing program 3 (id=3320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000000008b}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x271d, 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002240)) wait4(0x0, 0x0, 0x8, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 5m4.193119303s ago: executing program 3 (id=3321): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) fanotify_init(0x0, 0x400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x5, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getdents64(0xffffffffffffffff, &(0x7f0000003440)=""/99, 0x63) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) io_setup(0xe9e1, &(0x7f0000000140)) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x4, {0x5, 0xfffffffd, 0x4, 0x6}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280a00, 0x0) file_getattr(r6, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) 5m2.716154108s ago: executing program 3 (id=3322): unshare(0x6a000000) socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x90000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x90f95eb2b7014cbe}, {0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000680)="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", 0x13f}, {&(0x7f00000005c0)="b6d61bdceedc9b86bf2430334d84ed37c861ed58e8c1929c7e8968e92cde2c8003d3af2eab11fe0eea34b91d951ca8c6ef0353f4a0fa362eb30530bcc0ae5d18b6ff610c50f7bd28365a28edff22e35d42316dd07ce2cf531be5f655631376fe8aac525c9ed56563938b0ba435ff0f0000000000003be0e7a9987aac4e57068f1336eb2a018b20a2f89a753f6a872acd00", 0x91}, {&(0x7f0000000880)="d3fdb3439da7026127875fd41fac5d7573a0b7b432dac4981b225cf3de101867fbf4104861ea1119a1d4b6d98ef1438882d154768ce5ce2fa17608d0e3a754f4bdbc5729ef61920bd38a", 0x4a}, {&(0x7f0000000f80)="1846247e91127cc350760f5e63c38c3f9142f94e379b845a081787b177a32904bb641cc1e1c08153ebe1aab8250b3348bce55b0050148f3784a07692d5bcd508615b7bef0384664879f9de082b15e7361e45555b5884366ea9584dc60b4e94ae841469063f011973690d0ac165bf6cd0575f7d32da2a50707dff999a9c8c00000000000000000000000000000000847be990492adf34398312800ff0433124ab034b25b41b238723013c2fcb0e945bf2dc755144425cb9ac82a5b45277049c345ab2ff546b9c646d374335c89f952ee9b341155fb7dc405eab041e19665fb98c8a7d18de159390c2bd566ea9f0090308a40f0c2a208efd771d2484e237ab25c7150dd0dbde5da06a8a938de3e7f4f4eaf03a6e47197eb3d7c29b3e0a04da92cd5ee3339a7eda75508ac62cf77fcdd1fa4b8bdc91abb18098bdb72cd42530ad9322223b97ed51f6c37fd227373d9ca6071cf906cfcada6ee0df80ede471e13facc8dde86e72112bb54d18", 0x16a}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="a258b90c3acc8ac592ce94a844fcd355f2209b1bc352f541dae753886779d661c58bc148d3aa50402c1fa60600c767bc864f18763d3f0806db597da6a546cc67ae16ba025e93c038c2913e4633865af0874f98c0599c4235da5b22eef313d678e9ba1c49a6fba32b7b3ff31db1715eb58e4916ec1aad7776c94503c613f361a3be52beeaa9a8a0e1d00be0b55a688ce2752209b8626a6bca0064c8f93e093cdd35fc6a1847607aa7dd04484c0734e499c93420a406cea08e0b328f8a796ca4e6648dadd93aae1bd626704cce183db40ff42197", 0xd3}, {&(0x7f0000000cc0)="f162b8c77ed8fad851340c289be7501b232dc460fe9748392043828f7d4be9ee0fddb2727d24a8a1492f36fb89b943b7c84508bd9534dbfd56249727fa5b2942fcca08471022ac7e214f557e0cf91687376642b25ffb50ca48217b68979ba8cc667a1ea425bf36c02845b302f094f826ef40533ddd57042506f9a591eae9f6229f7224b5f5749eadf2fc84a198f0274c2637a2fdbb800aa400cb", 0x9a}, {&(0x7f00000000c0)="a710721b0069e8c27b6c2978f46b50e11a1d90df060099b81a1fa52d1a4a7ea8424286a7dde2f1aec7e11248842066fc42c0f806df641c626c549bb90e2876213f625b639c2a9e561fb310a0fe6509bc6735fa2ec82bb4361cc236287098045ce8540e2b0c41ee93b7b113048ef38bcf06a2", 0x72}, {&(0x7f0000000e00)}], 0x9, &(0x7f0000001300)=ANY=[@ANYBLOB="d8000000450000001701000002000000c1000000a6afb52a2a82e47b52fe1019dcafce25ee4cf3a8a26f3ded74e6c1dd1c9ea996d0f6c726b09b2e922b1b0928bd00eb2390d67b18fb9db2a528d6ee98e2835f2aaf1dfff9de05ce8ba7edaa9e3841dae32293411891e53fe0d203a026ae1bcd32606a6f1d2a6400cca3b28078ce9b2d9e703732fcf3f805bb0dbcb7a575235153e1e3624327f6f277039ee622aa8b719c5c78ad29b2011dd419ba7dea543c536a7d0d22b0c96d76734a8ba65d96a6a97b6a1897"], 0x168, 0x4}], 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000280)="0f01cf66f30f52af0060000066baf80cb808de698aef66bafc0c66b8000066efdbd5b9b50800000f32c4e2aaf5620ff3660f32c4e1fd6f4ed466b8da008ec866baf80cb86481d389ef66bafc0cb8d4600000ef", 0x53}], 0x1, 0x43, 0x0, 0x0) r5 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) r7 = socket(0x10, 0x803, 0x0) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xf58ed5ab95d0cf6d}) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r7], 0x38}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r5) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000080)}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m47.08178194s ago: executing program 32 (id=3322): unshare(0x6a000000) socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x90000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x90f95eb2b7014cbe}, {0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000680)="99b609ef53ba999488c2e11bce90ff9a91489c0c956122dacd7a65db94740e756dba361d1903c5033e6e6716b476a31b9e9eb2ad047bcff2087b7f11e1acce2a11069b108aae08dd13c84847309ba3625c6b6dd81b7ca417afc6af3b65b4fe2b323ba30e4deba16ee6ab900f87740b480dfc87e024835999282e5d9c58598b6c7227b7b6bccad8df5acf21697c192dbfa4dfcf99bb512bfb428e956e1ec20f8390d038fb5932c6bdf9ff08f6a80dccf8d2ab1752551c615c4a2f39ed9ff78304a96020aa9498bea07d877935054d8f96eebdc8634fcaa8031b9695df5ab72a1ef9a1252652ea1492277803d3e264722cb47854ad1834dfd6b497341480a19f53a70656db7158cc9a618e4e90636fb186e772b17093230d59e9c1a5f6fd3a0e82fba1fb4a7e13052563dcc63baf3d704671b704fdf47b4cd03de66be97a4e64", 0x13f}, {&(0x7f00000005c0)="b6d61bdceedc9b86bf2430334d84ed37c861ed58e8c1929c7e8968e92cde2c8003d3af2eab11fe0eea34b91d951ca8c6ef0353f4a0fa362eb30530bcc0ae5d18b6ff610c50f7bd28365a28edff22e35d42316dd07ce2cf531be5f655631376fe8aac525c9ed56563938b0ba435ff0f0000000000003be0e7a9987aac4e57068f1336eb2a018b20a2f89a753f6a872acd00", 0x91}, {&(0x7f0000000880)="d3fdb3439da7026127875fd41fac5d7573a0b7b432dac4981b225cf3de101867fbf4104861ea1119a1d4b6d98ef1438882d154768ce5ce2fa17608d0e3a754f4bdbc5729ef61920bd38a", 0x4a}, {&(0x7f0000000f80)="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", 0x16a}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="a258b90c3acc8ac592ce94a844fcd355f2209b1bc352f541dae753886779d661c58bc148d3aa50402c1fa60600c767bc864f18763d3f0806db597da6a546cc67ae16ba025e93c038c2913e4633865af0874f98c0599c4235da5b22eef313d678e9ba1c49a6fba32b7b3ff31db1715eb58e4916ec1aad7776c94503c613f361a3be52beeaa9a8a0e1d00be0b55a688ce2752209b8626a6bca0064c8f93e093cdd35fc6a1847607aa7dd04484c0734e499c93420a406cea08e0b328f8a796ca4e6648dadd93aae1bd626704cce183db40ff42197", 0xd3}, {&(0x7f0000000cc0)="f162b8c77ed8fad851340c289be7501b232dc460fe9748392043828f7d4be9ee0fddb2727d24a8a1492f36fb89b943b7c84508bd9534dbfd56249727fa5b2942fcca08471022ac7e214f557e0cf91687376642b25ffb50ca48217b68979ba8cc667a1ea425bf36c02845b302f094f826ef40533ddd57042506f9a591eae9f6229f7224b5f5749eadf2fc84a198f0274c2637a2fdbb800aa400cb", 0x9a}, {&(0x7f00000000c0)="a710721b0069e8c27b6c2978f46b50e11a1d90df060099b81a1fa52d1a4a7ea8424286a7dde2f1aec7e11248842066fc42c0f806df641c626c549bb90e2876213f625b639c2a9e561fb310a0fe6509bc6735fa2ec82bb4361cc236287098045ce8540e2b0c41ee93b7b113048ef38bcf06a2", 0x72}, {&(0x7f0000000e00)}], 0x9, &(0x7f0000001300)=ANY=[@ANYBLOB="d8000000450000001701000002000000c1000000a6afb52a2a82e47b52fe1019dcafce25ee4cf3a8a26f3ded74e6c1dd1c9ea996d0f6c726b09b2e922b1b0928bd00eb2390d67b18fb9db2a528d6ee98e2835f2aaf1dfff9de05ce8ba7edaa9e3841dae32293411891e53fe0d203a026ae1bcd32606a6f1d2a6400cca3b28078ce9b2d9e703732fcf3f805bb0dbcb7a575235153e1e3624327f6f277039ee622aa8b719c5c78ad29b2011dd419ba7dea543c536a7d0d22b0c96d76734a8ba65d96a6a97b6a1897"], 0x168, 0x4}], 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000280)="0f01cf66f30f52af0060000066baf80cb808de698aef66bafc0c66b8000066efdbd5b9b50800000f32c4e2aaf5620ff3660f32c4e1fd6f4ed466b8da008ec866baf80cb86481d389ef66bafc0cb8d4600000ef", 0x53}], 0x1, 0x43, 0x0, 0x0) r5 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) r7 = socket(0x10, 0x803, 0x0) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xf58ed5ab95d0cf6d}) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r7], 0x38}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r5) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000080)}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20.549125146s ago: executing program 1 (id=4235): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x7}, 0x10) write(r1, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r1, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf000900000000000000000000000000000000000000000000000000000000ffffac1414bb000107fe4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d46c000000ac1414bb00000000000000000000000002000000000000000d000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff00000000000000000600"/120], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_pidfd_open(r6, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0xff01) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x16, 0x13, &(0x7f0000001100)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdb37}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) sendmsg$inet6(r11, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @private0, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="acf2afd4065cdd4f73823d16be2e6c7fbeca272ab79073069b3646e0f4ec1a4731621887b1d80c72c5e12727910c0fa8e67497a45c613bea38a3bb18512e2c1fc8b02fc9773c3699eb620ebd7928f3284f2ec86f230895839784a873ad01781309a8c100dd74da13f1041b9c0d53e00a7932e279c2fea0a43d2670f6cbbbc7b593b447547183e40a167f5d7cfb0202d656dbdc046afc9d279faf3e7fcfaca507984b1621d2075ea884c77fb353f4a551c83290778228b9a1ebb7337e70d62b", 0xbf}, {&(0x7f00000001c0)="0f719d3c7037def68046994d91d0821b3aaa13b6", 0x14}, {&(0x7f00000002c0)="6d4c3a61d334ed1f2e1924dba12d53468aecc553fc8c2ea2329d3a970a7dfe9f9a118ae865a9c84a38ed769c67ec7e3f0feccc269dcc58afd606e8f9aec72a509ab2f84640bc5d23aa4ec1d44dd8c460d005a42f51a545baf47972c453dd1ca44e696290904a347bb743f11f2b207acce6dfa5fcd94bac8d", 0x78}], 0x3}, 0x890) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in=@empty, 0x1, 0x714, 0x4e22, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r12 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r12, 0x7a7, &(0x7f0000000100)=0x90000) 19.079414947s ago: executing program 1 (id=4238): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) read$FUSE(r1, &(0x7f0000008180)={0x2020}, 0x2020) 18.588830405s ago: executing program 0 (id=4239): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000480)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa1f) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000000000000030000000000000003"]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000040)={{r2, r3+60000000}, {0x0, 0x989680}}, 0x0) r4 = memfd_create(&(0x7f0000000340)='/dev/loop#\x00\x00\x00\x00\x00\x00\x00\t\xd4\xe2\xfd\x7f\xf5R%\xe0]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\t\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x050xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_setup(0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x7, r5}) 14.839217733s ago: executing program 0 (id=4248): unshare(0x6a000000) socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x90000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x90f95eb2b7014cbe}, {0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000680)="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", 0x13f}, {&(0x7f00000005c0)="b6d61bdceedc9b86bf2430334d84ed37c861ed58e8c1929c7e8968e92cde2c8003d3af2eab11fe0eea34b91d951ca8c6ef0353f4a0fa362eb30530bcc0ae5d18b6ff610c50f7bd28365a28edff22e35d42316dd07ce2cf531be5f655631376fe8aac525c9ed56563938b0ba435ff0f0000000000003be0e7a9987aac4e57068f1336eb2a018b20a2f89a753f6a872acd00", 0x91}, {&(0x7f0000000880)="d3fdb3439da7026127875fd41fac5d7573a0b7b432dac4981b225cf3de101867fbf4104861ea1119a1d4b6d98ef1438882d154768ce5ce2fa17608d0e3a754f4bdbc5729ef61920bd38a", 0x4a}, {&(0x7f0000000f80)="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", 0x16a}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="a258b90c3acc8ac592ce94a844fcd355f2209b1bc352f541dae753886779d661c58bc148d3aa50402c1fa60600c767bc864f18763d3f0806db597da6a546cc67ae16ba025e93c038c2913e4633865af0874f98c0599c4235da5b22eef313d678e9ba1c49a6fba32b7b3ff31db1715eb58e4916ec1aad7776c94503c613f361a3be52beeaa9a8a0e1d00be0b55a688ce2752209b8626a6bca0064c8f93e093cdd35fc6a1847607aa7dd04484c0734e499c93420a406cea08e0b328f8a796ca4e6648dadd93aae1bd626704cce183db40ff42197", 0xd3}, {&(0x7f0000000cc0)="f162b8c77ed8fad851340c289be7501b232dc460fe9748392043828f7d4be9ee0fddb2727d24a8a1492f36fb89b943b7c84508bd9534dbfd56249727fa5b2942fcca08471022ac7e214f557e0cf91687376642b25ffb50ca48217b68979ba8cc667a1ea425bf36c02845b302f094f826ef40533ddd57042506f9a591eae9f6229f7224b5f5749eadf2fc84a198f0274c2637a2fdbb800aa400cb", 0x9a}, {&(0x7f00000000c0)="a710721b0069e8c27b6c2978f46b50e11a1d90df060099b81a1fa52d1a4a7ea8424286a7dde2f1aec7e11248842066fc42c0f806df641c626c549bb90e2876213f625b639c2a9e561fb310a0fe6509bc6735fa2ec82bb4361cc236287098045ce8540e2b0c41ee93b7b113048ef38b", 0x6f}, {&(0x7f0000000e00)}], 0x9, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x168, 0x4}], 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000280)="0f01cf66f30f52af0060000066baf80cb808de698aef66bafc0c66b8000066efdbd5b9b50800000f32c4e2aaf5620ff3660f32c4e1fd6f4ed466b8da008ec866baf80cb86481d389ef66bafc0cb8d4600000ef", 0x53}], 0x1, 0x43, 0x0, 0x0) r5 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) r7 = socket(0x10, 0x803, 0x0) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xf58ed5ab95d0cf6d}) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r7], 0x38}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r5) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000080)='`\v', 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.792106373s ago: executing program 1 (id=4252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x38, 0xb, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x802}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x48}, 0x4800) 12.739157524s ago: executing program 5 (id=4255): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xa3, "aa6710dde3a043aeeafd3992a412ca311f02c40ddb736c41f1e37bd5313a7f4eb3790fa09b93bbbce3574d6e848c0303e5198606e2003e2112d8ab9417677a8efe01444091134c949988f135922f7e067e25f5503b4d3cc1d8cce556297c2bdd600ff7836565b3490d1edd30da2eba123979fdd170b08d834557ae977ab901cd993ccc281baa2255d7fa20c513e72fb2e5a2c18127014cc4b63f4ef392fc56ef7b10d5"}, &(0x7f0000000200)=0xab) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4a}}}}}}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setuid(0xee01) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf17, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r3, r8, &(0x7f00000003c0)={0x0, 0x1460, 0x10700, 0x2, 0xb2, 0x0, r3}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8220, 0x1, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x2, 0x2, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x0, 0x2, 0x40021a, 0x0, r3}}], 0x4, &(0x7f00000002c0)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r7, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000500)="d7") setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r1, 0x1}, 0x8) 12.73806956s ago: executing program 1 (id=4256): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4b) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, r1, 0x200000000000000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x0, &(0x7f00000001c0), &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x2, 0x84, 0xe}, 0x10, 0x1d9f4, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000580)=[{0x3, 0x4, 0x1, 0xb}], 0x10, 0x3f800}, 0x94) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r4, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000680)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r4, @ANYRES16=r1, @ANYBLOB="9e24717fd37dbd", @ANYBLOB='\x00'/10, @ANYRESDEC=r1, @ANYRES32=r2, @ANYRESDEC=r2, @ANYRESHEX=r4, @ANYRESHEX=r3]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r8, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000083c0)=ANY=[@ANYRES8, @ANYRES32=r7, @ANYBLOB="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", @ANYBLOB="010000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0}) getdents64(r9, &(0x7f0000000100)=""/106, 0x81) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2b80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$loop(0x0, 0x5, 0x305000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r10, 0x8912, 0x0) accept(r10, &(0x7f0000000440)=@xdp, &(0x7f0000000500)=0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 12.488173167s ago: executing program 1 (id=4257): unshare(0x6a000000) socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x90000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001100)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90f95eb2b7014cbe}, {0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000680)="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", 0x13f}, {&(0x7f00000005c0)="b6d61bdceedc9b86bf2430334d84ed37c861ed58e8c1929c7e8968e92cde2c8003d3af2eab11fe0eea34b91d951ca8c6ef0353f4a0fa362eb30530bcc0ae5d18b6ff610c50f7bd28365a28edff22e35d42316dd07ce2cf531be5f655631376fe8aac525c9ed56563938b0ba435ff0f0000000000003be0e7a9987aac4e57068f1336eb2a018b20a2f89a753f6a872acd00", 0x91}, {&(0x7f0000000880)="d3fdb3439da7026127875fd41fac5d7573a0b7b432dac4981b225cf3de101867fbf4104861ea1119a1d4b6d98ef1438882d154768ce5ce2fa17608d0e3a754f4bdbc5729ef61920bd38a", 0x4a}, {&(0x7f0000000f80)="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", 0x16a}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="a258b90c3acc8ac592ce94a844fcd355f2209b1bc352f541dae753886779d661c58bc148d3aa50402c1fa60600c767bc864f18763d3f0806db597da6a546cc67ae16ba025e93c038c2913e4633865af0874f98c0599c4235da5b22eef313d678e9ba1c49a6fba32b7b3ff31db1715eb58e4916ec1aad7776c94503c613f361a3be52beeaa9a8a0e1d00be0b55a688ce2752209b8626a6bca0064c8f93e093cdd35fc6a1847607aa7dd04484c0734e499c93420a406cea08e0b328f8a796ca4e6648dadd93aae1bd626704cce183db40ff42197", 0xd3}, {&(0x7f0000000cc0)="f162b8c77ed8fad851340c289be7501b232dc460fe9748392043828f7d4be9ee0fddb2727d24a8a1492f36fb89b943b7c84508bd9534dbfd56249727fa5b2942fcca08471022ac7e214f557e0cf91687376642b25ffb50ca48217b68979ba8cc667a1ea425bf36c02845b302f094f826ef40533ddd57042506f9a591eae9f6229f7224b5f5749eadf2fc84a198f0274c2637a2fdbb800aa400cb", 0x9a}, {&(0x7f00000000c0)="a710721b0069e8c27b6c2978f46b50e11a1d90df060099b81a1fa52d1a4a7ea8424286a7dde2f1aec7e11248842066fc42c0f806df641c626c549bb90e2876213f625b639c2a9e561fb310a0fe6509bc6735fa2ec82bb4361cc236287098045ce8540e2b0c41ee93b7b113048ef38bcf06a2", 0x72}, {&(0x7f0000000e00)}], 0x9, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x168, 0x4}], 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000280)="0f01cf66f30f52af0060000066baf80cb808de698aef66bafc0c66b8000066efdbd5b9b50800000f32c4e2aaf5620ff3660f32c4e1fd6f4ed466b8da008ec866baf80cb86481d389ef66bafc0cb8d4600000ef", 0x53}], 0x1, 0x43, 0x0, 0x0) r6 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xf58ed5ab95d0cf6d}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32], 0x38}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r6) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)="600b93", 0x3}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.27180748s ago: executing program 4 (id=4259): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000300)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0x0, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="fd"], 0x10) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x2b) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @empty}, {0xa, 0x4e20, 0x169f801f, @empty, 0x8}, r8, 0x6}}, 0x48) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}], 0x10) 9.746027325s ago: executing program 2 (id=4260): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) memfd_create(0x0, 0x1) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000040000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x40) 8.125068147s ago: executing program 5 (id=4261): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_setup(0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x7, r5}) 8.083834611s ago: executing program 4 (id=4262): r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0x2, 0x284000) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0xbbd, 0x28, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r2}) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r1) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a52e2"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f00000001c0)=""/64, 0x312000, 0x800, 0x4, 0x6}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) 7.107194244s ago: executing program 5 (id=4263): r0 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0x2, 0x284000) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0xbbd, 0x28, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r2}) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, r1) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a52e2"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f00000001c0)=""/64, 0x312000, 0x800, 0x4, 0x6}, 0x20) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f00000000c0)=0x94a, 0x4) 7.041852534s ago: executing program 2 (id=4264): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x20000840) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_CONTINUE(r1, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000afc000/0x3000)=nil, 0x3000}, 0x1000000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r2 = getpid() setrlimit(0xb, &(0x7f00000002c0)={0x9, 0x5ff}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000001c0)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r6, 0x0, 0x0) r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r7, &(0x7f0000000040)={'system_u:object_r:systemd_notify_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0xd11}, 0x4f) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$FBIO_WAITFORVSYNC(r8, 0x40044620, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @data}) 6.593554481s ago: executing program 0 (id=4265): syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000680)) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x8, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x3, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0x100000002, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0x1, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x4000000006, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x1000, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x3, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x2ad, 0x80000001, 0xfffffffffeffffff, 0x7]}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000070a01"], 0x20}, 0x1, 0x0, 0x0, 0x40008c0}, 0x30000000) accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0xfff3, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x51}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.675472084s ago: executing program 4 (id=4266): mkdir(&(0x7f0000000040)='./file1\x00', 0x40) mount$fuse(0x0, 0x0, 0x0, 0x1048001, 0x0) chdir(&(0x7f0000000080)='./file1\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0x2, 0x2, 0xcfcd4592ae3d59aa, {0x103b, 0x3, 0x6, 0x90}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) read$FUSE(r4, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f00000001c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x0) 5.669935631s ago: executing program 2 (id=4267): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f00000000c0)={0x2, 0x4d}) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000100)={0x0, 0x1}) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000140)="66b84b000f00d09a0070000069000fc75d420f32c4c17d299700000000b9400101c00f320fbd6e8a0f20c035000000800f22c0b8000000000f23d00f21f8350000000b0f23f80f72d7f6", 0x4a}], 0x1, 0x20, &(0x7f0000000200)=[@flags={0x3, 0x60000}], 0x1) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x9) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f00000002c0)=0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, 0x0, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xbc1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100000001}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80}]}, 0x90}, 0x1, 0x0, 0x0, 0x4c000}, 0x24008844) prlimit64(r1, 0x5, &(0x7f0000000480)={0x78, 0x3}, &(0x7f00000004c0)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000500)=@arm64={0x3, 0x16, 0x3, '\x00', 0x7}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000540)) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f0000000580)='^@:{\x00') r5 = syz_open_dev$sndpcmc(&(0x7f00000005c0), 0x8, 0x18343) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f0000000600)={{r3}, "9e62901c38242dba6c06ee2a22ea8725b4702f85213ff4e93b76c444c8760998367a5aa34736d5f16495eb16736b50bfac01bd506fde7534f2d50ce73c7db097ec69713f424baca18fac86f2866cf48982a041df836650a56750f30f49ee64ee25253d75504429a8f69a0be7779bb0d0a88cc24f4dd50eea11627f0e8e727223063f9658c86c62c43a9e155b0fc3d5ba243c58cde2856fc72414fd2c684965cf992d6fce3821c5fef826018c7fe22637096568a5f1ac19dd8de5b7331b8e1a46e854396099463c30e3bfb60edd480543457e2961c4de0f7069116b9dda3dadb9d98793c724fece7473d3618448afd9aba31c1a50c27a14264b09278476ac13108c1623e88c55c3faf5581fc452d90bc90c498785ca64a58db8fa94ab58f6c5ae76c4a1285398e7f4194f16ea1a379ea0d215bbd71cf70296adfdf3958a541039efe6361e5828433537a95fb6f7027c2a3d9688b5b540c45825e0715c31aec21702b97335d447efebf5fbf99492dd1a16f770b9d72d725c4b1df7299c3ca2c5910a23cabfa10100412ffa3cbcdeddbad9c7478595cd3a2bab5cc6faa6bf5046a6e709ba9a39854a80429dac8c0c2b56e2ffadd153eda7401f9eaa8c93858701959716a9906db71c4864fcd1c816f3f32b969c04bc7f7acfce0eb8deaca5e1adb6a67866887467da0113dd2e784dac938216380bf5a72b3f4ff2621ab4b1d27127b53228b7fc032d8792ad776666fa0dcc06976c4ce5f2b7747ffd576ea8e38606ad5ffe49e7f8d8b6fac7ddf939f3e5058c771d030986fea353d5cf98aaa243b31f4c3e12f49ee07d1c9843a7a0e4f794cc3cfda6be2a1d3c296e020c14dab81b8dceb3c0dae2fb315f140a9446b9d47787323e9575c8312a62ba40c20b9c7551905114000d0264c0e0090d9d078c627292c7743a9e1635f2163be178398e74a6433886c7e07adcbb58e2b98013b3dac84629e83e018a2bb1d036acf57b711a7c073d222297174f36baaa91032f3658a9225966f7657ba12eabe40b603a8816f96a2cf4cc29e13e0a6c2313ed6f7b9cd2f2ff45490de32efe15100996c1b37b2daf860743166d2a3876f3ee9996d80a7a8d1ed8196315e1ba6c4ae092f58140f52140f7069321239a34350b35b7ad27cb84d7c0c227f66942c86665b837e6acbf8d1f3e4102d8fb7277b45a1848844de7cf399d018d08c42c87441dba54b3f583abf02489fb82251395493354e61fa4c56514537d247f70b32bf3bf638b0b674b3c295b922d5cbd4a7a78a45bfaaa3c48674b2830f7109811bed49e97f218c65258c8e6cc62e24b6d9b76f2d97ab5b9b23dcbed3c08a5d3029bca3feb2ed6cbdc82ba5fbc86f07520adcacb3fd3968711edc0145095f3636d2ee446cea6f4c762cdec1907f866bcd128e8a0ea3ef562dd41f0c2c207548c9bd166cad23eb62183dbad997fce5863719cc29d16c217957adb81d9f5ea578cc8e303867421976ea19037af45d1805e45b73e13f685e8acd79125fd768163ef315213e2b1166564cd44eb60342a02f77c1ff6deb364cb68c3f89814e66d4227edd591690ceab9ac0319f8f19a04ba9057d9feaa84b46180fb1b183d0a7cb2f7a411ecb8db386c255124635d3a76fd366b7b09edf9567111f3c2592d64192c0010204a114ffd3e5d5b95a55d1cced88eb5a9017b3f7ceaad928e556fa5f7801e75dc9e8306b433d04680f08bc71f03d63316a55e85a4034e530fc04fd485b71bd7daed8dd7db48e7186202c12252f9b343763b824e5a0967592a4126b71d2d58d30d0a60d979b39ca616c8b7a33ce410e57e8ae7de86187e68adc3eb9b09f90a34a849b81888dc949db8fea4700c3a8e47737507b5aa794190fbf62e15c173ae0a2ac39f4e7f9ce2170485f22657c06d5c556500522db23757cc8a346e1759010d8d298d9f66dff81849ffdc2b53977a9ee0c42b00e4f5333922f11154afe675fda2ba90a006f556a23b131fd12ca04d2bda1d226f895f38aa28e5268430e03ffed2e0c125df02309f13009b2f3d149e78c57a6259d34a252d9532a7ea25930415f9c7bcd0f3726d5983b3df6a271c94b3be0ff3692558f8365ad46eb04790b60227d608e9910b4e8a7d6b537d31430196507f48888118914e648b32b833eb0a711815d37467205bbf22100e899a699bf349ffe4db8f3266d9710304bf4910e6abafbd7515b451f501230c80718c7e1ab7ff74898bae10ed815ecd4e396470a7bc2bb943adaa71db0f7c14fd277b7e44d7f2caadde44e2792407c647fa7be45b3ec21f383f084f361204660903c67bcb9dcf2b404fb7fc5ad49a22f5c682e0605ea166384c985396c371d137e2d50e2c2d3bb6b11689b3cde8c83889a0341cd19f3ebccf38d5ed2d7c9589195086285d5ef5b09426f048c6293728e709716401740a2e864d13804e3f2586ccaba5b5ebde13a44c7131746d8972c0bd5c1d1ec0a5a076ea2bd64ba91c99b70ee4ad7dfb310b14d05e5aa2ff10e4aacf6ca9325422e162cf45c6de7326f4c2a70191c1a0b4739355505e15b3ea1591b5050ab8de7792cc05980e6078e7c9fdcb24c22043fd500d43191903a505c272e00629a856f5a48d4b64d4962850831fefa13218b41ef7ad089eb711cb0650a3cc1b54d35151e153a42692e0888fecbf6a84de8bc9dac9a9febe5887b7e3d6f00112fdd0b073e78744c82c4c9912d23e9301001027d3d3a81ce3c6d9e392baa0e6f855831856f0db0531b26bcbd16dbb5fe160a27827053f0efceb0d44f906caf731aa8736ea878250fa06e9600f2913533aa1ec02e238352f6b4346ba703137db7c921bb28e98a44452678816a99c9192e9fc6a499ac2c2e6738b0ef5d201bf3c3fc4ec7ccd12cd3aaf618b42121180da0c8148aa199c43bba390ec0c09589badcc9595d79a7c306448c2cc6e369df5fcdd229e6c9d8685362bf00696d3bb37ae13b479226ad459f6d425678d227015f011492b3ea775ed15cd7c65e48ddbb6d8238d3d8acc33ca2270bf13d1ee165e2d6684f0c79b51c52e3458f8b9fa93f17fb394c53679983fbfb2104d88daef56628e911787afe87013f2d819cdf7df2177f872a8cc538d1756c655a2e960a6b8c761769a5a0b219dba49132c8fd298b5b5dac6bce03b473d7e164b221f496010cdbdad75250516c8d208f760bdfa321edad61a014ba4497182c7beda0a2b41681ab18bbe48ee444abacd053470dfe22631c606ce0a885791fbbc61b88b8b5c1b10c368214b717ea7f42bf828b4793af8894c7183bcb4482391ce23de2b3190254753828074ea3ec8a195bc3055e1f75a511afbe3440c1371b10c769a23308bca1c5b91b0ab2e7fa4b85077247872cd40829a439d4d1f094433dbacf08bd94f82b869e42ef1fe60881b808572fde680cc64371f63685968565d3d94d1df83f85f1541d4d7c28686db59d8b5b5534a4dd05c8b36e80d2c3c34d4e789006a5116cfc2aa1126c6c40196b50dd820a8390373d31c35c8ec3c5ec5c44c2a9cbc7c92023993659096aae545fcd69d0306f53a6122ca8d5de90c8d5a90fe5490739038c620dbe742d51e4c655448a0a26cc4cb28617034a41438ca4a7b6c39d005de9a410792687ef50fc7658de6c9a5b19255534cba4b9e0cd3f4cfa1fa145837dd8d8e332a387465f5ea778fd515dd4e5c696ca2d96e340e0d8f821a091dd3daf27289444d85447e06cffae53c1b6c6d25f0c70ae1480d7ebdfcb95419dbb93789f2a74d03e3eeb6ea63c5e8c4c7b8fae475fc4f4dffbcc86d2ec4d1dd4cf4a99adb7ca987d68b00eede9e824e432aa59bbaa672cabbf74297e07daf7e4043d8c3603ee2a5b7748f821a5201514c6e8e4507eff24fe89bf2fa8f23067421a90ebe9831d9580cfc633d018dfa1c44e4974f6d11b6ce589c092ee9a4f70d2426ddf64c9cf0b4e2150dd17ca04d6818218853b1b0bf9283b4966335a32ca9ea8a03127d938ad80a8faf36d684938f99c9a39e934f1cce4e49b93c4d457cd909e8ee11a22310fa3071a4239bc7d7985ad2536afc67654e2c8318ae666d3e4eaf1f0990c5831d2d98b62353574950203d8eb2bd18a4504a1c8fccd598cab646f4a7f7c940008b7203947ffd64f0e44c41903372827bf4be869fa3ff0df5940ba2f3ea8a09bc50d2ce74a60736d0598d0ea2d5a1f52d97a46a1a9714608fabf8e9675a3065d702047a6625c13c98ce27a3b8b5a503e2d82643049498c74d2dad42d747ddc8bf58d77eda995283aaa38be71e908f8bfd68f8bc7456cc945fca8eee24678faf82538ba51b23900a427dadc278712bc6a928269cef414a065188d66982739f22745bd0b8497997f9ebb104ca92c3068651afbfa0f7cb0efc9ad0be2c554536a0cde3825ee5f39f814a1c1adc0fde2873c5ed9d57197d327e2bc62b29ce628c311c424c9102a26514bab5dff01be4d5b826f352d1adefed9dd3b689f1436c4dff1f36b8c9119f943b25b17feca6394d1c8dbbd610106774cc06eaf9a5796ec000b5a62d33eb958d779ccaa9e9f15053f7ac96be06dd81358a50d97760e894482a397b1ce9e821670e46ccc765568c4af870b84b11f924227a90b2aae1da42a74d51e6bb15faeef75eaf11f5663cbcbcda180d58934648c8165488f08091b86c0b35843f84bc63346b16ae0eb993bf2236224c0e82e7b3030db9c0bdf19b3bd169a94edf9a2b715b9c07a3d444f7c87a8e15c4446caa4408ba0060d2aed9515c375faabbbc0434cd9bf6b715a2c3a5b247579b3c1e6714dc4379574140b9052bc56379d0b265ebfad2cb94de4db121143df1aec6012766d8084064a069f32e616842fffee181e3c57131624f5294e1009d1bee8501834decd9b7ffba68dbb8dc702c87ec47b433033ba39f45cbf8e46a286604d3b04b9afbfbb6ea79c9f38215d714d92e752930d87fda71170613a5acec7a8497abb6bdb931c58cc06e5c20cd4b83e2bbdf91f689125fddf33a144cc423410f6c5bb8f9fbecf2bbb4e950c7c6792aeadbcc3a4d7e9870e296925632ae99a3daef591bd0c4c4160f977513c425f93826c774a7a9ef9bdbe16376a6413fb342d091e32ec439a9cab5e5ac8cd5903ae7ec421e05fdc7b25d8c48f03e68dd5aa058663012d0c92d6584a539095355359be2415741f81e1ec1271ab9b2e5ccd4ed8a15bff4aff14c5ba2fe61c051448899c167107abe5fc4b9452e332dfab4b317029ff5ad8fe06042ef8ea597cb82cd809d4c6bf522ce37f6d2dbca46042ba25dcadf05c5e6b12e01cfc9132e8516866bb395d553b0afb6b096db95adc83a3cca66abdc6417ceab3564625a7260a4cc23334ea84a4af8dfe2447966a8a93d5a075af3cb4705c38ffd58826da8d54d7ac96e4258f0467098b69ba4a639a4be7210e9f0b84d70d7cf72e8437f279e5de715bfc4d77b82df0a90de74ee025ebd95b28338c198ca237f4d85c23db84e8e9099fde58bd22622e8bbbf1c226849b0a8483f808966ce131b3b4e0cdaa9aa7412dfdfdc2393473bdfdb743d39f92c897782a964290b4405d8df7f18b5f5834f7522cd244131504bf9ef2fe7f5293bdf594ddd2d1254827860248cf408858a32145dd3bea42a7b2ad6175791524a4a12d969bcbcb47fd266488e381395cf71c98f1b2d7d44f0c0b97dc3e01d7b3442c2073531b4bc3b2cb9f01a5100cfc30f307d3bc9482dbf2a88ff0e84b6f73c73fec0baa935d1f63724b0de9dac541e85196ae2f3a2a8fe4a40672f42237b5212fdb37e9d1f8ef3ec41"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000001600)={0xfffffffb, 0x1, 0x3, 0xeb4, 0x1, "aa40786d63c9b822dc835c41c0d78a7c71d0a0"}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000016c0)={'gre0\x00', &(0x7f0000001680)={'syztnl1\x00', 0x0, 0x700, 0x1, 0x8cdf, 0x4, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x65, 0x0, 0x8, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)=@gettfilter={0x3c, 0x2e, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffe0, 0x7}, {0x10, 0xe}, {0xfff3, 0xd}}, [{0x8, 0xb, 0xeb}, {0x8, 0xb, 0x7bb}, {0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40090) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000017c0)=0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000001800)={0x1, 0x6}, 0x2) writev(r2, &(0x7f0000001b40)=[{&(0x7f0000001840)="3fe35f4ae3f666c9b04817e211a7a0d2c483dc5a2aaeb4d96c415108006a3f59d7b0a5b47bd3619d306460ecb0bbb5d846d60bb7d6f6792e667c81", 0x3b}, {&(0x7f0000001880)="c5d18f2b4083792753b5d5cbf743bd7b62be06c618620123377124f84726dde575c4b249e69719b0d3830498f78bc72f17015721d41f42b276d0a7885fe648c91268853e721ec23fdbfb4406b76b1aacd11838f6af96b2f3fb15ff2a510ab8fc8c1f1b3e7fe970e776a22280ee7498d598aa3b1abb94fc5a0dfe53964e376422da43a5b206", 0x85}, {&(0x7f0000001940)="2d3c2254748a94c26fcf9a1bcfae9ff892bc43bc2d892290e0c60f8124dbedbab7e0aacc9a20d4b58a5c57418c4beeea3ef2359564d67a95b50ca53d1438f410e2e11cff5a017ba98a", 0x49}, {&(0x7f00000019c0)="725236241deafa15e03f308c7aec11229ec6801a60f4625b9776dd8b42ac06422b3ae83078f8ee7d356fbc5bfc2d46a9a0c3d9b379d66f26530b2b7f5666d7e8c8c6518c3bf7267e37e0728056f5e31380ef4768a83542065b547e21fc6192", 0x5f}, {&(0x7f0000001a40)="ef2503c2f6eeeaf5abedf1b44b752ea71a239330139d47551b805a581d36927889bc548ad11f7a8226907317a8342abfb2e8c9e7837b5cc26c9ecff9e31f10f4dd1978d160b41c94141883555650176732ed827ca7445bc9d3aadaf4759224facc345d4cfd64324002601e386ddc4a4a4a906bc805c8eaf701e4d960a1ce77e17b7885a77dd41b5ddf1534e8636c6b80105d05c1ac9d89bd21a20deace9fa5a3e86d5219da72515a691512f1894bd2b1f5d817da48c02740a3bbd3b3e32de5cf7e533f769747bd4f407e3a4e665bf8f1c8fcc76109a672b1bae6", 0xda}], 0x5) fcntl$setpipe(r4, 0x407, 0x7ae) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000001bc0)={0xffffffffffffffff}) ioctl$KVM_GET_LAPIC(r7, 0x8400ae8e, &(0x7f0000001c40)) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000002040)={r7}) ioctl$TCSETS(r7, 0x5402, &(0x7f0000002080)={0x7fffffff, 0x3, 0x1f9a, 0x9, 0x1, "722a55c86338fe894f79dec0962ce3ea59eee0"}) 4.448371896s ago: executing program 4 (id=4268): syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000680)) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x8, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x3, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0x100000002, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0x1, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x4000000006, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x1000, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x3, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x2ad, 0x80000001, 0xfffffffffeffffff, 0x7]}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000070a01"], 0x20}, 0x1, 0x0, 0x0, 0x40008c0}, 0x30000000) accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xd}, {0xfff3, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x51}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.404572888s ago: executing program 2 (id=4269): mkdir(&(0x7f0000000040)='./file1\x00', 0x40) mount$fuse(0x0, 0x0, 0x0, 0x1048001, 0x0) chdir(&(0x7f0000000080)='./file1\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000000)={0x2, 0x2, 0xcfcd4592ae3d59aa, {0x103b, 0x3, 0x6, 0x90}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f00000001c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x0) 3.629979652s ago: executing program 5 (id=4270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000000008b}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x271d, 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 3.513994918s ago: executing program 0 (id=4271): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xa3, "aa6710dde3a043aeeafd3992a412ca311f02c40ddb736c41f1e37bd5313a7f4eb3790fa09b93bbbce3574d6e848c0303e5198606e2003e2112d8ab9417677a8efe01444091134c949988f135922f7e067e25f5503b4d3cc1d8cce556297c2bdd600ff7836565b3490d1edd30da2eba123979fdd170b08d834557ae977ab901cd993ccc281baa2255d7fa20c513e72fb2e5a2c18127014cc4b63f4ef392fc56ef7b10d5"}, &(0x7f0000000200)=0xab) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x7, @private=0xa010101}}}, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setuid(0xee01) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf17, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r3, r8, &(0x7f00000003c0)={0x0, 0x1460, 0x10700, 0x2, 0xb2, 0x0, r3}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8220, 0x1, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x2, 0x2, 0x902c4, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x0, 0x2, 0x40021a, 0x0, r3}}], 0x4, &(0x7f00000002c0)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r7, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000500)="d7") setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r1, 0x1}, 0x8) 3.434691891s ago: executing program 2 (id=4272): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x1, {0x2, 0x1, 0x6}, 0xfe}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r3, 0x2) accept4(r3, 0x0, 0x0, 0x80800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 2.670044866s ago: executing program 4 (id=4273): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) getpeername(r2, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008811) socket$kcm(0x29, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x66, 0x0, 0x3, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x23}}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x4ede, 0x0, 0xec6}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[], 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xcc, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@loopback, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@multicast1, @in=@private=0xa010102, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, @in=@private=0xa010100, 0x0, 0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.565345463s ago: executing program 5 (id=4274): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f0000000380)='j', 0x1, 0x24024095, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 212.556703ms ago: executing program 4 (id=4275): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) memfd_create(0x0, 0x1) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000040000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x40) 54.869941ms ago: executing program 2 (id=4276): prlimit64(0x0, 0x6, &(0x7f0000000040)={0x6, 0x80100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102396, 0x18ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @ioapic={0x1, 0x9, 0x2, 0x80000001, 0x0, [{0x1, 0x9a, 0x0, '\x00', 0x8}, {0x5, 0xff, 0x6, '\x00', 0x7}, {0x7, 0xc, 0xf, '\x00', 0x1}, {0x0, 0x7, 0xa, '\x00', 0x1}, {0x0, 0x62, 0x7, '\x00', 0x6}, {0x6, 0x81, 0x7, '\x00', 0x2}, {0xfd, 0x2, 0x7f}, {0x81, 0xfa, 0x1, '\x00', 0x7f}, {0x4, 0x4, 0xb, '\x00', 0x8}, {0x0, 0x7f, 0x11, '\x00', 0x2}, {0x4, 0x9, 0x41, '\x00', 0xc}, {0x0, 0x6, 0x9}, {0x6, 0x2, 0x4, '\x00', 0x3}, {0xc, 0xde, 0x0, '\x00', 0x40}, {0x7, 0x81, 0xf, '\x00', 0x6}, {0x8, 0x2, 0x3, '\x00', 0x1}, {0x1, 0x91, 0xff, '\x00', 0x2}, {0xe1, 0x6, 0x0, '\x00', 0x1}, {0x80, 0x3, 0x0, '\x00', 0xc}, {0x5, 0x6, 0x81, '\x00', 0xb9}, {0x5, 0x46, 0x5, '\x00', 0x9}, {0x6, 0x10, 0xf4, '\x00', 0xd}, {0x6, 0x10, 0x4, '\x00', 0x1}, {0x1, 0x4, 0x3, '\x00', 0xde}]}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000019300)={[0x6d, 0x3, 0x100000000005, 0x20, 0x5, 0x2, 0x9, 0x8, 0x0, 0x80000004400080, 0x1c00000, 0x6, 0x46, 0x4, 0x200000000000000, 0x2], 0x9000, 0x1200}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x9, 0x6, 0xec, 0x14, 0x0, 0x9, 0xa, 0x7f, 0xfa, 0x9, 0xdf, 0x7, 0x42, 0x7f, 0x9, 0x40}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7000fcdbdf25020000000000000008", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r8 = syz_io_uring_setup(0x100018d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x2, 0x177}, &(0x7f0000ffe000), 0x0, &(0x7f0000000000)) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x2, &(0x7f0000000180), 0xfe) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @loopback}, 0x80, 0x0}, 0x0) 0s ago: executing program 5 (id=4277): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x20000840) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_CONTINUE(r1, 0xc028aa05, &(0x7f0000000000)={{&(0x7f0000afc000/0x3000)=nil, 0x3000}, 0x1000000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r2 = getpid() setrlimit(0xb, &(0x7f00000002c0)={0x9, 0x5ff}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000001c0)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r6, 0x0, 0x0) r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r7, &(0x7f0000000040)={'system_u:object_r:systemd_notify_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0xd11}, 0x4f) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$FBIO_WAITFORVSYNC(r8, 0x40044620, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000140)={0x0, @data}) kernel console output (not intermixed with test programs): 559][T20302] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3920'. [ 1265.249198][ T5343] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1265.459936][T20307] SQUASHFS error: Failed to read block 0x0: -5 [ 1265.486687][T20307] unable to read squashfs_super_block [ 1265.492858][ T5343] usb 5-1: device descriptor read/8, error -71 [ 1265.786289][ T5343] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1265.808878][ T5343] usb 5-1: device descriptor read/8, error -71 [ 1265.941839][ T5343] usb usb5-port1: unable to enumerate USB device [ 1266.076279][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1266.226261][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1266.226415][T17912] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1266.233472][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1266.251358][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1266.260702][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.268767][ T9] usb 2-1: Product: syz [ 1266.272989][ T9] usb 2-1: Manufacturer: syz [ 1266.277750][ T9] usb 2-1: SerialNumber: syz [ 1266.284406][ T9] usb 2-1: config 0 descriptor?? [ 1266.286605][ T5801] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1266.296751][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1266.306323][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1266.399865][T17912] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1266.412140][T17912] usb 6-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice= 0.40 [ 1266.421795][T17912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.429907][T17912] usb 6-1: Product: ⴿ臉ₛ仜᳔㢤뗎塚烹⬧慝莒補␅悂첛复ꐗ頹㏛툕脖ഒ惷⬒廫䌷쳞℁൛䦢鐴籴얚꺳༄슐伆ᶫ鼣彬溫쇎荺䀺賘⹊똬Զ㲥恍転뭃⛯ᡰﱳ蠐㬰뜑ཻ [ 1266.452465][ T5609] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1266.460406][ T5801] usb 1-1: device descriptor read/64, error -71 [ 1266.467175][T17912] usb 6-1: Manufacturer: В [ 1266.471818][T17912] usb 6-1: SerialNumber: ࠬ [ 1266.677817][ T5609] usb 5-1: device descriptor read/64, error -71 [ 1266.696463][T20324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1266.876726][ T5801] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1266.941883][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1266.947879][T17912] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1266.977124][ T5609] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1267.001869][T17912] usb 6-1: USB disconnect, device number 23 [ 1267.036241][ T5801] usb 1-1: device descriptor read/64, error -71 [ 1267.043471][T20327] ipt_REJECT: ECHOREPLY no longer supported. [ 1267.045260][T18072] udevd[18072]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1267.076746][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 1267.076765][ T29] audit: type=1400 audit(1782533927.815:3760): avc: denied { read } for pid=20326 comm="syz.2.3929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1267.110792][ T29] audit: type=1400 audit(1782533927.845:3761): avc: denied { ioctl } for pid=20326 comm="syz.2.3929" path="socket:[91120]" dev="sockfs" ino=91120 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1267.138505][ T5609] usb 5-1: device descriptor read/64, error -71 [ 1267.152406][ T29] audit: type=1400 audit(1782533927.895:3762): avc: denied { unmount } for pid=15578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1267.173044][ T5801] usb usb1-port1: attempt power cycle [ 1267.258350][ T5609] usb usb5-port1: attempt power cycle [ 1267.536590][ T5801] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1267.573250][ T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1267.587781][ T5801] usb 1-1: device descriptor read/8, error -71 [ 1267.601012][ T9] em28xx 2-1:0.0: board has no eeprom [ 1267.628890][ T29] audit: type=1400 audit(1782533928.375:3763): avc: denied { create } for pid=20336 comm="syz.2.3932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1267.685745][ T29] audit: type=1400 audit(1782533928.425:3764): avc: denied { create } for pid=20338 comm="syz.2.3933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1267.708032][ T29] audit: type=1400 audit(1782533928.455:3765): avc: denied { connect } for pid=20338 comm="syz.2.3933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1267.736371][ T5609] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1267.768409][ T5609] usb 5-1: device descriptor read/8, error -71 [ 1267.822241][ T29] audit: type=1400 audit(1782533928.565:3766): avc: denied { lock } for pid=20314 comm="syz.1.3925" path="socket:[91097]" dev="sockfs" ino=91097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1267.858455][ T5801] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1267.881396][ T29] audit: type=1400 audit(1782533928.565:3767): avc: denied { map } for pid=20314 comm="syz.1.3925" path="socket:[93194]" dev="sockfs" ino=93194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1267.885685][T20341] netlink: 'syz.5.3935': attribute type 1 has an invalid length. [ 1267.906205][ T29] audit: type=1400 audit(1782533928.565:3768): avc: denied { accept } for pid=20314 comm="syz.1.3925" path="socket:[93194]" dev="sockfs" ino=93194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1267.940125][ T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1267.941182][ T5801] usb 1-1: device descriptor read/8, error -71 [ 1267.951152][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 1267.960813][T20341] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3935'. [ 1268.056602][ T5801] usb usb1-port1: unable to enumerate USB device [ 1268.068418][ T5719] em28xx 2-1:0.0: Binding DVB extension [ 1268.083156][ T5609] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1268.099345][ T9] usb 2-1: USB disconnect, device number 61 [ 1268.109139][ T5609] usb 5-1: device descriptor read/8, error -71 [ 1268.116609][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 1268.967868][ T29] audit: type=1400 audit(1782533929.705:3769): avc: denied { compute_member } for pid=20342 comm="syz.2.3934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1268.970227][ T5609] usb usb5-port1: unable to enumerate USB device [ 1269.420553][ T5719] em28xx 2-1:0.0: Registering input extension [ 1269.447876][ T9] em28xx 2-1:0.0: Closing input extension [ 1269.763969][T20358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1270.565326][ T9] em28xx 2-1:0.0: Freeing device [ 1270.764957][T20372] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1271.537837][T20382] FAULT_INJECTION: forcing a failure. [ 1271.537837][T20382] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.573409][T20382] CPU: 0 UID: 0 PID: 20382 Comm: syz.2.3945 Tainted: G L syzkaller #0 PREEMPT(full) [ 1271.573442][T20382] Tainted: [L]=SOFTLOCKUP [ 1271.573450][T20382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1271.573462][T20382] Call Trace: [ 1271.573470][T20382] [ 1271.573478][T20382] dump_stack_lvl+0x100/0x190 [ 1271.573510][T20382] should_fail_ex.cold+0x5/0xa [ 1271.573527][T20382] should_failslab+0xc2/0x120 [ 1271.573543][T20382] __kmalloc_noprof+0xfc/0x820 [ 1271.573558][T20382] ? tomoyo_encode2+0xfb/0x3c0 [ 1271.573576][T20382] tomoyo_encode2+0xfb/0x3c0 [ 1271.573593][T20382] tomoyo_encode+0x29/0x50 [ 1271.573607][T20382] tomoyo_realpath_from_path+0x18c/0x690 [ 1271.573625][T20382] tomoyo_path_number_perm+0x23c/0x580 [ 1271.573644][T20382] ? tomoyo_path_number_perm+0x22e/0x580 [ 1271.573659][T20382] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1271.573687][T20382] ? find_held_lock+0x2b/0x80 [ 1271.573698][T20382] ? __fget_files+0x215/0x3d0 [ 1271.573710][T20382] ? hook_file_ioctl_common+0x140/0x440 [ 1271.573727][T20382] ? __fget_files+0x215/0x3d0 [ 1271.573744][T20382] ? __fget_files+0x21f/0x3d0 [ 1271.573768][T20382] security_file_ioctl+0xd3/0x230 [ 1271.573797][T20382] __x64_sys_ioctl+0xb7/0x210 [ 1271.573815][T20382] do_syscall_64+0x115/0x870 [ 1271.573830][T20382] ? clear_bhb_loop+0x40/0x90 [ 1271.573844][T20382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.573856][T20382] RIP: 0033:0x7f2cde79ce59 [ 1271.573867][T20382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.573878][T20382] RSP: 002b:00007f2cdc9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1271.573890][T20382] RAX: ffffffffffffffda RBX: 00007f2cdea15fa0 RCX: 00007f2cde79ce59 [ 1271.573898][T20382] RDX: 0000200000000180 RSI: 000000004008af30 RDI: 0000000000000003 [ 1271.573905][T20382] RBP: 00007f2cdc9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.573912][T20382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.573918][T20382] R13: 00007f2cdea16038 R14: 00007f2cdea15fa0 R15: 00007ffd32676a98 [ 1271.573934][T20382] [ 1271.573952][T20382] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1271.986882][T20389] fuse: Bad value for 'fd' [ 1272.100200][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1272.100221][ T29] audit: type=1400 audit(1782533932.755:3781): avc: denied { mount } for pid=20388 comm="syz.2.3949" name="/" dev="gadgetfs" ino=7854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1272.157457][ T29] audit: type=1400 audit(1782533932.895:3782): avc: denied { accept } for pid=20390 comm="syz.4.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1273.221311][T20402] netlink: 'syz.2.3951': attribute type 1 has an invalid length. [ 1273.245073][ T29] audit: type=1400 audit(1782533933.985:3783): avc: denied { read write } for pid=20403 comm="syz.1.3954" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1273.269356][ T29] audit: type=1400 audit(1782533933.985:3784): avc: denied { open } for pid=20403 comm="syz.1.3954" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1273.575256][T20409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1273.604842][T20412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1273.768129][ T29] audit: type=1400 audit(1782533934.415:3785): avc: denied { ioctl } for pid=20403 comm="syz.1.3954" path="/dev/input/mouse0" dev="devtmpfs" ino=924 ioctlcmd=0x563e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1273.848282][T20402] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3951'. [ 1274.100851][T20419] netlink: 'syz.4.3955': attribute type 1 has an invalid length. [ 1274.624452][T20405] netlink: 'syz.2.3951': attribute type 49 has an invalid length. [ 1275.519176][ T29] audit: type=1400 audit(1782533936.265:3786): avc: denied { mount } for pid=20438 comm="syz.0.3963" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1276.039717][ T29] audit: type=1400 audit(1782533936.775:3787): avc: denied { write } for pid=20438 comm="syz.0.3963" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1276.109306][ T29] audit: type=1400 audit(1782533936.775:3788): avc: denied { ioctl } for pid=20438 comm="syz.0.3963" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1276.118486][T20448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3965'. [ 1276.143998][T20444] trusted_key: encrypted_key: master key parameter 'trustedmsr' is invalid [ 1276.285536][T20451] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3966'. [ 1276.295792][ T29] audit: type=1400 audit(1782533937.035:3789): avc: denied { read write } for pid=20446 comm="syz.5.3965" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1276.357513][ T29] audit: type=1400 audit(1782533937.065:3790): avc: denied { open } for pid=20446 comm="syz.5.3965" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1278.511305][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1278.511321][ T29] audit: type=1400 audit(1782533939.255:3794): avc: denied { bind } for pid=20468 comm="syz.0.3973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1279.223256][ T29] audit: type=1400 audit(1782533939.935:3795): avc: denied { write } for pid=20453 comm="syz.1.3967" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1279.276302][ T5609] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1279.486820][T20480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3976'. [ 1279.516180][ T5609] usb 6-1: Using ep0 maxpacket: 8 [ 1279.532907][ T5609] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1279.549923][ T5609] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1279.569321][ T5609] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.585833][T20480] set match dimension is over the limit! [ 1279.603885][ T5609] usb 6-1: config 0 descriptor?? [ 1279.731206][T20487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3978'. [ 1279.802303][T20487] set match dimension is over the limit! [ 1279.835526][T20465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.856559][T20465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.896858][ T5609] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1280.157659][ T10] kernel write not supported for file /dsp1 (pid: 10 comm: kworker/0:1) [ 1280.192387][T20497] comedi comedi0: 8255: I/O base address not correctly aligned [ 1282.094085][ T5801] usb 6-1: USB disconnect, device number 24 [ 1282.251699][T20515] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1282.265044][ T29] audit: type=1400 audit(1782533943.005:3796): avc: denied { bind } for pid=20514 comm="syz.2.3987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1282.286835][ T29] audit: type=1400 audit(1782533943.005:3797): avc: denied { name_bind } for pid=20514 comm="syz.2.3987" src=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1282.362389][ T29] audit: type=1400 audit(1782533943.025:3798): avc: denied { node_bind } for pid=20514 comm="syz.2.3987" saddr=10.1.1.1 src=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1283.151015][ T29] audit: type=1400 audit(1782533943.025:3799): avc: denied { create } for pid=20514 comm="syz.2.3987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1283.180811][ T29] audit: type=1400 audit(1782533943.035:3800): avc: denied { write } for pid=20514 comm="syz.2.3987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1283.265979][ T29] audit: type=1400 audit(1782533943.985:3801): avc: denied { sys_module } for pid=20524 comm="syz.1.3990" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1283.356992][ T29] audit: type=1400 audit(1782533943.985:3802): avc: denied { create } for pid=20524 comm="syz.1.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1283.441169][ T29] audit: type=1400 audit(1782533944.005:3803): avc: denied { create } for pid=20526 comm="syz.5.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1283.698686][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1283.698709][ T29] audit: type=1400 audit(1782533944.415:3807): avc: denied { setopt } for pid=20534 comm="syz.2.3994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1285.002617][T20542] trusted_key: encrypted_key: master key parameter 'trustedmsr' is invalid [ 1285.609423][T20549] netlink: 'syz.2.3998': attribute type 1 has an invalid length. [ 1285.617392][T20549] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3998'. [ 1285.961850][T20552] netlink: 'syz.2.3998': attribute type 49 has an invalid length. [ 1286.137651][T20554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3999'. [ 1286.595657][T20561] usb usb8: usbfs: process 20561 (syz.4.3993) did not claim interface 0 before use [ 1287.004077][ T29] audit: type=1400 audit(1782533947.745:3808): avc: denied { setopt } for pid=20566 comm="syz.0.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1287.043293][T20568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4004'. [ 1287.058104][ T29] audit: type=1400 audit(1782533947.775:3809): avc: denied { mmap_zero } for pid=20566 comm="syz.0.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1287.156083][ T29] audit: type=1400 audit(1782533947.895:3810): avc: denied { bind } for pid=20566 comm="syz.0.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1287.276413][ T29] audit: type=1400 audit(1782533948.025:3811): avc: denied { write } for pid=20566 comm="syz.0.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1288.436301][ T9] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1289.041047][ T29] audit: type=1400 audit(1782533949.715:3812): avc: denied { read write } for pid=20589 comm="syz.5.4011" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1289.071663][ T29] audit: type=1400 audit(1782533949.715:3813): avc: denied { open } for pid=20589 comm="syz.5.4011" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1289.090732][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1289.096622][ T29] audit: type=1400 audit(1782533949.725:3814): avc: denied { mount } for pid=20591 comm="syz.1.4012" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1289.129359][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.173220][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1289.193954][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.201050][T20601] netlink: 'syz.4.4014': attribute type 1 has an invalid length. [ 1289.210423][T20601] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4014'. [ 1289.223426][ T9] usb 1-1: config 0 descriptor?? [ 1289.860464][T20601] netlink: 'syz.4.4014': attribute type 49 has an invalid length. [ 1289.922352][ T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 1289.930617][ T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 1289.937638][ T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 1289.944496][ T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 1289.984011][ T9] elan 0003:04F3:0755.0009: unknown main item tag 0x0 [ 1289.993123][ T9] elan 0003:04F3:0755.0009: failed to start in urb: -90 [ 1290.006445][ T9] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 1290.057088][ T5719] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1290.602341][ T5719] usb 6-1: Using ep0 maxpacket: 8 [ 1290.797734][ T5719] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1290.807051][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.810447][T20584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.816421][ T5719] usb 6-1: Product: syz [ 1290.828004][ T5719] usb 6-1: Manufacturer: syz [ 1290.838806][ T5719] usb 6-1: SerialNumber: syz [ 1290.871223][ T5719] usb 6-1: config 0 descriptor?? [ 1290.881844][T20584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.889033][ T5719] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1290.914385][ T5719] dvb-usb: bulk message failed: -22 (2/0) [ 1290.919345][T10599] usb 1-1: USB disconnect, device number 25 [ 1290.930783][ T5801] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1290.948822][ T5719] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1290.959328][ T5719] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1290.968867][ T5719] usb 6-1: media controller created [ 1290.984176][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1291.140678][ T5801] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 1291.154069][ T5801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.208877][ T5801] usb 5-1: config 0 has no interface number 0 [ 1291.226171][ T5719] dvb-usb: bulk message failed: -22 (1/0) [ 1291.232094][ T5801] usb 5-1: config 0 interface 143 altsetting 168 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1291.232126][ T5801] usb 5-1: config 0 interface 143 altsetting 168 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1291.232150][ T5801] usb 5-1: config 0 interface 143 altsetting 168 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1291.232169][ T5801] usb 5-1: config 0 interface 143 altsetting 168 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 1291.232193][ T5801] usb 5-1: config 0 interface 143 has no altsetting 0 [ 1291.234081][ T5801] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1291.234112][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1291.234134][ T5801] usb 5-1: Product: syz [ 1291.325879][ T5801] usb 5-1: Manufacturer: syz [ 1291.343014][ T5801] usb 5-1: SerialNumber: syz [ 1291.393160][ T5801] usb 5-1: config 0 descriptor?? [ 1291.618634][ T5719] DVB: Unable to find symbol mt352_attach() [ 1291.624611][ T5719] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1291.637877][ T5801] rc_core: IR keymap rc-imon-rsc not found [ 1291.644786][ T5801] Registered IR keymap rc-empty [ 1291.671244][ T29] audit: type=1400 audit(1782533952.415:3815): avc: denied { read } for pid=20614 comm="syz.4.4017" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1291.694832][T20615] binder: 20614:20615 unknown command 1988082330 [ 1291.702324][ T5801] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.143/rc/rc0 [ 1291.706724][ T5719] rc_core: IR keymap rc-dvico-portable not found [ 1291.712591][T20615] binder: 20614:20615 ioctl c0306201 200000000180 returned -22 [ 1291.731049][ T5801] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.143/rc/rc0/input37 [ 1291.742760][ T5719] Registered IR keymap rc-empty [ 1291.754907][ T29] audit: type=1400 audit(1782533952.415:3816): avc: denied { open } for pid=20614 comm="syz.4.4017" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1291.784844][ T5719] rc rc1: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc1 [ 1291.786687][ T5801] imon_raw 5-1:0.143: probe with driver imon_raw failed with error -90 [ 1291.815738][ T29] audit: type=1400 audit(1782533952.435:3817): avc: denied { ioctl } for pid=20614 comm="syz.4.4017" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1291.848113][ T5719] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc1/input38 [ 1291.859199][ T29] audit: type=1400 audit(1782533952.525:3818): avc: denied { read } for pid=4961 comm="acpid" name="event4" dev="devtmpfs" ino=4340 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1291.859250][ T29] audit: type=1400 audit(1782533952.525:3819): avc: denied { open } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4340 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1291.859290][ T29] audit: type=1400 audit(1782533952.525:3820): avc: denied { ioctl } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4340 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1291.946561][ T5719] dvb-usb: schedule remote query interval to 100 msecs. [ 1291.948647][ T5801] usb 5-1: USB disconnect, device number 41 [ 1291.961599][ T5719] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1292.069269][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1292.193130][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1292.318629][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1292.446417][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1292.470028][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'. [ 1292.505555][ T29] audit: type=1400 audit(1782533953.245:3821): avc: denied { write } for pid=20637 comm="syz.2.4024" name="rt_acct" dev="proc" ino=4026534398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1292.580027][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1292.706204][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1292.884493][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1293.092685][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1293.106826][ T5801] usb 6-1: USB disconnect, device number 25 [ 1293.237425][T20654] netlink: 'syz.1.4027': attribute type 10 has an invalid length. [ 1293.249062][T20647] Invalid option length (482) for dns_resolver key [ 1293.265264][T20656] FAULT_INJECTION: forcing a failure. [ 1293.265264][T20656] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.312047][T20656] CPU: 0 UID: 0 PID: 20656 Comm: syz.5.4030 Tainted: G L syzkaller #0 PREEMPT(full) [ 1293.312081][T20656] Tainted: [L]=SOFTLOCKUP [ 1293.312089][T20656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1293.312100][T20656] Call Trace: [ 1293.312107][T20656] [ 1293.312116][T20656] dump_stack_lvl+0x100/0x190 [ 1293.312151][T20656] should_fail_ex.cold+0x5/0xa [ 1293.312181][T20656] should_failslab+0xc2/0x120 [ 1293.312208][T20656] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1293.312233][T20656] ? dst_alloc+0x99/0x1a0 [ 1293.312263][T20656] dst_alloc+0x99/0x1a0 [ 1293.312291][T20656] rt_dst_alloc+0x35/0x3a0 [ 1293.312317][T20656] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 1293.312369][T20656] ip_route_output_key_hash+0x118/0x2b0 [ 1293.312391][T20656] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1293.312412][T20656] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1293.312458][T20656] tcp_v4_connect+0x86b/0x1b40 [ 1293.312500][T20656] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1293.312531][T20656] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1293.312566][T20656] tcp_v6_connect+0x779/0x2660 [ 1293.312592][T20656] ? register_lock_class+0x40/0x560 [ 1293.312625][T20656] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1293.312657][T20656] ? __lock_acquire+0x49f/0x1a40 [ 1293.312688][T20656] __inet_stream_connect+0x208/0xfa0 [ 1293.312724][T20656] ? __pfx___inet_stream_connect+0x10/0x10 [ 1293.312753][T20656] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1293.312784][T20656] ? __pfx_inet_stream_connect+0x10/0x10 [ 1293.312814][T20656] ? __local_bh_enable_ip+0x9e/0x120 [ 1293.312843][T20656] ? __pfx_inet_stream_connect+0x10/0x10 [ 1293.312867][T20656] inet_stream_connect+0x57/0xa0 [ 1293.312897][T20656] __sys_connect_file+0x141/0x1a0 [ 1293.312928][T20656] __sys_connect+0x141/0x170 [ 1293.312954][T20656] ? __pfx___sys_connect+0x10/0x10 [ 1293.312980][T20656] ? __fget_files+0x21f/0x3d0 [ 1293.313014][T20656] ? __pfx_ksys_write+0x10/0x10 [ 1293.313052][T20656] __x64_sys_connect+0x72/0xb0 [ 1293.313078][T20656] ? lockdep_hardirqs_on+0x78/0x100 [ 1293.313104][T20656] do_syscall_64+0x115/0x870 [ 1293.313128][T20656] ? clear_bhb_loop+0x40/0x90 [ 1293.313154][T20656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.313176][T20656] RIP: 0033:0x7fc00c19ce59 [ 1293.313196][T20656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1293.313215][T20656] RSP: 002b:00007fc00cfd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1293.313235][T20656] RAX: ffffffffffffffda RBX: 00007fc00c415fa0 RCX: 00007fc00c19ce59 [ 1293.313249][T20656] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003 [ 1293.313262][T20656] RBP: 00007fc00cfd4090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.313275][T20656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.313288][T20656] R13: 00007fc00c416038 R14: 00007fc00c415fa0 R15: 00007ffe48f40f78 [ 1293.313321][T20656] [ 1293.322401][ T5801] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1293.567653][ T5719] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1293.869481][ T5719] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1294.076590][ T5719] usb 1-1: config 114 has an invalid interface number: 240 but max is 0 [ 1294.188794][T20670] trusted_key: encrypted_key: master key parameter 'trustedmsr' is invalid [ 1294.394685][ T5719] usb 1-1: config 114 has no interface number 0 [ 1294.417388][ T5719] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1294.437547][ T5719] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1294.451907][ T5719] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1294.473474][ T5719] usb 1-1: config 114 interface 240 has no altsetting 0 [ 1294.488858][ T5719] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1294.499465][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.507948][ T5719] usb 1-1: Product: syz [ 1294.512431][ T5719] usb 1-1: Manufacturer: syz [ 1294.517448][ T5719] usb 1-1: SerialNumber: syz [ 1294.529544][T20659] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1294.537326][T20659] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1294.629728][T20675] FAULT_INJECTION: forcing a failure. [ 1294.629728][T20675] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.658768][T20675] CPU: 0 UID: 0 PID: 20675 Comm: syz.1.4036 Tainted: G L syzkaller #0 PREEMPT(full) [ 1294.658802][T20675] Tainted: [L]=SOFTLOCKUP [ 1294.658810][T20675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1294.658823][T20675] Call Trace: [ 1294.658830][T20675] [ 1294.658839][T20675] dump_stack_lvl+0x100/0x190 [ 1294.658876][T20675] should_fail_ex.cold+0x5/0xa [ 1294.658906][T20675] should_failslab+0xc2/0x120 [ 1294.658933][T20675] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1294.658960][T20675] ? __alloc_skb+0x5b7/0x710 [ 1294.658987][T20675] ? __alloc_skb+0x140/0x710 [ 1294.659019][T20675] __alloc_skb+0x140/0x710 [ 1294.659045][T20675] ? __alloc_skb+0x5b7/0x710 [ 1294.659072][T20675] ? __pfx___alloc_skb+0x10/0x10 [ 1294.659109][T20675] netlink_alloc_large_skb+0x69/0x150 [ 1294.659138][T20675] netlink_sendmsg+0x680/0xda0 [ 1294.659169][T20675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1294.659193][T20675] ? pti_set_user_pgtbl+0x40/0x50 [ 1294.659248][T20675] ____sys_sendmsg+0xa4d/0xbe0 [ 1294.659271][T20675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1294.659299][T20675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1294.659335][T20675] ___sys_sendmsg+0x190/0x1e0 [ 1294.659362][T20675] ? __pfx____sys_sendmsg+0x10/0x10 [ 1294.659385][T20675] ? __lock_acquire+0x49f/0x1a40 [ 1294.659411][T20675] ? get_pid_task+0x106/0x250 [ 1294.659463][T20675] __sys_sendmsg+0x160/0x210 [ 1294.659495][T20675] ? __pfx___sys_sendmsg+0x10/0x10 [ 1294.659541][T20675] do_syscall_64+0x115/0x870 [ 1294.659567][T20675] ? clear_bhb_loop+0x40/0x90 [ 1294.659593][T20675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.659615][T20675] RIP: 0033:0x7feb4079ce59 [ 1294.659634][T20675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1294.659654][T20675] RSP: 002b:00007feb4162a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1294.659674][T20675] RAX: ffffffffffffffda RBX: 00007feb40a15fa0 RCX: 00007feb4079ce59 [ 1294.659689][T20675] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1294.659702][T20675] RBP: 00007feb4162a090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.659714][T20675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.659726][T20675] R13: 00007feb40a16038 R14: 00007feb40a15fa0 R15: 00007ffcc658a828 [ 1294.659755][T20675] [ 1295.257880][T20683] binder: 20682:20683 unknown command 1988082330 [ 1295.929627][T20683] binder: 20682:20683 ioctl c0306201 200000000180 returned -22 [ 1295.941077][ T5719] ir_usb 1-1:114.240: IR Dongle converter detected [ 1295.955372][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1295.955390][ T29] audit: type=1326 audit(1782533956.695:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.1.4040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4079ce59 code=0x7ffc0000 [ 1295.990104][ T5719] usb 1-1: IRDA class descriptor not found, device not bound [ 1296.022961][ T5719] usb 1-1: USB disconnect, device number 26 [ 1296.093936][ T29] audit: type=1326 audit(1782533956.695:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.1.4040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4079ce59 code=0x7ffc0000 [ 1296.166979][T20694] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1296.173750][T20694] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1296.181929][T20694] audit: backlog limit exceeded [ 1296.184724][ T29] audit: type=1326 audit(1782533956.695:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.1.4040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4079ce59 code=0x7ffc0000 [ 1296.236309][ T29] audit: type=1326 audit(1782533956.695:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.1.4040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4079ce59 code=0x7ffc0000 [ 1296.257131][T20692] block nbd4: shutting down sockets [ 1296.297939][ T29] audit: type=1326 audit(1782533956.695:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.1.4040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7feb4079ce59 code=0x7ffc0000 [ 1296.388414][T20697] usb usb8: usbfs: process 20697 (syz.2.4035) did not claim interface 0 before use [ 1296.398117][ T29] audit: type=1326 audit(1782533956.695:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.1.4040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4079ce59 code=0x7ffc0000 [ 1296.453226][ T29] audit: type=1326 audit(1782533956.695:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.1.4040" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb4079ce59 code=0x7ffc0000 [ 1296.526028][T20700] SQUASHFS error: Failed to read block 0x0: -5 [ 1296.544023][T20700] unable to read squashfs_super_block [ 1296.557933][T20702] netlink: 'syz.0.4044': attribute type 1 has an invalid length. [ 1296.580595][T20702] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4044'. [ 1296.746688][ T5801] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1296.876815][T20702] netlink: 'syz.0.4044': attribute type 49 has an invalid length. [ 1296.929672][ T5801] usb 6-1: device descriptor read/64, error -71 [ 1296.937006][T17912] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1297.224682][T17912] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1297.240291][T17912] usb 5-1: string descriptor 0 read error: -22 [ 1297.247897][T17912] usb 5-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice= 0.40 [ 1297.257392][T17912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.529872][ T5801] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1297.838565][ T5801] usb 6-1: device descriptor read/64, error -71 [ 1298.316553][ T5801] usb usb6-port1: attempt power cycle [ 1298.541190][T17912] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1299.464873][ T5801] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1299.582314][T20727] binder: 20726:20727 unknown command 0 [ 1299.604297][T17912] usb 5-1: USB disconnect, device number 42 [ 1299.609514][T20727] binder: 20726:20727 ioctl c0306201 200000000180 returned -22 [ 1299.645180][ T5801] usb 6-1: device descriptor read/8, error -71 [ 1299.729681][T20729] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1299.743516][T20732] netlink: 'syz.0.4053': attribute type 1 has an invalid length. [ 1299.759626][T20732] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4053'. [ 1299.952975][T20738] netlink: 'syz.0.4053': attribute type 49 has an invalid length. [ 1300.107309][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.113760][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.328406][T20739] syzkaller0: entered promiscuous mode [ 1300.337926][T20739] syzkaller0: entered allmulticast mode [ 1300.729146][T20743] lo speed is unknown, defaulting to 1000 [ 1300.846987][T20749] FAULT_INJECTION: forcing a failure. [ 1300.846987][T20749] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.894241][T20749] CPU: 1 UID: 0 PID: 20749 Comm: syz.2.4059 Tainted: G L syzkaller #0 PREEMPT(full) [ 1300.894278][T20749] Tainted: [L]=SOFTLOCKUP [ 1300.894286][T20749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1300.894299][T20749] Call Trace: [ 1300.894305][T20749] [ 1300.894314][T20749] dump_stack_lvl+0x100/0x190 [ 1300.894350][T20749] should_fail_ex.cold+0x5/0xa [ 1300.894380][T20749] should_failslab+0xc2/0x120 [ 1300.894407][T20749] __kmalloc_noprof+0xfc/0x820 [ 1300.894433][T20749] ? tomoyo_encode2+0xfb/0x3c0 [ 1300.894467][T20749] tomoyo_encode2+0xfb/0x3c0 [ 1300.894498][T20749] tomoyo_encode+0x29/0x50 [ 1300.894599][T20749] tomoyo_realpath_from_path+0x18c/0x690 [ 1300.894634][T20749] tomoyo_path_number_perm+0x23c/0x580 [ 1300.894658][T20749] ? tomoyo_path_number_perm+0x22e/0x580 [ 1300.894684][T20749] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1300.894740][T20749] ? find_held_lock+0x2b/0x80 [ 1300.894761][T20749] ? __fget_files+0x215/0x3d0 [ 1300.894782][T20749] ? hook_file_ioctl_common+0x140/0x440 [ 1300.894818][T20749] ? __fget_files+0x215/0x3d0 [ 1300.894844][T20749] ? __fget_files+0x21f/0x3d0 [ 1300.894871][T20749] security_file_ioctl+0xd3/0x230 [ 1300.894899][T20749] __x64_sys_ioctl+0xb7/0x210 [ 1300.894930][T20749] do_syscall_64+0x115/0x870 [ 1300.894957][T20749] ? clear_bhb_loop+0x40/0x90 [ 1300.894983][T20749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.895006][T20749] RIP: 0033:0x7f2cde79ce59 [ 1300.895024][T20749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.895046][T20749] RSP: 002b:00007f2cdc9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1300.895075][T20749] RAX: ffffffffffffffda RBX: 00007f2cdea15fa0 RCX: 00007f2cde79ce59 [ 1300.895093][T20749] RDX: 0000200000000500 RSI: 00000000c0485619 RDI: 0000000000000003 [ 1300.895107][T20749] RBP: 00007f2cdc9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1300.895120][T20749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1300.895133][T20749] R13: 00007f2cdea16038 R14: 00007f2cdea15fa0 R15: 00007ffd32676a98 [ 1300.895163][T20749] [ 1301.115864][T20749] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1301.150969][T20752] usb usb8: usbfs: process 20752 (syz.5.4054) did not claim interface 0 before use [ 1302.351895][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 1302.351913][ T29] audit: type=1400 audit(1782533963.085:3911): avc: denied { ioctl } for pid=20769 comm="syz.2.4064" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1302.414647][ T29] audit: type=1400 audit(1782533963.155:3912): avc: denied { read write } for pid=13591 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1302.448435][ T29] audit: type=1400 audit(1782533963.155:3913): avc: denied { open } for pid=13591 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1302.479853][ T29] audit: type=1400 audit(1782533963.155:3914): avc: denied { ioctl } for pid=13591 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1302.508508][T20772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4065'. [ 1302.520870][T20772] set match dimension is over the limit! [ 1302.529406][ T29] audit: type=1400 audit(1782533963.215:3915): avc: denied { create } for pid=20771 comm="syz.1.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1302.552434][ T29] audit: type=1400 audit(1782533963.265:3916): avc: denied { create } for pid=20771 comm="syz.1.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1302.556239][T10599] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1302.581102][ T29] audit: type=1400 audit(1782533963.295:3917): avc: denied { allowed } for pid=20771 comm="syz.1.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1302.601223][ T29] audit: type=1400 audit(1782533963.325:3918): avc: denied { read } for pid=20742 comm="syz.4.4057" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1302.606313][ T5801] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1302.678822][ T29] audit: type=1400 audit(1782533963.325:3919): avc: denied { open } for pid=20742 comm="syz.4.4057" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1302.707706][ T29] audit: type=1400 audit(1782533963.375:3920): avc: denied { create } for pid=20771 comm="syz.1.4065" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1302.744860][ T9] IPVS: starting estimator thread 0... [ 1302.821034][T10599] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1302.833446][T10599] usb 1-1: config 114 has an invalid interface number: 240 but max is 0 [ 1302.844154][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.860907][T10599] usb 1-1: config 114 has no interface number 0 [ 1302.867470][T20774] IPVS: using max 66 ests per chain, 158400 per kthread [ 1302.876425][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.892582][T10599] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1302.916961][ T5801] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1302.933711][T10599] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1302.950050][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.978842][T10599] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1302.993727][ T5801] usb 3-1: config 0 descriptor?? [ 1303.021898][T10599] usb 1-1: config 114 interface 240 has no altsetting 0 [ 1303.043514][T10599] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1303.062554][T10599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.081935][T10599] usb 1-1: Product: syz [ 1303.096011][T10599] usb 1-1: Manufacturer: syz [ 1303.107496][T10599] usb 1-1: SerialNumber: syz [ 1303.126511][T20766] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1303.138979][T20766] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1303.217847][T20770] binder: 20769:20770 ioctl 5000940c 0 returned -22 [ 1303.242942][T20770] binder_alloc: 20769: binder_alloc_buf, no vma [ 1303.293108][T20778] SQUASHFS error: Failed to read block 0x0: -5 [ 1303.300150][T20778] unable to read squashfs_super_block [ 1303.485129][ T5801] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 1303.502975][ T5801] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 1303.530562][ T5801] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000A/input/input39 [ 1303.625429][T20782] fuse: Bad value for 'fd' [ 1303.700761][T20781] ipt_REJECT: ECHOREPLY no longer supported. [ 1303.727531][ T46] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1303.736664][ T5801] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1303.827725][ T5801] usb 3-1: USB disconnect, device number 42 [ 1303.916888][ T46] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1303.942612][T10599] ir_usb 1-1:114.240: IR Dongle converter detected [ 1303.961680][T20787] fido_id[20787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1303.965222][ T46] usb 6-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice= 0.40 [ 1303.998919][T10599] usb 1-1: IRDA class descriptor not found, device not bound [ 1304.021944][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.038829][T10599] usb 1-1: USB disconnect, device number 27 [ 1304.057537][ T46] usb 6-1: Product: В [ 1304.081597][ T46] usb 6-1: Manufacturer: 箥뷘壧೙沥㉗ᦙ绨鿄颬ತⵝ鯒渼䘹ᦌ峖죒氛膌ﶞ孖ฌ࿑鯛瀲娄阴࣡켑ꘅ䣌菶᳢䅒ᦀᦍ겪ꅣ묺漃㼉뵾君횻嚭蒚䕠즳ﻈຐ⡃ᩖ裫鞁강ꑔ [ 1304.109572][ T46] usb 6-1: SerialNumber: ⴿ臉ₛ仜᳔㢤뗎塚烹⬧慝莒補␅悂첛复ꐗ頹㏛툕脖ഒ惷⬒廫䌷쳞℁൛䦢鐴籴얚꺳༄슐伆ᶫ鼣彬溫쇎荺䀺賘⹊똬Զ㲥恍転뭃⛯ᡰﱳ蠐㬰뜑ཻ [ 1304.597650][ T46] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1304.915360][ T46] usb 6-1: USB disconnect, device number 30 [ 1305.386534][T20018] udevd[20018]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1305.406279][T20801] trusted_key: encrypted_key: master key parameter 'trustedmsr' is invalid [ 1305.899611][T20809] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4076'. [ 1305.900991][T20811] FAULT_INJECTION: forcing a failure. [ 1305.900991][T20811] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.928198][T20811] CPU: 1 UID: 0 PID: 20811 Comm: syz.2.4078 Tainted: G L syzkaller #0 PREEMPT(full) [ 1305.928232][T20811] Tainted: [L]=SOFTLOCKUP [ 1305.928240][T20811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1305.928253][T20811] Call Trace: [ 1305.928260][T20811] [ 1305.928269][T20811] dump_stack_lvl+0x100/0x190 [ 1305.928302][T20811] should_fail_ex.cold+0x5/0xa [ 1305.928338][T20811] should_failslab+0xc2/0x120 [ 1305.928368][T20811] __kmalloc_noprof+0xfc/0x820 [ 1305.928393][T20811] ? tomoyo_encode2+0xfb/0x3c0 [ 1305.928427][T20811] tomoyo_encode2+0xfb/0x3c0 [ 1305.928458][T20811] tomoyo_encode+0x29/0x50 [ 1305.928483][T20811] tomoyo_realpath_from_path+0x18c/0x690 [ 1305.928518][T20811] tomoyo_path_number_perm+0x23c/0x580 [ 1305.928542][T20811] ? tomoyo_path_number_perm+0x22e/0x580 [ 1305.928567][T20811] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1305.928615][T20811] ? find_held_lock+0x2b/0x80 [ 1305.928635][T20811] ? __fget_files+0x215/0x3d0 [ 1305.928656][T20811] ? hook_file_ioctl_common+0x140/0x440 [ 1305.928685][T20811] ? __fget_files+0x215/0x3d0 [ 1305.928712][T20811] ? __fget_files+0x21f/0x3d0 [ 1305.928738][T20811] security_file_ioctl+0xd3/0x230 [ 1305.928766][T20811] __x64_sys_ioctl+0xb7/0x210 [ 1305.928798][T20811] do_syscall_64+0x115/0x870 [ 1305.928824][T20811] ? clear_bhb_loop+0x40/0x90 [ 1305.928849][T20811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.928871][T20811] RIP: 0033:0x7f2cde79ce59 [ 1305.928890][T20811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1305.928910][T20811] RSP: 002b:00007f2cdc9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1305.928931][T20811] RAX: ffffffffffffffda RBX: 00007f2cdea15fa0 RCX: 00007f2cde79ce59 [ 1305.928945][T20811] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 1305.928960][T20811] RBP: 00007f2cdc9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1305.928973][T20811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1305.928986][T20811] R13: 00007f2cdea16038 R14: 00007f2cdea15fa0 R15: 00007ffd32676a98 [ 1305.929017][T20811] [ 1305.929044][T20811] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1306.470408][T20804] lo speed is unknown, defaulting to 1000 [ 1307.361346][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 1307.361363][ T29] audit: type=1400 audit(1782533968.025:4014): avc: denied { write } for pid=20803 comm="syz.0.4075" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1307.446258][T20812] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4075'. [ 1307.476464][ T29] audit: type=1400 audit(1782533968.155:4015): avc: denied { create } for pid=20823 comm="syz.1.4082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1307.539781][ T29] audit: type=1400 audit(1782533968.165:4016): avc: denied { write } for pid=20823 comm="syz.1.4082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1307.560106][ T5343] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1307.571962][ T29] audit: type=1400 audit(1782533968.165:4017): avc: denied { sys_module } for pid=20823 comm="syz.1.4082" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1307.633472][ T29] audit: type=1400 audit(1782533968.175:4018): avc: denied { bind } for pid=20803 comm="syz.0.4075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1307.658674][ T29] audit: type=1400 audit(1782533968.245:4019): avc: denied { read } for pid=20803 comm="syz.0.4075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1307.679707][T20837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1307.716231][ T5343] usb 3-1: device descriptor read/64, error -71 [ 1307.906390][ T29] audit: type=1400 audit(1782533968.625:4020): avc: denied { execute } for pid=20838 comm="syz.5.4086" name="file2" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1308.140272][ T5343] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1308.203291][T20842] SQUASHFS error: Failed to read block 0x0: -5 [ 1308.216228][T20842] unable to read squashfs_super_block [ 1308.307768][ T5343] usb 3-1: device descriptor read/64, error -71 [ 1308.415270][ T29] audit: type=1400 audit(1782533968.655:4021): avc: denied { execute_no_trans } for pid=20838 comm="syz.5.4086" path="/126/file1/file2" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1308.616390][ T5343] usb usb3-port1: attempt power cycle [ 1308.761747][T20847] trusted_key: encrypted_key: master key parameter 'trustedmsr' is invalid [ 1308.917332][ T5801] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1308.986485][ T5343] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1309.060557][ T5343] usb 3-1: device descriptor read/8, error -71 [ 1310.446536][ T5343] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1310.447127][ T5801] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1310.595384][ T5801] usb 2-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice= 0.40 [ 1310.607449][ T29] audit: type=1400 audit(1782533971.355:4022): avc: denied { getopt } for pid=20856 comm="syz.4.4091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1310.683492][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.869666][ T5343] usb 3-1: device not accepting address 46, error -71 [ 1310.989796][ T5343] usb usb3-port1: unable to enumerate USB device [ 1310.999492][ T29] audit: type=1400 audit(1782533971.735:4023): avc: denied { allowed } for pid=20861 comm="syz.5.4092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1311.023632][ T5801] usb 2-1: Product: В [ 1311.037283][ T5801] usb 2-1: Manufacturer: 箥뷘壧೙沥㉗ᦙ绨鿄颬ತⵝ鯒渼䘹ᦌ峖죒氛膌ﶞ孖ฌ࿑鯛瀲娄阴࣡켑ꘅ䣌菶᳢䅒ᦀᦍ겪ꅣ묺漃㼉뵾君횻嚭蒚䕠즳ﻈຐ⡃ᩖ裫鞁강ꑔ [ 1311.178052][ T5801] usb 2-1: SerialNumber: ⴿ臉ₛ仜᳔㢤뗎塚烹⬧慝莒補␅悂첛复ꐗ頹㏛툕脖ഒ惷⬒廫䌷쳞℁൛䦢鐴籴얚꺳༄슐伆ᶫ鼣彬溫쇎荺䀺賘⹊똬Զ㲥恍転뭃⛯ᡰﱳ蠐㬰뜑ཻ [ 1311.204643][T20869] netlink: 'syz.1.4094': attribute type 1 has an invalid length. [ 1311.365769][T20869] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4094'. [ 1311.384167][ T5801] usb 2-1: can't set config #1, error -71 [ 1311.887287][ T5343] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1311.900210][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.919376][ T5801] usb 2-1: USB disconnect, device number 62 [ 1311.954191][T17912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.037252][ T5343] usb 3-1: device descriptor read/64, error -71 [ 1312.371310][T20874] netlink: 'syz.1.4094': attribute type 49 has an invalid length. [ 1312.450578][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1312.450626][ T29] audit: type=1400 audit(1782533973.155:4033): avc: denied { create } for pid=20868 comm="syz.1.4094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1312.504625][ T29] audit: type=1400 audit(1782533973.165:4034): avc: denied { write } for pid=20868 comm="syz.1.4094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1312.576972][ T5343] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1312.836404][ T5343] usb 3-1: device descriptor read/64, error -71 [ 1312.978966][ T5343] usb usb3-port1: attempt power cycle [ 1313.118033][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.159825][ T29] audit: type=1400 audit(1782533973.905:4035): avc: denied { unmount } for pid=13591 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1313.249997][T20894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=20894 comm=syz.5.4099 [ 1313.304427][T20898] isofs_fill_super: bread failed, dev=nbd4, iso_blknum=16, block=32 [ 1313.344014][T20897] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4101'. [ 1313.447602][ T5343] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1313.485865][ T5343] usb 3-1: device descriptor read/8, error -71 [ 1313.738711][ T5343] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1313.777211][ T5343] usb 3-1: device descriptor read/8, error -71 [ 1313.793712][T20903] FAULT_INJECTION: forcing a failure. [ 1313.793712][T20903] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.813497][T20903] CPU: 1 UID: 0 PID: 20903 Comm: syz.0.4102 Tainted: G L syzkaller #0 PREEMPT(full) [ 1313.813531][T20903] Tainted: [L]=SOFTLOCKUP [ 1313.813538][T20903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1313.813552][T20903] Call Trace: [ 1313.813559][T20903] [ 1313.813568][T20903] dump_stack_lvl+0x100/0x190 [ 1313.813601][T20903] should_fail_ex.cold+0x5/0xa [ 1313.813634][T20903] should_failslab+0xc2/0x120 [ 1313.813657][T20903] __kvmalloc_node_noprof+0x116/0x970 [ 1313.813683][T20903] ? __nf_hook_entries_try_shrink+0x164/0x400 [ 1313.813713][T20903] __nf_hook_entries_try_shrink+0x164/0x400 [ 1313.813753][T20903] __nf_unregister_net_hook+0x1d2/0x6a0 [ 1313.813784][T20903] nf_unregister_net_hooks+0x11b/0x170 [ 1313.813813][T20903] nf_ct_netns_do_put+0x168/0x2f0 [ 1313.813840][T20903] nf_ct_netns_put+0x39/0x90 [ 1313.813864][T20903] __nft_release_table+0x657/0x1320 [ 1313.813886][T20903] ? __pfx_nft_masq_ipv6_destroy+0x10/0x10 [ 1313.813910][T20903] ? synchronize_rcu_expedited+0x353/0x450 [ 1313.813941][T20903] ? __pfx___nft_release_table+0x10/0x10 [ 1313.813970][T20903] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1313.814005][T20903] nft_rcv_nl_event+0x4de/0x6c0 [ 1313.814041][T20903] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 1313.814074][T20903] ? nfulnl_rcv_nl_event+0x64/0x270 [ 1313.814107][T20903] notifier_call_chain+0x99/0x3f0 [ 1313.814136][T20903] blocking_notifier_call_chain+0x69/0xa0 [ 1313.814163][T20903] netlink_release+0x167a/0x1ff0 [ 1313.814196][T20903] ? netlink_release+0x1e0/0x1ff0 [ 1313.814224][T20903] ? __pfx_netlink_release+0x10/0x10 [ 1313.814252][T20903] ? __pfx_locks_remove_file+0x10/0x10 [ 1313.814284][T20903] __sock_release+0xb3/0x260 [ 1313.814315][T20903] ? __pfx_sock_close+0x10/0x10 [ 1313.814345][T20903] sock_close+0x1c/0x30 [ 1313.814374][T20903] __fput+0x3ff/0xb50 [ 1313.814408][T20903] fput_close_sync+0x118/0x250 [ 1313.814436][T20903] ? __pfx_fput_close_sync+0x10/0x10 [ 1313.814471][T20903] __x64_sys_close+0x8b/0x120 [ 1313.814498][T20903] do_syscall_64+0x115/0x870 [ 1313.814525][T20903] ? clear_bhb_loop+0x40/0x90 [ 1313.814552][T20903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.814574][T20903] RIP: 0033:0x7f6de8d9ce59 [ 1313.814593][T20903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.814614][T20903] RSP: 002b:00007f6de9ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1313.814634][T20903] RAX: ffffffffffffffda RBX: 00007f6de9015fa0 RCX: 00007f6de8d9ce59 [ 1313.814649][T20903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1313.814662][T20903] RBP: 00007f6de9ced090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.814674][T20903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.814687][T20903] R13: 00007f6de9016038 R14: 00007f6de9015fa0 R15: 00007ffe565d36a8 [ 1313.814719][T20903] [ 1314.170388][ T5343] usb usb3-port1: unable to enumerate USB device [ 1314.172602][T20906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4103'. [ 1314.211028][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.243977][ T29] audit: type=1400 audit(1782533974.985:4036): avc: denied { ioctl } for pid=20907 comm="syz.1.4104" path="socket:[94377]" dev="sockfs" ino=94377 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1314.392836][T20912] SQUASHFS error: Failed to read block 0x0: -5 [ 1314.429661][T20912] unable to read squashfs_super_block [ 1314.687255][T20917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.714367][T20917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.498016][ T29] audit: type=1400 audit(1782533975.425:4037): avc: denied { create } for pid=20913 comm="syz.5.4106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1315.518971][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.529886][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.047219][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.132699][ T29] audit: type=1400 audit(1782533976.805:4038): avc: denied { ioctl } for pid=20918 comm="syz.2.4107" path="/dev/video0" dev="devtmpfs" ino=933 ioctlcmd=0x565e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1316.316589][ T46] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1316.558714][ T46] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1316.566406][T20925] netlink: 'syz.4.4108': attribute type 49 has an invalid length. [ 1316.664526][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.704629][ T46] usb 1-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice= 0.40 [ 1316.878797][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.902681][ T46] usb 1-1: Product: В [ 1316.935867][ T46] usb 1-1: Manufacturer: 箥뷘壧೙沥㉗ᦙ绨鿄颬ತⵝ鯒渼䘹ᦌ峖죒氛膌ﶞ孖ฌ࿑鯛瀲娄阴࣡켑ꘅ䣌菶᳢䅒ᦀᦍ겪ꅣ묺漃㼉뵾君횻嚭蒚䕠즳ﻈຐ⡃ᩖ裫鞁강ꑔ [ 1316.963274][ T46] usb 1-1: SerialNumber: ⴿ臉ₛ仜᳔㢤뗎塚烹⬧慝莒補␅悂첛复ꐗ頹㏛툕脖ഒ惷⬒廫䌷쳞℁൛䦢鐴籴얚꺳༄슐伆ᶫ鼣彬溫쇎荺䀺賘⹊똬Զ㲥恍転뭃⛯ᡰﱳ蠐㬰뜑ཻ [ 1317.085878][ T29] audit: type=1400 audit(1782533977.825:4039): avc: denied { write } for pid=20907 comm="syz.1.4104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1317.113232][T20932] FAULT_INJECTION: forcing a failure. [ 1317.113232][T20932] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.127616][ T29] audit: type=1400 audit(1782533977.855:4040): avc: denied { listen } for pid=20907 comm="syz.1.4104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1317.149925][T20932] CPU: 0 UID: 0 PID: 20932 Comm: syz.2.4111 Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.149957][T20932] Tainted: [L]=SOFTLOCKUP [ 1317.149965][T20932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1317.149977][T20932] Call Trace: [ 1317.149985][T20932] [ 1317.149993][T20932] dump_stack_lvl+0x100/0x190 [ 1317.150025][T20932] should_fail_ex.cold+0x5/0xa [ 1317.150056][T20932] should_failslab+0xc2/0x120 [ 1317.150080][T20932] __kmalloc_noprof+0xfc/0x820 [ 1317.150103][T20932] ? tomoyo_encode2+0xfb/0x3c0 [ 1317.150132][T20932] tomoyo_encode2+0xfb/0x3c0 [ 1317.150161][T20932] tomoyo_encode+0x29/0x50 [ 1317.150186][T20932] tomoyo_realpath_from_path+0x18c/0x690 [ 1317.150218][T20932] tomoyo_path_number_perm+0x23c/0x580 [ 1317.150238][T20932] ? tomoyo_path_number_perm+0x22e/0x580 [ 1317.150262][T20932] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1317.150312][T20932] ? find_held_lock+0x2b/0x80 [ 1317.150332][T20932] ? __fget_files+0x215/0x3d0 [ 1317.150351][T20932] ? hook_file_ioctl_common+0x140/0x440 [ 1317.150379][T20932] ? __fget_files+0x215/0x3d0 [ 1317.150406][T20932] ? __fget_files+0x21f/0x3d0 [ 1317.150440][T20932] security_file_ioctl+0xd3/0x230 [ 1317.150467][T20932] __x64_sys_ioctl+0xb7/0x210 [ 1317.150497][T20932] do_syscall_64+0x115/0x870 [ 1317.150521][T20932] ? clear_bhb_loop+0x40/0x90 [ 1317.150546][T20932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.150567][T20932] RIP: 0033:0x7f2cde79ce59 [ 1317.150587][T20932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1317.150607][T20932] RSP: 002b:00007f2cdc9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1317.150628][T20932] RAX: ffffffffffffffda RBX: 00007f2cdea15fa0 RCX: 00007f2cde79ce59 [ 1317.150642][T20932] RDX: 0000200000000d40 RSI: 00000000c0386105 RDI: 0000000000000003 [ 1317.150656][T20932] RBP: 00007f2cdc9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.150668][T20932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.150680][T20932] R13: 00007f2cdea16038 R14: 00007f2cdea15fa0 R15: 00007ffd32676a98 [ 1317.150710][T20932] [ 1317.150734][T20932] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1317.373238][ T29] audit: type=1400 audit(1782533977.855:4041): avc: denied { accept } for pid=20907 comm="syz.1.4104" lport=58290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1317.418060][T20910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4104'. [ 1317.427121][ T46] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1317.433971][ T29] audit: type=1400 audit(1782533978.165:4042): avc: denied { ioctl } for pid=20907 comm="syz.1.4104" path="socket:[95482]" dev="sockfs" ino=95482 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1317.770177][T20910] netlink: 'syz.1.4104': attribute type 2 has an invalid length. [ 1317.778241][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.826439][T20910] netlink: 'syz.1.4104': attribute type 1 has an invalid length. [ 1317.877971][ T46] usb 1-1: USB disconnect, device number 28 [ 1317.996135][T20018] udevd[20018]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1318.028280][T20941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4115'. [ 1318.239275][T20941] set match dimension is over the limit! [ 1318.286372][T20947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=20947 comm=syz.5.4116 [ 1318.310923][ T29] audit: type=1400 audit(1782533979.055:4043): avc: denied { connect } for pid=20940 comm="syz.2.4115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1318.346204][ T46] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1318.361535][ T29] audit: type=1400 audit(1782533979.075:4044): avc: denied { name_connect } for pid=20940 comm="syz.2.4115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1318.411223][ T29] audit: type=1400 audit(1782533979.135:4045): avc: denied { shutdown } for pid=20940 comm="syz.2.4115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1318.463301][ T29] audit: type=1400 audit(1782533979.135:4046): avc: denied { getopt } for pid=20940 comm="syz.2.4115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1318.506309][ T29] audit: type=1400 audit(1782533979.135:4047): avc: denied { name_connect } for pid=20940 comm="syz.2.4115" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1318.530432][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.541577][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.577931][ T46] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1318.601578][ T29] audit: type=1400 audit(1782533979.345:4048): avc: denied { read write } for pid=20950 comm="syz.2.4118" name="vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1318.602682][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.647674][ T29] audit: type=1400 audit(1782533979.375:4049): avc: denied { open } for pid=20950 comm="syz.2.4118" path="/dev/vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1318.674452][ T29] audit: type=1400 audit(1782533979.375:4050): avc: denied { ioctl } for pid=20950 comm="syz.2.4118" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1318.696956][ T46] usb 1-1: config 0 descriptor?? [ 1318.749122][ T46] pwc: Askey VC010 type 2 USB webcam detected. [ 1318.866301][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.876236][ T10] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1318.948604][T20955] FAULT_INJECTION: forcing a failure. [ 1318.948604][T20955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1318.996669][T20955] CPU: 0 UID: 0 PID: 20955 Comm: syz.2.4119 Tainted: G L syzkaller #0 PREEMPT(full) [ 1318.996704][T20955] Tainted: [L]=SOFTLOCKUP [ 1318.996712][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1318.996726][T20955] Call Trace: [ 1318.996733][T20955] [ 1318.996743][T20955] dump_stack_lvl+0x100/0x190 [ 1318.996775][T20955] should_fail_ex.cold+0x5/0xa [ 1318.996806][T20955] _copy_from_user+0x2e/0xd0 [ 1318.996831][T20955] move_addr_to_kernel+0x65/0x170 [ 1318.996858][T20955] copy_msghdr_from_user+0x3f0/0x4c0 [ 1318.996884][T20955] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1318.996924][T20955] ___sys_sendmsg+0x106/0x1e0 [ 1318.996950][T20955] ? __pfx____sys_sendmsg+0x10/0x10 [ 1318.996973][T20955] ? __lock_acquire+0x49f/0x1a40 [ 1318.996999][T20955] ? get_pid_task+0x106/0x250 [ 1318.997050][T20955] __sys_sendmsg+0x160/0x210 [ 1318.997082][T20955] ? __pfx___sys_sendmsg+0x10/0x10 [ 1318.997127][T20955] do_syscall_64+0x115/0x870 [ 1318.997153][T20955] ? clear_bhb_loop+0x40/0x90 [ 1318.997178][T20955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.997199][T20955] RIP: 0033:0x7f2cde79ce59 [ 1318.997218][T20955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1318.997237][T20955] RSP: 002b:00007f2cdc9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1318.997258][T20955] RAX: ffffffffffffffda RBX: 00007f2cdea15fa0 RCX: 00007f2cde79ce59 [ 1318.997272][T20955] RDX: 000000001400c0c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 1318.997286][T20955] RBP: 00007f2cdc9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1318.997300][T20955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.997313][T20955] R13: 00007f2cdea16038 R14: 00007f2cdea15fa0 R15: 00007ffd32676a98 [ 1318.997349][T20955] [ 1319.213245][ T10] usb 2-1: device descriptor read/64, error -71 [ 1319.229667][ T29] audit: type=1400 audit(1782533979.965:4051): avc: denied { connect } for pid=20936 comm="syz.0.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1319.250251][ T46] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1319.466239][ T10] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 1319.668050][ T10] usb 2-1: device descriptor read/64, error -71 [ 1319.826427][ T10] usb usb2-port1: attempt power cycle [ 1319.898171][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.276823][ T10] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 1320.304343][ T46] pwc: recv_control_msg error -71 req 02 val 2700 [ 1320.323144][ T10] usb 2-1: device descriptor read/8, error -71 [ 1320.347393][ T46] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1320.379857][ T46] pwc: recv_control_msg error -71 req 04 val 1000 [ 1320.413499][ T46] pwc: recv_control_msg error -71 req 04 val 1300 [ 1320.450336][ T46] pwc: recv_control_msg error -71 req 04 val 1400 [ 1320.474058][ T46] pwc: recv_control_msg error -71 req 02 val 2000 [ 1320.493237][ T46] pwc: recv_control_msg error -71 req 02 val 2100 [ 1320.508638][ T29] audit: type=1400 audit(1782533981.255:4052): avc: denied { create } for pid=20967 comm="syz.4.4124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1320.530839][ T46] pwc: recv_control_msg error -71 req 04 val 1500 [ 1320.533752][T20968] FAULT_INJECTION: forcing a failure. [ 1320.533752][T20968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.551013][ T46] pwc: recv_control_msg error -71 req 02 val 2500 [ 1320.562120][ T46] pwc: recv_control_msg error -71 req 02 val 2400 [ 1320.569423][T20968] CPU: 1 UID: 0 PID: 20968 Comm: syz.4.4124 Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.569455][T20968] Tainted: [L]=SOFTLOCKUP [ 1320.569463][T20968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1320.569477][T20968] Call Trace: [ 1320.569484][T20968] [ 1320.569491][T20968] dump_stack_lvl+0x100/0x190 [ 1320.569522][T20968] should_fail_ex.cold+0x5/0xa [ 1320.569549][T20968] _copy_from_user+0x2e/0xd0 [ 1320.569570][T20968] copy_msghdr_from_user+0x9f/0x4c0 [ 1320.569595][T20968] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1320.569630][T20968] ___sys_sendmsg+0x106/0x1e0 [ 1320.569656][T20968] ? __pfx____sys_sendmsg+0x10/0x10 [ 1320.569679][T20968] ? __lock_acquire+0x49f/0x1a40 [ 1320.569706][T20968] ? get_pid_task+0x106/0x250 [ 1320.569768][T20968] __sys_sendmsg+0x160/0x210 [ 1320.569800][T20968] ? __pfx___sys_sendmsg+0x10/0x10 [ 1320.569846][T20968] do_syscall_64+0x115/0x870 [ 1320.569872][T20968] ? clear_bhb_loop+0x40/0x90 [ 1320.569898][T20968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.569920][T20968] RIP: 0033:0x7ffaffb9ce59 [ 1320.569939][T20968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1320.569960][T20968] RSP: 002b:00007ffb00a1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1320.569982][T20968] RAX: ffffffffffffffda RBX: 00007ffaffe15fa0 RCX: 00007ffaffb9ce59 [ 1320.569996][T20968] RDX: 0000000000008090 RSI: 0000200000000100 RDI: 0000000000000004 [ 1320.570009][T20968] RBP: 00007ffb00a1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.570022][T20968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.570036][T20968] R13: 00007ffaffe16038 R14: 00007ffaffe15fa0 R15: 00007ffd37c0dcc8 [ 1320.570066][T20968] [ 1320.572786][ T46] pwc: recv_control_msg error -71 req 02 val 2600 [ 1320.606506][ T10] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1320.626887][ T10] usb 2-1: device descriptor read/8, error -71 [ 1320.637963][ T46] pwc: recv_control_msg error -71 req 02 val 2900 [ 1320.756577][ T10] usb usb2-port1: unable to enumerate USB device [ 1320.781134][ T46] pwc: recv_control_msg error -71 req 02 val 2800 [ 1320.804732][T20972] usb usb8: usbfs: process 20972 (syz.2.4122) did not claim interface 0 before use [ 1320.859041][ T46] pwc: recv_control_msg error -71 req 04 val 1100 [ 1320.888124][ T46] pwc: recv_control_msg error -71 req 04 val 1200 [ 1320.930869][T17912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.566568][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1321.781191][T20981] netlink: 'syz.0.4129': attribute type 2 has an invalid length. [ 1321.846532][ T46] pwc: Registered as video103. [ 1322.018118][T17912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.101853][ T46] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input42 [ 1323.158236][T17912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.291853][ T46] usb 1-1: USB disconnect, device number 29 [ 1323.548026][T20999] lo speed is unknown, defaulting to 1000 [ 1324.217188][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.609626][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.670622][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1324.670639][ T29] audit: type=1400 audit(1782533985.415:4067): avc: denied { read } for pid=21007 comm="syz.4.4135" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1324.705513][ T29] audit: type=1400 audit(1782533985.415:4068): avc: denied { open } for pid=21007 comm="syz.4.4135" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1324.872773][ T29] audit: type=1400 audit(1782533985.415:4069): avc: denied { ioctl } for pid=21007 comm="syz.4.4135" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x54da scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1324.911831][ T29] audit: type=1400 audit(1782533985.425:4070): avc: denied { lock } for pid=21007 comm="syz.4.4135" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1324.936559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.936708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.936793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.500114][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.633265][T21001] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4132'. [ 1325.652521][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.793751][T21021] binder: 21012:21021 ioctl c0306201 200000000080 returned -14 [ 1325.901727][ T29] audit: type=1400 audit(1782533986.645:4071): avc: denied { ioctl } for pid=21025 comm="syz.2.4139" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x641f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1325.902996][T21026] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4139'. [ 1326.004717][T21026] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4139'. [ 1326.077745][T10999] Bluetooth: hci2: ISO packet too small [ 1326.228063][ T5609] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1326.253785][ T29] audit: type=1400 audit(1782533986.995:4072): avc: denied { ioctl } for pid=21031 comm="syz.5.4142" path="socket:[95719]" dev="sockfs" ino=95719 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1326.391681][T10999] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1326.529877][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.662646][T21040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.673548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.861502][ T29] audit: type=1400 audit(1782533987.605:4073): avc: denied { append } for pid=21034 comm="syz.2.4141" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1326.903298][ T5609] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1326.915969][ T5609] usb 5-1: config 0 has no interface number 0 [ 1326.922491][ T5609] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1326.935779][ T5609] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1326.948213][ T5609] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1326.971668][ T5609] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1326.981149][ T5609] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1327.015827][ T5609] usb 5-1: Product: syz [ 1327.032876][ T5609] usb 5-1: SerialNumber: syz [ 1327.050785][ T5609] usb 5-1: config 0 descriptor?? [ 1327.178815][ T5609] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1327.187301][ T29] audit: type=1400 audit(1782533987.925:4074): avc: denied { create } for pid=21042 comm="syz.0.4143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1327.211986][ T5609] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input44 [ 1327.239976][ T29] audit: type=1400 audit(1782533987.935:4075): avc: denied { bind } for pid=21042 comm="syz.0.4143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1327.321917][ T29] audit: type=1400 audit(1782533987.935:4076): avc: denied { listen } for pid=21042 comm="syz.0.4143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1327.341385][T21021] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4136'. [ 1327.345788][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1327.361441][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1327.368694][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1327.375877][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1327.383792][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1327.390984][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1327.398266][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1327.405484][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1327.412815][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1327.420023][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1327.469022][T21046] syzkaller0: entered promiscuous mode [ 1327.523282][T21046] syzkaller0: entered allmulticast mode [ 1327.541174][ T5609] usb 5-1: USB disconnect, device number 43 [ 1327.547274][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1328.139480][ T5609] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1328.415519][T21054] ipt_REJECT: ECHOREPLY no longer supported. [ 1328.644684][T21061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4149'. [ 1328.754287][T21067] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4148'. [ 1329.646871][ T46] net_ratelimit: 5 callbacks suppressed [ 1329.646890][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1329.681869][T21061] set match dimension is over the limit! [ 1330.709542][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1331.420525][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.136310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.590353][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.703304][T21095] overlayfs: missing 'lowerdir' [ 1333.533767][T21100] FAULT_INJECTION: forcing a failure. [ 1333.533767][T21100] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.646640][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1333.691176][T21100] CPU: 1 UID: 0 PID: 21100 Comm: syz.1.4160 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.691213][T21100] Tainted: [L]=SOFTLOCKUP [ 1333.691221][T21100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1333.691234][T21100] Call Trace: [ 1333.691242][T21100] [ 1333.691251][T21100] dump_stack_lvl+0x100/0x190 [ 1333.691286][T21100] should_fail_ex.cold+0x5/0xa [ 1333.691316][T21100] should_failslab+0xc2/0x120 [ 1333.691345][T21100] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1333.691371][T21100] ? dst_alloc+0x99/0x1a0 [ 1333.691405][T21100] dst_alloc+0x99/0x1a0 [ 1333.691435][T21100] rt_dst_alloc+0x35/0x3a0 [ 1333.691464][T21100] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 1333.691506][T21100] ip_route_output_key_hash+0x118/0x2b0 [ 1333.691529][T21100] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1333.691551][T21100] ? __lock_acquire+0x49f/0x1a40 [ 1333.691590][T21100] ip_route_output_flow+0x27/0x150 [ 1333.691620][T21100] __ip4_datagram_connect+0x8bf/0x1470 [ 1333.691660][T21100] udp_connect+0x2e/0x70 [ 1333.691685][T21100] inet_dgram_connect+0x143/0x200 [ 1333.691715][T21100] ? __pfx_inet_dgram_connect+0x10/0x10 [ 1333.691741][T21100] __sys_connect_file+0x141/0x1a0 [ 1333.691773][T21100] __sys_connect+0x141/0x170 [ 1333.691800][T21100] ? __pfx___sys_connect+0x10/0x10 [ 1333.691825][T21100] ? __fget_files+0x21f/0x3d0 [ 1333.691859][T21100] ? __pfx_ksys_write+0x10/0x10 [ 1333.691896][T21100] __x64_sys_connect+0x72/0xb0 [ 1333.691923][T21100] ? lockdep_hardirqs_on+0x78/0x100 [ 1333.691950][T21100] do_syscall_64+0x115/0x870 [ 1333.691975][T21100] ? clear_bhb_loop+0x40/0x90 [ 1333.692001][T21100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.692023][T21100] RIP: 0033:0x7feb4079ce59 [ 1333.692042][T21100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.692063][T21100] RSP: 002b:00007feb4162a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1333.692084][T21100] RAX: ffffffffffffffda RBX: 00007feb40a15fa0 RCX: 00007feb4079ce59 [ 1333.692098][T21100] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000004 [ 1333.692112][T21100] RBP: 00007feb4162a090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.692125][T21100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.692137][T21100] R13: 00007feb40a16038 R14: 00007feb40a15fa0 R15: 00007ffcc658a828 [ 1333.692169][T21100] [ 1334.497783][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1334.769592][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1335.477260][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.019867][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1336.085558][T21117] netlink: 'syz.4.4165': attribute type 1 has an invalid length. [ 1336.196559][T21117] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4165'. [ 1336.234604][T21123] netlink: 'syz.5.4166': attribute type 1 has an invalid length. [ 1336.314941][T21125] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4164'. [ 1337.278351][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.421763][T21123] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4166'. [ 1337.562093][T21127] netlink: 'syz.4.4165': attribute type 49 has an invalid length. [ 1337.714171][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.900111][T21126] netlink: 'syz.5.4166': attribute type 49 has an invalid length. [ 1337.925319][T21135] SQUASHFS error: Failed to read block 0x0: -5 [ 1337.949967][T21135] unable to read squashfs_super_block [ 1338.296239][T10999] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1338.296504][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1338.880218][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1338.880234][ T29] audit: type=1400 audit(1782533999.625:4084): avc: denied { write } for pid=21149 comm="syz.4.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1338.906390][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1338.946887][ T29] audit: type=1400 audit(1782533999.695:4085): avc: denied { append } for pid=21154 comm="syz.2.4175" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1338.949156][T21156] loop9: detected capacity change from 0 to 255852544 [ 1338.981785][ T5343] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1339.122502][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1339.148377][ T5343] usb 2-1: device descriptor read/64, error -71 [ 1339.186793][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice= 0.40 [ 1339.209644][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.235473][ T10] usb 1-1: Product: В [ 1339.251748][ T10] usb 1-1: Manufacturer: 箥뷘壧೙沥㉗ᦙ绨鿄颬ತⵝ鯒渼䘹ᦌ峖죒氛膌ﶞ孖ฌ࿑鯛瀲娄阴࣡켑ꘅ䣌菶᳢䅒ᦀᦍ겪ꅣ묺漃㼉뵾君횻嚭蒚䕠즳ﻈຐ⡃ᩖ裫鞁강ꑔ [ 1339.334095][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1339.380731][ T10] usb 1-1: SerialNumber: ⴿ臉ₛ仜᳔㢤뗎塚烹⬧慝莒補␅悂첛复ꐗ頹㏛툕脖ഒ惷⬒廫䌷쳞℁൛䦢鐴籴얚꺳༄슐伆ᶫ鼣彬溫쇎荺䀺賘⹊똬Զ㲥恍転뭃⛯ᡰﱳ蠐㬰뜑ཻ [ 1339.410482][ T5343] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1339.559657][ T5343] usb 2-1: device descriptor read/64, error -71 [ 1339.691851][ T5343] usb usb2-port1: attempt power cycle [ 1339.898194][T21158] Invalid logical block size (4) [ 1339.969725][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1340.063526][T21161] FAULT_INJECTION: forcing a failure. [ 1340.063526][T21161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1340.066202][ T5343] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1340.077943][T21161] CPU: 1 UID: 0 PID: 21161 Comm: syz.5.4176 Tainted: G L syzkaller #0 PREEMPT(full) [ 1340.077976][T21161] Tainted: [L]=SOFTLOCKUP [ 1340.077984][T21161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1340.077996][T21161] Call Trace: [ 1340.078003][T21161] [ 1340.078012][T21161] dump_stack_lvl+0x100/0x190 [ 1340.078045][T21161] should_fail_ex.cold+0x5/0xa [ 1340.078073][T21161] _copy_from_user+0x2e/0xd0 [ 1340.078099][T21161] move_addr_to_kernel+0x65/0x170 [ 1340.078126][T21161] copy_msghdr_from_user+0x3f0/0x4c0 [ 1340.078151][T21161] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1340.078189][T21161] ___sys_sendmsg+0x106/0x1e0 [ 1340.078214][T21161] ? __pfx____sys_sendmsg+0x10/0x10 [ 1340.078235][T21161] ? __lock_acquire+0x49f/0x1a40 [ 1340.078260][T21161] ? get_pid_task+0x106/0x250 [ 1340.078311][T21161] __sys_sendmsg+0x160/0x210 [ 1340.078341][T21161] ? __pfx___sys_sendmsg+0x10/0x10 [ 1340.078385][T21161] do_syscall_64+0x115/0x870 [ 1340.078410][T21161] ? clear_bhb_loop+0x40/0x90 [ 1340.078436][T21161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.078457][T21161] RIP: 0033:0x7fc00c19ce59 [ 1340.078474][T21161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1340.078494][T21161] RSP: 002b:00007fc00cfd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1340.078514][T21161] RAX: ffffffffffffffda RBX: 00007fc00c415fa0 RCX: 00007fc00c19ce59 [ 1340.078534][T21161] RDX: 0000000000000004 RSI: 0000200000000500 RDI: 0000000000000008 [ 1340.078546][T21161] RBP: 00007fc00cfd4090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.078559][T21161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.078571][T21161] R13: 00007fc00c416038 R14: 00007fc00c415fa0 R15: 00007ffe48f40f78 [ 1340.078600][T21161] [ 1340.286312][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.304238][ T10] usb 1-1: USB disconnect, device number 30 [ 1340.449387][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.672488][T18072] udevd[18072]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1340.731600][ T5343] usb 2-1: device descriptor read/8, error -71 [ 1340.766934][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1340.977461][ T5343] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1341.190528][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1341.201941][ T5343] usb 2-1: device not accepting address 70, error -71 [ 1341.381334][ T5343] usb usb2-port1: unable to enumerate USB device [ 1341.487919][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.497577][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1341.517664][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1341.547860][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 1341.549264][ T29] audit: type=1400 audit(1782534002.295:4086): avc: denied { name_bind } for pid=21178 comm="syz.0.4183" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1341.568512][T21180] usb usb8: usbfs: process 21180 (syz.4.4178) did not claim interface 0 before use [ 1341.601540][ T10] usb 6-1: string descriptor 0 read error: -22 [ 1341.608265][ T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 1341.627767][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.641230][T21183] FAULT_INJECTION: forcing a failure. [ 1341.641230][T21183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1341.713032][T10999] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1341.724033][T21183] CPU: 0 UID: 0 PID: 21183 Comm: syz.0.4183 Tainted: G L syzkaller #0 PREEMPT(full) [ 1341.724076][T21183] Tainted: [L]=SOFTLOCKUP [ 1341.724084][T21183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1341.724097][T21183] Call Trace: [ 1341.724106][T21183] [ 1341.724116][T21183] dump_stack_lvl+0x100/0x190 [ 1341.724151][T21183] should_fail_ex.cold+0x5/0xa [ 1341.724182][T21183] _copy_from_user+0x2e/0xd0 [ 1341.724207][T21183] sctp_setsockopt+0x8cc/0xb370 [ 1341.724241][T21183] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1341.724263][T21183] ? __fget_files+0x215/0x3d0 [ 1341.724290][T21183] ? selinux_socket_setsockopt+0x6a/0x80 [ 1341.724316][T21183] ? sock_common_setsockopt+0x2e/0xf0 [ 1341.724339][T21183] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1341.724360][T21183] do_sock_setsockopt+0xf3/0x1d0 [ 1341.724387][T21183] __sys_setsockopt+0x195/0x220 [ 1341.724422][T21183] __x64_sys_setsockopt+0xbd/0x160 [ 1341.724450][T21183] ? do_syscall_64+0x90/0x870 [ 1341.724477][T21183] ? lockdep_hardirqs_on+0x78/0x100 [ 1341.724503][T21183] do_syscall_64+0x115/0x870 [ 1341.724530][T21183] ? clear_bhb_loop+0x40/0x90 [ 1341.724556][T21183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.724579][T21183] RIP: 0033:0x7f6de8d9ce59 [ 1341.724598][T21183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.724618][T21183] RSP: 002b:00007f6de9ccc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1341.724640][T21183] RAX: ffffffffffffffda RBX: 00007f6de9016090 RCX: 00007f6de8d9ce59 [ 1341.724656][T21183] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000007 [ 1341.724668][T21183] RBP: 00007f6de9ccc090 R08: 0000000000000010 R09: 0000000000000000 [ 1341.724681][T21183] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1341.724695][T21183] R13: 00007f6de9016128 R14: 00007f6de9016090 R15: 00007ffe565d36a8 [ 1341.724724][T21183] [ 1341.967319][T21168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.002917][T21168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.012765][T21188] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1342.045108][ T29] audit: type=1400 audit(1782534002.785:4087): avc: denied { read write } for pid=21181 comm="syz.1.4185" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1342.102516][T21168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.186922][T21168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.429262][ T29] audit: type=1400 audit(1782534002.785:4088): avc: denied { open } for pid=21181 comm="syz.1.4185" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1342.455191][ T29] audit: type=1400 audit(1782534002.955:4089): avc: denied { read write } for pid=21167 comm="syz.5.4179" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1342.480309][ T29] audit: type=1400 audit(1782534002.955:4090): avc: denied { open } for pid=21167 comm="syz.5.4179" path="/dev/sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1342.521678][ T29] audit: type=1400 audit(1782534002.955:4091): avc: denied { ioctl } for pid=21167 comm="syz.5.4179" path="/dev/sg0" dev="devtmpfs" ino=744 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1342.523321][ T10] usb 6-1: Can't get UAC3 power state for id 10 [ 1342.560949][ T10] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 1342.574632][ T10] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1342.583784][ T10] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1342.597190][ T10] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1342.656850][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1342.665611][ T29] audit: type=1400 audit(1782534003.255:4092): avc: denied { getopt } for pid=21167 comm="syz.5.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1343.544278][ T29] audit: type=1400 audit(1782534003.815:4093): avc: denied { create } for pid=21199 comm="syz.1.4187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1343.691061][ T10] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1343.740283][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.824534][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.840083][ T10] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1343.865972][ T10] usb 6-1: USB disconnect, device number 31 [ 1344.269267][T21215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4189'. [ 1344.549627][T21212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4189'. [ 1344.549647][T21212] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4189'. [ 1344.549766][T21212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4189'. [ 1344.549776][T21212] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4189'. [ 1344.573040][T21223] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4190'. [ 1344.766874][T14537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.787425][ T46] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1344.860866][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1344.936846][ T46] usb 3-1: device descriptor read/64, error -71 [ 1345.237172][ T46] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1345.330919][T10999] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1345.364947][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1345.364965][ T29] audit: type=1400 audit(1782534006.105:4096): avc: denied { write } for pid=21233 comm="syz.1.4196" name="dev_mcast" dev="proc" ino=4026534111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1345.441371][ T46] usb 3-1: device descriptor read/64, error -71 [ 1345.598180][ T46] usb usb3-port1: attempt power cycle [ 1345.858802][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1345.916915][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1345.927169][T21244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1346.036386][ T46] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1346.056306][ T10] usb 6-1: device descriptor read/64, error -71 [ 1346.067579][ T46] usb 3-1: device descriptor read/8, error -71 [ 1346.128620][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.306248][ T46] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1346.306262][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1346.347588][ T46] usb 3-1: device descriptor read/8, error -71 [ 1346.456247][ T10] usb 6-1: device descriptor read/64, error -71 [ 1346.463586][ T46] usb usb3-port1: unable to enumerate USB device [ 1346.576529][ T10] usb usb6-port1: attempt power cycle [ 1346.592098][T21251] usb usb8: usbfs: process 21251 (syz.1.4202) did not claim interface 0 before use [ 1346.846618][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.879568][T21254] ipt_REJECT: ECHOREPLY no longer supported. [ 1346.926283][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1346.941732][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.962342][ T10] usb 6-1: device descriptor read/8, error -71 [ 1347.216206][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1347.258806][ T10] usb 6-1: device descriptor read/8, error -71 [ 1347.319062][ T29] audit: type=1400 audit(1782534008.065:4097): avc: denied { ioctl } for pid=21258 comm="syz.4.4205" path="mnt:[4026532800]" dev="nsfs" ino=4026532800 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1347.349659][T21263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4206'. [ 1347.392299][ T10] usb usb6-port1: unable to enumerate USB device [ 1347.563197][T21268] binder: 21267:21268 unknown command 1988082330 [ 1347.580914][T21268] binder: 21267:21268 ioctl c0306201 200000000180 returned -22 [ 1347.898965][T21279] netlink: 'syz.4.4210': attribute type 1 has an invalid length. [ 1347.992671][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1348.395287][ T29] audit: type=1400 audit(1782534008.975:4098): avc: denied { getopt } for pid=21269 comm="syz.0.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1348.580686][T21279] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1348.711988][T21278] lo speed is unknown, defaulting to 1000 [ 1349.024162][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1349.126433][T21282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4212'. [ 1350.170679][ T5801] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1350.181034][T14537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.294077][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1350.420945][ T5801] usb 6-1: Using ep0 maxpacket: 8 [ 1350.442683][ T5801] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.066865][ T5801] usb 6-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 1351.078775][ T5801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.096427][ T5801] usb 6-1: Product: syz [ 1351.122197][T21302] SQUASHFS error: Failed to read block 0x0: -5 [ 1351.128719][T21302] unable to read squashfs_super_block [ 1351.145656][ T5801] usb 6-1: Manufacturer: syz [ 1351.247899][T14537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1351.287948][ T5801] usb 6-1: SerialNumber: syz [ 1351.615748][ T5801] usb 6-1: config 0 descriptor?? [ 1351.636581][ T5801] gspca_main: t613-2.14.0 probing 17a1:0128 [ 1351.888106][ T5711] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1351.984889][ T5801] gspca_t613: unknown sensor 0000 [ 1351.990991][ T5801] t613 6-1:0.0: probe with driver t613 failed with error -22 [ 1352.085510][ T5801] usb 6-1: USB disconnect, device number 36 [ 1352.198859][ T5711] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1352.225475][ T5711] usb 2-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice= 0.40 [ 1352.242301][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.252681][ T5711] usb 2-1: Product: В [ 1352.264019][T21311] ipt_REJECT: ECHOREPLY no longer supported. [ 1352.283316][ T5711] usb 2-1: Manufacturer: 箥뷘壧೙沥㉗ᦙ绨鿄颬ತⵝ鯒渼䘹ᦌ峖죒氛膌ﶞ孖ฌ࿑鯛瀲娄阴࣡켑ꘅ䣌菶᳢䅒ᦀᦍ겪ꅣ묺漃㼉뵾君횻嚭蒚䕠즳ﻈຐ⡃ᩖ裫鞁강ꑔ [ 1352.338981][T21317] FAULT_INJECTION: forcing a failure. [ 1352.338981][T21317] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.352267][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.365616][T21317] CPU: 1 UID: 0 PID: 21317 Comm: syz.0.4222 Tainted: G L syzkaller #0 PREEMPT(full) [ 1352.365651][T21317] Tainted: [L]=SOFTLOCKUP [ 1352.365659][T21317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1352.365672][T21317] Call Trace: [ 1352.365680][T21317] [ 1352.365689][T21317] dump_stack_lvl+0x100/0x190 [ 1352.365723][T21317] should_fail_ex.cold+0x5/0xa [ 1352.365753][T21317] should_failslab+0xc2/0x120 [ 1352.365782][T21317] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 1352.365809][T21317] ? sock_alloc_inode+0x26/0x2c0 [ 1352.365833][T21317] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1352.365857][T21317] sock_alloc_inode+0x26/0x2c0 [ 1352.365879][T21317] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1352.365900][T21317] alloc_inode+0x68/0x250 [ 1352.365930][T21317] sock_alloc+0x44/0x280 [ 1352.365949][T21317] ? security_socket_create+0x7f/0x250 [ 1352.365974][T21317] __sock_create+0xc2/0x860 [ 1352.366004][T21317] __sys_socket+0x14d/0x260 [ 1352.366028][T21317] ? fput+0x79/0x100 [ 1352.366052][T21317] ? __pfx___sys_socket+0x10/0x10 [ 1352.366075][T21317] ? ksys_write+0x1ac/0x250 [ 1352.366106][T21317] ? __pfx_ksys_write+0x10/0x10 [ 1352.366137][T21317] __x64_sys_socket+0x72/0xb0 [ 1352.366157][T21317] ? lockdep_hardirqs_on+0x78/0x100 [ 1352.366182][T21317] do_syscall_64+0x115/0x870 [ 1352.366207][T21317] ? clear_bhb_loop+0x40/0x90 [ 1352.366232][T21317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.366252][T21317] RIP: 0033:0x7f6de8d9ce59 [ 1352.366270][T21317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.366290][T21317] RSP: 002b:00007f6de9ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1352.366310][T21317] RAX: ffffffffffffffda RBX: 00007f6de9015fa0 RCX: 00007f6de8d9ce59 [ 1352.366324][T21317] RDX: 000000000000003a RSI: 0000000000000003 RDI: 000000000000000a [ 1352.366337][T21317] RBP: 00007f6de9ced090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.366350][T21317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1352.366362][T21317] R13: 00007f6de9016038 R14: 00007f6de9015fa0 R15: 00007ffe565d36a8 [ 1352.366392][T21317] [ 1352.580378][ T5711] usb 2-1: SerialNumber: ⴿ臉ₛ仜᳔㢤뗎塚烹⬧慝莒補␅悂첛复ꐗ頹㏛툕脖ഒ惷⬒廫䌷쳞℁൛䦢鐴籴얚꺳༄슐伆ᶫ鼣彬溫쇎荺䀺賘⹊똬Զ㲥恍転뭃⛯ᡰﱳ蠐㬰뜑ཻ [ 1352.606643][T21317] socket: no more sockets [ 1353.354427][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.416499][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.677813][ T5711] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1353.762490][T21332] netlink: 'syz.4.4227': attribute type 1 has an invalid length. [ 1353.783438][T21332] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4227'. [ 1353.979558][T21333] netlink: 'syz.4.4227': attribute type 49 has an invalid length. [ 1354.055858][ T5711] usb 2-1: USB disconnect, device number 71 [ 1354.293016][T21335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4228'. [ 1354.321953][T20018] udevd[20018]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1354.399923][T21335] set match dimension is over the limit! [ 1354.411560][ T29] audit: type=1400 audit(1782534015.155:4099): avc: denied { write } for pid=21318 comm="syz.0.4224" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1354.446940][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1354.521651][T21319] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:4 [ 1355.702574][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1355.734833][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.197459][T21352] lo speed is unknown, defaulting to 1000 [ 1356.228544][ T29] audit: type=1400 audit(1782534016.975:4100): avc: denied { ioctl } for pid=21351 comm="syz.2.4233" path="socket:[97536]" dev="sockfs" ino=97536 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1356.368560][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.383091][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.576019][T21354] ipt_REJECT: ECHOREPLY no longer supported. [ 1356.781258][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.926383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1356.934809][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.807821][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1357.856272][T21367] usb usb8: usbfs: process 21367 (syz.4.4230) did not claim interface 0 before use [ 1358.007030][T21370] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4235'. [ 1358.868872][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.407703][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1359.437539][ T29] audit: type=1400 audit(1782534020.185:4101): avc: denied { map } for pid=21378 comm="syz.1.4238" path="socket:[96913]" dev="sockfs" ino=96913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1359.501213][T21382] evm: overlay not supported [ 1359.889214][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.016242][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1360.270794][T21392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4241'. [ 1360.326495][ T29] audit: type=1400 audit(1782534020.995:4102): avc: denied { create } for pid=21390 comm="syz.4.4242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1360.425507][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1360.466188][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1360.489123][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1360.515523][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.580091][ T10] usb 6-1: config 0 descriptor?? [ 1360.816209][ T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1360.865722][T21387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.887044][T21387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.927765][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1360.958419][ T10] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1361.331976][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1361.346358][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.354574][ T9] usb 2-1: Product: syz [ 1361.362782][ T9] usb 2-1: Manufacturer: syz [ 1361.368126][ T9] usb 2-1: SerialNumber: syz [ 1361.394281][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1361.498664][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.505131][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.512154][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.544349][ T29] audit: type=1400 audit(1782534022.245:4103): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1361.631676][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1361.824640][T21401] ipt_REJECT: ECHOREPLY no longer supported. [ 1362.042789][ T29] audit: type=1400 audit(1782534022.675:4104): avc: denied { append } for pid=21405 comm="syz.0.4247" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1362.795875][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1362.907199][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.037016][ T9] usb 2-1: USB disconnect, device number 72 [ 1363.048426][ T10] ath9k_htc: Failed to initialize the device [ 1363.062838][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 1363.097090][T14537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.124212][ T84] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.135668][T14537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.165872][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.176296][ T5711] usb 6-1: USB disconnect, device number 37 [ 1363.314648][T21411] lo speed is unknown, defaulting to 1000 [ 1363.526319][T21417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4248'. [ 1364.216902][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.111018][ T29] audit: type=1400 audit(1782534025.795:4105): avc: denied { read } for pid=21432 comm="syz.5.4254" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1365.247998][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.271601][ T29] audit: type=1400 audit(1782534025.805:4106): avc: denied { open } for pid=21432 comm="syz.5.4254" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1365.340062][ T29] audit: type=1400 audit(1782534025.895:4107): avc: denied { ioctl } for pid=21432 comm="syz.5.4254" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1365.464504][T21442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.473056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1365.486867][ T29] audit: type=1400 audit(1782534026.085:4108): avc: denied { accept } for pid=21437 comm="syz.1.4256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1366.621347][T14537] net_ratelimit: 1 callbacks suppressed [ 1366.621366][T14537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.291400][ T29] audit: type=1400 audit(1782534027.915:4109): avc: denied { read write } for pid=21448 comm="syz.4.4259" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1367.483940][ T29] audit: type=1400 audit(1782534027.925:4110): avc: denied { open } for pid=21448 comm="syz.4.4259" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1367.995992][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.116990][ T29] audit: type=1400 audit(1782534027.975:4111): avc: denied { ioctl } for pid=21448 comm="syz.4.4259" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1368.295888][T21450] input: syz0 as /devices/virtual/input/input50 [ 1368.341518][ T29] audit: type=1400 audit(1782534028.295:4112): avc: denied { create } for pid=21451 comm="syz.2.4258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1368.460929][ T29] audit: type=1400 audit(1782534028.295:4113): avc: denied { getopt } for pid=21451 comm="syz.2.4258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1368.526295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.534472][T13707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.699909][ T29] audit: type=1400 audit(1782534028.715:4114): avc: denied { setopt } for pid=21448 comm="syz.4.4259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1369.098124][T21460] netlink: 'syz.2.4260': attribute type 49 has an invalid length. [ 1369.543570][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.572306][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.580622][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.605386][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.649963][T20878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.793754][T21447] lo speed is unknown, defaulting to 1000 [ 1370.814960][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1370.814978][ T29] audit: type=1400 audit(1782534031.555:4123): avc: denied { read } for pid=21465 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1370.998115][ T29] audit: type=1400 audit(1782534031.645:4124): avc: denied { open } for pid=21465 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1809 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1371.119400][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.267601][T20878] net_ratelimit: 5 callbacks suppressed [ 1372.267620][T20878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1372.620945][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.012626][T10999] Bluetooth: hci5: command 0x0c1a tx timeout [ 1373.054819][T21487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4265'. [ 1373.340418][ T5609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.422330][T21477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.433154][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1373.453515][T14537] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1373.497416][T14537] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1373.751058][T21502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4268'. [ 1373.797838][T21502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4268'. [ 1373.807095][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4268'. [ 1373.820388][T21502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4268'. [ 1373.829552][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4268'. [ 1374.369145][T17912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.380633][ T29] audit: type=1400 audit(1782534035.105:4125): avc: denied { write } for pid=21462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1374.482507][ T29] audit: type=1400 audit(1782534035.105:4126): avc: denied { add_name } for pid=21462 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1374.665330][ T29] audit: type=1400 audit(1782534035.105:4127): avc: denied { create } for pid=21462 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1375.158001][ T29] audit: type=1400 audit(1782534035.105:4128): avc: denied { write } for pid=21462 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=10398 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1375.185294][ T29] audit: type=1400 audit(1782534035.105:4129): avc: denied { append } for pid=21462 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=10398 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1375.244270][ T29] audit: type=1400 audit(1782534035.475:4130): avc: denied { write } for pid=21512 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1375.416675][T20878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.682969][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.374241][T21523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.408530][T21523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.529053][ T29] audit: type=1400 audit(1782534035.475:4131): avc: denied { remove_name } for pid=21512 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=10398 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1377.537508][T21521] net_ratelimit: 3 callbacks suppressed [ 1377.537528][T21521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.593348][T20878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.858170][ T29] audit: type=1400 audit(1782534035.965:4132): avc: denied { unlink } for pid=21512 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=10398 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1378.128248][T14537] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1378.134434][T14537] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1378.231922][ T29] audit: type=1400 audit(1782534037.095:4133): avc: denied { name_bind } for pid=21521 comm="syz.5.4274" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1378.286161][ C1] ------------[ cut here ]------------ [ 1378.292182][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 1378.299075][ C1] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#1: syz.5.4277/21529 [ 1378.308980][ C1] Modules linked in: [ 1378.313827][ C1] CPU: 1 UID: 0 PID: 21529 Comm: syz.5.4277 Tainted: G L syzkaller #0 PREEMPT(full) [ 1378.324835][ C1] Tainted: [L]=SOFTLOCKUP [ 1378.329163][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1378.339440][ C1] RIP: 0010:__queue_work+0xd31/0x12b0 [ 1378.344870][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d b3 dd 2f 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 1378.364504][ C1] RSP: 0018:ffffc90000a08be0 EFLAGS: 00010046 [ 1378.370596][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11005c0214e [ 1378.378576][ C1] RDX: ffff88803739b970 RSI: ffffffff8a8fa5e0 RDI: ffffffff90fec440 [ 1378.386551][ C1] RBP: ffff88802e010a58 R08: 0000000000000005 R09: 0000000000000000 [ 1378.394521][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff88803739b800 [ 1378.402497][ C1] R13: 0000000000000000 R14: ffffffff81ceec20 R15: 0000000000000001 [ 1378.410484][ C1] FS: 00007fc00cfd46c0(0000) GS:ffff8881241e6000(0000) knlGS:0000000000000000 [ 1378.419418][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1378.426008][ C1] CR2: 00007ffd37c0e028 CR3: 0000000056f24000 CR4: 00000000003526f0 [ 1378.433990][ C1] DR0: ffffffffffffffff DR1: 00000000000001f7 DR2: 00000000ffffffff [ 1378.441973][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1378.449953][ C1] Call Trace: [ 1378.453244][ C1] [ 1378.456070][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1378.461864][ C1] call_timer_fn+0x19a/0x610 [ 1378.466439][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1378.471551][ C1] ? __run_timers+0x560/0xb00 [ 1378.476215][ C1] ? __run_timers+0x560/0xb00 [ 1378.480883][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1378.486690][ C1] __run_timers+0x570/0xb00 [ 1378.491188][ C1] ? __pfx___run_timers+0x10/0x10 [ 1378.496217][ C1] ? ktime_get+0x9f/0x320 [ 1378.500530][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1378.505550][ C1] run_timer_base+0x114/0x190 [ 1378.510220][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1378.515406][ C1] run_timer_softirq+0x1a/0x50 [ 1378.520152][ C1] handle_softirqs+0x1ea/0x9b0 [ 1378.524898][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1378.530159][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1378.534986][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1378.540613][ C1] __irq_exit_rcu+0x162/0x210 [ 1378.545286][ C1] irq_exit_rcu+0x9/0x30 [ 1378.549553][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1378.555183][ C1] [ 1378.558096][ C1] [ 1378.561007][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1378.566966][ C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 1378.573451][ C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 20 f4 c9 09 e8 cb ac 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 1378.593300][ C1] RSP: 0018:ffffc900053c74d0 EFLAGS: 00000206 [ 1378.599350][ C1] RAX: 000000000000a76f RBX: ffff88802fa6ca80 RCX: 0000000000000000 [ 1378.607297][ C1] RDX: 0000000000000000 RSI: ffffffff8e15ae25 RDI: ffff88802fa6e178 [ 1378.615278][ C1] RBP: ffffc900053c7528 R08: 0000000000000001 R09: 0000000000000000 [ 1378.623277][ C1] R10: 0000000000000001 R11: ffffffff81d51fdc R12: ffff88807dc3ca80 [ 1378.631234][ C1] R13: 0000000000000001 R14: ffffffff90fbbb64 R15: ffff8880b853b4c0 [ 1378.639206][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 1378.645127][ C1] __schedule+0x1264/0x6730 [ 1378.649618][ C1] ? lock_acquire+0x1b9/0x370 [ 1378.654282][ C1] ? __pfx___schedule+0x10/0x10 [ 1378.659110][ C1] ? find_held_lock+0x2b/0x80 [ 1378.663785][ C1] ? schedule+0x225/0x2c0 [ 1378.668103][ C1] schedule+0xdd/0x2c0 [ 1378.672156][ C1] schedule_timeout+0x1b2/0x280 [ 1378.676983][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1378.682334][ C1] ? unix_wait_for_peer+0x260/0x2a0 [ 1378.687511][ C1] ? unix_wait_for_peer+0x260/0x2a0 [ 1378.692691][ C1] ? prepare_to_wait_exclusive+0xdc/0x2c0 [ 1378.698403][ C1] unix_wait_for_peer+0x268/0x2a0 [ 1378.703417][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 1378.708942][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1378.714992][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1378.720350][ C1] unix_dgram_sendmsg+0x1696/0x1810 [ 1378.725536][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1378.731061][ C1] ? pti_set_user_pgtbl+0x40/0x50 [ 1378.736089][ C1] ____sys_sendmsg+0xa4d/0xbe0 [ 1378.740855][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1378.746384][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1378.751653][ C1] ? rcu_is_watching+0x12/0xc0 [ 1378.756405][ C1] ? ___sys_sendmsg+0x19d/0x1e0 [ 1378.761235][ C1] ? kfree+0x1e5/0x6c0 [ 1378.765292][ C1] ___sys_sendmsg+0x190/0x1e0 [ 1378.769952][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1378.775129][ C1] ? futex_hash+0x311/0x400 [ 1378.779638][ C1] ? __pfx___might_resched+0x10/0x10 [ 1378.784939][ C1] __sys_sendmmsg+0x20c/0x440 [ 1378.789643][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1378.794837][ C1] ? __pfx_do_futex+0x10/0x10 [ 1378.799506][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 1378.804787][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 1378.809708][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1378.814889][ C1] do_syscall_64+0x115/0x870 [ 1378.819483][ C1] ? clear_bhb_loop+0x40/0x90 [ 1378.824145][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.830031][ C1] RIP: 0033:0x7fc00c19ce59 [ 1378.834423][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.854011][ C1] RSP: 002b:00007fc00cfd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1378.862416][ C1] RAX: ffffffffffffffda RBX: 00007fc00c415fa0 RCX: 00007fc00c19ce59 [ 1378.870381][ C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000007 [ 1378.878329][ C1] RBP: 00007fc00c232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1378.886282][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1378.894263][ C1] R13: 00007fc00c416038 R14: 00007fc00c415fa0 R15: 00007ffe48f40f78 [ 1378.902228][ C1] [ 1378.905257][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1378.912516][ C1] CPU: 1 UID: 0 PID: 21529 Comm: syz.5.4277 Tainted: G L syzkaller #0 PREEMPT(full) [ 1378.923426][ C1] Tainted: [L]=SOFTLOCKUP [ 1378.927731][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1378.937763][ C1] Call Trace: [ 1378.941017][ C1] [ 1378.943846][ C1] dump_stack_lvl+0x100/0x190 [ 1378.948511][ C1] vpanic+0x552/0x970 [ 1378.952491][ C1] ? __pfx_vpanic+0x10/0x10 [ 1378.956980][ C1] panic+0xd1/0xe0 [ 1378.960711][ C1] ? __pfx_panic+0x10/0x10 [ 1378.965109][ C1] ? check_panic_on_warn+0x1f/0x90 [ 1378.970220][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1378.975574][ C1] ? __queue_work+0xd2d/0x12b0 [ 1378.980317][ C1] __warn.cold+0x191/0x318 [ 1378.984722][ C1] __report_bug+0x30f/0x440 [ 1378.989224][ C1] ? __queue_work+0xd2d/0x12b0 [ 1378.993967][ C1] ? __pfx___report_bug+0x10/0x10 [ 1378.998982][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1379.003911][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1379.009203][ C1] ? look_up_lock_class+0x55/0x120 [ 1379.014298][ C1] report_bug_entry+0xe1/0x290 [ 1379.019068][ C1] ? __queue_work+0xd31/0x12b0 [ 1379.023809][ C1] handle_bug+0x1cd/0x2a0 [ 1379.028124][ C1] exc_invalid_op+0x17/0x50 [ 1379.032614][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1379.037447][ C1] RIP: 0010:__queue_work+0xd31/0x12b0 [ 1379.042800][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d b3 dd 2f 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 1379.062507][ C1] RSP: 0018:ffffc90000a08be0 EFLAGS: 00010046 [ 1379.068565][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11005c0214e [ 1379.076515][ C1] RDX: ffff88803739b970 RSI: ffffffff8a8fa5e0 RDI: ffffffff90fec440 [ 1379.084462][ C1] RBP: ffff88802e010a58 R08: 0000000000000005 R09: 0000000000000000 [ 1379.092423][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff88803739b800 [ 1379.100387][ C1] R13: 0000000000000000 R14: ffffffff81ceec20 R15: 0000000000000001 [ 1379.108700][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1379.114491][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1379.119854][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1379.125651][ C1] call_timer_fn+0x19a/0x610 [ 1379.130221][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1379.135315][ C1] ? __run_timers+0x560/0xb00 [ 1379.139975][ C1] ? __run_timers+0x560/0xb00 [ 1379.144662][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1379.150447][ C1] __run_timers+0x570/0xb00 [ 1379.154935][ C1] ? __pfx___run_timers+0x10/0x10 [ 1379.159962][ C1] ? ktime_get+0x9f/0x320 [ 1379.164310][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1379.169330][ C1] run_timer_base+0x114/0x190 [ 1379.174011][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1379.179194][ C1] run_timer_softirq+0x1a/0x50 [ 1379.183938][ C1] handle_softirqs+0x1ea/0x9b0 [ 1379.188689][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1379.193973][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1379.198818][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1379.204444][ C1] __irq_exit_rcu+0x162/0x210 [ 1379.209120][ C1] irq_exit_rcu+0x9/0x30 [ 1379.213362][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1379.218977][ C1] [ 1379.221884][ C1] [ 1379.224804][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1379.230763][ C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 1379.237253][ C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 20 f4 c9 09 e8 cb ac 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 1379.256860][ C1] RSP: 0018:ffffc900053c74d0 EFLAGS: 00000206 [ 1379.262910][ C1] RAX: 000000000000a76f RBX: ffff88802fa6ca80 RCX: 0000000000000000 [ 1379.270870][ C1] RDX: 0000000000000000 RSI: ffffffff8e15ae25 RDI: ffff88802fa6e178 [ 1379.278826][ C1] RBP: ffffc900053c7528 R08: 0000000000000001 R09: 0000000000000000 [ 1379.286791][ C1] R10: 0000000000000001 R11: ffffffff81d51fdc R12: ffff88807dc3ca80 [ 1379.294761][ C1] R13: 0000000000000001 R14: ffffffff90fbbb64 R15: ffff8880b853b4c0 [ 1379.302738][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 1379.308633][ C1] __schedule+0x1264/0x6730 [ 1379.313120][ C1] ? lock_acquire+0x1b9/0x370 [ 1379.317792][ C1] ? __pfx___schedule+0x10/0x10 [ 1379.322638][ C1] ? find_held_lock+0x2b/0x80 [ 1379.327290][ C1] ? schedule+0x225/0x2c0 [ 1379.331604][ C1] schedule+0xdd/0x2c0 [ 1379.335648][ C1] schedule_timeout+0x1b2/0x280 [ 1379.340562][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1379.345919][ C1] ? unix_wait_for_peer+0x260/0x2a0 [ 1379.351096][ C1] ? unix_wait_for_peer+0x260/0x2a0 [ 1379.356374][ C1] ? prepare_to_wait_exclusive+0xdc/0x2c0 [ 1379.362085][ C1] unix_wait_for_peer+0x268/0x2a0 [ 1379.367118][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 1379.372677][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1379.378722][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1379.384078][ C1] unix_dgram_sendmsg+0x1696/0x1810 [ 1379.389436][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1379.394961][ C1] ? pti_set_user_pgtbl+0x40/0x50 [ 1379.399981][ C1] ____sys_sendmsg+0xa4d/0xbe0 [ 1379.404724][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1379.410262][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1379.415538][ C1] ? rcu_is_watching+0x12/0xc0 [ 1379.420299][ C1] ? ___sys_sendmsg+0x19d/0x1e0 [ 1379.425147][ C1] ? kfree+0x1e5/0x6c0 [ 1379.429237][ C1] ___sys_sendmsg+0x190/0x1e0 [ 1379.433904][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1379.439087][ C1] ? futex_hash+0x311/0x400 [ 1379.443586][ C1] ? __pfx___might_resched+0x10/0x10 [ 1379.448878][ C1] __sys_sendmmsg+0x20c/0x440 [ 1379.453543][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1379.458742][ C1] ? __pfx_do_futex+0x10/0x10 [ 1379.463439][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 1379.468712][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 1379.473737][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1379.478928][ C1] do_syscall_64+0x115/0x870 [ 1379.483501][ C1] ? clear_bhb_loop+0x40/0x90 [ 1379.488160][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.494034][ C1] RIP: 0033:0x7fc00c19ce59 [ 1379.498427][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.518105][ C1] RSP: 002b:00007fc00cfd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1379.526534][ C1] RAX: ffffffffffffffda RBX: 00007fc00c415fa0 RCX: 00007fc00c19ce59 [ 1379.534499][ C1] RDX: 0400000000000041 RSI: 0000200000000000 RDI: 0000000000000007 [ 1379.542462][ C1] RBP: 00007fc00c232e6f R08: 0000000000000000 R09: 0000000000000000 [ 1379.550416][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1379.558363][ C1] R13: 00007fc00c416038 R14: 00007fc00c415fa0 R15: 00007ffe48f40f78 [ 1379.566346][ C1] [ 1379.569629][ C1] Kernel Offset: disabled [ 1379.573936][ C1] Rebooting in 86400 seconds..