last executing test programs: 9m2.689530476s ago: executing program 32 (id=57): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002d40)={0x2020}, 0xfffffffffffffc88) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x8, 0x8000000000000000}) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000100)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000180)=0x6) 8m45.320750802s ago: executing program 33 (id=104): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) gettid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r2, @ANYBLOB="080032000502000005003300f25f4e1d7b572e76c089c2592afe00b5d3cef76001bee8878b46f838c359a245dd85a991d2df6ac5e203bacca035556c5972c1ea932dcb8cd1a953111d"], 0x2c}}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x6, 0x2, @thr={0x0, 0x0}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x900, 0x0, 0x40000026}) bind$unix(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept4$unix(r3, 0x0, 0x0, 0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x9224}) r4 = io_uring_setup(0x4a89, &(0x7f0000000300)={0x0, 0xf118, 0x40, 0x3, 0x135}) socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) 7m51.118169613s ago: executing program 34 (id=266): socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000082c0)=[{{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000000180)=""/4, 0x4}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/1, 0x1}, {&(0x7f0000001540)=""/138, 0x8a}, {&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f0000008500)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/128, 0x80}, {&(0x7f00000026c0)=""/84, 0x54}, {&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000004c80)=""/196, 0xc4}, {&(0x7f0000004d80)=""/4108, 0x100c}], 0xb, &(0x7f00000027c0)=""/53, 0x35}, 0xffffffff}, {{&(0x7f0000002800)=@sco, 0x80, &(0x7f0000003a00)=[{&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/195, 0xc3}, {&(0x7f0000003980)=""/65, 0x41}], 0x3, &(0x7f0000000300)=""/10, 0xa}, 0x2}, {{&(0x7f0000002640)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000003d40), 0x0, &(0x7f0000003d80)=""/157, 0x9d}, 0x22}, {{&(0x7f0000003e40)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003ec0)=""/47, 0x2f}], 0x1, &(0x7f0000003f40)=""/106, 0x6a}, 0x8000}, {{&(0x7f0000003fc0)=@xdp, 0x80, &(0x7f00000071c0), 0x0, &(0x7f0000007280)=""/4096, 0x1000}, 0xcc52}], 0x5, 0x40000102, 0x0) (async, rerun: 32) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) connect$inet(r2, 0x0, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) (async) unshare(0x8040480) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f00000000c0)) (async, rerun: 32) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) (rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee9, 0x8031, r5, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7m30.682123245s ago: executing program 35 (id=321): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002d40)={0x2020}, 0xfffffffffffffc88) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x8, 0x8000000000000000}) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000100)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000180)=0x6) 7m10.726177314s ago: executing program 36 (id=378): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x109) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x2, 0x1, 0xfec00000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) r3 = socket(0x29, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, &(0x7f00000000c0)={0x4, 0x6, 0xc, 0x7, 0x6000, 0x6a}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1955c52deee41ad78b4566893615000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r8}, 0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x2b, 0x101, 0x40081208, 0x0, 0x3, 0x7, 0xa18, 0x0, 0x0, 0x40, 0x4}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x20440, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffd, {0x1000000000000001, 0x0, 0x0, 0x800000000009, 0x0, 0x0, {0x1, 0x0, 0x7, 0x1000008, 0x8, 0x1a4143c, 0x1, 0x5, 0x40, 0x2000, 0xf3, 0x0, r10, 0x80000001, 0xffffffdf}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m10.090445533s ago: executing program 37 (id=384): socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYBLOB="18775c9592bc272f1aa4e3e67ec568d2c796469e8bcc8ff114780b6b6fd6b0065011bf275df70055a9fc1f2e1d2175322088c5e0e82d1fdfd8c35e0965445f6448c07760d5f0ef5bd36cc58f7e7097f4de44b99c995d04292bd437f5c8a146bf8b2dd91d9eb9676a8afd5bfee4628ae80f8da336dab788fc949cf3f70fcf90a18e5f486a4a46d75dfedaa7c6326500bcfa8f89096cf814893e192d9a51af132ed8979c538d065dda466b37ffd0055df6cb03c63d7e617346d49191d5d8f519a00cf77f8074dd9a23a2b0ecf4"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000007dea8bb4bb86420c00ee71a01d9550ea90900c5422c9a89df45a55c1280fa0b52ca50fb754690d31bc06e854f883866ee18e8c1d9a48b6a186dc058525064172b38ef53d5c08074022b4f9dfeaacb5ce29f9004850316e9472f1b337940ee37e8beea4ddbefcdd065f6f52a4f36a3b58e888e9faa4fe4f2dfa717067efec8ee339277f55d39fe9c7ed8a310ea87ef6fedfd8784a5a287952f62b47683dc83c1420a80b927712d24876b1deb8aebd050f20ea9a47b31f579ea6ddb556166cae2d36090c099bbf3c59b3c99a29e3a03734379d86236c15acb134520ef52dfb1ea0dfb94c8ba020fa42e7c4", @ANYRES32=r3, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r8, 0xc1105511, &(0x7f0000000040)={0x7, 0x3, 0x40, 0x10000, 'syz1\x00', 0x4000041}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x321}}}, 0x108) r9 = accept4$llc(r4, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRES16=r9, @ANYBLOB="d4a50d1693a56ae2ee6e635de632621b4bd8ed3905a733e0eead628cf651a5a194c40c806de944f7504958b62298a411c170a927dc980bd7f8b8f44c40c9be5497db2abb16b637531990deb0be5c5cc36703e819722e29"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r10, r10, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r10, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup=r11, r11, 0x2f, 0x2000, r10, @value=r11, @void, @void, @void, r12}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003400)=@bpf_ext={0x1c, 0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000090000000000000003000000130a02000400000018030000faffffff00000000000000001800000001000000000000000b000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ed000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000085100000040000009500"/104], &(0x7f00000008c0)='syzkaller\x00', 0xb, 0x1000, &(0x7f00000034c0)=""/4096, 0x41100, 0x4, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x2, 0x4000a, 0x0, 0x5}, 0x10, 0x81ae, r11, 0x4, &(0x7f0000003380)=[r11, r3, r11], &(0x7f00000033c0)=[{0x4, 0x5, 0x10, 0xb}, {0x0, 0x5, 0x9, 0x3}, {0x3, 0x3, 0xb, 0xc}, {0x3, 0x4, 0xd, 0x4}], 0x10, 0x53}, 0x94) r13 = socket$inet6(0xa, 0x1, 0x0) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) 7m5.104582593s ago: executing program 38 (id=397): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f00000000c0)={0x0, 0x200000}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x0, 0x1}) 7m1.575682329s ago: executing program 39 (id=405): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000500)={0x0, 0x4e, "e8e7b8b8a8fca3e7001c4f6bdbf73ba31e28387cd75b0bb2ea403cbedf90914339f0df1f3871e8d67c7f1edd0252e952fb689f74ec194af71b0a58ba24bf59da562e1dbbc9d9a11840091aed011f"}, &(0x7f0000000580)=0x56) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0xb0, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x6, @mcast2, 0x5}, @in6={0xa, 0x4e20, 0x10001, @dev={0xfe, 0x80, '\x00', 0xb}, 0x7}, @in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x6, @loopback, 0x6}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e24, @remote}]}, &(0x7f00000006c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e22, 0x4, @empty, 0xa}}, 0xb6cb, 0x1000}, &(0x7f0000000900)=0x90) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000940)={0x0, 0xf001, 0x6, [0xff, 0x1, 0x7, 0x0, 0x7ff, 0x7ff]}, &(0x7f0000000980)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000f80)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x5011, 0x6, 0xe3b, 0x0, 0x2, 0x2}, &(0x7f0000001040)=0x9c) sendmmsg$inet_sctp(r1, &(0x7f0000001100)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x80000000, @mcast1, 0x800}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000080)="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", 0xfe}, {&(0x7f0000000180)="a57271c5acd6502276cc8b8f7289aad98d39f075999055a5828023ece8c980545e95a074d0a60f3b4da01970f5cb7994dab99ee2e40411c571f9f7701b852279d4e50ee71bc5fb74fea8a56f82b49cd92977f275e67f6cbc292edef4976b797602048df185a468edbfe18fdc5c30c69e70ea729d3f00885a1c50e82cf7ac22bdfa6d61712a35c2d57e3c06a14ac2e25b6ab065e55519f39fea131fcb446ec9ecead354773fac7a41a21d8fa98fa2ca74cb2a46fa002af13b2e0c861f590dd03e144e814f6b7348fbf0cd768b8e65e6b92970ce2e435a1173b275ca17ec816126ac71585a0b5713140d4a556c226d941e2892b78c5da6ab", 0xf7}, {&(0x7f0000000280)="9986b6808d92ac881dcdd10ac488214aac892b8d7a06e747d86df79f7b430da04fef65283c7765a6e87c5074fc78cc566d5f7f266cdc026d026a14b7dbed77a6e6b81024e103091b9cd81b3b023dbfc3c0b485bbe168dccc9a7b6e709886eca755624581d13a95e7073dd7db20da0d217875257d567e2d61077394981b4d76115cd6817af386b70069e4d6f246af0533cb7af9d696f6e95487592cc37d2fb69b3035a46394679e1c5dba8423f60992f33e1006a8dafec4f8cd57ffb1b40a8a6e9aea44ba4a", 0xc5}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="c39e78f1752194e65df293bea5e3fcf9e831f92847f3bc7f904cf6e8e5bf64a5f4f0704902098a87af27ab7f69897c29eb47e790d6a3618a00f93a6e3c2535d24e623970c0acf1d2d28c6bfcc6da1c743953a5d1d82c61e94af150e8a85eef4ed99106999dccfaf7e33c80bf8248e26e64ba0b84bdc0425e74457e3eb6cb9e11743ab979cfbcc1180f6506f4b564a7b5e8a0c8bbf6edf085f3b286da4e924651be930f537836", 0xa6}], 0x5, &(0x7f0000000700)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x6, 0x10000, 0xffffffff, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0xfff9, 0x204, 0x0, 0x8, 0x5, 0x5, 0xfffffff9, r3}}, @init={0x18, 0x84, 0x0, {0xbc6, 0x3, 0x40, 0x4}}], 0x68, 0x4000000}, {&(0x7f0000000780)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000800)=[{&(0x7f00000007c0)="b5158549efcc710e910fba8ea32fcd9ddd22ee94549b", 0x16}], 0x1, &(0x7f00000009c0)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x4, 0x6, 0x1, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8002, 0x4, 0x2, r5}}], 0x40, 0x4000800}, {&(0x7f0000000a00)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000a40)="af0a1bcc9661a1dd89f3ce4d84e3e62ab3e06e6959361c55685f7acabbc469a6c6029d59f5ab408e19ee5703889c96a0fd241e4f1125b42688121a14e2df20bf7fa4a5089c91c780dcd1659ddc8b178555861e917b55b83e42dafc7d2d976b092bc4cf57184eceded1a81a6548413f1895db97b899f65415b152b2f39f25481a529ad0a39625ce4508b380d9db620b06ba0554a87ecbcf7ede38ef5dabaccbeb71eb8b73a4854537c96c3aca969a152a16540014d3e78c04b4845c3244beaa6b6c6d291e2c3f08586e", 0xc9}, {&(0x7f0000000b40)="5b8bd801393bf8d73202cc5671cb1ceeaebdb5a34a938afff9903a6889119a19ceec69b0bb4efff13418b989169a3d1ea079f28a982c03349dbae2953a3bb7cd17fb06f0012f1c713fd90743f018055182375e57ecc649ef82d63617f036123554a1926b4676a505f5e6d4a64e1e4b58b09e663cedf7ecafdc98d036faac2952fe71d5b10a8e79ee9a1315c699c4ad929b66773cfdd1efd0ba1e373d6b7a506f27404e1a2f4ef18ea74c0949b0778fe9ce679c0a06d68b7dc6edc95261ef5c78708a3cfe30d8e3c07008335f54c3422308a8ffe829a899a9446da3ce8220c267", 0xe0}, {&(0x7f0000000c40)="b85fbd51ef0045990fc19d704219cf0fb851e5177ae8c9bcdc65bed08713bf9d5822c50c33e2198d9619ee92c3bc448a147c40a1829e95f40326b86896fddc7f6b01d5fa90e345a400548a92b69665273a4602d3ee2d9dbabd126815", 0x5c}, {&(0x7f0000000cc0)="fb5b9437253ee880640f97e471e2e28fa3fdf1f95a209a85a918e1c881334af13d7e998604135ae54487fa3263b43fb718650784f1426575137dcc916b8bc8c26e3c66f8b1f79ede65faf8859bdf9c5c3b85bc265a10503bf19eb96712327682902b1d6c3a4806d673a09ce5440b3490e7141dcda8e739e7db2338077a17856507992f24269da37a1351657b033e57914abca3d6e07f5138890f30b9601eaf202d556e483915fefcace5a97f9deffe0b86887c2f146a3dcf236bb7dc02b98459e7a593e89db1703dde6d2e18b270ad5bdaeff2f368a359b15e954a9ac76e", 0xde}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)="e8204e6d13d23c15161443c9c7f0578c499e15287c6e6d8e552850ab8f3d8e4617a6d6baa26f426e9b5991cf4a68c8bd56527df0d8d3a24ec4cc6eba90dc38e9d18d2366db1ae3fdb72ff1ff9588112486fea4944dce98944c31a1a967d4b40676265a1efe2a180ab00c05ba4d0768692d4fb180749f35af53b2daa34c3cb4d9979ae9577fe1b7beb89469d4da7cf1665cbc1e3ded63d6ae1b98acc6fc2e8ac2d29ecd0e8e294283602bb5eca1f5911bd4023674b10efd8fce01b02d43544a1cc57a9367fe22d4de4cfc85265c2b265d18", 0xd1}], 0x6, &(0x7f0000001080)=[@init={0x18, 0x84, 0x0, {0x7ff, 0x800, 0x2, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x800, 0x4, 0x8002, 0x7fff, 0xb5fb, 0x6, 0x7ff, 0x5ba37302, r6}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}], 0x60, 0x54805}], 0x3, 0x4000800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000011c0)={r5, 0x90, 0x10, 0x4, 0x2}, &(0x7f0000001200)=0x18) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000001240)={r4, 0x3, 0x4, [0x0, 0x2, 0x8, 0xd9eb]}, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000012c0), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r9, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) syz_emit_ethernet(0x53, &(0x7f00000013c0)={@empty, @multicast, @void, {@llc_tr={0x11, {@snap={0x1, 0x0, 'x', "a1d18c", 0x6, "e7dd05fbbbdd36eaa617e961d87ed361c323a7abca92c0b60231ae539c8e260572f4ee2ecb5d65851e802e876ea43569de9f95e02606a8ea3259477300"}}}}}, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000001440)={0x52}) syz_emit_vhci(&(0x7f0000001480)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x7, 0xc8, 0xf0}}}, 0x7) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000014c0)=0xe, 0x4) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001500), 0x40000, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000015c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x7c, r11, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x23}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008080}, 0x40841) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001700)={r5, 0x818}, &(0x7f0000001740)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000001780)={r13, 0x3951}, &(0x7f00000017c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000001800)={r7, @in6={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x80000001, 0x6, 0x1, 0x41, 0x10, 0x3, 0x6}, 0x9c) writev(r10, &(0x7f0000001b00)=[{&(0x7f00000018c0)="bf2720a0a0e6e8748d761755f9690c8e3003928e775be36476375fdf0c8ec159868fec385521f4f6c166c8f6149646bddb6d72c7e058307d3645e6c7070123f3e4a285394fdce329ab372a2d517dc10d225e6b82b75a942a13e030bee023d43a02a8f4c24bbd1b97b7c33262e19047188059753cebb408b74bfed7188d5063d15bc484fee36d9310630a9ffe52d180580b9893b919cf7857e52a02ebd1e870e52bee5db98d93b419e894", 0xaa}, {&(0x7f0000001980)="2d2ddb", 0x3}, {&(0x7f00000019c0)="5e27360ba312e137a5bc7dae5054f61fa8146b01cb9446b431d6351c1884f91ce2c339dc645528d25b5a5d98cb29cdfa52a3cc58b1e5db7ed8bb000140380ac5b6ba06bfec0b602188106613efdc5a5730f5705d4b481e504e661e2e79f5af597d1e8451ec79440ff860210c6ce5430e36f4e315f848b163f1502820864bdccb91913c6c3d056b8e2fcf26d65d2a11d22f3d22d4aa1490d729a8fa1ee74f9cac32bd67199414fe7d1733a79be413551a1857f3e3a861ebfe7b6dc7c8c8b891697d48d62096acae5d237c89b4308490b0e65c", 0xd2}, {&(0x7f0000001ac0)="4c986d7895626b5e81bd16bcdde9c3b2d94dd89e6a674f4c593d7490f0f8ad30cd11f88402010d664ff97eb90a3c9632a64d93a1d7179c51", 0x38}], 0x4) sendmsg$nl_generic(r0, &(0x7f0000002d00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002cc0)={&(0x7f0000001b80)={0x1130, 0x23, 0x200, 0x70bd29, 0x25dfdbfd, {0x12}, [@nested={0x111b, 0x10c, 0x0, 0x1, [@nested={0x4, 0x11a}, @nested={0x4, 0x9}, @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x10e, 0x0, 0x0, @fd=r10}, @generic="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", @generic="2f2bf409fa61688c029795093ba24b1f2f6fb65edd59d6109ffca5120eebefb3800bc952ecbf4abb83f38bf41de420ec027288e70910ade138558d265c6c1f6062bc572cc1ef9e7f219b685b732199462cd629f0696d05dc05e56a9d2b68fa36b7435b42286d84c9c1fb2f21bf3e5de0a7671d48b088fa9157717f758ce10eb7491fb2834004c4de8e6169236fe24a3412699a31f2b3c49af6fd2b4e7328c8c20c27987c677afe839d1f1b57b97af2df2f5be298274f3ae22a5178560a31a4e6b611abc0cfdcde6432f61a7b6ca2789cd1d5f58af31fccdfac639efb1d381c11c794eb4599a2bf8699ce7b3d5319d80022ce330cd7ba397293b6105fccda1c"]}]}, 0x1130}, 0x1, 0x0, 0x0, 0x20004001}, 0x2000c8d0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000002d40)=""/215, 0xd7, 0x40000002, &(0x7f0000002e40)={0x11, 0x5, 0x0, 0x1, 0x9, 0x6, @broadcast}, 0x14) 5m15.656519812s ago: executing program 3 (id=662): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4620, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000600)=0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r2, 0xae64, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x4507, 0x4) sendto$inet(r0, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 5m15.207056284s ago: executing program 3 (id=667): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101"], 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffafffff15, 0x3, 0x4, 0x1, 0x4]}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r5, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fb, 0x0, 0x0, 0x1c, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x2, 0x400]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff001, 0x7f, 0x72c7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r6, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = dup3(r1, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x1000000000000, 0x0}) 5m9.106223052s ago: executing program 40 (id=679): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0x1, &(0x7f0000000140)={0xb, 0x8b}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0xa2000, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0x6, 0x3ff, 0x4, 0x0, 0x4e8c}, {0x40000001, 0x34, 0x9, 0x6, 0x4}]}) (async) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000340)={0x8, "f2870e4a81361a4385c93bd289a6348b665130f27c307547d5ee805cf9acd200", 0x1, 0x103, 0x5, 0x8, 0x4, 0x4, 0x2, 0x8}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d022abd7000fedbdf2501000000050006000200000005000500040000000800040026000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000400)=ANY=[@ANYRES8=r2], 0x0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="85f60c7688011bf1b5b07c74d01eca13fc03544a3e5beb66526295fe9051b1569bba806ef362db79d54f5d1972713276c297c0c956dbba0dd9ec4dbda86d550a045ccb3cd58589b166a1c12b94ea02ed68375bd2ba5395c5b476a9edc208d9e08a7543f1bc5b5cc50cc4b1fb52029afcf22a428637c85c11002bb46d07110e2ac238dbfc613f1a327b539d8c566e4fb334609348511e78c2ef6cfe4af1d7af1bc7458bbf84e9deb2550fcc1a7b7b49b05f6c849ad0c39b6b4f4f28f497ce7162bd0dff5041fd5ced9be5eed2986211803abb55280f2c1963aa9d56cca78d27b8012ed5e598fd83ba5e7ab5e8822abc7f", @ANYRES16=r5, @ANYBLOB="10002bbd7000fcdbdf25010000002c000600af00000014000100fe8000000000000000000000000000201400040006000000020000000200000009000000"], 0x44}}, 0x4040887) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0x0, 0xa}, {0x7ff9, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0605000900bad775aa1b71da", 0xe, 0xfffffffffffffffe) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010246b27220dd0432909a980102030109021200011dfbd4c40904b40000020a0402"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, 0x0, &(0x7f00000009c0)=0x1e) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 5m9.097827627s ago: executing program 3 (id=683): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000280)) write$tun(0xffffffffffffffff, 0x0, 0xfdef) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendto$inet(r0, &(0x7f0000002580)="c5", 0x1, 0x840, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) 5m7.34059081s ago: executing program 3 (id=688): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x799a, 0x4001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0), &(0x7f0000000300)=""/104, 0x68}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 5m7.155888626s ago: executing program 3 (id=689): r0 = socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x411}}], 0x48}, 0x0) listen(r0, 0x7f) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x1, 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1421], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r5, 0x0, 0xe, 0x0, &(0x7f0000000f80)="dd7e7bc2300823a04347f02db2c6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m5.888575462s ago: executing program 3 (id=695): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pwritev2(r3, &(0x7f00000008c0)=[{&(0x7f0000000100)="d01786c638f1d371da", 0x9}], 0x1, 0x800, 0x186, 0x12) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000280)) write$tun(0xffffffffffffffff, 0x0, 0xfdef) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendto$inet(r0, &(0x7f0000002580)="c5", 0x1, 0x840, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) 5m5.568706625s ago: executing program 41 (id=695): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pwritev2(r3, &(0x7f00000008c0)=[{&(0x7f0000000100)="d01786c638f1d371da", 0x9}], 0x1, 0x800, 0x186, 0x12) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000280)) write$tun(0xffffffffffffffff, 0x0, 0xfdef) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendto$inet(r0, &(0x7f0000002580)="c5", 0x1, 0x840, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) 5m2.416511672s ago: executing program 4 (id=701): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) socket$packet(0x11, 0x2, 0x300) unshare(0x600) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfefd, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5m2.195531854s ago: executing program 4 (id=703): syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async) r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) (async) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000000340)=""/170, 0xaa) (async) read$char_usb(r2, &(0x7f0000000340)=""/170, 0xaa) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x1c0, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x0, {0x8}}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x3, &(0x7f0000000040)) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) 5m1.436473042s ago: executing program 4 (id=705): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e22}, 0xffffffffffffff90) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xd, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000a932ff9f59f22b5b79c3e9e9e7ecf5faca8b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$kcm(0x10, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="11000010000000000000420000000800010070636900110002000000000d0087006c325f64726f70730000000005008700"/66], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x4800) syz_clone(0x80e1280, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x58, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x8008044}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m0.424421007s ago: executing program 4 (id=709): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt(r0, 0x6, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0xee518a3114f65437, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fallocate(r1, 0x0, 0xfea000, 0x2000402) timer_create(0x1, 0x0, 0x0) unshare(0x2c020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x25, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x200}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486"], 0xfdef) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085508, &(0x7f00000000c0)=0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x12, 0xffffffffffffffff, 0x231cd000) syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) add_key(&(0x7f0000000040)='cifs.idmap\x00', 0x0, &(0x7f0000000180)="100c060a63e57fd1b96900000000", 0xe, 0xffffffffffffffff) 4m57.017909092s ago: executing program 4 (id=715): r0 = socket(0x27, 0x80000, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0x4, 0xfd, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x25000, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x2, 0x10, 0x0, 0x1}, {0x0, 0x1000, 0x9, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0xe5, 0x3}, {0x1000, 0x0, 0xd, 0x0, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0x3000, 0x0, 0x4, 0x7, 0x8f, 0x0, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0xe000, 0xb, 0x0, 0x5, 0x0, 0x0, 0x80, 0x3}, {0x100000, 0x41000, 0x3, 0x82, 0x0, 0x10, 0x9, 0xe}, {0x2, 0x1}, {0x1, 0xfffe}, 0x10000, 0x0, 0x0, 0x10, 0x2, 0x800, 0xffffffff, [0x0, 0x0, 0x10000, 0x5]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002240)=@newqdisc={0x274, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x280, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x5, 0x1000, 0x7, 0xc, 0xf, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffff81, 0x7, 0x2, 0x0, 0x3, 0x17, 0x5}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x7}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "e388bb7f9c7394afb0dfe691400609e365f521779aaa9beed4a736410fbb3c94d7abda7eb8cb7ec5c4d8e6a8df15bed2e70ed66a59ef27d84c3b49effc5b83c78aab0366b034bf5886e90845ec5b7bee8f8d719b2947b2702fb7051f83986f0306746e22a8cd70d6db836d7c8aaf7b53ac9da0cc3cd51305026ffec0e6313ad84dbd26e47ab834b1441213b26d44cda2be0463012ef9d14f1683b4a118d8cb3e3452555f2573092a4d286fc825da2b67278f9f9322778e207bf364b63beac2e3895f6662f613958b122406d808609d3a86001e4f44ce44102b3627472bee6ba5f93cc997c1b24def6e97ab5916084189147959badccb10a9e5439a85812e0429"}]}}]}, 0x274}}, 0x4000) 4m55.732564481s ago: executing program 4 (id=718): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x6, 0x2}, {0x7}}}}, 0xf) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek(r1, 0x2, 0x4) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x155555fa, 0x8001, &(0x7f0000000180)={[0xffffffffffffff95]}, 0x8) open_tree(0xffffffffffffff9c, 0x0, 0x8100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f000001c1c0)=""/102397, 0x18ffd) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000b0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/19], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc044) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12) getsockname$packet(r1, &(0x7f00000000c0), &(0x7f0000000180)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x9, 0x2, 0x4, 0x0, 0x5}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x709c}, 0x94) 4m55.479637501s ago: executing program 42 (id=718): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x6, 0x2}, {0x7}}}}, 0xf) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek(r1, 0x2, 0x4) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) epoll_pwait(r1, &(0x7f00000000c0)=[{}], 0x155555fa, 0x8001, &(0x7f0000000180)={[0xffffffffffffff95]}, 0x8) open_tree(0xffffffffffffff9c, 0x0, 0x8100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f000001c1c0)=""/102397, 0x18ffd) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000b0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/19], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc044) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12) getsockname$packet(r1, &(0x7f00000000c0), &(0x7f0000000180)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x9, 0x2, 0x4, 0x0, 0x5}) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x709c}, 0x94) 3m27.528639918s ago: executing program 6 (id=948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x4, r2, 0x10, 0x1, @in={0x2, 0x4e20, @local}}}, 0xa0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOGETCMAP(r7, 0x4604, &(0x7f0000000200)={0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) 3m26.496577142s ago: executing program 6 (id=950): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x8}, 0x2, 0x0, &(0x7f0000000740)="ec36ee3744e7561255cf31303b4132aa2f5409878abdf8b2347231fefd0fc0c4d688ccf53df6143738712d76609742b141b4c9219c56f09ccbd8ab7c2d46743570ab17117bc5ea4d6fb4a7503f5fceab7cffbb2ef557b53cd35bc07f6cc132e0712194f3aa5da10ced23d891dbb5b199b220a7bf99bf", 0x76, 0x0, 0xc, 0x207, 0xad05, 0x10, &(0x7f0000000200)="541cc33618a72fbba0f3040203a0ca84663148ca57009bba6626acc7806b3f255406bc5eee275a91bbb7af48ea650ecc51fea7e837c07448"}) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xffffffffffffff74}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000ec0)={0x20, 0x8, 0x1a, "e4bdeb4c7b59ba48e5736681f409772678c9033821435ae7676d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r4 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000840)={0x0, 0x15, 0x6, "428a7482a325"}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}, {}]}) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r4, 0x0, &(0x7f0000001f80)={0x44, &(0x7f0000001c80)={0x0, 0xf, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r4, 0x0, &(0x7f0000000b00)={0x44, 0x0, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x82, 0x3, "fd9c87"}, 0x0, &(0x7f0000000a80)={0x20, 0x84, 0x3, "b347ec"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "f4ed29"}}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = syz_usb_connect$uac2(0x6, 0xc9, &(0x7f0000000580)=ANY=[@ANYBLOB="1201500200000008351201004000011f03010902b700bf200f080b0000010c200e0904000000010120000924015a0008260000072408050503000924060605010009000d2407050200020200000002000904010000010220003acf6c6916254727d6b8680904010101010220000624020102030924020106090200c40f2402020000030005e30897898daa09cd9bf6367690595d188501003c87ff0f0904020000010220000904020101010220000a2402020500090000000924020140030c006c090582094000"], &(0x7f0000000f00)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x200, 0xfd, 0x8, 0x9f, 0x10, 0x6a}, 0x106, &(0x7f0000000b80)={0x5, 0xf, 0x106, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "448a02ff7458bdfc10746f2d75687e49"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xa2, 0x80, 0xfff}, @generic={0xe3, 0x10, 0x3, "6dfe35676634e35a53031524ecd4c0cb2671cba67d4ce582bb86a31fa98dc79a770d0d8c604c7a9e48b43efd2525e6bc1c1ea05e528c93a65a797d3479a2a7f4a0449b1e3eea8c04838aa6bede0e1a79e0a38268839b27b5147d8b510625ba6c20740b16fd7a81af88f489c54c95f29ccba2e3bf8a2d22f16938d2431fbbead1e3d220678233945b97601e926f294bf2454b566acbff3c5120dceaee841ae27527bb78c0f40b193ec8638a8a1f79a4318a1e9f31cca5e633dd459fe68c32e3ef9f3ef23248e280a38463067bffd82098b2dda6f3437524b34a66275a02ae7831"}]}, 0x5, [{0xb7, &(0x7f0000000100)=@string={0xb7, 0x3, "787bb7d85f438fa10eed77795adc411c9dc204a8226e76dca44ac931e69e3278eeb34406218a95c3400de0a94ff62775391799372654203ef5cc96da7129cc036050299539d7b7ee78ba28488c27f47b9487824f70b911d334b3fa252437fab375a3bfe66366a11a5ca673f84c71525cb6a84d0ce7f3250c034b8ee210681db2ce685eaf1054a50bff59f0a3004c8ab37cc46d42d9eb67effdf3d8748d4f1ff140d723d9300f335cb67c900948e5a6df8df7207430"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x1809}}, {0x9d, &(0x7f0000000d80)=@string={0x9d, 0x3, "88d8c73476e3dcd6d8adc902f64c75eac51acdf70efeb1e69a89fb738f05ae5aaaf25e47609acbfe85384e1142cd105cb83d3bd59a9ee8430b6f4db8add3ce06c57fbc33bddb7bfade9c62eecd330c0af577ebc7b60c5d86cb023052bc7759e999b3530ad8bdcad921ca800b27bf35b71c067fc1290742dbfc47be6cd154008349c450004477940bea8913f50383a0f4ddfbdfc960ae4f86ae2cc0"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x2409}}]}) syz_usb_control_io$uac2(r5, &(0x7f0000001080)={0x14, &(0x7f0000000f80)={0x40, 0x5, 0x80, {0x80, 0x22, "b29304ae3d3bb89dfa59ac21e73b7a2015ad6545abe58768d28a0b8b50e29f26148330e320207740b12077c2fb312e0471761c6071e3cc377ff2c1c1d5a1756ddd3e6dd4757ca39700764a9cdc568bafc45bcf52e3bcf1876e940c11dcf79c7ff68320e0ada532335bb7165721756be534b1066fd437e8495f0f24bb8148"}}, &(0x7f0000001040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}}, &(0x7f00000013c0)={0x44, &(0x7f00000010c0)={0x0, 0xf, 0x69, "c983ee73d6280b1c4d5f3a4998959b7d5897007050b05f6d0a8104e6609e51f2dfc01e7d0da70dede1b6aee195a77cf266b30402893a47cc27ec68c3e2357adfe160d0c36299b48274ba30d1452f13a4e2f38171a13943dee2c9295621609b6e95c2b64837913fa167"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x5a}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000011c0)={0x20, 0x81, 0x2, "8265"}, &(0x7f0000001200)={0x20, 0x82, 0x3, "917f30"}, &(0x7f0000001240)={0x20, 0x83, 0x3, "bfa541"}, &(0x7f0000001280)={0x20, 0x84, 0x1, "03"}, &(0x7f00000012c0)={0x20, 0x85, 0x3, "9d4ebf"}}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x41, 0x0) lseek(r6, 0xfffffffffffff3bb, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x3, 0xfff2}, {0x9, 0xffff}, {0xa, 0x5}}}, 0x24}}, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000380)={0x20, 0x17, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m21.752938608s ago: executing program 6 (id=965): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x80}) setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) getitimer(0x0, &(0x7f0000000800)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) 3m21.059824771s ago: executing program 6 (id=967): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x799a, 0x4001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0), &(0x7f0000000300)=""/104, 0x68}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 3m20.17890248s ago: executing program 6 (id=972): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3}, 0x14) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x6, r3, 0x4, r4}, 0x10) 3m19.742418194s ago: executing program 6 (id=974): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8854) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) fallocate(0xffffffffffffffff, 0x33, 0x6, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 3m19.566225815s ago: executing program 43 (id=974): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8854) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) fallocate(0xffffffffffffffff, 0x33, 0x6, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 3m1.096438657s ago: executing program 9 (id=1024): r0 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x80) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d9be2440830447374d52000000010902581e0100000000090432f0", @ANYRES64=0x0], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d9be2440830447374d52000000010902581e0100000000090432f0", @ANYRES64=0x0], 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x5, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000000)=0xfffffffffffff748) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000000)=0xfffffffffffff748) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) 2m58.445682336s ago: executing program 9 (id=1030): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000340301000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00') read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r2, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4001, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="8c7f93a965", 0xfffffe47}], 0x1}}], 0x1, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000ac00000000c0a010100000000000000000a0000067c000380780000800900090073797a320000000008000340b24209fa56000640c4fc983637a7d5d3a89f431e262f1d064f3c586e80d68936ed14b539f4c3dcea82ea0aa0c4d6af8f7af521a39a022b426a17fb0d27b49c722b1a255e789ad020e2a5e1dd0000b0bc1902d9390439ad11c0d2000008000340000000060900010073797a31000000002446b8801c0000800c00018006000100d10300000c000440000000002df31ab304000080140000001100010000000000000000000100000a"], 0xe8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) dup(r9) 2m56.704310874s ago: executing program 9 (id=1036): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x4, 0x0, 0x0) socket(0x23, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4, 0x0, 0x0, 0x1d}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x10}, {0x0, 0x3}, {0x0, 0x40}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xb5}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x8, 0x0, 0xfffffffc}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x19, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000c62d008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000100095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020}, 0x2020) inotify_init1(0x800) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x2) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) 2m55.98890681s ago: executing program 9 (id=1039): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x799a, 0x4001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0), &(0x7f0000000300)=""/104, 0x68}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 2m55.82820517s ago: executing program 9 (id=1041): socket$netlink(0x10, 0x3, 0x6) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x0, 0x6, 0x2, 0x100000, 0x1, "f70000000000000000deffffff00", '\x00\x00\a\x00', "0300", "0001ffff", ['\x00', "808e88e2e9ffffffffff00", "0cdd42000000000000c20d00"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000ac0)={0x7, 0x7, 0x3, 0x9, 0x5, 0x81, "4f4b281fd604be0ebcdcb60d1e532e21", 0x4, 0x2, 0x6, 0x8, 0x10, 0xc, 0x10}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) 2m55.393001441s ago: executing program 9 (id=1043): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x20323159, 0x500, 0x2cc, 0x4, @stepwise={{0x1, 0xfffffffb}, {0x4, 0x4c7}, {0xa9}}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r1, &(0x7f0000000080)=""/41, 0x29) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0xfffffffffffffffc, &(0x7f0000000000)) socket(0x11, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f0000000500)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff690000000000010000001800000006000200861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) remap_file_pages(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x600, 0x20) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x200000c, 0x200000006c832, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000190a01040000000000000000020000000c00034000000000000000020900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x4044800) 2m55.148283497s ago: executing program 44 (id=1043): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x20323159, 0x500, 0x2cc, 0x4, @stepwise={{0x1, 0xfffffffb}, {0x4, 0x4c7}, {0xa9}}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r1, &(0x7f0000000080)=""/41, 0x29) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0xfffffffffffffffc, &(0x7f0000000000)) socket(0x11, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f0000000500)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff690000000000010000001800000006000200861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) remap_file_pages(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x600, 0x20) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x200000c, 0x200000006c832, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000190a01040000000000000000020000000c00034000000000000000020900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x4044800) 1m45.361699901s ago: executing program 5 (id=1277): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = fsopen(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0xcac229faa96ee7df, 0x70bd29, 0x25dfdbfc, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x10000000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x500}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1c9003, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606", 0x4b}], 0x1}}], 0x1, 0x2090) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@verity_require}, {@redirect_dir_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200) socket$nl_route(0x10, 0x3, 0x0) 1m43.140973586s ago: executing program 5 (id=1285): syz_open_dev$sndmidi(0x0, 0x64, 0x20200) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x10002, 0x4, 0xffffffffffffffff, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xfffffffe}, 0x50) 1m42.472631825s ago: executing program 5 (id=1290): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000040)) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_dvr(0x0, 0x0, 0x800) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0}], 0x1) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000080)={0x6, {"4b83b0dc32e9687d6500", "1cea03ca4fe1c1f1e31253bda1f1fed5", "d80190bae206002cb2a1a28cde21dbfd"}, 0x2, 0x7}) poll(0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0x0, 0x7, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x2010001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x10001, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x1], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x728, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x7fffffff, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0xc, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0xf, 0x4, 0xc, 0x7, 0x80000009, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x4200003, 0x1, 0x5, 0x80, 0x9, 0x3ff, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0xfff, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x7, 0x1000, 0x7f, 0x5, 0xffffffff, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x8, 0xffffffff, 0x7fff, 0xffff8a37, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x8]}, 0x45c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000040)={'virt_wifi0\x00', @multicast}) 1m42.296398171s ago: executing program 5 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x799a, 0x4001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0), &(0x7f0000000300)=""/104, 0x68}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) 1m42.244102244s ago: executing program 5 (id=1292): prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000000280)=""/159, &(0x7f0000000340)=0x9f) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='coda\x00', 0x2001008, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x24, &(0x7f0000000140)=0x7a, 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}, 0x1}}, 0x80, 0x0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = userfaultfd(0x801) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x458c}, 0x1, 0x0, 0x0, 0xbbe21a6a6c0872ec}, 0xc000) socket$kcm(0x29, 0xf, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000100)={{0x0, 0xfe}, {0x8, 0x14}, 0x10001, 0x2, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0) 1m41.999743989s ago: executing program 5 (id=1297): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x110b, 0xfffffffffffffeff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x81, 0x0, 0x0, 0x0, 0x11}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="a0496050d8e3df8472cf375e68f7ddd35f4a81026eca72b1d769663f062f746d7a764db4c1385a0f4266938c2b870e173ee27492d55ce147093e4c546fd2faf44f4b092ed96cb522ec0b7f11b4f91669408961246bf70b38e16b2c5481e921e755cb4960a507c4a759872296296c790b757da481ec2c908eaf4cb3dc7c", 0x7d}, {&(0x7f0000000380)="f97a74d3ab5236c6510b4846cbfc27f4fe9f1151db8fe1f5e3b7c0b6dd514a7b01e8ca7d962bde863e63ec60e67367e5", 0x30}, {&(0x7f00000003c0)="2a4d4a9f9b5f2d37248c4b4958fdf461e6678cfe6612ec66a28b42bfcd3e302de4b7de29c80ee72deaefb74bfb962ef9870600d249e3c4b8a0d7014b3cfbd2f2595c41c48e04b956c55ab67b8af47b18750e07bc5c49e59079c7f61d5066099e2da18847f65d5d312eb1d08cf94c38a377d47afe7e962d845932f5cbf57e349222bf618d2d5a93aece7d516e50b48e5a8450b80dc2db7f50b794413cd32275d36c5d88b80258dd635791b4b3064d", 0xae}, {&(0x7f0000000480)="322007901a2f24ac016ba11ceaaf301dd3e7e1fb2b8192f578863aa1fbad0f49070bbfc32aa0fd485402e01944b29448aa8cf5625182737a4b48a8076a07d8f8187b203b7b582226ee7d17c4a77f238918fb1ab35c1d545d8e2788622562bfae815209e9", 0x64}], 0x4, 0x0, 0x0, 0x24008041}}, {{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000006c0)="a073f6ad2b1434cf4d77258e0c5b1e78cc0e07f224f765e0199ce0a519da305849d8a0b0c36bd7e0173fcad9d40f873d902385058449efadbd0719efa3e51de1055bb54f5e9013b7ca06640c565eea42aec8e1b9c50181bcc169637b5565962f4c9d9bbf078077bfdd1d83c5ac503c0c2bd28f3ccb4e6f871351ce862f2ea4d2dff980", 0x83}, {&(0x7f0000000780)="76d81b923864f2552df72462be0dbe7d869e7884703fe4a6e852c90176f46c1b4ff72f644de16eb560aee16dd094277361b1e891cb2c43ef24b402a7a8aca3100f656d8ff1e0c890dda3743a7eb37ec90732fde0cae4abda12e0b835fc0ce6468c90e846aa2116b5309dd7cd097fd1003157b4f8f9a6f94cfd58e20c2d4b6cb726dad1091e7d07b44809c1036057949f7c1a03aa2650db56fabad7fa452c7e7040bddd0efdc60ca5d9976b363f433c062aa41f476cae90b2394f4b78506ff53b94eb44eb01a0f6a4b866c4c91356275fdc4fb39df9bd6998227847", 0xdb}, {&(0x7f0000000880)="137b7d0cb13c82d88a5d21f279322e1586fd9ec826e6bcb0673497336a8803beed9cda69d44cf4455aaa2d23690c7edaa121a76b5650245a2354e35a52b7108c8a10ebd65207def48f9db3aa2d49522e89ae582319a538ba3ef66d6207bfd12725dc2768fe6c522f5e64f7b4ce31cc54ae0fb12b4f1cc00eb3af71d9cef5cd742b0503a82eaaef14ebb79ad50b58334461e827a5d59bdbf3cca3aa93ee5a4184ca19a838c2bb", 0xa6}], 0x3, 0x0, 0x0, 0x4000010}}, {{&(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000a80)="75edde5f0df32c7960c1e32b9b58a33c434d9fbc838c74652acaf3b18dbce007b64c540bb53e435c890a782758daba773f6b5b2f29c7d92b05198810ef874f59439e785b96a891e29bb3bbb56bca19e2f2805edeb507f0bf90c0ee712857ef8e8708dd49", 0x64}, {&(0x7f0000000b00)="3c982b778b327e1f5bdc6ab4d87172bb5d7bb90d9691233371d58e0ccdac40b582335a25cc0047c9095aae016d36409c6ae50a7b03983497fb9d7695633bbacdf3815e0336d6ad4fa0f73025e8cdbe8781b264e1a7953b8d028cf1b2a37c2d9ee9d4bad30964d7814da060b0df560a227c49a82c528c00beee69f72ccb91ca8de714e1e32870e07be7d164494f3c7a7230f43773a54236e493d686ecee25bf0a4a16afe40f1919fe144bbc796e48539e4d9015f281036962230e437ff6707b851b5e77c84b949ae92c736d722eddbe5cc0633d5282e95c3a120bdee77533d4ed29075c1342e7eacd7bd8b3de35", 0xed}, {&(0x7f0000000c00)="57ef418d5220a10a5d1ff8aa03fdfd749e5043f93ebda0a85f83c39dc88d83728e323ce3de4ffc9275833c46048b0e6b79c714db85def842d984510b197ee9c28e0d907c17453276df90574dc9931cfc4dd219a2ae6d213755e93950fe3787ae134d2b8b26a0e22b294218d7903f1ee3e2a406473cf94d4c1a8d9cdc88f6830b9379726d7e37ae29b0d74fb9d3f9fb43ddbb40158e594cd2e614451f94cafe1cbd4678d897f7", 0xa6}, {&(0x7f0000000cc0)="96e016749e593a81e3a4a94c73380358bfdc8a951dd0ae1e36cd4ab91a714d437533e31f44e32f911933c0856f5dabe7ed28ecb8b82c4b77dad3e5011fcfc83d655d3c5db02dea0456660c4ee8c9b4f8f7c706c6b59a3ec2fb35bcf745ef4e4268b612eb29651f0619d36d28abc4de4daabeb42d9071639e6943f487fa9ea75eabd7cf5207d1e0fc98aa643cb80a73d2e0de6c70cc653a71924f24cb0c2d528577fcada2c10fcb5e41c946e8e25f156860ee3503d084dc8d0dc08bca055dafbe5dc782e86e25c3473ec5b6bea5bf3e08", 0xd0}, {&(0x7f0000000dc0)="4803fa7b5f9bb19dd95f2dbe22a89a6989c9ab063fee9f3f6ec601b7835ed8bcef13966628e73644adc2f0476f5da9a95b4f97f19d1b49afae454742a400bcc9e43326daede6c54b3f88003a8f49717f07c2bcba83d809d6af909cbfeda4261339296660793a46854c852e4b15de1af37d8246135f59bdfc55e29ab79aa1afac78d8225edf3bca0b4e84cc5c8b7ee3b62b85c0e55472e044d51143039affe2255a3fc8b3af1c0b5470920ee7ec902ab525a9168cc115328f8922e3ca1acb1e05ac116492443aeb2d4e98f31c7fb1c854a044b98e42cda5920cb5daa82b385632e6476767ba9fce1c6789ecbc34600bf232", 0xf1}, {&(0x7f0000000ec0)="2dd007fe496aadbc3382fa8f106be1b3f68322a406ba3834c145dbfc7d576e73437377", 0x23}], 0x6, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38, 0x40}}], 0x3, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 1m41.319033156s ago: executing program 45 (id=1297): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x110b, 0xfffffffffffffeff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x81, 0x0, 0x0, 0x0, 0x11}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="a0496050d8e3df8472cf375e68f7ddd35f4a81026eca72b1d769663f062f746d7a764db4c1385a0f4266938c2b870e173ee27492d55ce147093e4c546fd2faf44f4b092ed96cb522ec0b7f11b4f91669408961246bf70b38e16b2c5481e921e755cb4960a507c4a759872296296c790b757da481ec2c908eaf4cb3dc7c", 0x7d}, {&(0x7f0000000380)="f97a74d3ab5236c6510b4846cbfc27f4fe9f1151db8fe1f5e3b7c0b6dd514a7b01e8ca7d962bde863e63ec60e67367e5", 0x30}, {&(0x7f00000003c0)="2a4d4a9f9b5f2d37248c4b4958fdf461e6678cfe6612ec66a28b42bfcd3e302de4b7de29c80ee72deaefb74bfb962ef9870600d249e3c4b8a0d7014b3cfbd2f2595c41c48e04b956c55ab67b8af47b18750e07bc5c49e59079c7f61d5066099e2da18847f65d5d312eb1d08cf94c38a377d47afe7e962d845932f5cbf57e349222bf618d2d5a93aece7d516e50b48e5a8450b80dc2db7f50b794413cd32275d36c5d88b80258dd635791b4b3064d", 0xae}, {&(0x7f0000000480)="322007901a2f24ac016ba11ceaaf301dd3e7e1fb2b8192f578863aa1fbad0f49070bbfc32aa0fd485402e01944b29448aa8cf5625182737a4b48a8076a07d8f8187b203b7b582226ee7d17c4a77f238918fb1ab35c1d545d8e2788622562bfae815209e9", 0x64}], 0x4, 0x0, 0x0, 0x24008041}}, {{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000006c0)="a073f6ad2b1434cf4d77258e0c5b1e78cc0e07f224f765e0199ce0a519da305849d8a0b0c36bd7e0173fcad9d40f873d902385058449efadbd0719efa3e51de1055bb54f5e9013b7ca06640c565eea42aec8e1b9c50181bcc169637b5565962f4c9d9bbf078077bfdd1d83c5ac503c0c2bd28f3ccb4e6f871351ce862f2ea4d2dff980", 0x83}, {&(0x7f0000000780)="76d81b923864f2552df72462be0dbe7d869e7884703fe4a6e852c90176f46c1b4ff72f644de16eb560aee16dd094277361b1e891cb2c43ef24b402a7a8aca3100f656d8ff1e0c890dda3743a7eb37ec90732fde0cae4abda12e0b835fc0ce6468c90e846aa2116b5309dd7cd097fd1003157b4f8f9a6f94cfd58e20c2d4b6cb726dad1091e7d07b44809c1036057949f7c1a03aa2650db56fabad7fa452c7e7040bddd0efdc60ca5d9976b363f433c062aa41f476cae90b2394f4b78506ff53b94eb44eb01a0f6a4b866c4c91356275fdc4fb39df9bd6998227847", 0xdb}, {&(0x7f0000000880)="137b7d0cb13c82d88a5d21f279322e1586fd9ec826e6bcb0673497336a8803beed9cda69d44cf4455aaa2d23690c7edaa121a76b5650245a2354e35a52b7108c8a10ebd65207def48f9db3aa2d49522e89ae582319a538ba3ef66d6207bfd12725dc2768fe6c522f5e64f7b4ce31cc54ae0fb12b4f1cc00eb3af71d9cef5cd742b0503a82eaaef14ebb79ad50b58334461e827a5d59bdbf3cca3aa93ee5a4184ca19a838c2bb", 0xa6}], 0x3, 0x0, 0x0, 0x4000010}}, {{&(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000a80)="75edde5f0df32c7960c1e32b9b58a33c434d9fbc838c74652acaf3b18dbce007b64c540bb53e435c890a782758daba773f6b5b2f29c7d92b05198810ef874f59439e785b96a891e29bb3bbb56bca19e2f2805edeb507f0bf90c0ee712857ef8e8708dd49", 0x64}, {&(0x7f0000000b00)="3c982b778b327e1f5bdc6ab4d87172bb5d7bb90d9691233371d58e0ccdac40b582335a25cc0047c9095aae016d36409c6ae50a7b03983497fb9d7695633bbacdf3815e0336d6ad4fa0f73025e8cdbe8781b264e1a7953b8d028cf1b2a37c2d9ee9d4bad30964d7814da060b0df560a227c49a82c528c00beee69f72ccb91ca8de714e1e32870e07be7d164494f3c7a7230f43773a54236e493d686ecee25bf0a4a16afe40f1919fe144bbc796e48539e4d9015f281036962230e437ff6707b851b5e77c84b949ae92c736d722eddbe5cc0633d5282e95c3a120bdee77533d4ed29075c1342e7eacd7bd8b3de35", 0xed}, {&(0x7f0000000c00)="57ef418d5220a10a5d1ff8aa03fdfd749e5043f93ebda0a85f83c39dc88d83728e323ce3de4ffc9275833c46048b0e6b79c714db85def842d984510b197ee9c28e0d907c17453276df90574dc9931cfc4dd219a2ae6d213755e93950fe3787ae134d2b8b26a0e22b294218d7903f1ee3e2a406473cf94d4c1a8d9cdc88f6830b9379726d7e37ae29b0d74fb9d3f9fb43ddbb40158e594cd2e614451f94cafe1cbd4678d897f7", 0xa6}, {&(0x7f0000000cc0)="96e016749e593a81e3a4a94c73380358bfdc8a951dd0ae1e36cd4ab91a714d437533e31f44e32f911933c0856f5dabe7ed28ecb8b82c4b77dad3e5011fcfc83d655d3c5db02dea0456660c4ee8c9b4f8f7c706c6b59a3ec2fb35bcf745ef4e4268b612eb29651f0619d36d28abc4de4daabeb42d9071639e6943f487fa9ea75eabd7cf5207d1e0fc98aa643cb80a73d2e0de6c70cc653a71924f24cb0c2d528577fcada2c10fcb5e41c946e8e25f156860ee3503d084dc8d0dc08bca055dafbe5dc782e86e25c3473ec5b6bea5bf3e08", 0xd0}, {&(0x7f0000000dc0)="4803fa7b5f9bb19dd95f2dbe22a89a6989c9ab063fee9f3f6ec601b7835ed8bcef13966628e73644adc2f0476f5da9a95b4f97f19d1b49afae454742a400bcc9e43326daede6c54b3f88003a8f49717f07c2bcba83d809d6af909cbfeda4261339296660793a46854c852e4b15de1af37d8246135f59bdfc55e29ab79aa1afac78d8225edf3bca0b4e84cc5c8b7ee3b62b85c0e55472e044d51143039affe2255a3fc8b3af1c0b5470920ee7ec902ab525a9168cc115328f8922e3ca1acb1e05ac116492443aeb2d4e98f31c7fb1c854a044b98e42cda5920cb5daa82b385632e6476767ba9fce1c6789ecbc34600bf232", 0xf1}, {&(0x7f0000000ec0)="2dd007fe496aadbc3382fa8f106be1b3f68322a406ba3834c145dbfc7d576e73437377", 0x23}], 0x6, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38, 0x40}}], 0x3, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) 13.002897964s ago: executing program 7 (id=1579): syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000001082057d00400001020301090260000301f140020904000000010100000a2401c0ff0a0002010209040100000102000009040101010102000009050109400003810407250104fe000009040200000102000009040001"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r3, 0x0, 0x0, 0x1000000, 0x0, 0x10}]) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x800c2, 0x59caa93f7db8951d) r6 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r6, 0x0) epoll_wait(r5, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) socket(0x2b, 0x1, 0x1) ptrace(0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r10, 0x0) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 12.844833399s ago: executing program 8 (id=1581): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="100000002dce6bcbdfba7000000000007fbdb9f8c104c2ab4ce07f07c4a3ce1487507288b40cb8c7c3c0b7682d3b83b9c3d60828c6e0f3d677cdd4b9e4b4b6e453c37b02b8642ea546dd37e122e6417bea67b508b2864bb91eee3569bdb022b2037649373fd46a804ce0284358c3af89a95bd646f3e45541"], 0x10}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000011000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e02, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r0, 0x0, 0x4040000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendto(r0, &(0x7f0000000000), 0x0, 0x200400d0, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0xffff, @local, 0x7, 0x4}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = io_uring_setup(0x3ca9, &(0x7f0000000280)={0x0, 0xd4ea, 0x200, 0x0, 0x3}) io_uring_enter(r6, 0x6a8a, 0xffefffff, 0x21, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x149000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) creat(&(0x7f0000000100)='./file2\x00', 0xd931d3864d39dcc4) lremovexattr(&(0x7f0000000100)='./file0\x00', 0x0) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b01660cfb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x78}], 0x1, 0x4, 0x0, 0x0) 12.1926153s ago: executing program 1 (id=1583): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x4, 0x1, 0x100, &(0x7f0000000440)="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"}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(r3, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x158}}, {{&(0x7f0000000880)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000bc0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, 0x0, 0x150}}], 0x3, 0x4040810) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r5 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10640, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r8, 0x4068aea3, &(0x7f00000003c0)={0xa3, 0x0, &(0x7f0000000340)}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r7, 0x4068aea3, &(0x7f00000002c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000100)={0xe, {0x7ff, 0xfffe1f8c, 0x8, 0x2b}}) syz_usb_connect(0x0, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904"], 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r10, 0x4b49, &(0x7f00000000c0)={0x6, "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"}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000001", @ANYRES16=r9, @ANYBLOB="010027bd7000fcdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 12.192143861s ago: executing program 8 (id=1584): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x20043, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000380)={'8255\x00', [0x1000, 0x0, 0xa1a, 0x4, 0x6, 0x800afa3, 0x0, 0x2, 0x5855, 0x2, 0x7, 0x9, 0x1, 0x5, 0x6, 0x2, 0x0, 0x4, 0x2, 0xa, 0x8, 0xcaa2, 0x1003, 0x20001e5b, 0x2000003, 0xe69, 0x2, 0x4, 0x4086, 0x0, 0x6f5]}) r3 = openat$cgroup_procs(r0, &(0x7f0000001040)='cgroup.threads\x00', 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x1000, '\x00', 0x0, r0, 0x0, 0x0, 0x4}, 0x50) r4 = msgget$private(0x0, 0x400) msgsnd(r4, &(0x7f0000000000)={0x2}, 0x8, 0x800) msgrcv(r4, 0x0, 0x0, 0x2, 0x4800) r5 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r6}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000000c0)={r7}) close(r5) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x10) 11.982123689s ago: executing program 8 (id=1586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) close(r0) socket(0x2a, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x1000000, 0x80c, 0x3, 0x1c, 0x7, 0x0, 0x10, 0x7, 0xe9, 0x9, 0x9, 0x4, 0x6}, {0x8, 0xcd5a, 0xa, 0x97, 0xd, 0xf2, 0x13, 0x8, 0x7, 0x2, 0x44, 0x79, 0x100003fffffffffa}, {0x7fffffff, 0x18, 0x5, 0xff, 0x2, 0x9, 0x8, 0xf8, 0x5, 0x8, 0x6, 0x3}], 0x800000}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@delqdisc={0x90, 0x25, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0x0, 0x8}, {0x4, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8, 0xcc, 0x80000001, 0xf4, 0x5}, 0x7f, 0x1, 0x6, 0x9, 0xbba, 0xa, 0x1b, 0x1d, 0x1, 0x401, {0x9, 0x6, 0x6, 0x5, 0x3570, 0x4}}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000880}, 0x20008004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x50}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf, 0xa1}, 0x600}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="0404040000000000"], 0xd) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000e40), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x7, 0x2, [{0x0, 0x1ff}, {0x9}, {}, {0x10000000, 0x894a}, {}, {0x400000}, {0xffffffff}], 0x6, 0x0, 0x0, 0x2, 0x7}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg(r5, 0x0, 0x4000004) write$rfkill(r4, &(0x7f0000000080)={0x4, 0x0, 0x3, 0xff}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000040), 0x0, 0x22, 0x0) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) 9.184799617s ago: executing program 7 (id=1591): openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioperm(0x1, 0x9b1, 0xfff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x419}}}, 0x7) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x1, 0x7}, 0x12) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7e78a6f1) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff) 8.176830481s ago: executing program 1 (id=1592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0xfffffffffffffd2a) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x5, 0x5, 0x3, 0x1, 0x4], 0x0, 0x2}}, 0x40) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r3, 0x8002af76, &(0x7f0000000180)) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0xfff) splice(r4, 0x0, r5, 0x0, 0x39000, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r6) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000000000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000986000/0x2000)=nil, 0x2000, 0x1, 0x80010, r3, 0xd8179000) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000005c0)={0xfffffffffffffffc, 0x1, 0x0, &(0x7f00000004c0)=""/67, 0x0, 0x50000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x2, 0x1, &(0x7f0000000380)=""/228, &(0x7f00000000c0)=""/81, &(0x7f0000000700)=""/53, 0x41000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 6.389166543s ago: executing program 7 (id=1596): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r1) ioperm(0x5, 0x6, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0xd, @desc3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r3 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000)=0x3, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ptrace(0x4207, r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000e23e701029fea5d853cbb44f892acd81739432e431d6c09ba6ad76099365b28637eb2ea5948a92fb9ddf2235cb31c8280dc1a045b2c6e14de0899f8d9e9b4f0234db35e82c89b517ab71dc9d313f2c778c619a395295dedd8533196e2a8842b47c69c082a054c71e34acc73504a0b2e6163079943052739585e359c5852e3e1b3d8b8c990236f609", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 6.005081813s ago: executing program 2 (id=1598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_cmd={0x11, 0x4000, 0x8, 0xfffe, 0x3, 0x8, 0x81, 0x5, 0x3, 0x7, 0x89, 0x6, 0xe1, 0x1, 0x3, 0x53a5, [0x1, 0x6]}}) alarm(0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {0x35, 0x0, 0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000002300)={0x1, &(0x7f0000000140)=[{0x6, 0x24, 0x4, 0x775a}]}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000096040a000200deaa5ffd681ba9aa488892509b355d7f99151729f60b36982e91063d889311cbc8a821e6c5255ca7ccf5c87e2c24b84bbd8485b27c23c35a745b5b329fb5d5a7aa2727f3f75e09feb3ab1bbdd03634dfc38e057bb4755c7b316196b7d49436ac513fade6a6a783040b08f12c30265276c699909747541337ac394f09e00e247850c6b10fdf7ab64fb87071cfa26002c92ffd71b27bed2a4ce668f70b00000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x2000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="2c00308014000400403a050c5baee2004ef2b6d713459a7a0c00018008000100e5e200000500020000000000"], 0x48}}, 0x0) 4.608995115s ago: executing program 0 (id=1599): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @remote}) getsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x2c, r3, 0x101, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x32d26, 0x1cdb5}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040014}, 0x200440c4) recvmsg$can_j1939(r4, &(0x7f0000000240)={&(0x7f0000000040)=@rc={0x1f, @none}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/105, 0x69}], 0x1, &(0x7f00000001c0)=""/88, 0x58}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) 4.400486499s ago: executing program 2 (id=1600): signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x8401, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8082) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x10000) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x800, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0xf02, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00005be000/0x1000)=nil, 0x1000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) r5 = socket(0x10, 0x3, 0x7) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000520001000000000000de04091c0000000c000100cb4be1c7136205cd99fad6a2a08a4f170100000000000000"], 0x20}}, 0x0) 4.125232394s ago: executing program 2 (id=1601): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xd, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24040810) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001000000000800010000000900562df27baa757c5201"], 0x24}}, 0x4) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x5b) read$watch_queue(r4, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f00000000c0)={0x0, 'netdevsim0\x00', {0x2}, 0x2}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16=r5, @ANYRESOCT=r5, @ANYRESDEC=r3, @ANYRESDEC=0x0, @ANYRESDEC=r6, @ANYRES64], 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 4.119954259s ago: executing program 1 (id=1602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x58}}, 0x0) 4.063460795s ago: executing program 1 (id=1603): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind(0xffffffffffffffff, &(0x7f00000002c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x80) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r0 = socket$inet6(0xa, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2000000000000021, 0x2, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e22, 0xfffc, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x0, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0}, 0x41) openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x36, 0xc8, "fac392f8e4108cca"}}}, 0xe) 4.063151028s ago: executing program 8 (id=1604): ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) getrlimit(0x4, &(0x7f0000000140)) sched_setaffinity(0x0, 0x49, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r5 = getpgid(r2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000080503002cbd7000fddbdf250400000208005200", @ANYRES32=r5, @ANYBLOB="0800cb00e000000118360a87396bf2adbb0eccc114b461d69be00156432251539650dca48f557567f8175a45ae3055df32fff9fb1207e904002d00"/76], 0x68}, 0x1, 0x0, 0x0, 0x4040001}, 0x40) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r4, 0x1) r6 = socket(0x10, 0x800, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x200, 0x70bd2a, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000180)="05d936277c6f5422007f9f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c7168c7eb53b", 0x28, 0x408a1, &(0x7f0000000040)={0x11, 0x86dd, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.000808259s ago: executing program 0 (id=1605): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="2000000000000000140012800b0001006261746164760000040002873d408b0000"], 0x3c}}, 0x40010) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0, 0x0) lseek(r1, 0x7d, 0x1) getdents64(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 3.106686367s ago: executing program 1 (id=1606): openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioperm(0x1, 0x9b1, 0xfff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x419}}}, 0x7) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x1, 0x7}, 0x12) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7e78a6f1) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff) 3.086896933s ago: executing program 7 (id=1607): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r2, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$selinux_load(0xffffffffffffffff, 0x0, 0x2046) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000380)={0x0, 0x8, 0x401}) r7 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r8 = creat(&(0x7f0000000200)='./bus\x00', 0xee) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r7], 0x2b) sendfile(r9, r7, 0x0, 0x4000000053d2) write$sndseq(r7, &(0x7f0000000440)=[{0x2, 0x40, 0x2, 0xc2, @tick=0xaa, {0x71, 0x4}, {0x9, 0x99}, @connect={{0x10, 0x5}, {0xc9, 0x99}}}, {0x4, 0x4, 0x92, 0x40, @tick=0x3, {0x81, 0xe}, {0x2, 0x75}, @addr={0x6, 0x6}}], 0x38) r10 = getpgrp(0x0) mount$binder(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80000a, &(0x7f00000005c0)={[{@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0x2}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x3}}], [{@subj_role={'subj_role', 0x3d, '&{'}}, {@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, 'smaps_rollup\x00'}}, {@fowner_gt={'fowner>', r3}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@uid_lt={'uid<', r6}}, {@fowner_gt}, {@seclabel}]}) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001c0000042dbd7000fddbdf2510000000be7be88008003800000000000400c28005000900000000000c008500020000cd43b23e0070009f00f9d2975b7902d4fbb721c927e069f37aeb9b7db9aa0ed6333fa0c7e320f156e552ce1db64414fe8f89214e6c4dea1e5238186b2048dc54cf5608f4594d9e3e63e2827c74f4c899d96ef8a7d729d9416ebfc4b6263d6b5d47e6a84445c5b555278421a6b9d56a04f46bfa07e6040073800800f700", @ANYRES32=r6, @ANYBLOB="5e373f4355ef04c87c75852444946a29bd4e7658792c08000700", @ANYRES32=r10, @ANYBLOB="0000080000000400000007003d007d7b00000c0036000bcc9f4600000000"], 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0xfe33) gettid() socket(0x1e, 0x4, 0x0) 2.912331292s ago: executing program 8 (id=1608): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="850000008f0000009c000001000000009500000d0000000039c59173ab0fb56011565bd4cf7971555df1285540286b121fac71b5960251be63bd8c43ef075f7545721f16beb14638943f7c99c025d80669dfc41cd4a73724d069524aea35e2adf8a3c87b7a2c211c8c107b059140405441abb45e0cb592dc6f2af05afd0d010633e8"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xaa, &(0x7f0000000140)=""/170, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9, 0x70bd29, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x0, 0x2}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa3747e76de3790800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='s\x00\x00\x00\x00\x00\x00\x00'], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b925, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040030}, 0x20004080) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) recvmmsg(r3, &(0x7f0000002c80)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000980)=""/228, 0xe4}], 0x1, &(0x7f0000000800)=""/215, 0xd7}, 0x41}, {{&(0x7f0000000900)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000003ec0)=""/4127, 0x101f}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000002a40)=""/69, 0x45}, {&(0x7f0000002ac0)=""/55, 0x37}, {&(0x7f0000002b00)=""/85, 0x55}, {&(0x7f0000002b80)=""/88, 0x58}], 0x8}, 0x40}], 0x2, 0x102, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(r8, &(0x7f0000000140)='stack\x00') pread64(r9, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) setsockopt$ALG_SET_AEAD_AUTHSIZE(r9, 0x117, 0x5, 0x0, 0x2) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38010000050a03000000000000000000020000030b00070066696c746572000008000a40000000008e000c002dfd6f24dc578478c6cb9bb453a902c671cc3b65f5437ff19a9993b7728db6102034eaeb89b9b115308d243b57d2b6b9087d3bd5fddfed3a754e49e6e7188f78ccb7e4c91f09e2ddcc3c7e21e5de0080ff3fb085ef7502c216791b4568771cce7c0429ea379c635be8dff5af427e2d62065a5ec2a669da92a57c0e5f3d93247ea39ef59ae0f4dabc1d8d0d6bf59213f63e0000080007006e61740008000a4000000007700008800c00014000000000000000160c00014000000000000000000c0002400000000000000fff0c00014000000000000000080c00014000000000000000030c00024000000000000000010c00024000000000000000050c00024000000000000000040c000140000000000000000e40000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000630000000180a0101000b000000000000010000000900010073797a3000000000040003800900020073797a3000000000140000001000010000000000000000000000000a969175db485888f2af7b661fe5652e85f2f4f688772290673c45c613801f1d4b8461126706810367002b46cb1394f544bb42e6b8f59d412d5527cda1754186ff2c0dfcb5c2b9eb1e0dc6bd1f556212ec1cbf828f33e6ab3b53d24e8947119670802b53215a4b157cc2d2daf0aadbc06dec0195f2b3f398890ba4f7facfab6faf8d66ef2b"], 0x1d0}}, 0x0) 1.824803361s ago: executing program 0 (id=1609): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = getpgid(0xffffffffffffffff) prlimit64(r3, 0x8, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x6, &(0x7f0000000240)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) setrlimit(0x4, &(0x7f0000000100)={0x100000060, 0xffffffffffffff80}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) r7 = syz_open_pts(0xffffffffffffffff, 0x2400) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000200)={0xfffe, 0x81, 0x8, 0xb3, 0xb, "6c06002004dc17a8"}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000180)=0x5000000) fsopen(&(0x7f0000000000)='udf\x00', 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e44020210"], 0x47) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000280)=@riscv64_sbi_fwft={0x803000000a010000, &(0x7f00000001c0)}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r8, 0x400454de, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRES64=r1, @ANYBLOB="3bf7b0c899c77164be6dc7b3c5cfb300ea5f31e75df76d41e1bb592e2aceb53c4d719a8b3a0999905eefb8be131b8369857dcd4d822d91d9d4bb9495a22ef7aa1442b1f14cbf2035f75711bc6519e6be7bc2cdb2a9bd17f84dcaae7c1933f5eeef0ab1238995f0d37262559e9a4b046408b79e1df11c1be37077936c04eb2efae34173518dbeabcd9f5db2727ee9cbc149514f4bb407b5aa3736", @ANYRES32=r3, @ANYRESHEX=0x0, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRESDEC=r7, @ANYBLOB="21d91b2f0e9e8366149f5e86f3144aa7c58b65c6e14b7b13f52fb1e1abe392246de25df559eda09e147afc83d2f9b5d8cc83887361dff806c445025262f8a9b6efa8fd5553934c23d98774329d9447e3a7455fd9e06f4fd3a82d96a557e8a3492092ffde9e40abe949d5e2eee24f632d15e8d51d55d664e7f59c707ec2c4fdd94b0d3b0426d9", @ANYRESHEX], 0x11) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x3fff}, 0xc) 1.599955306s ago: executing program 1 (id=1610): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, 0x0, 0x20000010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x8, 0x8}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$setregset(0x4205, r2, 0x3, &(0x7f00000000c0)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) r4 = syz_open_procfs(0x0, &(0x7f00000007c0)='numa_maps\x00') read$FUSE(r4, &(0x7f0000002840)={0x2020}, 0x2020) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @empty, 0x9}, 0x1c) 1.344538234s ago: executing program 7 (id=1611): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xfd1c, 0x4, 0x400, 0xed, 0x1}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xff00, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="f6", 0x1}], 0x1}}], 0x3ffffffffffffd1, 0x0) 1.217062495s ago: executing program 2 (id=1612): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x40, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x9}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x12000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x405}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route_sched(r5, &(0x7f000001f640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000001f600)=@newqdisc={0x24, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0x9}, {0x0, 0xa}}}, 0x24}}, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) 1.002083237s ago: executing program 7 (id=1613): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@flag='dirsync'}, {@fsname={'fsname', 0x3d, ')\''}}]}) chdir(&(0x7f00000001c0)='./bus\x00') open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) 909.066027ms ago: executing program 8 (id=1614): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="51fedf2551571709703103e9000004000000000000000000"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x1007, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000000)='./file1\x00', 0x200, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x81) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file2\x00') rename(&(0x7f0000003400)='./file1\x00', &(0x7f0000000140)='./file0\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r5, @ANYRES8=r3], 0x48}, 0x1, 0x0, 0x0, 0x2004c8c0}, 0x2000c000) 636.910131ms ago: executing program 0 (id=1615): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f00000001c0), 0xe) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) sendfile(0xffffffffffffffff, r0, 0x0, 0x770e) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r5, 0x40085875) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000280)={r6, 0x0, 0x8001, 0x0, 0x0, [], [0x0, 0x0, 0x1, 0x2], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xac}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) close(0x3) 598.997467ms ago: executing program 2 (id=1616): semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x9, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f0000000240)=[{0x1, 0x0, 0x800}, {0x2, 0x0, 0x2000}], 0x2) semop(0x0, &(0x7f0000000140)=[{0x1, 0xfff, 0x1800}, {0x4, 0x0, 0x800}], 0x2) waitid(0x0, 0x0, 0x0, 0x80000000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x180, 0x1170, 0x1398, 0x0, 0x1170, 0x2c0, 0x1398, 0x1398, 0x2c0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'batadv0\x00', {0xff}, {}, 0x18}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21, 0x10, 0x0, 0x20}}, @common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x1000}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'geneve1\x00', 'vcan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000002c0)) syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x74e1, 0x1410, 0x3, 0x14a}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000006c0)) syz_io_uring_modify_offsets$generic(r8, r9, 0x2c, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x2000, 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) 475.590842ms ago: executing program 0 (id=1617): getpgid(0xffffffffffffffff) r0 = getpgid(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) syz_pidfd_open(r0, 0x0) r2 = getpid() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x1c, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x8000) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) r4 = syz_clone(0x100800, &(0x7f0000000100)="431f58a8c1aeba116304ea35904e29d7d50f496f09c4381b0b3972fbc6b8e0aa1c6d9f5be077bc9ed3bb8510865d74fa0cc9f4091d52e7ae9b8d550d10af9758b98c35f58e74e7576be991dbb509a5c95629286e275a6c3da097c2fc5860959e7dec08ec3deecf880ae54c2fc2fd9173a5b517b4d9c3181d200ca041d2996ed177423fe5cb63400ac668613acbd307e87ee5ce5cd15980431852587fff8971c38dec0b1db9dc98af1f88e55c45dfa53b4a747bce5ea708d47a0803c2533101fcacb3b3d7c30c5303ebcf1abfc5fe3241b350a73539afdac9d5f5b67a7b74c9e2e14d14a874291f4f59f1", 0xea, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="32650c44b3c48a20deab47487fc8efc7faf23d6a956456d7a2d4b907ca468b7bc282ee46bcf771e5603954f5f666f2f760d3081c305f71884a8cdc966383cbc63b3e6b26a67645e40d8ef456e888d31cdb35902c") r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r6, 0x4b4a, 0x10000000000404) keyctl$invalidate(0x15, r5) add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="bb82ca4b563a21d873a2d4da170fd8d9b51516bcf113dd2e6c1b945486dbbaf291edd60c181b8f0356748198635b9ca3f78540e8473e4e7725bb349918076281d36a617d3e3b9ded9efe21b342e651fd2af4b4586af0df24f0e53346b6773f422409f8e858ec3f6a13099766263d8cf6603d95d4a0639c7e1c11be6e88954963a1733cae241266168dec46f038395a03280184d3b49aa88caf6f8c812ac0f0ac6cc839418540e16e60e7e28992f33c57", 0xb0, r5) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000400), &(0x7f0000000440)={0x0, 0xfb, 0xf0, 0x6, 0x8, "ca4dd4e44d9bb6cef6184b9e8d921ad0", "f032e12a480e68d6a261140730b8522501c8663aa6e18e8825be7ec0531d88bd2ebdecebb0a4f7448e81b1126faad26e8bff69f2a886f399f2ce269ccbcaea9b8b9ba3b3ef150c9a0f1fbbf5c8b52fe8f310522894fc9499ee2044a43e13262c8d4750fc1eeb91d72cf906d51cbe648a795e07753f9686612d4611ff61906373c21d1f53ba3a0c3b9fc667ea8c19acc0c58e1ca7db40a932f40b88af1c2e2f60948dc19bb55e6f5ac8b5b099ca43b24612caa26d54cdc8e301c3a56c660e67fe064855b8a0577497a3d2cf9f1e3eb742ff1a18fc33164499e28e40"}, 0xf0, 0x2) r7 = syz_open_procfs(r4, &(0x7f0000000040)='net/ip_vs\x00') read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020) 264.924137ms ago: executing program 0 (id=1618): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x181140, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004040), 0x0, 0x401, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "7c6a05fb7912b247", "787ebc594c7bae4ad6390b0da9e7dc12", "0c1820d3", "aeea80567ee76cfb"}, 0x28) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x1000001, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffe, 0x0, @loopback, 0x10080bff}, @ib={0x1b, 0x1000, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x7fffeffffffffffb, 0x7, 0x4}}}, 0x118) 0s ago: executing program 2 (id=1619): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="2000000000000000140012800b0001006261746164760000040002873d408b0000"], 0x3c}}, 0x40010) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0, 0x0) lseek(r1, 0x7d, 0x1) getdents64(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) kernel console output (not intermixed with test programs): tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.710800][ T9076] usb 3-1: Using ep0 maxpacket: 8 [ 479.717187][ T9076] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 479.736092][ T9076] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 479.757459][ T9076] usb 3-1: config 127 has no interface number 1 [ 479.765704][ T9076] usb 3-1: config 127 interface 171 has no altsetting 0 [ 479.774626][ T9076] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 479.788124][ T9076] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.796604][ T9076] usb 3-1: Product: syz [ 479.801070][ T5792] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 479.801408][ T9076] usb 3-1: Manufacturer: syz [ 479.810128][ T29] audit: type=1400 audit(1777863760.553:1807): avc: denied { write } for pid=12578 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.813702][ T9076] usb 3-1: SerialNumber: syz [ 479.864369][ T5792] usb 2-1: device descriptor read/8, error -71 [ 480.110854][ T5792] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 480.206508][ T5792] usb 2-1: device descriptor read/8, error -71 [ 480.372562][ T5792] usb usb2-port1: unable to enumerate USB device [ 480.642657][ T9076] xr_serial 3-1:127.171: xr_serial converter detected [ 480.964617][ T9076] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 480.971112][ T9076] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 481.001357][ T9076] usb 3-1: USB disconnect, device number 39 [ 481.009470][ T9076] xr_serial 3-1:127.171: device disconnected [ 481.891983][T12598] IPv6: Can't replace route, no match found [ 481.902495][T12598] IPv6: Can't replace route, no match found [ 482.244208][ T5713] IPVS: starting estimator thread 0... [ 482.352790][T12611] IPVS: using max 78 ests per chain, 187200 per kthread [ 482.473748][ T29] audit: type=1400 audit(1777863763.223:1808): avc: denied { write } for pid=12581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 482.844646][ T29] audit: type=1400 audit(1777863763.593:1809): avc: denied { getopt } for pid=12623 comm="syz.1.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 482.929929][T12624] bond1 (unregistering): Released all slaves [ 483.054980][ T29] audit: type=1400 audit(1777863763.803:1810): avc: denied { write } for pid=12630 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.177007][T12628] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1574906631 (3149813262 ns) > initial count (1841593562 ns). Using initial count to start timer. [ 483.338232][T12628] kvm: Disabled LAPIC found during irq injection [ 483.785671][T12651] xt_TPROXY: Can be used only with -p tcp or -p udp [ 484.425613][ T5745] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 484.748522][ T29] audit: type=1400 audit(1777863765.493:1811): avc: denied { write } for pid=12637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.750758][ T5745] usb 3-1: Using ep0 maxpacket: 32 [ 484.778926][ T5745] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.790084][ T5745] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 484.807506][ T9076] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 484.833345][ T5745] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 484.861497][ T5745] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.870677][ T5745] usb 3-1: Product: syz [ 484.884362][ T5745] usb 3-1: Manufacturer: syz [ 484.895615][ T5745] usb 3-1: SerialNumber: syz [ 484.912957][ T5745] usb 3-1: config 0 descriptor?? [ 484.936410][ T29] audit: type=1400 audit(1777863765.683:1812): avc: denied { write } for pid=12678 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.958503][ T8279] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 484.973919][ T9076] usb 6-1: Using ep0 maxpacket: 8 [ 484.980625][ T9076] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 484.989066][ T9076] usb 6-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 484.999561][ T9076] usb 6-1: config 127 has no interface number 1 [ 485.010268][ T9076] usb 6-1: config 127 interface 171 has no altsetting 0 [ 485.019641][ T9076] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 485.032270][ T9076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.036980][T12683] FAULT_INJECTION: forcing a failure. [ 485.036980][T12683] name failslab, interval 1, probability 0, space 0, times 0 [ 485.044019][ T9076] usb 6-1: Product: syz [ 485.061243][ T9076] usb 6-1: Manufacturer: syz [ 485.062163][T12683] CPU: 0 UID: 0 PID: 12683 Comm: syz.0.1122 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.062187][T12683] Tainted: [L]=SOFTLOCKUP [ 485.062192][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.062201][T12683] Call Trace: [ 485.062206][T12683] [ 485.062212][T12683] dump_stack_lvl+0x100/0x190 [ 485.062234][T12683] should_fail_ex.cold+0x5/0xa [ 485.062255][T12683] ? tomoyo_encode2+0xfb/0x3c0 [ 485.062275][T12683] should_failslab+0xc2/0x120 [ 485.062291][T12683] __kmalloc_noprof+0xe0/0x850 [ 485.062318][T12683] tomoyo_encode2+0xfb/0x3c0 [ 485.062341][T12683] tomoyo_encode+0x29/0x50 [ 485.062359][T12683] tomoyo_realpath_from_path+0x18c/0x690 [ 485.062384][T12683] tomoyo_path_number_perm+0x23c/0x580 [ 485.062401][T12683] ? tomoyo_path_number_perm+0x22e/0x580 [ 485.062419][T12683] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 485.062458][T12683] ? find_held_lock+0x2b/0x80 [ 485.062472][T12683] ? __fget_files+0x215/0x3d0 [ 485.062490][T12683] ? hook_file_ioctl_common+0x149/0x410 [ 485.062511][T12683] ? __fget_files+0x215/0x3d0 [ 485.062533][T12683] ? __fget_files+0x21f/0x3d0 [ 485.062555][T12683] security_file_ioctl+0xd3/0x230 [ 485.062575][T12683] __x64_sys_ioctl+0xb7/0x210 [ 485.062592][T12683] do_syscall_64+0x10b/0xf80 [ 485.062609][T12683] ? clear_bhb_loop+0x40/0x90 [ 485.062628][T12683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.062643][T12683] RIP: 0033:0x7f13c259cdd9 [ 485.062656][T12683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.062671][T12683] RSP: 002b:00007f13c3406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.062685][T12683] RAX: ffffffffffffffda RBX: 00007f13c2816090 RCX: 00007f13c259cdd9 [ 485.062695][T12683] RDX: 0000200000000000 RSI: 000000008010aa01 RDI: 0000000000000004 [ 485.062704][T12683] RBP: 00007f13c3406090 R08: 0000000000000000 R09: 0000000000000000 [ 485.062712][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.062720][T12683] R13: 00007f13c2816128 R14: 00007f13c2816090 R15: 00007ffd1747ed38 [ 485.062741][T12683] [ 485.062756][T12683] ERROR: Out of memory at tomoyo_realpath_from_path. [ 485.069962][ T9076] usb 6-1: SerialNumber: syz [ 485.314636][ T8279] usb 2-1: unable to get BOS descriptor or descriptor too short [ 485.324321][ T8279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.364947][ T8279] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.393872][ T8279] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 485.414521][ T8279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.430852][ T8279] usb 2-1: Product: syz [ 485.446901][ T8279] usb 2-1: Manufacturer: syz [ 485.456937][ T8279] usb 2-1: SerialNumber: syz [ 485.547715][ T9076] xr_serial 6-1:127.171: xr_serial converter detected [ 485.562026][ T9076] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 485.572645][ T9076] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 485.622202][ T9076] usb 6-1: USB disconnect, device number 23 [ 485.639851][ T9076] xr_serial 6-1:127.171: device disconnected [ 485.698576][ T29] audit: type=1400 audit(1777863766.443:1813): avc: denied { write } for pid=12682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.850504][ T29] audit: type=1400 audit(1777863766.593:1814): avc: denied { write } for pid=12707 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.327101][ T29] audit: type=1400 audit(1777863767.073:1815): avc: denied { mounton } for pid=12717 comm="syz.5.1127" path="/bus" dev="ramfs" ino=42736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 486.447156][T12719] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 486.454518][T12719] overlayfs: failed to set xattr on upper [ 486.469275][T12719] overlayfs: ...falling back to redirect_dir=nofollow. [ 486.483095][ T29] audit: type=1400 audit(1777863767.233:1816): avc: denied { write } for pid=12710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.492405][T12719] overlayfs: ...falling back to index=off. [ 486.625185][ T29] audit: type=1400 audit(1777863767.373:1817): avc: denied { write } for pid=12725 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.184238][ T9076] usb 3-1: USB disconnect, device number 40 [ 487.203590][T12744] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1131'. [ 487.212847][T12744] nbd: illegal input index -67109120 [ 487.281799][ T8279] usb 2-1: 0:1 : does not exist [ 487.289204][ T8279] usb 2-1: BAAD GENERIC IO: no channels? [ 487.403263][ T8279] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 487.583862][ T29] audit: type=1400 audit(1777863768.323:1818): avc: denied { write } for pid=12732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 487.617645][ T8279] usb 2-1: USB disconnect, device number 30 [ 488.185618][ T29] audit: type=1400 audit(1777863768.933:1819): avc: denied { setattr } for pid=12743 comm="syz.0.1131" name="NETLINK" dev="sockfs" ino=42834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 488.208828][T12753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1132'. [ 488.236115][ T6133] udevd[6133]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.549844][ T29] audit: type=1400 audit(1777863769.293:1820): avc: denied { write } for pid=12762 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.733432][ T29] audit: type=1400 audit(1777863769.483:1821): avc: denied { ioctl } for pid=12760 comm="syz.5.1134" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 488.772041][T12763] ieee802154 phy0 wpan0: encryption failed: -22 [ 488.820779][ T8279] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 488.970807][ T8279] usb 2-1: Using ep0 maxpacket: 32 [ 488.972062][ T8279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.972081][ T8279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.972100][ T8279] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 488.972114][ T8279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.973398][ T8279] usb 2-1: config 0 descriptor?? [ 488.974628][ T8279] hub 2-1:0.0: USB hub found [ 489.021132][ T5345] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 489.171065][ T5345] usb 6-1: Using ep0 maxpacket: 16 [ 489.189973][ T8279] hub 2-1:0.0: 1 port detected [ 489.295181][ T5345] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.320326][ T5345] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.355256][ T5345] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 489.397747][ T5345] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 489.435650][ T5345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.476975][ T5345] usb 6-1: config 0 descriptor?? [ 489.792065][T12796] IPv6: Can't replace route, no match found [ 489.799016][T12796] IPv6: Can't replace route, no match found [ 489.996701][ T29] audit: type=1400 audit(1777863770.723:1822): avc: denied { write } for pid=12775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.142946][ T29] audit: type=1400 audit(1777863770.893:1823): avc: denied { write } for pid=12800 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.224527][ T29] audit: type=1400 audit(1777863770.893:1824): avc: denied { map } for pid=12771 comm="syz.2.1138" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 490.287801][ T5345] usbhid 6-1:0.0: can't add hid device: -71 [ 490.306636][ T5345] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 490.306721][ T29] audit: type=1400 audit(1777863770.893:1825): avc: denied { execute } for pid=12771 comm="syz.2.1138" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 490.358374][ T5345] usb 6-1: USB disconnect, device number 24 [ 490.512431][ T8279] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 490.559668][ T8279] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 490.609107][ T8279] usbhid 2-1:0.0: can't add hid device: -32 [ 490.624601][ T8279] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 490.684604][ T8279] usb 2-1: USB disconnect, device number 31 [ 490.771587][ T29] audit: type=1400 audit(1777863771.523:1826): avc: denied { write } for pid=12807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.872559][ T29] audit: type=1400 audit(1777863771.623:1827): avc: denied { write } for pid=12820 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.507443][T12833] IPv6: Can't replace route, no match found [ 491.513520][T12833] IPv6: Can't replace route, no match found [ 491.537274][T12840] openvswitch: netlink: Flow actions attr not present in new flow. [ 492.274589][T12864] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1149'. [ 493.493033][T12872] SELinux: security_context_str_to_sid () failed with errno=-22 [ 493.640770][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 493.640785][ T29] audit: type=1400 audit(1777863774.383:1831): avc: denied { write } for pid=12854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.765677][ T29] audit: type=1400 audit(1777863774.513:1832): avc: denied { write } for pid=12881 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.106452][ T29] audit: type=1400 audit(1777863774.833:1833): avc: denied { write } for pid=12883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.497584][ T29] audit: type=1400 audit(1777863775.243:1834): avc: denied { write } for pid=12898 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.997957][ T8279] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 495.228098][ T8279] usb 6-1: unable to get BOS descriptor or descriptor too short [ 495.280784][ T8279] usb 6-1: not running at top speed; connect to a high speed hub [ 495.298011][ T8279] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 495.313566][ T8279] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1576, setting to 1023 [ 495.330433][ T8279] usb 6-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 495.339873][ T8279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.351265][ T8279] usb 6-1: Product: syz [ 495.355478][ T8279] usb 6-1: Manufacturer: syz [ 495.360221][ T8279] usb 6-1: SerialNumber: syz [ 495.367795][ T29] audit: type=1400 audit(1777863776.103:1835): avc: denied { write } for pid=12900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.433131][ T29] audit: type=1400 audit(1777863776.183:1836): avc: denied { write } for pid=12923 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.751904][ T8279] usb 6-1: USB disconnect, device number 25 [ 495.789175][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.808923][ T29] audit: type=1400 audit(1777863776.563:1837): avc: denied { write } for pid=12927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.841176][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.847668][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.885909][ T29] audit: type=1400 audit(1777863776.633:1838): avc: denied { write } for pid=12940 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.981007][ T5792] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 496.088782][ T29] audit: type=1400 audit(1777863776.833:1839): avc: denied { write } for pid=12942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.132890][ T5792] usb 3-1: Using ep0 maxpacket: 8 [ 496.146886][ T5792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.157067][ T5792] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 496.175816][ T29] audit: type=1400 audit(1777863776.923:1840): avc: denied { write } for pid=12953 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.182054][ T5792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 496.219784][ T5792] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 496.230065][ T5792] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 496.254467][ T5792] usb 3-1: Product: syz [ 496.262907][ T5792] usb 3-1: Manufacturer: syz [ 496.267839][ T5792] usb 3-1: SerialNumber: syz [ 496.278282][ T5792] usb 3-1: config 0 descriptor?? [ 496.309933][T12956] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1157'. [ 496.401280][ T5792] rc_core: IR keymap rc-imon-rsc not found [ 496.417475][ T5792] Registered IR keymap rc-empty [ 496.425348][ T5792] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 496.447559][T12965] openvswitch: netlink: Flow actions attr not present in new flow. [ 496.467027][ T5792] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input27 [ 496.780975][ T5792] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 496.961011][ T5792] usb 6-1: Using ep0 maxpacket: 32 [ 497.064833][ T5792] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.080302][ T5792] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 497.136420][ T5792] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 497.160865][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.191336][ T5792] usb 6-1: Product: syz [ 497.195731][ T5792] usb 6-1: Manufacturer: syz [ 497.222021][ T5792] usb 6-1: SerialNumber: syz [ 497.251201][ T5792] usb 6-1: config 0 descriptor?? [ 498.087860][T13014] netlink: 'syz.1.1165': attribute type 13 has an invalid length. [ 498.692024][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 498.692965][ T29] audit: type=1804 audit(1777863779.433:1847): pid=13028 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1166" name="/newroot/26/file0" dev="tmpfs" ino=161 res=1 errno=0 [ 499.061453][ T8279] usb 3-1: USB disconnect, device number 41 [ 499.309039][ T29] audit: type=1400 audit(1777863780.053:1848): avc: denied { write } for pid=13026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.517610][ T29] audit: type=1400 audit(1777863780.263:1849): avc: denied { write } for pid=13049 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.641759][ T47] usb 6-1: USB disconnect, device number 26 [ 499.705111][ T29] audit: type=1400 audit(1777863780.453:1850): avc: denied { ioctl } for pid=13057 comm="syz.1.1171" path="socket:[43984]" dev="sockfs" ino=43984 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 499.769154][T13056] loop1: detected capacity change from 0 to 16384 [ 500.177103][T13065] 9p: Bad value for 'rfdno' [ 500.190158][T13065] Failed to get privilege flags for destination (handle=0x2:0x9) [ 500.506571][T13078] IPv6: Can't replace route, no match found [ 500.513614][T13078] IPv6: Can't replace route, no match found [ 500.818353][T13082] gre0: Caught tx_queue_len zero misconfig [ 500.933168][T13084] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 500.939702][T13084] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 501.009106][T13084] vhci_hcd vhci_hcd.0: Device attached [ 501.076116][T13087] vhci_hcd: connection closed [ 501.077607][ T65] vhci_hcd vhci_hcd.7: stop threads [ 501.130030][ T65] vhci_hcd vhci_hcd.7: release socket [ 501.164857][ T65] vhci_hcd vhci_hcd.7: disconnect device [ 501.181954][ T8279] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 501.952520][ T29] audit: type=1400 audit(1777863782.613:1851): avc: denied { write } for pid=13062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.123092][T13115] syzkaller0: entered promiscuous mode [ 502.150614][T13115] syzkaller0: entered allmulticast mode [ 502.206692][ T29] audit: type=1400 audit(1777863782.953:1852): avc: denied { write } for pid=13120 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.316406][ T29] audit: type=1326 audit(1777863783.063:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13096 comm="syz.5.1181" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f0319cdd9 code=0x0 [ 503.166820][ T29] audit: type=1400 audit(1777863783.913:1854): avc: denied { write } for pid=13142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.259105][ T29] audit: type=1400 audit(1777863784.003:1855): avc: denied { write } for pid=13153 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.346570][ T5274] 8021q: adding VLAN 0 to HW filter on device eth18 [ 503.643075][ T29] audit: type=1400 audit(1777863784.393:1856): avc: denied { write } for pid=13156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.742789][ T29] audit: type=1400 audit(1777863784.493:1857): avc: denied { write } for pid=13167 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.836511][ T5274] 8021q: adding VLAN 0 to HW filter on device eth19 [ 504.110161][ T29] audit: type=1400 audit(1777863784.853:1858): avc: denied { write } for pid=13170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.218417][ T29] audit: type=1400 audit(1777863784.963:1859): avc: denied { write } for pid=13181 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.280348][T13184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1189'. [ 504.286180][ T5274] 8021q: adding VLAN 0 to HW filter on device eth20 [ 505.018160][T13119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.487087][T13196] IPv6: Can't replace route, no match found [ 505.502499][T13196] IPv6: Can't replace route, no match found [ 505.737672][T13197] IPv6: Can't replace route, no match found [ 505.744724][T13197] IPv6: Can't replace route, no match found [ 505.918545][ T29] audit: type=1400 audit(1777863786.663:1860): avc: denied { ioctl } for pid=13199 comm="syz.2.1192" path="socket:[44427]" dev="sockfs" ino=44427 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 506.034916][T13200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.094795][T13209] openvswitch: netlink: Flow key attr not present in new flow. [ 506.233003][T13218] FAULT_INJECTION: forcing a failure. [ 506.233003][T13218] name failslab, interval 1, probability 0, space 0, times 0 [ 506.246596][T13218] CPU: 0 UID: 0 PID: 13218 Comm: syz.7.1198 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.246626][T13218] Tainted: [L]=SOFTLOCKUP [ 506.246633][T13218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 506.246644][T13218] Call Trace: [ 506.246651][T13218] [ 506.246658][T13218] dump_stack_lvl+0x100/0x190 [ 506.246684][T13218] should_fail_ex.cold+0x5/0xa [ 506.246710][T13218] should_failslab+0xc2/0x120 [ 506.246730][T13218] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 506.246759][T13218] ? sidtab_sid2str_get+0x17a/0x670 [ 506.246789][T13218] kmemdup_noprof+0x29/0x60 [ 506.246808][T13218] sidtab_sid2str_get+0x17a/0x670 [ 506.246836][T13218] security_sid_to_context_core+0x35a/0x6d0 [ 506.246864][T13218] avc_audit_post_callback+0x109/0x900 [ 506.246892][T13218] ? __pfx_audit_log_lsm_data+0x10/0x10 [ 506.246915][T13218] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 506.246941][T13218] ? skb_put+0x138/0x180 [ 506.246963][T13218] ? audit_log_n_string+0x256/0x550 [ 506.246989][T13218] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 506.247013][T13218] common_lsm_audit+0x23f/0x2b0 [ 506.247037][T13218] ? __pfx_common_lsm_audit+0x10/0x10 [ 506.247061][T13218] ? lockdep_hardirqs_on+0x78/0x100 [ 506.247083][T13218] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 506.247107][T13218] slow_avc_audit+0x186/0x210 [ 506.247135][T13218] ? __pfx_slow_avc_audit+0x10/0x10 [ 506.247165][T13218] ? avc_denied+0x14a/0x190 [ 506.247194][T13218] ? avc_has_perm_noaudit+0x2fc/0x3b0 [ 506.247225][T13218] avc_has_perm+0x1a6/0x1e0 [ 506.247254][T13218] ? __pfx_avc_has_perm+0x10/0x10 [ 506.247282][T13218] ? __lock_acquire+0x4a5/0x2630 [ 506.247313][T13218] sock_has_perm+0x253/0x2f0 [ 506.247335][T13218] ? __pfx_sock_has_perm+0x10/0x10 [ 506.247356][T13218] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 506.247379][T13218] ? __might_fault+0xc5/0x140 [ 506.247415][T13218] security_socket_sendmsg+0xd3/0x230 [ 506.247436][T13218] __sys_sendto+0x28c/0x4b0 [ 506.247462][T13218] ? __pfx___sys_sendto+0x10/0x10 [ 506.247508][T13218] ? ksys_write+0x1ac/0x250 [ 506.247534][T13218] ? __pfx_ksys_write+0x10/0x10 [ 506.247557][T13218] __x64_sys_sendto+0xe0/0x1c0 [ 506.247579][T13218] ? do_syscall_64+0x90/0xf80 [ 506.247599][T13218] ? lockdep_hardirqs_on+0x78/0x100 [ 506.247618][T13218] do_syscall_64+0x10b/0xf80 [ 506.247637][T13218] ? clear_bhb_loop+0x40/0x90 [ 506.247660][T13218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.247678][T13218] RIP: 0033:0x7f896d99cdd9 [ 506.247695][T13218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.247712][T13218] RSP: 002b:00007f896e88e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 506.247731][T13218] RAX: ffffffffffffffda RBX: 00007f896dc15fa0 RCX: 00007f896d99cdd9 [ 506.247742][T13218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 506.247752][T13218] RBP: 00007f896e88e090 R08: 0000200000000300 R09: 0000000000000080 [ 506.247762][T13218] R10: 0000000006008041 R11: 0000000000000246 R12: 0000000000000001 [ 506.247774][T13218] R13: 00007f896dc16038 R14: 00007f896dc15fa0 R15: 00007ffc50cdf6e8 [ 506.247799][T13218] [ 506.249813][ T29] audit: type=1400 audit(1777863786.983:1861): avc: denied { write } for pid=13217 comm="syz.7.1198" ssid=148 tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 506.866253][T13236] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1199'. [ 507.429441][ T29] audit: type=1400 audit(1777863787.113:1862): avc: denied { write } for pid=13195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.509435][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 507.586093][ T47] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 507.785097][T13241] IPv6: Can't replace route, no match found [ 507.795106][T13241] IPv6: Can't replace route, no match found [ 507.840818][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 507.867946][ T29] audit: type=1400 audit(1777863787.223:1863): avc: denied { write } for pid=13225 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.897206][ T47] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.909265][ T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 507.934858][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 507.952638][ T47] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 507.974472][ T47] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.008975][ T47] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 508.038534][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.051223][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 508.190759][ T9076] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 508.267953][ T47] usb 2-1: GET_CAPABILITIES returned 0 [ 508.280512][ T47] usbtmc 2-1:16.0: can't read capabilities [ 508.374621][ T9076] usb 1-1: Using ep0 maxpacket: 16 [ 508.382596][ T9076] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 508.393183][ T9076] usb 1-1: config 0 has no interface number 0 [ 508.408063][ T9076] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 508.418383][ T9076] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 508.433308][ T9076] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 508.445971][ T9076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.454857][ T9076] usb 1-1: Product: syz [ 508.459122][ T9076] usb 1-1: Manufacturer: syz [ 508.469672][ T9076] usb 1-1: SerialNumber: syz [ 508.476677][ T9076] usb 1-1: config 0 descriptor?? [ 508.487332][T13245] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 508.495304][T13245] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 508.515190][ T29] audit: type=1804 audit(1777863789.263:1864): pid=13267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1211" name="file0" dev="tmpfs" ino=552 res=1 errno=0 [ 508.548058][T13268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.562190][T13268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.575132][ T24] usb 2-1: USB disconnect, device number 32 [ 508.710285][T13245] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 508.718016][T13245] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 509.785791][T13298] IPv6: Can't replace route, no match found [ 509.791950][T13298] IPv6: Can't replace route, no match found [ 509.935893][ T8199] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 509.981943][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 509.991643][ T5616] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 510.003781][T13303] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=13303 comm=syz.2.1221 [ 510.105138][ T8199] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 510.120552][ T8199] usb 2-1: config 8 has an invalid descriptor of length 72, skipping remainder of the config [ 510.132120][ T8199] usb 2-1: config 8 has no interface number 0 [ 510.139503][ T8199] usb 2-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 510.157936][ T8199] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 510.179154][ T8199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.188781][ T8199] usb 2-1: Product: syz [ 510.193796][ T8199] usb 2-1: Manufacturer: syz [ 510.198599][ T8199] usb 2-1: SerialNumber: syz [ 510.251438][ T9076] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 510.265276][ T9076] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 510.277631][ T9076] asix 1-1:0.34: probe with driver asix failed with error -71 [ 510.290119][ T9076] usb 1-1: USB disconnect, device number 26 [ 511.780254][T13328] binder: 13324:13328 ioctl c0285840 0 returned -22 [ 512.046398][T13334] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1231'. [ 512.656314][ T8199] usb 2-1: USB disconnect, device number 33 [ 512.944850][T13357] netlink: 'syz.5.1237': attribute type 9 has an invalid length. [ 512.967443][T13357] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.1237'. [ 513.028383][T13359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.220796][ T47] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 513.360797][ T8199] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 513.368494][ T47] usb 6-1: device descriptor read/64, error -71 [ 513.532288][ T8199] usb 1-1: config 0 has no interfaces? [ 513.542546][ T8199] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 513.555627][ T8199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.569302][ T8199] usb 1-1: Product: syz [ 513.575959][ T8199] usb 1-1: Manufacturer: syz [ 513.586614][ T29] audit: type=1400 audit(1777863794.333:1865): avc: denied { create } for pid=13378 comm="syz.2.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 513.614105][ T8199] usb 1-1: SerialNumber: syz [ 513.620953][ T47] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 513.651783][ T8199] usb 1-1: config 0 descriptor?? [ 513.748605][T13383] ip6_vti0: Caught tx_queue_len zero misconfig [ 513.771305][ T47] usb 6-1: device descriptor read/64, error -71 [ 513.888149][T13384] IPv6: Can't replace route, no match found [ 513.898118][T13384] IPv6: Can't replace route, no match found [ 514.162006][ T47] usb usb6-port1: attempt power cycle [ 514.403469][T13390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1248'. [ 514.490401][T13361] veth0_vlan: left promiscuous mode [ 514.522794][ T47] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 514.553812][T13361] veth0_vlan: entered promiscuous mode [ 514.575011][ T47] usb 6-1: device descriptor read/8, error -71 [ 514.831062][ T47] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 514.892467][ T47] usb 6-1: device descriptor read/8, error -71 [ 514.923719][ T29] audit: type=1400 audit(1777863795.673:1866): avc: denied { write } for pid=13385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.055834][ T47] usb usb6-port1: unable to enumerate USB device [ 515.141130][ T29] audit: type=1400 audit(1777863795.893:1867): avc: denied { write } for pid=13413 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.289717][ T29] audit: type=1400 audit(1777863796.033:1868): avc: denied { read } for pid=13414 comm="syz.2.1251" path="socket:[45790]" dev="sockfs" ino=45790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 515.483118][ T47] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 515.505920][T13425] binder: 13423:13425 ioctl c0285840 0 returned -22 [ 516.323492][ T47] usb 2-1: unable to get BOS descriptor or descriptor too short [ 516.384058][ T8199] usb 1-1: USB disconnect, device number 27 [ 516.398817][ T47] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 516.458556][ T47] usb 2-1: can't read configurations, error -71 [ 516.726045][T13448] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 516.751110][ T29] audit: type=1400 audit(1777863797.373:1869): avc: denied { write } for pid=13421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.062457][ T29] audit: type=1400 audit(1777863797.683:1870): avc: denied { getopt } for pid=13441 comm="syz.7.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 517.118068][ T29] audit: type=1400 audit(1777863797.863:1871): avc: denied { write } for pid=13445 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.594390][T13454] IPv6: Can't replace route, no match found [ 517.605522][T13454] IPv6: Can't replace route, no match found [ 517.726523][T13458] binder: 13457:13458 ioctl 400c620e 200000002400 returned -22 [ 520.157607][T13503] binder: 13501:13503 ioctl c0285840 0 returned -22 [ 520.978424][ T29] audit: type=1400 audit(1777863801.723:1872): avc: denied { write } for pid=13467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.104808][T13511] overlayfs: failed to clone lowerpath [ 521.196001][T13517] netlink: 'syz.5.1269': attribute type 10 has an invalid length. [ 521.237279][T13517] loop5: detected capacity change from 0 to 7 [ 521.288974][T13518] netlink: 'syz.5.1269': attribute type 10 has an invalid length. [ 521.296965][T13518] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1269'. [ 521.307882][T13518] vxcan0: entered promiscuous mode [ 521.313084][T13518] vxcan0: entered allmulticast mode [ 521.318982][T13518] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check. [ 521.721140][T13517] Dev loop5: unable to read RDB block 7 [ 521.726806][T13517] loop5: AHDI p1 [ 521.730453][T13517] loop5: partition table partially beyond EOD, truncated [ 521.748855][ T29] audit: type=1400 audit(1777863802.493:1873): avc: denied { write } for pid=13519 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.961175][ T29] audit: type=1400 audit(1777863803.703:1874): avc: denied { connect } for pid=13539 comm="syz.5.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 523.505114][T13554] random: crng reseeded on system resumption [ 523.581800][T13554] Restarting kernel threads ... [ 523.583961][T13554] Done restarting kernel threads. [ 523.592460][T13554] ubi16: attaching mtd0 [ 523.632261][T13554] ubi16: scanning is finished [ 523.656887][T13555] overlayfs: missing 'lowerdir' [ 524.030889][T13564] binder: 13560:13564 ioctl c0285840 0 returned -22 [ 524.993661][T13570] IPv6: Can't replace route, no match found [ 525.001110][T13570] IPv6: Can't replace route, no match found [ 525.275816][ T29] audit: type=1400 audit(1777863806.023:1875): avc: denied { write } for pid=13535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.528918][T13554] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4 [ 525.648052][ T29] audit: type=1400 audit(1777863806.393:1876): avc: denied { write } for pid=13578 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.801059][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 525.981575][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 526.013161][ T10] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 526.052797][ T10] usb 1-1: config 0 has no interface number 0 [ 526.077788][ T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 526.110742][ T10] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 526.130796][ T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 526.140106][ T10] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 526.160756][ T10] usb 1-1: Product: syz [ 526.164938][ T10] usb 1-1: SerialNumber: syz [ 526.181486][ T10] usb 1-1: config 0 descriptor?? [ 526.190519][ T10] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 526.211717][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input28 [ 526.265482][T13607] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 526.394060][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 526.403841][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 526.410939][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 526.418038][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 526.425070][ T8199] usb 1-1: USB disconnect, device number 28 [ 526.431332][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 526.431354][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 526.465028][ T8199] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 526.478481][T13615] binder: 13614:13615 ioctl c0306201 0 returned -14 [ 526.574356][ T5745] syz1: Port: 1 Link DOWN [ 526.579068][ T1118] smbdirect: ib_dev[syz1] removed [ 526.654590][T13619] IPv6: Can't replace route, no match found [ 526.660629][T13619] IPv6: Can't replace route, no match found [ 526.852846][ T9006] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.414301][ T9006] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.538853][ T9006] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.546204][T13632] FAULT_INJECTION: forcing a failure. [ 527.546204][T13632] name failslab, interval 1, probability 0, space 0, times 0 [ 527.562731][T13632] CPU: 0 UID: 0 PID: 13632 Comm: syz.1.1299 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.562757][T13632] Tainted: [L]=SOFTLOCKUP [ 527.562764][T13632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.562774][T13632] Call Trace: [ 527.562780][T13632] [ 527.562786][T13632] dump_stack_lvl+0x100/0x190 [ 527.562810][T13632] should_fail_ex.cold+0x5/0xa [ 527.562835][T13632] should_failslab+0xc2/0x120 [ 527.562853][T13632] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 527.562879][T13632] ? alloc_inode+0x68/0x250 [ 527.562896][T13632] ? simple_start_creating+0xb0/0x110 [ 527.562917][T13632] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 527.562944][T13632] alloc_inode+0x68/0x250 [ 527.562961][T13632] new_inode+0x22/0x1c0 [ 527.562979][T13632] __debugfs_create_file+0x105/0x4f0 [ 527.562998][T13632] debugfs_create_file_full+0x41/0x60 [ 527.563015][T13632] binder_open+0x9d8/0xdd0 [ 527.563038][T13632] ? __pfx_binder_open+0x10/0x10 [ 527.563059][T13632] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 527.563087][T13632] do_dentry_open+0x6d8/0x1660 [ 527.563106][T13632] ? __pfx_binder_open+0x10/0x10 [ 527.563135][T13632] vfs_open+0x82/0x3f0 [ 527.563162][T13632] path_openat+0x208c/0x31a0 [ 527.563194][T13632] ? __pfx_path_openat+0x10/0x10 [ 527.563225][T13632] do_file_open+0x20e/0x430 [ 527.563249][T13632] ? __pfx_do_file_open+0x10/0x10 [ 527.563290][T13632] ? alloc_fd+0x476/0x790 [ 527.563314][T13632] ? do_getname+0x191/0x390 [ 527.563342][T13632] do_sys_openat2+0x10d/0x1e0 [ 527.563367][T13632] ? __pfx_do_sys_openat2+0x10/0x10 [ 527.563391][T13632] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 527.563419][T13632] ? __fget_files+0x21f/0x3d0 [ 527.563446][T13632] __x64_sys_openat+0x12d/0x210 [ 527.563473][T13632] ? __pfx___x64_sys_openat+0x10/0x10 [ 527.563499][T13632] ? ksys_write+0x1ac/0x250 [ 527.563522][T13632] ? rcu_is_watching+0x12/0xc0 [ 527.563554][T13632] do_syscall_64+0x10b/0xf80 [ 527.563579][T13632] ? clear_bhb_loop+0x40/0x90 [ 527.563602][T13632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.563620][T13632] RIP: 0033:0x7f020e79cdd9 [ 527.563636][T13632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.563654][T13632] RSP: 002b:00007f020f68d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 527.563672][T13632] RAX: ffffffffffffffda RBX: 00007f020ea16090 RCX: 00007f020e79cdd9 [ 527.563683][T13632] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 527.563694][T13632] RBP: 00007f020f68d090 R08: 0000000000000000 R09: 0000000000000000 [ 527.563708][T13632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.563718][T13632] R13: 00007f020ea16128 R14: 00007f020ea16090 R15: 00007ffdf7bfd6f8 [ 527.563743][T13632] [ 527.563835][T13632] debugfs: out of free dentries, can not create file '13629' [ 527.711933][ T5745] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 527.979877][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 527.994356][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 528.009725][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 528.023592][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 528.035673][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 528.127669][ T5745] usb 1-1: Using ep0 maxpacket: 8 [ 528.156613][ T5745] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.178564][ T9006] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.205451][ T5745] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 528.260108][ T5745] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 528.320520][ T5745] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 528.330649][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 528.385620][ T5745] usb 1-1: Product: syz [ 528.406868][ T5745] usb 1-1: Manufacturer: syz [ 528.435778][ T5745] usb 1-1: SerialNumber: syz [ 528.472912][ T5745] usb 1-1: config 0 descriptor?? [ 528.667574][ T29] audit: type=1400 audit(1777863809.413:1877): avc: denied { write } for pid=13638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.700970][ T5745] rc_core: IR keymap rc-imon-rsc not found [ 528.708386][ T5745] Registered IR keymap rc-empty [ 528.738874][ T5745] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 528.945674][ T5745] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input29 [ 528.946851][ T29] audit: type=1400 audit(1777863809.693:1878): avc: denied { write } for pid=13673 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.173480][ T29] audit: type=1400 audit(1777863809.813:1879): avc: denied { setattr } for pid=13670 comm="syz.2.1307" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 529.509155][ T5792] usb 1-1: USB disconnect, device number 29 [ 529.756206][ T9006] bridge_slave_1: left allmulticast mode [ 529.781780][ T9006] bridge_slave_1: left promiscuous mode [ 529.797266][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.825796][ T9006] bridge_slave_0: left allmulticast mode [ 529.831639][ T9006] bridge_slave_0: left promiscuous mode [ 529.856526][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.144968][ T51] Bluetooth: hci1: command tx timeout [ 530.322126][T13703] gfs2: path_lookup on c::;NL;o$: returned error -2 [ 530.414990][T13708] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1311'. [ 530.648477][ T29] audit: type=1400 audit(1777863811.393:1880): avc: denied { write } for pid=13679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.774107][ T9006] team0: Port device bridge1 removed [ 530.837183][ T29] audit: type=1400 audit(1777863811.583:1881): avc: denied { write } for pid=13710 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.902463][ T29] audit: type=1400 audit(1777863811.613:1882): avc: denied { setopt } for pid=13716 comm="syz.2.1315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 530.940511][ T9006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.954676][ T29] audit: type=1800 audit(1777863811.703:1883): pid=13714 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.1314" name="/newroot/48/bus" dev="tmpfs" ino=275 res=0 errno=0 [ 530.998266][ T9006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.017510][ T9006] bond0 (unregistering): Released all slaves [ 531.156048][T13733] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 531.406983][T13748] netlink: 'syz.7.1319': attribute type 49 has an invalid length. [ 531.933736][ T29] audit: type=1400 audit(1777863812.663:1884): avc: denied { bind } for pid=13752 comm="syz.0.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 532.003943][T13748] ip6gretap0: entered promiscuous mode [ 532.009434][T13748] ip6gretap0: entered allmulticast mode [ 532.230833][ T51] Bluetooth: hci1: command tx timeout [ 532.243433][ T29] audit: type=1400 audit(1777863812.993:1885): avc: denied { write } for pid=13731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.279770][ T9006] hsr_slave_0: left promiscuous mode [ 532.605070][ T9006] hsr_slave_1: left promiscuous mode [ 532.639671][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.662257][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.724749][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.746718][ T9006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.778741][ T29] audit: type=1400 audit(1777863813.523:1886): avc: denied { write } for pid=13772 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.818894][ T9006] veth1_macvtap: left promiscuous mode [ 532.827804][ T9006] veth0_macvtap: left promiscuous mode [ 532.842450][ T9006] veth1_vlan: left promiscuous mode [ 532.854047][ T9006] veth0_vlan: left promiscuous mode [ 533.353017][T13783] IPv6: Can't replace route, no match found [ 533.359978][T13783] IPv6: Can't replace route, no match found [ 533.941378][ T9006] team0 (unregistering): Port device team_slave_1 removed [ 533.979200][ T9006] team0 (unregistering): Port device team_slave_0 removed [ 534.276931][T13800] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1331'. [ 534.358580][ T51] Bluetooth: hci1: command tx timeout [ 534.484926][T13805] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1332'. [ 534.581136][T13793] netlink: 'syz.0.1328': attribute type 4 has an invalid length. [ 534.664710][T13809] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1333'. [ 535.132403][T13634] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.133434][T13634] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.135126][T13634] bridge_slave_0: entered allmulticast mode [ 535.153792][T13634] bridge_slave_0: entered promiscuous mode [ 535.186961][T13634] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.187616][T13634] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.189154][T13634] bridge_slave_1: entered allmulticast mode [ 535.210526][T13634] bridge_slave_1: entered promiscuous mode [ 535.415948][T13820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.482837][T13634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.547183][T13634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.585371][T13634] team0: Port device team_slave_0 added [ 535.596300][T13634] team0: Port device team_slave_1 added [ 535.644957][T13634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.655957][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.683555][T13634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.694497][ T29] audit: type=1400 audit(1777863816.433:1887): avc: denied { write } for pid=13802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.719877][T13634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.727525][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.754468][ T29] audit: type=1400 audit(1777863816.503:1888): avc: denied { write } for pid=13829 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.779844][T13634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.833987][T13634] hsr_slave_0: entered promiscuous mode [ 535.840476][T13634] hsr_slave_1: entered promiscuous mode [ 535.848182][T13634] debugfs: 'hsr0' already exists in 'hsr' [ 535.854128][T13634] Cannot create hsr debugfs directory [ 536.319539][T13853] input: syz0 as /devices/virtual/input/input30 [ 536.374320][ T29] audit: type=1400 audit(1777863817.123:1889): avc: denied { write } for pid=13835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.380840][ T51] Bluetooth: hci1: command tx timeout [ 536.540029][ T29] audit: type=1400 audit(1777863817.283:1890): avc: denied { write } for pid=13858 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.705704][T13862] IPv6: Can't replace route, no match found [ 536.712823][T13862] IPv6: Can't replace route, no match found [ 536.977648][ T5274] 8021q: adding VLAN 0 to HW filter on device eth21 [ 537.074157][T13866] netlink: 'syz.1.1342': attribute type 4 has an invalid length. [ 537.197791][T13874] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 537.206928][T13874] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 537.217352][ T29] audit: type=1400 audit(1777863817.943:1891): avc: denied { append } for pid=13872 comm="syz.0.1344" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 537.313926][ T29] audit: type=1400 audit(1777863817.973:1892): avc: denied { append } for pid=13872 comm="syz.0.1344" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 537.798628][T13878] mmap: syz.1.1345 (13878): VmData 37593088 exceed data ulimit 10. Update limits or use boot option ignore_rlimit_data. [ 538.085624][T13634] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 538.146506][T13634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 538.169331][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 538.178860][T13634] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 538.199037][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 538.221091][T13634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 538.235469][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 538.246362][ T29] audit: type=1400 audit(1777863818.983:1893): avc: denied { write } for pid=13869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.278552][T13634] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 538.290961][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 538.314503][T13634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 538.333812][T13634] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 538.352418][ T29] audit: type=1400 audit(1777863819.093:1894): avc: denied { write } for pid=13895 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.376598][T13634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 538.517452][ T5274] 8021q: adding VLAN 0 to HW filter on device eth22 [ 538.690581][T13914] IPv6: Can't replace route, no match found [ 538.698259][T13914] IPv6: Can't replace route, no match found [ 538.939221][T13634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.975946][T13634] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.987564][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.994678][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.045540][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.052772][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.467403][T13941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1359'. [ 539.564676][T13948] netlink: 'syz.2.1360': attribute type 4 has an invalid length. [ 539.579661][T13948] fuse: Bad value for 'fd' [ 539.628903][ T29] audit: type=1400 audit(1777863820.373:1895): avc: denied { write } for pid=13922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.819552][T13959] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1361'. [ 539.850640][ T29] audit: type=1400 audit(1777863820.593:1896): avc: denied { write } for pid=13957 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.036291][ T5274] 8021q: adding VLAN 0 to HW filter on device eth23 [ 540.179894][T13634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.758624][T13634] veth0_vlan: entered promiscuous mode [ 540.814518][T13634] veth1_vlan: entered promiscuous mode [ 540.814900][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 540.814911][ T29] audit: type=1400 audit(1777863821.563:1898): avc: denied { write } for pid=13969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.866548][T13634] veth0_macvtap: entered promiscuous mode [ 540.911440][T13634] veth1_macvtap: entered promiscuous mode [ 540.952497][T13634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.960767][ T29] audit: type=1400 audit(1777863821.703:1899): avc: denied { write } for pid=13995 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.980816][T13634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.546526][ T9075] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.596659][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.624822][ T5274] 8021q: adding VLAN 0 to HW filter on device eth24 [ 541.661659][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.748705][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.777252][ T9075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.802342][ T9075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.880788][ T3306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.910730][ T3306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.405054][T14020] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 542.600982][ T24] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 542.683920][ T29] audit: type=1400 audit(1777863823.433:1900): avc: denied { write } for pid=14009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.742013][ T29] audit: type=1326 audit(1777863823.493:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14025 comm="syz.7.1372" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f896d99cdd9 code=0x0 [ 542.784895][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 542.805326][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.816298][ T24] usb 1-1: Product: syz [ 542.820583][ T24] usb 1-1: Manufacturer: syz [ 542.826376][ T24] usb 1-1: SerialNumber: syz [ 542.837895][ T24] usb 1-1: config 0 descriptor?? [ 542.869658][ T29] audit: type=1400 audit(1777863823.613:1902): avc: denied { write } for pid=14037 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.921038][ T5792] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 543.057570][ T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 543.090948][ T5792] usb 2-1: Using ep0 maxpacket: 16 [ 543.097954][ T5792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 543.108991][ T5792] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 543.147792][ T5792] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 543.174221][ T5792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.198306][ T5792] usb 2-1: Product: syz [ 543.207451][ T5792] usb 2-1: Manufacturer: syz [ 543.225562][ T5792] usb 2-1: SerialNumber: syz [ 543.516176][ T5792] snd-ua101 2-1:1.1: sample format descriptor not found [ 543.527111][ T5792] snd-ua101 2-1:1.0: invalid num_altsetting [ 543.552578][ T29] audit: type=1400 audit(1777863824.303:1903): avc: denied { write } for pid=14042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.583765][ T5792] usb 2-1: USB disconnect, device number 36 [ 543.705538][ T29] audit: type=1400 audit(1777863824.453:1904): avc: denied { write } for pid=14058 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.103945][ T29] audit: type=1400 audit(1777863824.853:1905): avc: denied { write } for pid=14060 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.256251][ T29] audit: type=1400 audit(1777863825.003:1906): avc: denied { write } for pid=14073 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.677713][ T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 544.693509][T14081] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1379'. [ 544.709267][ T24] usb 1-1: USB disconnect, device number 30 [ 544.830922][T14086] tipc: Started in network mode [ 544.844672][T14086] tipc: Node identity 1e04516a6b93, cluster identity 4711 [ 544.861392][T14086] tipc: Enabled bearer , priority 0 [ 545.063538][ T29] audit: type=1400 audit(1777863825.813:1907): avc: denied { write } for pid=14077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.994537][ T47] tipc: Node number set to 1972851050 [ 546.020751][ T5733] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 546.231942][ T5733] usb 1-1: Using ep0 maxpacket: 32 [ 546.414761][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 546.414800][ T29] audit: type=1400 audit(1777863827.163:1909): avc: denied { write } for pid=14104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.444607][ T5733] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 546.580202][ T5733] usb 1-1: config 0 has no interface number 0 [ 546.600893][ T5733] usb 1-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 546.713955][T14134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1387'. [ 546.780463][ T5733] usb 1-1: config 0 interface 184 has no altsetting 0 [ 546.825799][ T5733] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 546.847917][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.873317][ T5733] usb 1-1: Product: syz [ 546.885787][ T5733] usb 1-1: Manufacturer: syz [ 546.902133][ T5733] usb 1-1: SerialNumber: syz [ 546.927544][ T5733] usb 1-1: config 0 descriptor?? [ 546.944144][ T29] audit: type=1400 audit(1777863827.693:1910): avc: denied { write } for pid=14137 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.977418][ T5733] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 546.995838][ T5733] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 547.353037][T14146] IPv6: Can't replace route, no match found [ 547.362762][T14146] IPv6: Can't replace route, no match found [ 547.407991][T14147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=14147 comm=syz.1.1391 [ 547.432229][ T5733] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 547.642194][ T5733] usb 9-1: Using ep0 maxpacket: 16 [ 547.675371][ T5733] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 547.704207][ T5733] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.726368][ T5733] usb 9-1: Product: syz [ 547.738151][ T5733] usb 9-1: Manufacturer: syz [ 547.747347][ T5733] usb 9-1: SerialNumber: syz [ 548.094884][ T5792] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 548.112786][ T29] audit: type=1400 audit(1777863828.853:1911): avc: denied { accept } for pid=14141 comm="syz.8.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 548.159906][ T29] audit: type=1400 audit(1777863828.903:1912): avc: denied { write } for pid=14145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.301372][ T5792] usb 2-1: Using ep0 maxpacket: 16 [ 548.507831][ T5792] usb 2-1: too many configurations: 60, using maximum allowed: 8 [ 548.540366][ T5792] usb 2-1: config 0 has no interfaces? [ 548.551425][ T24] usb 1-1: USB disconnect, device number 31 [ 548.569621][ T5792] usb 2-1: config 0 has no interfaces? [ 548.603909][ T5792] usb 2-1: config 0 has no interfaces? [ 548.614307][T14174] netlink: 'syz.0.1397': attribute type 1 has an invalid length. [ 548.626964][ T5792] usb 2-1: config 0 has no interfaces? [ 548.636995][ T5792] usb 2-1: config 0 has no interfaces? [ 548.650607][ T5792] usb 2-1: config 0 has no interfaces? [ 548.658393][T14174] bond1: entered promiscuous mode [ 548.658575][ T5792] usb 2-1: config 0 has no interfaces? [ 548.680002][ T5792] usb 2-1: config 0 has no interfaces? [ 548.683866][T14174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.689621][ T5792] usb 2-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 548.702694][ T5792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 548.711287][ T5792] usb 2-1: Product: syz [ 548.715811][ T5792] usb 2-1: Manufacturer: syz [ 548.720462][ T5792] usb 2-1: SerialNumber: syz [ 548.825423][ T5792] usb 2-1: config 0 descriptor?? [ 548.890831][ T29] audit: type=1400 audit(1777863829.633:1913): avc: denied { write } for pid=14177 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.595472][ T24] usb 2-1: USB disconnect, device number 37 [ 549.774531][T14194] IPv6: Can't replace route, no match found [ 549.783622][T14194] IPv6: Can't replace route, no match found [ 549.905821][T14202] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 549.912369][T14202] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 549.944098][T14202] vhci_hcd vhci_hcd.0: Device attached [ 549.957757][T14206] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(12) [ 549.964412][T14206] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 549.988078][T14206] vhci_hcd vhci_hcd.0: Device attached [ 549.998796][T14204] usbip_core: unknown command [ 550.010832][T14204] vhci_hcd: unknown pdu 1166236402 [ 550.020938][T14204] usbip_core: unknown command [ 550.030955][ T9023] vhci_hcd vhci_hcd.7: stop threads [ 550.037298][ T9023] vhci_hcd vhci_hcd.7: release socket [ 550.054112][ T9023] vhci_hcd vhci_hcd.7: disconnect device [ 550.086103][ T29] audit: type=1400 audit(1777863830.833:1914): avc: denied { write } for pid=14191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.238887][ T29] audit: type=1400 audit(1777863830.983:1915): avc: denied { write } for pid=14214 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.315768][ T5733] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 550.347826][ T5733] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 550.366462][ T5733] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 550.395268][ T5733] usb 9-1: media controller created [ 550.485301][T14223] IPv6: Can't replace route, no match found [ 550.492675][T14223] IPv6: Can't replace route, no match found [ 550.699064][T14207] vhci_hcd: connection closed [ 550.710056][ T9075] vhci_hcd vhci_hcd.7: stop threads [ 550.741284][ T24] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 550.751238][ T9075] vhci_hcd vhci_hcd.7: release socket [ 550.764140][ T5733] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 550.776157][ T9075] vhci_hcd vhci_hcd.7: disconnect device [ 550.831792][ T9076] usb 48-2: enqueue for inactive port 1 [ 550.902910][ T24] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 550.931712][ T24] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 550.975729][ T5733] zl10353_read_register: readreg error (reg=127, ret==-71) [ 550.975978][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 551.011921][ T29] audit: type=1400 audit(1777863831.753:1916): avc: denied { bind } for pid=14231 comm="syz.0.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 551.042690][ T24] usb 2-1: string descriptor 0 read error: -22 [ 551.065772][ T24] usb 2-1: New USB device found, idVendor=0408, idProduct=3001, bcdDevice= 0.40 [ 551.065800][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.076453][T14217] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 551.120068][ T5733] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 551.154025][ T5733] usb 9-1: USB disconnect, device number 13 [ 551.292891][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'. [ 551.293547][T14217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'. [ 551.298176][T14217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.300330][T14217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.332291][ T24] usbhid 2-1:1.0: can't add hid device: -71 [ 551.332384][ T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 551.344442][ T24] usb 2-1: USB disconnect, device number 38 [ 551.372451][ T9076] usb usb48-port2: attempt power cycle [ 551.575324][ T29] audit: type=1400 audit(1777863832.313:1917): avc: denied { write } for pid=14220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.591507][T14263] input: syz1 as /devices/virtual/input/input31 [ 551.830599][T14266] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 551.835633][ T29] audit: type=1400 audit(1777863832.583:1918): avc: denied { write } for pid=14268 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.981921][ T9076] usb usb48-port2: unable to enumerate USB device [ 552.550932][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 552.550993][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.551023][ T51] Tainted: [L]=SOFTLOCKUP [ 552.551031][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 552.551045][ T51] Workqueue: hci2 hci_rx_work [ 552.551072][ T51] Call Trace: [ 552.551080][ T51] [ 552.551088][ T51] dump_stack_lvl+0x100/0x190 [ 552.551115][ T51] sysfs_warn_dup.cold+0x1c/0x28 [ 552.551144][ T51] sysfs_create_dir_ns+0x24b/0x2b0 [ 552.551170][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 552.551195][ T51] ? find_held_lock+0x2b/0x80 [ 552.551214][ T51] ? kobject_add_internal+0x25f/0x930 [ 552.551240][ T51] ? kobject_add_internal+0x25f/0x930 [ 552.551268][ T51] ? do_raw_spin_unlock+0x145/0x1e0 [ 552.551299][ T51] kobject_add_internal+0x2c8/0x930 [ 552.551329][ T51] kobject_add+0x16a/0x1e0 [ 552.551356][ T51] ? __pfx_kobject_add+0x10/0x10 [ 552.551381][ T51] ? class_to_subsys+0x10f/0x150 [ 552.551407][ T51] ? kobject_put+0xb9/0x640 [ 552.551431][ T51] ? _raw_spin_unlock+0x28/0x50 [ 552.551458][ T51] device_add+0x294/0x1950 [ 552.551480][ T51] ? __pfx_dev_set_name+0x10/0x10 [ 552.551505][ T51] ? __pfx_device_add+0x10/0x10 [ 552.551527][ T51] ? mgmt_send_event_skb+0x2fb/0x460 [ 552.551557][ T51] hci_conn_add_sysfs+0x1a3/0x260 [ 552.551584][ T51] le_conn_complete_evt+0x11eb/0x1f60 [ 552.551613][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 552.551643][ T51] hci_le_conn_complete_evt+0x23c/0x3a0 [ 552.551666][ T51] ? skb_pull_data+0x15f/0x1e0 [ 552.551692][ T51] hci_le_meta_evt+0x34a/0x5f0 [ 552.551716][ T51] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 552.551742][ T51] hci_event_packet+0x51c/0xcd0 [ 552.551768][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 552.551792][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 552.551817][ T51] ? kcov_remote_start+0x374/0x660 [ 552.551837][ T51] ? lockdep_hardirqs_on+0x78/0x100 [ 552.551864][ T51] hci_rx_work+0x451/0xfc0 [ 552.551889][ T51] process_one_work+0xa0e/0x1980 [ 552.551924][ T51] ? __pfx_process_one_work+0x10/0x10 [ 552.551953][ T51] ? __pfx_hci_rx_work+0x10/0x10 [ 552.551976][ T51] worker_thread+0x5ef/0xe50 [ 552.552019][ T51] ? kthread+0x13a/0x450 [ 552.552043][ T51] ? __pfx_worker_thread+0x10/0x10 [ 552.552066][ T51] kthread+0x370/0x450 [ 552.552089][ T51] ? __pfx_kthread+0x10/0x10 [ 552.552112][ T51] ret_from_fork+0x72b/0xd50 [ 552.552138][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 552.552161][ T51] ? __switch_to+0x800/0x1100 [ 552.552187][ T51] ? __pfx_kthread+0x10/0x10 [ 552.552210][ T51] ret_from_fork_asm+0x1a/0x30 [ 552.552246][ T51] [ 552.554032][ T51] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 552.554068][ T51] Bluetooth: hci2: failed to register connection device [ 553.385742][T14301] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 553.407087][ T29] audit: type=1400 audit(1777863834.153:1919): avc: denied { listen } for pid=14294 comm="syz.1.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 553.436198][ T29] audit: type=1326 audit(1777863834.183:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14302 comm="syz.2.1423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c959cdd9 code=0x7ffc0000 [ 553.436252][ T29] audit: type=1326 audit(1777863834.183:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14302 comm="syz.2.1423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c959cdd9 code=0x7ffc0000 [ 553.436415][ T29] audit: type=1326 audit(1777863834.183:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14302 comm="syz.2.1423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c959cdd9 code=0x7ffc0000 [ 553.436811][ T29] audit: type=1326 audit(1777863834.183:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14302 comm="syz.2.1423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c959cdd9 code=0x7ffc0000 [ 553.437576][ T29] audit: type=1326 audit(1777863834.183:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14302 comm="syz.2.1423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f04c959cdd9 code=0x7ffc0000 [ 553.437624][ T29] audit: type=1326 audit(1777863834.183:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14302 comm="syz.2.1423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c959cdd9 code=0x7ffc0000 [ 553.437664][ T29] audit: type=1326 audit(1777863834.183:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14302 comm="syz.2.1423" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c959cdd9 code=0x7ffc0000 [ 553.763598][ T5733] hid-generic 0005:9C3F:0006.000D: item fetching failed at offset 0/2 [ 553.780120][ T5733] hid-generic 0005:9C3F:0006.000D: probe with driver hid-generic failed with error -22 [ 554.319152][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 554.589111][T14336] fuse: fd is not a fuse device [ 554.671102][T14339] overlayfs: failed to clone upperpath [ 555.295053][T14355] tipc: Enabling of bearer rejected, already enabled [ 555.427504][T14350] lo speed is unknown, defaulting to 1000 [ 555.488040][T14350] lo speed is unknown, defaulting to 1000 [ 555.642675][ T5616] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 555.645924][T14350] lo speed is unknown, defaulting to 1000 [ 556.196699][T14350] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 556.465113][T14350] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 556.555755][T14350] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 556.900516][T14378] IPv6: Can't replace route, no match found [ 556.907771][T14378] IPv6: Can't replace route, no match found [ 557.107505][T14350] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 557.273060][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.279462][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.319584][T14350] lo speed is unknown, defaulting to 1000 [ 557.593123][T14350] lo speed is unknown, defaulting to 1000 [ 557.616511][T14350] lo speed is unknown, defaulting to 1000 [ 557.656084][T14350] lo speed is unknown, defaulting to 1000 [ 557.684943][T14350] lo speed is unknown, defaulting to 1000 [ 557.722099][T14350] lo speed is unknown, defaulting to 1000 [ 557.728049][T14382] IPv6: Can't replace route, no match found [ 557.734119][T14382] IPv6: Can't replace route, no match found [ 558.053554][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 558.053569][ T29] audit: type=1400 audit(1777863838.803:2068): avc: denied { write } for pid=14364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.702327][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 558.975531][ T29] audit: type=1400 audit(1777863839.603:2069): avc: denied { write } for pid=14407 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.986172][T14414] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1442'. [ 559.862059][T14414] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=14414 comm=syz.8.1442 [ 559.912082][T14414] comedi comedi0: comedi_parport: I/O base address not correctly aligned [ 560.676024][T14433] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1447'. [ 561.925204][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1448'. [ 561.967967][ T1118] Bluetooth: hci5: Frame reassembly failed (-84) [ 563.900758][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 563.940156][ T5616] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 564.437603][T14464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1453'. [ 564.852148][ T29] audit: type=1400 audit(2000000004.130:2070): avc: denied { write } for pid=14425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.424971][ T29] audit: type=1400 audit(2000000004.700:2071): avc: denied { write } for pid=14473 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.638438][T14483] netem: change failed [ 565.777382][T14492] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1460'. [ 565.871568][ T47] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 566.093356][T14502] fuse: fd is not a fuse device [ 566.210981][ T47] usb 9-1: unable to get BOS descriptor or descriptor too short [ 566.238218][ T47] usb 9-1: not running at top speed; connect to a high speed hub [ 566.278139][ T47] usb 9-1: config 1 has too many interfaces: 131, using maximum allowed: 32 [ 566.322372][ T47] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 566.337292][T14497] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14497 comm=syz.0.1462 [ 566.370719][ T47] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 131 [ 566.396923][ T47] usb 9-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 566.433112][ T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.456314][ T47] usb 9-1: Product: syz [ 566.466379][ T47] usb 9-1: Manufacturer: syz [ 566.477887][ T47] usb 9-1: SerialNumber: syz [ 566.590404][ T29] audit: type=1400 audit(2000000261.854:2072): avc: denied { bind } for pid=14487 comm="syz.1.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 566.618691][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 566.689190][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 566.798847][ T29] audit: type=1400 audit(2000000261.954:2073): avc: denied { write } for pid=14484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.180222][ T29] audit: type=1400 audit(2000000262.444:2074): avc: denied { write } for pid=14522 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.474549][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 567.509156][ T9023] Bluetooth: hci5: Frame reassembly failed (-90) [ 567.529737][T14530] hsr0: entered promiscuous mode [ 567.580095][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1467'. [ 569.500996][ T5616] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 569.653931][ T47] usb 9-1: unknown interface protocol 0x3, assuming v1 [ 569.727831][T14546] overlay: Unknown parameter 'fsname' [ 569.736510][ T47] usb 9-1: cannot find UAC_HEADER [ 569.875920][ T29] audit: type=1400 audit(2000000265.144:2075): avc: denied { write } for pid=14532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.027709][ T29] audit: type=1400 audit(2000000265.294:2076): avc: denied { write } for pid=14556 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.116756][ T47] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 570.148328][ T47] usb 9-1: can't set first interface for hiFace device. [ 570.180802][ T47] snd-usb-hiface 9-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 570.198071][ T47] usb 9-1: USB disconnect, device number 14 [ 570.217746][T14561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1473'. [ 570.460620][ T29] audit: type=1400 audit(2000000265.724:2077): avc: denied { map } for pid=14551 comm="syz.2.1471" path="socket:[50440]" dev="sockfs" ino=50440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 570.585421][ T6133] udevd[6133]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.691487][ T8199] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 570.751114][ T47] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 570.820823][ T8199] usb 2-1: device descriptor read/64, error -71 [ 570.903403][ T47] usb 9-1: Using ep0 maxpacket: 32 [ 570.914466][ T47] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 570.925454][ T47] usb 9-1: config 0 has no interface number 0 [ 570.934991][ T47] usb 9-1: config 0 interface 12 has no altsetting 0 [ 570.944755][ T47] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 570.955881][ T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.969162][ T47] usb 9-1: Product: syz [ 570.973689][ T47] usb 9-1: Manufacturer: syz [ 570.978440][ T47] usb 9-1: SerialNumber: syz [ 570.987162][ T47] usb 9-1: config 0 descriptor?? [ 571.022951][ T29] audit: type=1400 audit(2000000266.294:2078): avc: denied { write } for pid=14563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.060835][ T8199] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 571.075886][ T5792] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 571.162194][ T29] audit: type=1400 audit(2000000266.424:2079): avc: denied { write } for pid=14583 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.203895][ T8199] usb 2-1: device descriptor read/64, error -71 [ 571.230831][ T5792] usb 1-1: Using ep0 maxpacket: 8 [ 571.244949][ T5792] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 571.264272][ T5792] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 571.275766][ T5792] usb 1-1: config 127 has no interface number 1 [ 571.288262][ T5792] usb 1-1: config 127 interface 171 has no altsetting 0 [ 571.298855][ T5792] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 571.315400][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.324031][ T8199] usb usb2-port1: attempt power cycle [ 571.330432][ T5792] usb 1-1: Product: syz [ 571.335208][ T5792] usb 1-1: Manufacturer: syz [ 571.339888][ T5792] usb 1-1: SerialNumber: syz [ 571.591809][T14448] Set syz1 is full, maxelem 65536 reached [ 571.663461][ T8199] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 571.672750][ T47] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 571.703894][ T47] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 571.718286][ T8199] usb 2-1: device descriptor read/8, error -71 [ 571.745071][ T5792] xr_serial 1-1:127.171: xr_serial converter detected [ 571.755995][ T47] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 571.770037][ T803] IPVS: starting estimator thread 0... [ 571.770187][ T47] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 571.778518][T14600] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 571.788627][ T5792] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 571.802764][ T5792] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 571.820569][ T47] usb 9-1: USB disconnect, device number 15 [ 571.856269][ T5792] usb 1-1: USB disconnect, device number 32 [ 571.902794][T14605] IPVS: using max 47 ests per chain, 112800 per kthread [ 571.934083][ T5792] xr_serial 1-1:127.171: device disconnected [ 571.955055][T14609] trusted_key: syz.7.1479 sent an empty control message without MSG_MORE. [ 571.971452][ T8199] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 572.014046][ T8199] usb 2-1: device descriptor read/8, error -71 [ 572.132945][ T8199] usb usb2-port1: unable to enumerate USB device [ 573.730099][T14621] fuse: fd is not a fuse device [ 573.751217][ T24] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 573.767140][T14623] IPv6: Can't replace route, no match found [ 574.720362][T14623] IPv6: Can't replace route, no match found [ 574.740800][ T5616] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 575.098353][T14633] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20003 [ 575.159446][T14636] netlink: 'syz.1.1487': attribute type 3 has an invalid length. [ 575.170755][ T24] usb 9-1: device descriptor read/64, error -71 [ 575.298505][T14643] overlayfs: failed to clone upperpath [ 575.314193][T14643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1489'. [ 575.430775][ T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 575.584247][ T24] usb 9-1: device descriptor read/64, error -71 [ 575.713363][ T24] usb usb9-port1: attempt power cycle [ 576.110754][ T24] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 576.161512][ T24] usb 9-1: device descriptor read/8, error -71 [ 576.301137][ T5616] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 576.313486][ T5616] Bluetooth: hci3: Injecting HCI hardware error event [ 576.322236][ T5616] Bluetooth: hci3: hardware error 0x00 [ 578.384211][ T5616] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 578.780848][ T5616] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 578.793477][ T5616] Bluetooth: hci2: Injecting HCI hardware error event [ 578.801562][ T5616] Bluetooth: hci2: hardware error 0x00 [ 580.865118][ T5616] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 581.452088][ T29] audit: type=1400 audit(2000000276.724:2080): avc: denied { write } for pid=14658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.505420][ T29] audit: type=1400 audit(2000000276.774:2081): avc: denied { write } for pid=14669 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.687536][ T29] audit: type=1400 audit(2000000276.954:2082): avc: denied { write } for pid=14672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.739156][ T29] audit: type=1400 audit(2000000277.004:2083): avc: denied { write } for pid=14683 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.027507][ T29] audit: type=1400 audit(2000000277.294:2084): avc: denied { write } for pid=14686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.096079][ T29] audit: type=1400 audit(2000000277.364:2085): avc: denied { write } for pid=14697 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.907324][ T29] audit: type=1400 audit(2000000278.174:2086): avc: denied { write } for pid=14700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.961164][ T29] audit: type=1400 audit(2000000278.234:2087): avc: denied { write } for pid=14711 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.279393][ T29] audit: type=1400 audit(2000000279.544:2088): avc: denied { write } for pid=14714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.330206][ T29] audit: type=1400 audit(2000000279.594:2089): avc: denied { write } for pid=14725 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 596.352017][T14764] x_tables: duplicate underflow at hook 1 [ 596.439895][T14765] vlan2: entered allmulticast mode [ 596.445081][T14765] macsec0: entered allmulticast mode [ 596.450366][T14765] veth1_macvtap: entered allmulticast mode [ 596.531319][ T803] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 596.772973][ T803] usb 9-1: Using ep0 maxpacket: 16 [ 596.825134][ T803] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 596.874342][ T803] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.895262][ T803] usb 9-1: Product: syz [ 596.903959][ T803] usb 9-1: Manufacturer: syz [ 596.914081][ T803] usb 9-1: SerialNumber: syz [ 596.915062][T14768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1545 sclass=netlink_tcpdiag_socket pid=14768 comm=syz.2.1497 [ 597.303135][T14780] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1501'. [ 597.402845][ T5792] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 598.216756][T14785] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1500'. [ 598.392789][T14785] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1500'. [ 598.440627][T14785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.449806][ T803] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 598.471521][ T803] usb 9-1: USB disconnect, device number 20 [ 598.478281][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 598.478295][ T29] audit: type=1400 audit(2000000293.744:2092): avc: denied { mounton } for pid=14779 comm="syz.2.1500" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 598.535135][T14785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.597541][ T5792] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 598.609606][ T5792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.609721][T14785] bond0 (unregistering): Released all slaves [ 598.620410][ T5792] usb 2-1: config 0 descriptor?? [ 598.684645][T14790] batman_adv: batadv0: Adding interface: dummy0 [ 598.707942][T14790] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.760864][T14790] batman_adv: batadv0: Interface activated: dummy0 [ 598.903755][T14795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1499'. [ 598.925841][ T5792] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 599.190827][ T5745] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 599.684201][ T5792] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 599.700933][ T5792] [drm] Initialized udl on minor 2 [ 599.868464][ T5745] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 599.890569][ T5745] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.896888][ T5792] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 599.906823][ T5745] usb 1-1: config 0 descriptor?? [ 599.930571][ T5792] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 599.975086][ T29] audit: type=1400 audit(2000000295.244:2093): avc: denied { append } for pid=14805 comm="syz.7.1508" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 600.050581][ T29] audit: type=1400 audit(2000000295.264:2094): avc: denied { map } for pid=14805 comm="syz.7.1508" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 600.094796][ T29] audit: type=1400 audit(2000000295.264:2095): avc: denied { execute } for pid=14805 comm="syz.7.1508" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 600.117693][T14794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.155117][T14794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.218092][ T29] audit: type=1400 audit(2000000295.484:2096): avc: denied { connect } for pid=14811 comm="syz.8.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 600.271686][ T5745] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 600.531427][ T5745] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3 [ 600.544743][ T5745] [drm] Initialized udl on minor 3 [ 600.618133][ T8199] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 600.620901][ T9076] usb 2-1: USB disconnect, device number 43 [ 600.627894][ T8199] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 600.680553][ T5745] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 600.710544][ T5745] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 600.723778][ T803] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 600.870786][ T803] usb 9-1: device descriptor read/64, error -71 [ 601.146061][ T803] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 601.350834][ T803] usb 9-1: device descriptor read/64, error -71 [ 601.465212][ T803] usb usb9-port1: attempt power cycle [ 601.788536][ T29] audit: type=1400 audit(2000000297.054:2097): avc: denied { read } for pid=14826 comm="syz.2.1513" path="socket:[50759]" dev="sockfs" ino=50759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 601.892899][T14836] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1516'. [ 601.940855][ T803] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 602.006945][ T803] usb 9-1: device descriptor read/8, error -71 [ 602.008914][ T5792] usb 1-1: USB disconnect, device number 33 [ 602.013281][ T7583] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 602.013477][ T7583] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 602.261584][ T803] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 602.292755][ T803] usb 9-1: device descriptor read/8, error -71 [ 602.310862][ T9076] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 602.411028][ T803] usb usb9-port1: unable to enumerate USB device [ 602.473004][ T9076] usb 2-1: Using ep0 maxpacket: 32 [ 602.492184][ T9076] usb 2-1: config 0 has an invalid interface number: 37 but max is 1 [ 602.502947][ T9076] usb 2-1: config 0 has no interface number 1 [ 602.519398][ T9076] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 602.528724][ T9076] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 602.538025][ T9076] usb 2-1: Product: syz [ 602.544003][ T9076] usb 2-1: Manufacturer: syz [ 602.549753][ T9076] usb 2-1: SerialNumber: syz [ 602.562120][ T9076] usb 2-1: config 0 descriptor?? [ 602.575665][T14859] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 602.758183][T14865] netlink: 'syz.7.1522': attribute type 1 has an invalid length. [ 602.821326][T14865] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 602.830725][ T1118] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 602.849549][ T1118] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 602.872457][ T1118] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 602.891469][ T1118] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 603.851163][ T29] audit: type=1400 audit(2000000298.304:2098): avc: denied { name_bind } for pid=14844 comm="syz.1.1517" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 603.882586][ T9076] qcserial 2-1:0.37: Qualcomm USB modem converter detected [ 604.015003][ T29] audit: type=1400 audit(2000000299.284:2099): avc: denied { unmount } for pid=7926 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 604.094929][ T803] usb 2-1: USB disconnect, device number 44 [ 604.109588][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1525'. [ 604.121081][ T803] qcserial 2-1:0.37: device disconnected [ 604.996150][T14893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1529'. [ 605.989811][T14903] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1532'. [ 608.133027][T14928] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 608.543780][T14930] FAULT_INJECTION: forcing a failure. [ 608.543780][T14930] name failslab, interval 1, probability 0, space 0, times 0 [ 608.572165][T14930] CPU: 1 UID: 0 PID: 14930 Comm: syz.8.1541 Tainted: G L syzkaller #0 PREEMPT(full) [ 608.572196][T14930] Tainted: [L]=SOFTLOCKUP [ 608.572203][T14930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 608.572214][T14930] Call Trace: [ 608.572220][T14930] [ 608.572228][T14930] dump_stack_lvl+0x100/0x190 [ 608.572255][T14930] should_fail_ex.cold+0x5/0xa [ 608.572281][T14930] ? tomoyo_realpath_from_path+0xb6/0x690 [ 608.572306][T14930] should_failslab+0xc2/0x120 [ 608.572327][T14930] __kmalloc_noprof+0xe0/0x850 [ 608.572353][T14930] ? kfree+0x1dd/0x6c0 [ 608.572386][T14930] tomoyo_realpath_from_path+0xb6/0x690 [ 608.572416][T14930] tomoyo_path_number_perm+0x23c/0x580 [ 608.572436][T14930] ? tomoyo_path_number_perm+0x22e/0x580 [ 608.572459][T14930] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 608.572506][T14930] ? find_held_lock+0x2b/0x80 [ 608.572523][T14930] ? __fget_files+0x215/0x3d0 [ 608.572545][T14930] ? hook_file_ioctl_common+0x149/0x410 [ 608.572570][T14930] ? __fget_files+0x215/0x3d0 [ 608.572597][T14930] ? __fget_files+0x21f/0x3d0 [ 608.572624][T14930] security_file_ioctl+0xd3/0x230 [ 608.572648][T14930] __x64_sys_ioctl+0xb7/0x210 [ 608.572668][T14930] do_syscall_64+0x10b/0xf80 [ 608.572689][T14930] ? clear_bhb_loop+0x40/0x90 [ 608.572715][T14930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.572734][T14930] RIP: 0033:0x7f79c299cdd9 [ 608.572749][T14930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.572765][T14930] RSP: 002b:00007f79c37ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.572783][T14930] RAX: ffffffffffffffda RBX: 00007f79c2c15fa0 RCX: 00007f79c299cdd9 [ 608.572794][T14930] RDX: 0000200000000080 RSI: 000000004008af13 RDI: 0000000000000003 [ 608.572806][T14930] RBP: 00007f79c37ed090 R08: 0000000000000000 R09: 0000000000000000 [ 608.572816][T14930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.572827][T14930] R13: 00007f79c2c16038 R14: 00007f79c2c15fa0 R15: 00007ffca203e2e8 [ 608.572853][T14930] [ 608.574682][T14930] ERROR: Out of memory at tomoyo_realpath_from_path. [ 609.131959][T14946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1542'. [ 609.550720][ T5792] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 609.730723][ T5792] usb 2-1: Invalid ep0 maxpacket: 32 [ 609.806538][T14961] loop5: detected capacity change from 0 to 7 [ 609.822689][T14961] buffer_io_error: 121 callbacks suppressed [ 609.822703][T14961] Buffer I/O error on dev loop5, logical block 0, async page read [ 609.855819][T14961] Buffer I/O error on dev loop5, logical block 0, async page read [ 609.868709][T14961] Buffer I/O error on dev loop5, logical block 0, async page read [ 609.887617][T14961] Buffer I/O error on dev loop5, logical block 0, async page read [ 609.906399][T14961] Buffer I/O error on dev loop5, logical block 0, async page read [ 609.925318][T14961] Buffer I/O error on dev loop5, logical block 0, async page read [ 609.933251][ T5792] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 609.950327][T14961] Buffer I/O error on dev loop5, logical block 0, async page read [ 609.968472][T14961] ldm_validate_partition_table(): Disk read failed. [ 609.987313][T14961] Buffer I/O error on dev loop5, logical block 0, async page read [ 609.999818][T14961] Buffer I/O error on dev loop5, logical block 0, async page read [ 610.017716][T14961] Buffer I/O error on dev loop5, logical block 0, async page read [ 610.040866][T14961] Dev loop5: unable to read RDB block 0 [ 610.051126][T14961] loop5: unable to read partition table [ 610.067016][T14961] loop5: partition table beyond EOD, truncated [ 610.088671][T14961] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 610.131732][ T5792] usb 2-1: Invalid ep0 maxpacket: 32 [ 610.144324][ T5792] usb usb2-port1: attempt power cycle [ 610.502086][ T5792] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 610.510844][T14974] netlink: 132732 bytes leftover after parsing attributes in process `syz.2.1552'. [ 610.562975][ T5792] usb 2-1: Invalid ep0 maxpacket: 32 [ 610.748484][ T5792] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 610.983373][ T5792] usb 2-1: Invalid ep0 maxpacket: 32 [ 610.999456][ T5792] usb usb2-port1: unable to enumerate USB device [ 611.000426][T14983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1555'. [ 611.134291][ T29] audit: type=1400 audit(2000000306.394:2100): avc: denied { ioctl } for pid=14984 comm="syz.0.1556" path="socket:[52162]" dev="sockfs" ino=52162 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 612.057327][ T29] audit: type=1400 audit(2000000307.324:2101): avc: denied { create } for pid=15001 comm="syz.0.1560" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 612.090866][T15002] QAT: Device 2 not found [ 612.146086][ T29] audit: type=1400 audit(2000000307.324:2102): avc: denied { listen } for pid=15001 comm="syz.0.1560" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 612.238647][ T29] audit: type=1400 audit(2000000307.354:2103): avc: denied { connect } for pid=15001 comm="syz.0.1560" lport=52035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 612.443373][ T29] audit: type=1400 audit(2000000307.354:2104): avc: denied { name_connect } for pid=15001 comm="syz.0.1560" dest=20004 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 612.711626][ T29] audit: type=1400 audit(2000000307.544:2105): avc: denied { read } for pid=15008 comm="syz.0.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 612.735348][ T29] audit: type=1400 audit(2000000307.674:2106): avc: denied { ioctl } for pid=15008 comm="syz.0.1564" path="socket:[52268]" dev="sockfs" ino=52268 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 612.761477][ T5792] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 614.087084][ T5792] usb 1-1: unable to get BOS descriptor or descriptor too short [ 614.104326][ T5792] usb 1-1: config index 0 descriptor too short (expected 38, got 36) [ 614.112818][ T5792] usb 1-1: config 242 has an invalid descriptor of length 79, skipping remainder of the config [ 614.137775][ T5792] usb 1-1: config 242 has 0 interfaces, different from the descriptor's value: 1 [ 614.170612][ T5792] usb 1-1: string descriptor 0 read error: -22 [ 614.193708][ T5792] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=44.11 [ 614.226428][T15018] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.249821][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.485670][ T803] usb 1-1: USB disconnect, device number 34 [ 614.549743][T15018] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.734938][T15018] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.842155][ T29] audit: type=1400 audit(2000000310.104:2107): avc: denied { execute } for pid=15046 comm="syz.2.1567" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=52281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 614.873667][T15047] SELinux: Context system_u:object_r:usbtty_device_t:s0 is not valid (left unmapped). [ 614.898507][ T29] audit: type=1400 audit(2000000310.144:2108): avc: denied { relabelfrom } for pid=15046 comm="syz.2.1567" name="RDS" dev="sockfs" ino=52286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 614.924187][ T29] audit: type=1400 audit(2000000310.154:2109): avc: denied { relabelto } for pid=15046 comm="syz.2.1567" name="RDS" dev="sockfs" ino=52286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rds_socket permissive=1 trawcon="system_u:object_r:usbtty_device_t:s0" [ 615.098200][T15050] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1572'. [ 615.108118][T15050] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1572'. [ 615.429189][T15018] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.522558][T15057] lo speed is unknown, defaulting to 1000 [ 615.701643][ T5745] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 615.714569][ T9075] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.736081][ T9075] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.783035][ T9006] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.817271][ T9006] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.966790][T15075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52781 sclass=netlink_route_socket pid=15075 comm=syz.8.1581 [ 616.083228][ T5745] usb 1-1: config 1 has an invalid descriptor of length 181, skipping remainder of the config [ 616.136713][ T5745] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 616.167101][ T5745] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 616.218127][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.355484][ T5745] usb 1-1: Product: syz [ 616.454951][ T5745] usb 1-1: Manufacturer: syz [ 616.483065][ T5745] usb 1-1: SerialNumber: syz [ 616.954205][ T29] audit: type=1400 audit(2000000312.034:2110): avc: denied { accept } for pid=15084 comm="syz.2.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 617.014261][ T5745] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 617.057066][ T5745] usb 1-1: USB disconnect, device number 35 [ 617.078193][ T5616] Bluetooth: hci1: connection err: -111 [ 617.091912][ T803] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 617.093545][T14762] udevd[14762]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 617.270741][ T803] usb 2-1: Using ep0 maxpacket: 8 [ 617.292620][ T803] usb 2-1: config 127 has an invalid interface number: 171 but max is 1 [ 617.311773][ T803] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 617.335027][ T803] usb 2-1: config 127 has no interface number 1 [ 617.350820][ T803] usb 2-1: config 127 interface 171 has no altsetting 0 [ 617.365066][ T803] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 617.382787][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.400795][ T803] usb 2-1: Product: syz [ 617.405070][ T803] usb 2-1: Manufacturer: syz [ 617.410670][ T29] audit: type=1400 audit(2000000312.674:2111): avc: denied { write } for pid=15092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.419416][ T803] usb 2-1: SerialNumber: syz [ 617.978915][ T29] audit: type=1400 audit(2000000313.244:2112): avc: denied { shutdown } for pid=15108 comm="syz.2.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 618.703369][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.778555][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.803093][ T803] xr_serial 2-1:127.171: xr_serial converter detected [ 619.141239][ T29] audit: type=1400 audit(2000000314.404:2113): avc: denied { write } for pid=15104 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.206684][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1590'. [ 620.539235][ T803] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 620.545683][ T803] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 620.560594][ T803] usb 2-1: USB disconnect, device number 49 [ 620.570479][ T803] xr_serial 2-1:127.171: device disconnected [ 622.220960][ T29] audit: type=1400 audit(2000000317.454:2114): avc: denied { map } for pid=15125 comm="syz.1.1592" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 622.527075][T15139] ipvlan0: mtu less than device minimum [ 622.757667][T15090] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 622.763960][T15090] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 622.841717][T15153] FAULT_INJECTION: forcing a failure. [ 622.841717][T15153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.854898][T15153] CPU: 0 UID: 0 PID: 15153 Comm: syz.0.1597 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.854929][T15153] Tainted: [L]=SOFTLOCKUP [ 622.854936][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 622.854948][T15153] Call Trace: [ 622.854955][T15153] [ 622.854964][T15153] dump_stack_lvl+0x100/0x190 [ 622.854991][T15153] should_fail_ex.cold+0x5/0xa [ 622.855017][T15153] _copy_from_user+0x2e/0xd0 [ 622.855044][T15153] do_ipv6_getsockopt+0x358/0x3350 [ 622.855074][T15153] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 622.855098][T15153] ? trace_sched_exit_tp+0x11c/0x160 [ 622.855121][T15153] ? __schedule+0x10fb/0x6820 [ 622.855148][T15153] ? __lock_acquire+0x4a5/0x2630 [ 622.855188][T15153] ? ipv6_getsockopt+0x12f/0x2a0 [ 622.855209][T15153] ipv6_getsockopt+0x12f/0x2a0 [ 622.855234][T15153] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 622.855256][T15153] ? _copy_from_user+0x59/0xd0 [ 622.855282][T15153] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 622.855309][T15153] tcp_getsockopt+0xa1/0x110 [ 622.855328][T15153] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 622.855351][T15153] do_sock_getsockopt+0x50a/0x6e0 [ 622.855369][T15153] ? __lock_acquire+0x4a5/0x2630 [ 622.855395][T15153] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 622.855414][T15153] ? find_held_lock+0x2b/0x80 [ 622.855430][T15153] ? ksys_write+0x190/0x250 [ 622.855461][T15153] ? find_held_lock+0x2b/0x80 [ 622.855486][T15153] ? __fget_files+0x21f/0x3d0 [ 622.855515][T15153] __sys_getsockopt+0x148/0x260 [ 622.855550][T15153] ? __x64_sys_getsockopt+0xbd/0x160 [ 622.855575][T15153] __x64_sys_getsockopt+0xbd/0x160 [ 622.855600][T15153] ? do_syscall_64+0x90/0xf80 [ 622.855621][T15153] ? lockdep_hardirqs_on+0x78/0x100 [ 622.855642][T15153] do_syscall_64+0x10b/0xf80 [ 622.855662][T15153] ? clear_bhb_loop+0x40/0x90 [ 622.855683][T15153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.855702][T15153] RIP: 0033:0x7f13c259cdd9 [ 622.855717][T15153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.855735][T15153] RSP: 002b:00007f13c33e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 622.855752][T15153] RAX: ffffffffffffffda RBX: 00007f13c2816180 RCX: 00007f13c259cdd9 [ 622.855764][T15153] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000005 [ 622.855775][T15153] RBP: 00007f13c33e5090 R08: 0000200000000340 R09: 0000000000000000 [ 622.855786][T15153] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 622.855796][T15153] R13: 00007f13c2816218 R14: 00007f13c2816180 R15: 00007ffd1747ed38 [ 622.855821][T15153] [ 623.165735][ T29] audit: type=1400 audit(2000000318.434:2115): avc: denied { write } for pid=15128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.183025][ T29] audit: type=1400 audit(2000000319.444:2116): avc: denied { write } for pid=15164 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.299005][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'. [ 625.677107][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'. [ 627.138138][T15206] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1608'. [ 627.196334][T15206] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1608'. [ 627.659873][ T29] audit: type=1400 audit(2000000322.924:2117): avc: denied { write } for pid=15173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.801489][ T29] audit: type=1400 audit(2000000323.074:2118): avc: denied { write } for pid=15223 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.895014][T15226] overlay: Unknown parameter 'fsname' [ 628.160715][ T47] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 628.176668][T15236] xt_ecn: cannot match TCP bits for non-tcp packets [ 628.187244][ T29] audit: type=1400 audit(2000000323.454:2119): avc: denied { append } for pid=15232 comm="syz.0.1615" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 628.334662][ T47] usb 9-1: Using ep0 maxpacket: 32 [ 628.362214][ T47] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 628.409589][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.466577][ T47] usb 9-1: config 0 descriptor?? [ 628.503738][ T47] as10x_usb: device has been detected [ 628.511591][ T47] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 628.804707][T15228] ------------[ cut here ]------------ [ 628.810207][T15228] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 628.810217][T15228] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x94f/0x1b10, CPU#1: syz.8.1614/15228 [ 628.826162][T15228] Modules linked in: [ 628.830335][T15228] CPU: 1 UID: 0 PID: 15228 Comm: syz.8.1614 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.841416][T15228] Tainted: [L]=SOFTLOCKUP [ 628.845738][T15228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 628.855962][T15228] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 628.861355][T15228] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d fe 4b 05 45 85 f6 75 13 48 8d 3d 71 1c 4f 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 628.881115][T15228] RSP: 0018:ffffc900055afa50 EFLAGS: 00010246 [ 628.887811][T15228] RAX: 0000000000000003 RBX: ffff888027094b30 RCX: 1ffffffff21af9dc [ 628.895794][T15228] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90daed20 [ 628.903775][T15228] RBP: ffffc900055afbc0 R08: 0000000000000001 R09: 0000000000000000 [ 628.911760][T15228] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 628.919733][T15228] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 628.927734][T15228] FS: 00007f79c37ed6c0(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 628.936746][T15228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.942283][ T47] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 628.943803][T15228] CR2: 000020000001a000 CR3: 0000000057102000 CR4: 00000000003526f0 [ 628.959781][T15228] Call Trace: [ 628.963082][T15228] [ 628.966012][T15228] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 628.971662][T15228] ? __mutex_lock+0x26d/0x1b10 [ 628.976412][T15228] ? dmx_section_feed_start_filtering+0x56/0x660 [ 628.982738][T15228] ? find_held_lock+0x2b/0x80 [ 628.987394][T15228] ? __pfx___mutex_lock+0x10/0x10 [ 628.992404][T15228] ? __pfx___mutex_lock+0x10/0x10 [ 628.997419][T15228] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 629.003055][T15228] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 629.008666][T15228] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 629.014123][T15228] dmx_section_feed_start_filtering+0x3a8/0x660 [ 629.020345][T15228] dvb_dmxdev_filter_start+0x767/0xdd0 [ 629.025912][T15228] dvb_demux_do_ioctl+0xe64/0x1200 [ 629.031039][T15228] dvb_usercopy+0x167/0x340 [ 629.035523][T15228] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 629.041055][T15228] ? __pfx_dvb_usercopy+0x10/0x10 [ 629.046085][T15228] ? selinux_file_ioctl+0x13b/0x290 [ 629.051293][T15228] ? selinux_file_ioctl+0xb6/0x290 [ 629.056387][T15228] dvb_demux_ioctl+0x29/0x40 [ 629.060983][T15228] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 629.066246][T15228] __x64_sys_ioctl+0x18e/0x210 [ 629.071000][T15228] do_syscall_64+0x10b/0xf80 [ 629.075567][T15228] ? clear_bhb_loop+0x40/0x90 [ 629.080220][T15228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.086097][T15228] RIP: 0033:0x7f79c299cdd9 [ 629.090488][T15228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.110086][T15228] RSP: 002b:00007f79c37ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.118488][T15228] RAX: ffffffffffffffda RBX: 00007f79c2c15fa0 RCX: 00007f79c299cdd9 [ 629.126462][T15228] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 629.134422][T15228] RBP: 00007f79c2a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 629.142381][T15228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.150326][T15228] R13: 00007f79c2c16038 R14: 00007f79c2c15fa0 R15: 00007ffca203e2e8 [ 629.158372][T15228] [ 629.161384][T15228] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 629.168651][T15228] CPU: 1 UID: 0 PID: 15228 Comm: syz.8.1614 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.179555][T15228] Tainted: [L]=SOFTLOCKUP [ 629.183852][T15228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 629.193881][T15228] Call Trace: [ 629.197135][T15228] [ 629.200039][T15228] dump_stack_lvl+0x100/0x190 [ 629.204692][T15228] vpanic+0x552/0x970 [ 629.208648][T15228] ? __pfx_vpanic+0x10/0x10 [ 629.213130][T15228] ? lock_release+0x245/0x310 [ 629.217784][T15228] panic+0xd1/0xe0 [ 629.221483][T15228] ? __pfx_panic+0x10/0x10 [ 629.225877][T15228] check_panic_on_warn.cold+0x19/0x34 [ 629.231223][T15228] ? __mutex_lock+0x94f/0x1b10 [ 629.235963][T15228] __warn.cold+0x191/0x328 [ 629.240354][T15228] __report_bug+0x296/0x3d0 [ 629.244832][T15228] ? __mutex_lock+0x94f/0x1b10 [ 629.249572][T15228] ? __pfx___report_bug+0x10/0x10 [ 629.254586][T15228] ? register_lock_class+0x40/0x560 [ 629.259762][T15228] report_bug_entry+0xe1/0x290 [ 629.264498][T15228] ? __mutex_lock+0x956/0x1b10 [ 629.269239][T15228] handle_bug+0x1cd/0x2a0 [ 629.273547][T15228] exc_invalid_op+0x17/0x50 [ 629.278026][T15228] asm_exc_invalid_op+0x1a/0x20 [ 629.282849][T15228] RIP: 0010:__mutex_lock+0x956/0x1b10 [ 629.288198][T15228] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 a8 10 00 00 44 8b 35 3d fe 4b 05 45 85 f6 75 13 48 8d 3d 71 1c 4f 05 48 c7 c6 20 bb af 8b <67> 48 0f b9 3a 90 e9 10 f8 ff ff 4d 8d a7 e0 0a 00 00 4c 89 e7 e8 [ 629.307779][T15228] RSP: 0018:ffffc900055afa50 EFLAGS: 00010246 [ 629.313817][T15228] RAX: 0000000000000003 RBX: ffff888027094b30 RCX: 1ffffffff21af9dc [ 629.321783][T15228] RDX: 0000000000000000 RSI: ffffffff8bafbb20 RDI: ffffffff90daed20 [ 629.329726][T15228] RBP: ffffc900055afbc0 R08: 0000000000000001 R09: 0000000000000000 [ 629.337671][T15228] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 629.345618][T15228] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 629.353567][T15228] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 629.359183][T15228] ? __mutex_lock+0x26d/0x1b10 [ 629.363923][T15228] ? dmx_section_feed_start_filtering+0x56/0x660 [ 629.370226][T15228] ? find_held_lock+0x2b/0x80 [ 629.374877][T15228] ? __pfx___mutex_lock+0x10/0x10 [ 629.379878][T15228] ? __pfx___mutex_lock+0x10/0x10 [ 629.384877][T15228] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 629.390500][T15228] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 629.396117][T15228] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 629.401556][T15228] dmx_section_feed_start_filtering+0x3a8/0x660 [ 629.407776][T15228] dvb_dmxdev_filter_start+0x767/0xdd0 [ 629.413209][T15228] dvb_demux_do_ioctl+0xe64/0x1200 [ 629.418295][T15228] dvb_usercopy+0x167/0x340 [ 629.422779][T15228] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 629.428305][T15228] ? __pfx_dvb_usercopy+0x10/0x10 [ 629.433321][T15228] ? selinux_file_ioctl+0x13b/0x290 [ 629.438497][T15228] ? selinux_file_ioctl+0xb6/0x290 [ 629.443600][T15228] dvb_demux_ioctl+0x29/0x40 [ 629.448168][T15228] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 629.453444][T15228] __x64_sys_ioctl+0x18e/0x210 [ 629.458183][T15228] do_syscall_64+0x10b/0xf80 [ 629.462749][T15228] ? clear_bhb_loop+0x40/0x90 [ 629.467412][T15228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.473278][T15228] RIP: 0033:0x7f79c299cdd9 [ 629.477668][T15228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.497769][T15228] RSP: 002b:00007f79c37ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.506155][T15228] RAX: ffffffffffffffda RBX: 00007f79c2c15fa0 RCX: 00007f79c299cdd9 [ 629.514099][T15228] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 629.522050][T15228] RBP: 00007f79c2a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 629.530008][T15228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.537964][T15228] R13: 00007f79c2c16038 R14: 00007f79c2c15fa0 R15: 00007ffca203e2e8 [ 629.545925][T15228] [ 629.549220][T15228] Kernel Offset: disabled [ 629.553522][T15228] Rebooting in 86400 seconds..