last executing test programs: 3m12.631677222s ago: executing program 4 (id=1565): syz_open_dev$radio(0x0, 0x2, 0x2) creat(0x0, 0x4b) syz_io_uring_setup(0x430a, 0x0, 0x0, &(0x7f0000000280)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000380)={@val={0x6f01, 0xf6}, @val={0x3, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@udp={{0xe, 0x4, 0x3, 0x0, 0x80, 0x68, 0x0, 0x3, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0x9, [{@multicast1, 0xf3d}]}, @timestamp={0x44, 0xc, 0xf9, 0x0, 0x6, [0xb9, 0x3]}, @end, @generic={0x86, 0x8, "69b31ba62e91"}]}}, {0x4e21, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "5ebe35e47322af17cbef5e363979de25c95a5d97e1aa2f8c", "778a7a8e3b2557a847160eaf39acab4097ad396ca6e61471f987094264efa1bf"}}}}}, 0x8e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite\x00') pread64(r2, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x8000000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) tee(r2, r0, 0x4, 0xc) r4 = socket(0x2c, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x3, 0x8}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @local}, 'veth0_macvtap\x00', {0xfd4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 3m11.813617203s ago: executing program 4 (id=1567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}]}}]}, 0x58}, 0x1, 0xb0000, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xb190, 0x1, 0xfffffffa, 0x64b3f548, 0x1000000, 0x6, 0x3, 0x640, 0x6}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m11.143757s ago: executing program 4 (id=1569): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000680)={0x0, [[0x80000000, 0x0, 0x9, 0x1, 0x3, 0x0, 0xf, 0x1], [0x4, 0x100000, 0x0, 0x2], [0x100091, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6f8, 0x7fffffff]], '\x00', [{0x0, 0x1}, {}, {0x4}, {}, {}, {0x8}, {}, {}, {}, {0x8}, {0x2, 0xf7bc}, {0x0, 0x3}], '\x00', 0x300}) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$usbfs(&(0x7f0000000040), 0x7, 0x400) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000380), 0x72, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) sendmsg$AUDIT_SET(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x3c, 0x3e9, 0x1, 0x70bd27, 0x25dfdbfc, {0x7, 0x1, 0x2, 0x0, 0x6, 0x943, 0x6, 0xb412, 0x0, 0xffff, 0x8}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4051}, 0x20040010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='contention_end\x00', r6}, 0x18) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x800448d7, &(0x7f0000000000)) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m10.106210214s ago: executing program 4 (id=1573): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32c27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f00000006c0)=""/11, 0x46}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/31, 0x27}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/193, 0xc1}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000007c0), 0x80, &(0x7f00000008c0)=[{&(0x7f0000000a40)=""/230}, {&(0x7f0000000b40)=""/188}, {&(0x7f0000000c00)=""/180}], 0x100000000000001d, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x184024, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000", 0x20}], 0x1}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e"], &(0x7f00000000c0)='GPL\x00', 0x63edaf13, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000000400"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES64=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000900)={r4, 0x0, 0x0, 0x4}, 0xfffffffffffffe66) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000009c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000340)={'veth0_to_batadv\x00', {0x2, 0x4e23, @private=0xa010100}}) accept4(r5, 0x0, 0x0, 0x800) 3m8.813770182s ago: executing program 4 (id=1578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000700)={0x7, [[0x9ef8, 0x0, 0x6, 0x1ff], [0x81, 0xfffffffc, 0x9], [0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x290a]], '\x00', [{0x3}, {0x3, 0x60}, {0x0, 0x8}, {0x1, 0x80000000}, {0x3, 0x0, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {0xffffffff, 0x10}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x8, 0x12}, {0x7, 0xffffffff}], '\x00', 0x80000001}) close(0x3) openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012200d4071040803dfe4000000010902b901010000003f0904"], 0x0) 3m8.527253747s ago: executing program 4 (id=1579): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_create(0x6, &(0x7f0000000000)={0x0, 0x23, 0x0, @thr={&(0x7f00000000c0)="17629ff5ebbc6dcfb8e1d527b6712b402597a18d50c7449a42f0ba2f61085fde4399bf90", &(0x7f0000000300)="7c490000000000000000b4efb71b00687f79e4baca99f81d0484449ebbe3a36c9a00f8b140a5fd8b09b17593789b3054512b50c663ccf836f07d99b92caf307fa55e9b6e2e19d4b5c9a271603ff06c4f31ab026c9f717d7e35c14816e7bd36a30901f27f10a2e53a1311fb4f9fb196"}}, &(0x7f0000000140)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000003c0)=ANY=[@ANYBLOB="02dcab426002cdc2ee19"], 0xa, 0xffffffffffffffff) keyctl$instantiate(0xc, r3, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$ndb(0x0, 0x0, 0x80) r4 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000400)={0x1c, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x4, 0x4, 0x4b0, 0xffffffff, 0x100, 0x100, 0x100, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010101, [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e23, 0x4e22, 0x4e23, 0x4e23, 0x0, 0x800, 0x9, 0xd, 0x8}}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1\x00', {0x1, 0x9, 0x41, 0x10001, 0xa5ff, 0x10001, 0x5, 0x4, 0xe4, 0x40}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x42}, @loopback, [0xffffffff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) mbind(&(0x7f00005e3000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0xfffffffffffffffe, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x802) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 3m8.086949927s ago: executing program 32 (id=1579): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_create(0x6, &(0x7f0000000000)={0x0, 0x23, 0x0, @thr={&(0x7f00000000c0)="17629ff5ebbc6dcfb8e1d527b6712b402597a18d50c7449a42f0ba2f61085fde4399bf90", &(0x7f0000000300)="7c490000000000000000b4efb71b00687f79e4baca99f81d0484449ebbe3a36c9a00f8b140a5fd8b09b17593789b3054512b50c663ccf836f07d99b92caf307fa55e9b6e2e19d4b5c9a271603ff06c4f31ab026c9f717d7e35c14816e7bd36a30901f27f10a2e53a1311fb4f9fb196"}}, &(0x7f0000000140)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000003c0)=ANY=[@ANYBLOB="02dcab426002cdc2ee19"], 0xa, 0xffffffffffffffff) keyctl$instantiate(0xc, r3, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$ndb(0x0, 0x0, 0x80) r4 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000400)={0x1c, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x4, 0x4, 0x4b0, 0xffffffff, 0x100, 0x100, 0x100, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010101, [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e23, 0x4e22, 0x4e23, 0x4e23, 0x0, 0x800, 0x9, 0xd, 0x8}}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1\x00', {0x1, 0x9, 0x41, 0x10001, 0xa5ff, 0x10001, 0x5, 0x4, 0xe4, 0x40}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x42}, @loopback, [0xffffffff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x5c, 0x3a, 0x5, 0x5}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) mbind(&(0x7f00005e3000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0xfffffffffffffffe, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x802) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 2m54.234867176s ago: executing program 3 (id=1612): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x884) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x884) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') (async) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) openat$sysfs(0xffffffffffffff9c, 0x0, 0x121a02, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7c9, 0x10, &(0x7f0000000400)) r3 = fanotify_init(0x200, 0x80000) fanotify_mark(r3, 0x80, 0x40001002, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x446, &(0x7f0000000880)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="1236c09d854a", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x410, 0x3a, 0x1, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @time_exceed={0x3, 0x0, 0x0, 0x6, '\x00', {0x7, 0x6, "fdbf96", 0xd7e3, 0x16, 0xff, @local, @private2, [@srh={0x21, 0xe, 0x4, 0x7, 0x81, 0x18, 0xf, [@mcast2, @mcast1, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x30}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}]}, @srh={0x8, 0x12, 0x4, 0x9, 0x5, 0x0, 0x3, [@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @local, @empty, @empty, @private2, @dev={0xfe, 0x80, '\x00', 0x22}, @loopback]}, @hopopts={0x32, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x8000}, @enc_lim={0x4, 0x1, 0x9}, @pad1, @jumbo={0xc2, 0x4, 0x2}, @pad1, @hao={0xc9, 0x10, @private2}, @ra]}, @hopopts={0x3a, 0xd, '\x00', [@generic={0x69, 0x12, "7220d54e06238e23d07e9034ff5c22e1d4cb"}, @jumbo={0xc2, 0x4, 0xd9}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x35}}, @jumbo={0xc2, 0x4, 0x2f0f}, @calipso={0x7, 0x30, {0x2, 0xa, 0x6, 0xbbec, [0x401, 0x1, 0x8, 0x2, 0xf6]}}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @dstopts={0x21, 0x26, '\x00', [@generic={0x8, 0xba, "e84b8a254b1e1f580ab8ebe4c7a2edee6fd6868326d0ace47539ef182739710913363643ffb5236e1db91aa7598d090f610f0a4ecaf22a0153afb267351bd5ca85ffe2cf461032d0c9b8cba786f6d5c55db5387731aba8b8b0d1f79079e217169634258b549f7e1cc267f68e87f7e264c478c175064be1f0317684e32934554ae733fe38877e9ff23e1c8ace7923e7fc9f357d94c20bbd18f90efe1eaf8fe086a6a102a2b9e23e00e785958cb8cc18821a09f9f93e1cff9bb567"}, @generic={0x1, 0x6d, "8dee5f66eb5a0454afc514bf1797c8ca65daa045ad0aef753ba3f955fcddda9b535aa63ce3f7569a5d36439a8e2f01fbe759c63eb1e34b3f228c331256ea2498f766df1d9af3768b69463a5ad5107e955e57a9c56748ca0292836cadeb24815dfbd005e53bd32a7237116a8388"}, @jumbo={0xc2, 0x4, 0x8}]}, @dstopts={0x84, 0xa, '\x00', [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x30, {0x1, 0xa, 0x9, 0x8, [0x6, 0x295c, 0x1, 0x7ff, 0x1]}}, @pad1, @enc_lim={0x4, 0x1, 0xff}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x32, 0xe, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x9, 0xc13, [0xc, 0x1, 0x6, 0xfffffffffffffffa, 0x8]}}, @jumbo={0xc2, 0x4, 0x763c}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x30, {0x64af0840701ea753, 0xa, 0x15, 0x4, [0x5, 0xfffffffffffffffc, 0x5, 0xe32c, 0x9]}}, @padn={0x1, 0x1, [0x0]}]}]}}}}}}}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = getpgid(0x0) prlimit64(r4, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) write$bt_hci(0xffffffffffffffff, 0x0, 0x138) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b000)=""/102400, 0x19000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) 2m53.642379684s ago: executing program 3 (id=1613): syz_open_dev$radio(0x0, 0x2, 0x2) creat(0x0, 0x4b) syz_io_uring_setup(0x430a, 0x0, 0x0, &(0x7f0000000280)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000380)={@val={0x6f01, 0xf6}, @val={0x3, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@udp={{0xe, 0x4, 0x3, 0x0, 0x80, 0x68, 0x0, 0x3, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0x9, [{@multicast1, 0xf3d}]}, @timestamp={0x44, 0xc, 0xf9, 0x0, 0x6, [0x1ff, 0x3]}, @end, @generic={0x86, 0x8, "69b31ba62e91"}]}}, {0x4e21, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "5ebe35e47322af17cbef5e363979de25c95a5d97e1aa2f8c", "778a7a8e3b2557a847160eaf39acab4097ad396ca6e61471f987094264efa1bf"}}}}}, 0x8e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite\x00') pread64(r2, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x8000000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) tee(r2, r0, 0x4, 0xc) r4 = socket(0x2c, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x3, 0x8}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @local}, 'veth0_macvtap\x00', {0xfd4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) 2m52.171882814s ago: executing program 3 (id=1616): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400000001"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r3 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd9d) 2m50.495703667s ago: executing program 3 (id=1621): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=ANY=[@ANYBLOB="0600fe00"], 0x16, 0x1) 2m49.918070547s ago: executing program 3 (id=1622): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) close(0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r5, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0xfd, 0x1}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x2c5}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) 2m47.819048443s ago: executing program 3 (id=1626): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000180)='./file5\x00', 0x3) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000300)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x3, 0x900900, 0x3}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) preadv(r1, &(0x7f0000002240)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r7, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x3b5c, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m31.523692905s ago: executing program 33 (id=1626): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001100)='net/wireless\x00') socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000180)='./file5\x00', 0x3) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000300)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x3, 0x900900, 0x3}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) preadv(r1, &(0x7f0000002240)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r7, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x3b5c, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.578570828s ago: executing program 0 (id=2046): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x2) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x71) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 8.954191004s ago: executing program 0 (id=2048): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="0006cd000000cd02adc4f5dba3d908c4499126f0d0afccb145c11164e8ac501c72633ab3fc965678629aa0766a60a80e5bf0ae8899a6caa5c1c2f0dffd47b64fc492af07158cc54465b0ff395b88c1d64eff1e0da0d9a6537072e3bf81a9718baba7bdbc33a54dcb884a8c0a9b63ec1db6ff22a83a30594b3a31271432a936eb9cb38d4c92d434b09a5ca57699ed2d4a91636bfa577ab6cd742843055ce42b9e63cd969c2c44b704f7cf9063d7dd9187ff926290aa6f3847895a74777a02df170784c791ef86d1042aa4021c79346302728a42"], &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x0, 0x17, 0x5a, "e42d93e7179b084e6506d064be1282d9d0f028421e983469e7f422af173c1b4ba1beb4bf75f5711f293d76dcdeb4232ae481c37e70ae802b788caa3d5d619daeaa72272c24b14d994b08eddaf0bf6797de42d932a9d0ebf8b198"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x40}}) r1 = gettid() tkill(r1, 0x28) ioperm(0x284, 0x7f, 0xe3) rt_sigsuspend(&(0x7f0000000240)={[0x10]}, 0x8) tgkill(r1, 0xffffffffffffffff, 0x1b) r2 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000000)="b288", 0x2) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0xfffffffe, 0x1, 0x0, r2}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000001480)=ANY=[@ANYBLOB="040e0c090110069ab114a9b24c237f0c19711163ea81d4d850b69feaa8166c5c8a955ed85d7e3d5ee97c9fb7f3578dc9d0c5740508b014d6b6f7c09bedd2a366a1f4a1c8dcbf5cd0111b7c794baf94a944fbfc4fa896822674dd0400"/105, @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYRES64=r3, @ANYRESDEC=r1, @ANYRESDEC=r4], 0xf) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@alu={0x7, 0x0, 0xdde0e440e894aaa1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x5}, 0x94) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = fcntl$dupfd(r5, 0x0, r5) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x4000001}, 0x5) recvfrom$inet(r7, &(0x7f0000000500)=""/206, 0xce, 0x40000121, 0x0, 0x0) write$binfmt_misc(r7, &(0x7f0000000380)="024cdb0caf58a500b5dd6012cf2b26eb571c8afc11e4198ba69901704a5c10dcec85e2a7accf64aed52ff273dd37adaa5e944d93ec03e643354cb506c8b1fed3defc06b035414bd44debca41eac476dfddf5376174fe5a2b3d866a41b035c50f64b748569cf7cd45e4cbf98b34489994e3ddc6abac8414a9b651ff4f60b23798b396c3de0a085010b184ab966a36c5ff70c2d9c399e3ba781e1155fa1f1b9fc045f84541449b095507f626ffee32acd0a8e8cf32609d6169b75793483fbb81000c21c65bb896609f7a3c6af6049be4f0db3bd35e29943b8e404b28e70e4b66864057284e3a048d6b4051b886f55efa0d2708257aec9e4764a3b493d8bec673b307372338c87902f65dddc5bbdb48d28dddec46d60f8a29b86608eeb60592c6e2e6e4d8ff139ac69eaab5b3afc3f0946311cedf9ad40eaa0b90236e8d3b4030d6a90c865467b6feedf98b9d380b60bf91e48447cecd1d8c731e0d10052c85cb1806e171399715d44bcd564fb1696d03d2a381077b681b4679446cc5f646cc5476a1df76411ef7961a3494b71fb89690c08d81403304cd1b5a0d5fc4cae7e3fd3808fa61e841f0dac5bf279a3e88831a8e41062c234cd5eb8f1bd068b866943badd27f0563b5dac4bc47fa7ab8a21de3b2b2710deb91213274c5f88e815ff6d15ed3e990f045cd78c879825f50ad79b1178ba9e2e96ad180d4557304caf536a3ab2a8bbd13ccb4e6ce8b46b2e1aa3e42f07abf5b53a7849344e1bf6380bfa6696e670dfa0768853fb387ebd4f5f08c6ccbd6107556860f3b1ced2378f7f755eda74cf3bf37f66b68435c48007174a7dfb1d6cd0026527600ba3a467792ab4883c1debf90f726721d42517f20df315270233490de831db1a17ae4cfc7990e7a49f0588528b34accca1ca836e0a22ef377b30bef726344043acb66e99b80d1b6696ebc9332767550a26846d7a1ae8f5ec3db2e405bd5e69b1c184b2a694b734d937f46895dc91a191bd05a155b9c0100291e8a992bb2e8ca837a0e474adb6ad9b69649755017f4e131e3f9708ef9b824f64220acac2ad4ff4597dace7c7e6c4d3af610d1eb2684742688ca7b73f3fda2074b93fabe1eb02e1e9d261e8ef29c2c3e4f12411a14ea08240e804bb6681ba49644a93a6c239ba31380feb0d2e2415713ac22ff5eb05a137b7b6ea6a96d56f16315af716eacd63ecf0bf8ef20be38e75be6e8f905c89f546c5e98ff0153da7ed660ad24969f82502b844a3f362571f83557070c8ff21ee34f4b30977e8b89a3dd5bbe371ffdc2f5d75a4017c41be25ec920c09243d91943f233570421a6e090474ef20461ff9402c3c17556ddcd335a76c9bc9f79f3ebbae6ea6e9adbd2b8772036014e05c5e461925f3c200ca2695677cafd00db4aa97ee4b70ec6670271fb99431889a954e50f3c3f43bd3b75ddb55dff3c8295ed1bafc505be740c040287dc7bfd3cf437fc700342583334da87394fd9cb995d73f874ea6698a1d631107fdef1c01f2cab351c7de9060fcd155eed03692d3a2bb1f1146c8c025e00805cf36f9e5604e8c981dbe7d0ef73709ea4f99d8ea06d853a61bc0c5b52abd1cbfc7ad8d5a5444dac4d33984d1dfb7fc1f943ec3d6ea72bfe25c103b26f1f3527b2dec30b677d62160259003c6fa88f76e1774a2a4f7e6e16682b3833a2408838c2c20f9feec0b896501afd2d7ace96cdef6351250e83fb8872b244144195360f1fa47daa599b2396a48c35cbb93634ea4c026778bc29025091ae7d3b961cc23a96e00982b97063204fe34a4ba1a94638b9db6956d74a001ea488778216e56bcad3a0908b3f98587b8937c7102f27bf8052950622055a060e5117415d57b4cf36dab057d973f74c463d7beff8ade27c410bc61627671037218c6700765a9408853a55302316d96500b137ab465b7edc6ccd96ea7f6f412b6d3da864b24c63666e41ab4531885e8b36687f5a3279e19d6ef73bc9eb16c05837b471411999d3649b6690889678dacbc7a2394102624101777ec58be60ac62dbd297dd56ee31816e668458cfa9cbd2b445438373123c2fec0201ea9f899f38858eabc78962c7c21714bc6c4ff4aa4237dd99d368f5477bba70754fb84b6e98e417af4d8666338c2be8d2a5e26b0dc27c4456909bd535a38a5986001c914fd4a7d634117a14fc25026c801295c5a394a94216849edd9f3b29f254a6a4d2bb88b4336702136ab0bf978f873cc07710b1fea6fe4777e7d6357398c527b55da4e41f5c42233febe14e5ed3ca5092eb110651d30c8a64334950ae63a97556da5abc780af763c69bb6883def3a911e7bc647928de40eabce5813eeea7918510cbe6d283aa53e5f2d35013adeed62c8a0b436b8e53325b482866e9c38869fab5d0a38bbddb0ec6436063c15e6aee64e1ebf38faf99114ec5e153b7bae005d32c6821f88c00619389dcf48efb3bf8f34e3de6a0d68b830a9692ac3d1bb5380332a776a3493edd50a6ae899f6d86cb6062021900909b7a31470ff3aea336d854ada51ff28ff07e9cabfddb93fa68a800ef8acd939a97616e9170e6903f8a1a2638df55c2bc46657d8b830f03d243a2f4c3e94e4f2fd06c3bdb6cdff5467b5feb8831735bb199ec1f0d9a409eed1a96d434c63e6e90d90f6dd4a8054c9ec9a6fbe179b22f0aa5a84bbc28a060de86cb239405fd2750b776876b917be9d674facc1741c272ca3f1f9e4271b5b7189efe6af808172c0fff9a4c93d550911e7304fd939a4264f8f553a8b5dc31ec2418b98c118f36a33df4865521c23cd08ff4556dd4231661cd57fdc49a2847c1f86625365c8bf357610c5a940c6a7a63853704e40a0f961d5548cd9ca36af647a3ac3dce7c0d733d458280dfb3e8b0011d3311b26b282fd7290e70e8146026d917e8c2d3f06bd06347c827b0c06efc9cb31811a199e313257e560ff79b0e9257db054f1a71dd03d39b5a7df4d1033eb70a273f27abad7790ca24a9d29e132f9e8270d9859c645838a11aa2a97268d2e5364d1b60e93210bbd1d2f1b1bc97f82c15a0f302561ac3465072ee9524b0db3f8528f0194e4d90415ec0d8ac32768bf4e14940023e2261ade2aeb79d1ca6c8ee446a19544546490cf13133980aa7ba3ecdc47d33afa4005f95c19c97dc4ae61727bc6d2632bd57b652b330f0108a461bc339063c2a389c3f3f0d42baaa1c66356989eb3602435d7702b4f24d685c7d27515b638eef4e7b247187a315c40a53b9d00ca6f39f209830195448c34016a90e6b0c98f39d5fb8de703b5c35c96717e1b91cbcef3b11635d64a95bb08db5fcf7d8ac0c5fde8083e9b10161a589474bad0c130981c1e7804c1178aa23a35ba2ac3dd688a229c5ad082c4455f0e291c2d2d45bc4872bbb56e82820b74ea74efbcd4ddf4d0beab7c5aa5233418321a22738b62fc72be2acdc808db5f0791834b4ae83281cb4029d9cc011cafcb419126bd16f4035c834b17e1247cecdc4385c44b609da3f4e1a83b5dae6009e084110f3590774c05eac61d30a043d0c58c07daac49ef2df022b30e4a76dc93a9c818c731c90be051e7eedab667f5eac852b5fd47fd468f4e33e196f6d779d008522b8ee9c9b5559f72931b37319c53058f1f6f678d28999b783d5c4d624a0a96a867de63903c17a6c16b4c085366dfff75e11290f47de53197a2f69c46abf3d681b0718822edc90176f749ed9317f9d0510808eef594ae2868e3525c5cf91585d0b535cc0e04e88f3cb599cd7169c2d6951086bd9bb962eb4f3fb1f9eb04fd077bda3ebafe65f80e7eefddd4401622adc91b3fa033e064a3808e67f78da0aaac27d57ebbed5c34fc8627a2e67e4ba9d9ac748b0ee4149c6d12d8ce91f2de978402c0b427b03243a29802b3e87acd7b25ba03a3c09fafa76167970a8237df3d331099cbc30ed8f0c2e4fbc71426846756d130d805465d1c04340e09a8d1436fcc82bf44e18eaeebc3a2a8826619eaa350b2dddf7bc611888089b29914834b55c0da3d80d1d343fafcc74da8b17895590baf4cc98aa7209fda4a5b2f3ff937828aa13c44793993215555cd8a66c795c0ca6c5992f69dd926b7f65ea980f60d494620f63395efc003d82a627653e1a17559874b561c8cc7841255383380c1373d2f7d168ea24f6788669c6565983470c005e2cb99ac35cf3bf5e6772e68e456307b423dc61061748870b1f893290f1852e4d1d1f0428955d65798d10825aab39ab7f2c8a1b844906d1f18c84751240e4381f8f28d8905b513025e046d591baee5ad3fdc772f338c12658c256f135d96d6dec65bd4a40580a430ecbec7c830c64fa8f7f7fdef0959a9af4f5bff2e15ce2fb342470aa57f3293cd7bddf630c623db3771b2037fe302177356a6e349686410e1d8a4e9dab101442dbfc5981f9e0c4f1124668e8296878287c915119725e3ffe5309e7441bfb8e15546fcc451e0979e22f5fb436cabf368995b1195db2d5912d865806dc0ce895b8c0576afd8adec382db155bef658946e558da13096e7a136a3109fb78310349910198301bc34385751c65453bc9a0ec0a2ed3064b180de3681734b2ccbb51f9ce1640444f012249e33aa17adfe4771e5130d32ae899f6d9a3fc889764d61b78bbc4edab222662115cf5c37bd7bfefdb381f22bd8ad7f3e4caeb87f7cbb1f982f92f3f42cecc40832fea43507c1f03a8d2a688fa53613eaaffc2d72f6d20395c6cc781dfdf20cbd423283f66ecae7c2e53bd02fc6610e4149953b1572a31f9a638f1a61292b18a5a7318b9477e8a3a1c4291986e9ce9405531051fc6bc4efa29bc685c2cde2da85a07294858002e09b7c83fdc952de4c93f840f0d567097e3483f25bf43629268329ed05f6524104c98612c9ae38187df6f7d77a8ae05616f87ea8b0bcd139ce7a2bd7ef5508e1163189feed93f9c941f4f2b3bb695ae195b0c6c70186b16aceda245787b6e11c8bb8f7b753ea683691978e257f00343ac5db944a4b40b37fb0cc9d0746572bb5a4fa1e1811b462f6a33626f89af5e3e34b2ae3aa091094cd03afb99eec8e8fee2fa818e19b871d3c0516ed14d0a4779127d682260b70b54ff9bea292b4df2b3b7260a4df94bf7f11f0504f4b25018f747ffac533303d88d20fe3fe8971b244b62f220fffb4798486b1ef846d9d60387d7947e2b0e7e14f2a94e3be5b084fdb652e9941db2284f0d3a10a38e2c9af3b0f358468f851f3fa28f227cb6a0304555a0b95b7daa93f3d9e9d4774f281ffc1135248e745e861cdd614bd181c4df90d86eda97047cdc243f71dce5f6c666396b899f796c0eba1e5ea50e027f8aefec606d50e5a11e8a761eeb3d1a289d7f577afa5d734fd3e03c30612c9b54f8b3df68cdf243111eb8bd7ab10e77fada6fdda3bfa4e1a37ab1370972efa87fd5ceeb27df21bddc0ea6dd215ab3a213cda194a350dcc998cf5e0773f50935a972c8e92cf030cf99f58b9fa44bd83ee7b1c3b1c9cf2fe1cf3ba56e1d533061f9b82e28d7e62338cb75f18eaf8105c92a6f8fe6d544e5ec4f3e3d166488ee4de38a2953238b7f6725b408d17630534dfdbce0f11ef0ae555c9f91076fd90f33cccd9386a12c21ab039182854f87a3bbcf67f85a764f47f14c24bc26a463434790096f9d874c51661f0ccc22061db77dd6a18b9bdfd297960060a8ba51e8cbe30f3e1f6668754167b949a3e70227e493118de15f8444b5900a6061ec08871ddbeb8703a368c692bfa0eab761c410d1aa12fca7b840d755ddce1cebcb5a6154cbf5f02afdee07d843cf7cba", 0x1000) accept4$inet(0xffffffffffffffff, &(0x7f0000001380)={0x2, 0x0, @dev}, &(0x7f00000013c0)=0x10, 0x40000) 8.538844369s ago: executing program 2 (id=2050): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000001000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000008500000050000000bf91000000000000b702000000000000850000dd97be920084000000b70000000000000095000000000000005f528954b2d7390ffbcbdb334c27aaa2e5d1f8aff1d1e877b24a751d99cbb717b29ac012ec9fb919a3a44619fd54d757797e0984b8f11b8e9f7291d3729eb16a7fbef797290675026ca2421fabce10"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r5 = gettid() r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000340)={r5, 0x1, 0x1}) r7 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x4d, r6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r7}) keyctl$link(0x8, r7, r6) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x432e, &(0x7f00000005c0)={0x0, 0x13ca, 0x2, 0x2, 0x160}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000100)={0xf0, r2, 0x0, {0xc000, 0x2}}, 0x1) r9 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) socket$inet_smc(0x2b, 0x1, 0x0) rt_sigaction(0xd, &(0x7f00000000c0)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x200000002]}}, 0x0, 0xffffffffffffff7e, &(0x7f0000000080)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) 7.703569376s ago: executing program 1 (id=2052): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x80) r1 = fanotify_init(0xf00, 0x1) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) prlimit64(0x0, 0x7, &(0x7f0000000140)={0xa9d3, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019540)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_io_uring_setup(0x113, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x309}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7.658376966s ago: executing program 5 (id=2053): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={'xfrm0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) setsockopt$ax25_int(r3, 0x101, 0x7, &(0x7f0000000000)=0x30130321, 0x4) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000580), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) memfd_create(0x0, 0x2) getpgid(0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000000300000009000200000000001000edff"], 0x20}}, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r6, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000280)={0x2a, 0x6, 0x0, {0x1, 0x200000000300, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r1, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c0229e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x8b, 0x9, 0x0, 0x969, {0x4, 0x8, 0x0, 0x2, 0x1fe, 0x54698fa2, 0x0, 0x0, 0x4, 0x6000, 0x35a, 0x0, 0x0, 0x2000}}, {0x6, 0x0, 0x1, 0x4, '\x00'}}]}, 0x0, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 7.647152848s ago: executing program 2 (id=2054): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 7.572682758s ago: executing program 6 (id=2055): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xa8902, 0x96) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x1e9982, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000016c0)='L_', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000039c0)="6df9", 0x2}], 0x1}}], 0x2, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r6, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r7, r7, 0x0, 0x9) close(r5) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000480)=ANY=[@ANYRES64=r3, @ANYRESHEX, @ANYRESOCT=r0, @ANYRES8=r4, @ANYRES8=r5, @ANYRESHEX], 0x30}, 0x1, 0x0, 0x0, 0x54e979305c31cc96}, 0x40000) socket(0x3, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r5, @ANYRESOCT, @ANYBLOB="712fac7fa09751a043bcc8162ef83db49504dd0914556d6fc537ec548a5ba50651096f71333ee1ca784546e27376104bb694d1174b6ea80964235850c01639f5da1517b252d0b8a6e299e29198dd38843699092f91ea7f43f96b5b0a156ed1a232b396f6fda007f3afaea8408ab949509f87980b37d46d59b8c7b7dc95e2f787370976312e7c35ccff2dff7d204397950ac8cbcb2552356c21d9722bdb2bdb37968be2e46eed56d7ee3ea7dfdecada189803b7b5331c7e8e83744ecde920475c9ff47a9c494347537af2aadc995f6d826f50b3dcd899e3b75364", @ANYRESDEC=r2], 0xd8}, 0x1, 0x0, 0x0, 0xc040}, 0x60058c0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 5.963109518s ago: executing program 2 (id=2056): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.830172366s ago: executing program 5 (id=2057): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffffff, 0x0, 0xa8902, 0x96) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x1e9982, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000016c0)='L_', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f00000039c0)="6df9", 0x2}], 0x1}}], 0x2, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r4, r4, 0x0, 0x9) 5.540577965s ago: executing program 0 (id=2058): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x2) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x71) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 5.415953036s ago: executing program 1 (id=2059): sysinfo(&(0x7f0000000100)=""/51) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x84840, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file1/file4/file7/file5\x00', &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 5.130354298s ago: executing program 2 (id=2060): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r8, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c91d2a04", @ANYRES16=r9, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b000000000006000100070000000c000f000100000000000000"], 0x40}}, 0x20) r11 = socket$pppl2tp(0x18, 0x1, 0x1) writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0xfdef) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(r12) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r13}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000004000079104f000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="98000000000000001001000001000000dc00000000000000"], 0x18}, 0xff00) 4.898248622s ago: executing program 0 (id=2061): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r3, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "e9480c1a761549db", "2870d9b2f1e071425d019bc2310e5efc", "e9431ebc", "04e799623dd812ac"}, 0x28) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r4, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{}, {0x2, 0x6}], {}, [], {0x10, 0x2}}, 0x34, 0x0) unshare(0x2040400) gettid() 4.094240885s ago: executing program 2 (id=2062): sysinfo(&(0x7f0000000100)=""/51) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file1/file4/file7/file5\x00', &(0x7f0000000380)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 3.898498447s ago: executing program 1 (id=2063): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3e, 0x4f, 0x3e, 0x20, 0x694, 0x1, 0x26e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x1a0, 0x0, [{{0x9, 0x4, 0xdc, 0x8, 0x0, 0x75, 0xd1, 0xd3, 0x5}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b00)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "a8ecb5"}}}, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000c40)={'sit0\x00', &(0x7f0000000b80)={'syztnl0\x00', 0x0, 0x7, 0x10, 0x1, 0xdaa, {{0x22, 0x4, 0x0, 0x6, 0x88, 0x64, 0x0, 0xa7, 0x0, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xb}, {[@generic={0x89, 0x12, "0c4a7c5defce7baf0c03e0da73ecf0fe"}, @rr={0x7, 0xb, 0x81, [@empty, @multicast1]}, @end, @rr={0x7, 0xf, 0x5e, [@empty, @loopback, @loopback]}, @ssrr={0x89, 0xb, 0x23, [@local, @dev={0xac, 0x14, 0x14, 0x28}]}, @timestamp_addr={0x44, 0x3c, 0xfd, 0x1, 0x2, [{@local, 0x2400}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x4}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x6}, {@multicast2, 0x7}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}]}}}}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000ac0)={0x3, 'nr0\x00', {0xffff7fff}, 0xff80}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = eventfd(0x2c0) syz_usb_connect(0x1, 0x836, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xcb, 0x9, 0xf9, 0x10, 0x2949, 0x8700, 0x40dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x824, 0x4, 0x80, 0x0, 0x20, 0xb, [{{0x9, 0x4, 0x7a, 0xfd, 0xb, 0xff, 0x53, 0x5, 0xf, [], [{{0x9, 0x5, 0x8, 0x10, 0x200, 0x7, 0xbc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa8, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x10, 0x10, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0xfe, 0x9}]}}, {{0x9, 0x5, 0xc, 0x28a63942aa6c9f27, 0x10, 0xea, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x5d0a22b446a39582, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8d, 0xc}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x5, 0xa1, 0x9}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0xd7, 0x1, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x6}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0x8, 0xfa, 0xca, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x1, 0x67}, @generic={0x56, 0x22, "333f69b3fc023c61997f945b37793372baf2c9e79f18c9c7575b5100d1925cb60b59a06076f90d5cc2ce59ef1c67641673519bcf3721a876e52008cb614729fb6e22655222f695d3fc94b2aaaf752695ca875c56"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x30, 0x40, 0xf4}}, {{0x9, 0x5, 0x7, 0x5, 0x40, 0x68, 0xf7, 0x4d}}, {{0x9, 0x5, 0xb, 0x8, 0x238, 0x6, 0x8, 0x9c}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x5, 0xa6, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7ff}, @generic={0xe3, 0x8, "3c1f320a3cf059dce6054dbc6bcf6e388d9f24c03d51a42af831be9944362a7c5dc66fcdc9fe53c6ad287eebae67be8115f4637a9db8c03db3783c18dc7ffad49b30ad455d9f99f1ae8929a9b67e745411b751484c76a8ca0d5512f192cd68459f3f18b288daba6f9e4c97a7e2bdd5d2921b2168f4259cab99a443598b92653eff69b6c32a5a8cf4aacf3d04f6234aafa0b0fcf61d5c7e317d2e8277789c5cf038c7148e3328105ede92495912abc72c509041ea33a725d652e398d9b20461a4a52ce212a5c0a1160e7a3edd6671a62f1d7d02802ac647922f1c8313311575b39e"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x40, 0xf8, 0x2, 0x1}}]}}, {{0x9, 0x4, 0x14, 0x7, 0x6, 0xff, 0x2, 0x4, 0x6, [], [{{0x9, 0x5, 0x7, 0x2, 0x20, 0x5, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x3}]}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x3, 0x27, 0x7, [@generic={0xbd, 0x0, "daff91090051a1a381c7f99e977875198bddecbb82dfee33f86e67fe3376f3f77bb1510585fa4c0202dacad708663e4c461ec3154f1813f1512e11e12d26edc3f1bbbf246a8d8f4978cd150d8026a4c218226559bb43c2d4ef9047bd6ef717b12d077e0a2e5dd05477f02fdf0573c2fbe3e2a530c5714698b1dbff3875afc2edfda3c9ed548bfb7aae5a64442935a953909cab3936b03e2ffe5c88e6800bb3f3978e447692098c580f0bf9b0eeca80a7d9e71cbdd0ff3595348fa6"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0xad, 0x6, 0x6, [@generic={0xe8, 0xb, "b1f1ecc2644b46720ef53ccbab74ed039303f696704262c197d2d044344f03f71cdb5234ab115d57e878ab3b22252ea453885ea16e5fd2ffa46751a945e54dfe36f62f804166593aa02be770ab7fdbb370c792ac5f966224943eb18c04748e87db925dfd700b61c6c1ddfea6410373fa8f326231d471ad4447ffe7c564bcf03efb76543444ce4de1df6e6d94d4a149015c55b097bd413589eac4ff462e33d629bd729c94df9b4d22ef7715e05e77b0120bb326c4b758207c9b595941a4bd56d5fcd6a420de956dded61482e2f46299846c5799c470571c53aaa367894ad7165f71afc457e99d"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x4, 0x5, 0x9}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x26, 0x6, 0xf}}, {{0x9, 0x5, 0x4, 0x2, 0x10, 0x14, 0xf7, 0x7f}}]}}, {{0x9, 0x4, 0x6f, 0x0, 0x7, 0x20, 0xa9, 0x94, 0x4, [], [{{0x9, 0x5, 0x80, 0x0, 0x8, 0x5, 0x2, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x1}]}}, {{0x9, 0x5, 0xa, 0x8, 0x3ff, 0x1, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xe, 0x7, 0xad, [@generic={0x16, 0x7, "a822949669504ad95b55926a87af0e2e2ff7a4c5"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc9, 0x7ff}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0x0, 0x5, [@generic={0x9d, 0x1, "55f13722338b5013d218608609f78eb4d2922aff28594750cedccc6344777f3454822a05466e817e5560f07c5553d5b5678b522c8c064bfb27e3f11bc4cee06044637e760d35f16b2cde18599326223e0d9ea4c5c07ccc3929240663b0bf5380075b0ba1530dd468b639730bc6b0fa6b5b870795a749004f66fb4988546ebb88038a856698ff67d0bf3d79a23eacbe75a6d301006b0cf5753f11e7"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x9, 0x8, 0xdf, [@generic={0x9c, 0x1b, "f7e97205d5d1fea644d7033d3a99755e181360b1cf6235ba961f017f0765c8f45f5fbe02855ecd094d93bb53c0caa1db725ff52a5865ca59922058b5cc28fda21a4821c01c2296db98697341f1fbdfb96154bb0d8e1c77522b4833fab8de2f781562744cfd0a34e9bda1b5a62538d9acf550d043b5d8d2fc0deacbdd357df8b049d939c7ea72d63c0c30200bf60847ae50b4d751a814c14612c2"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xb2e}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x6, 0x6, 0x56}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xa, 0x5, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xfff4}, @generic={0x6b, 0xb, "e9cd5e9584b48c4f7188f96455ef0bdb5793a1ba37e43f4c6c998fdcd86f73cdfdfc83977f2849e1046f266302fddced69d958dcb51093ae18331fad70013b3a892d95df440eedee2989a800a683523584d0d1cf4b518e805df2fbab9ced2d62bb03a1a7ef5955afec"}]}}]}}, {{0x9, 0x4, 0x0, 0x8, 0x5, 0x33, 0x70, 0x98, 0xf0, [@hid_hid={0x9, 0x21, 0x7, 0x51, 0x1, {0x22, 0x186}}, @generic={0x23, 0x21, "9d93391899aadad9d850dd3199f8e29d12760791006cfd91b9d8e9fa43aea08d6e"}], [{{0x9, 0x5, 0x0, 0x1, 0x400, 0x9, 0x4, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x8}, @generic={0xf2, 0xe, "4d38e9d7bcdea2a48076ec829b886a8056ed81cb01436e5cd58204d7688ada04485b3c0c28e8157481ccc56544f106f2b034b7d9fcc20cdcc29f963076f6263296ce1609a9a7a1115492eac52ed7236d30af894375ea252a439fd2955330ed27831c846477e86b56e230bd7ff5b557b0f3ca2108f17a3ba78aa6a2cdf19666849b2d9521fa0540c36dd303dca9ef75b16cff2a8ec9f8ce1885005210fa23796b0188c67d8583d327f2e5472ec4958961a26dbb66caec320a2c28e6aed9dd5710d52a1479643c2e935e6b4d104b0ee54671bf7030e513f32d24e60477975e2f245035dbe82c82761d930aa68c8cb07632"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x2, 0x8, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x401}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x4, 0x7, 0xd2, [@uac_iso={0x7, 0x25, 0x1, 0x5, 0x67, 0xfffc}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x9, 0x1}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0x3, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x7}]}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x3, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x52, 0xffff}, @generic={0xa9, 0x30, "3234055aa765fbfbdd0a3795099f3f966e2267d8d95d470cf7202cdfec5c5e4a0300f675a9f6969d16c6386c48281ba871ed5e49444db125bdf5e3b5a612248c399370e392a14e6f5cf265f2de891f676a28a95e63a86f73525cc9a1a13f1374600484faa139b431e5fdb0ecfdf06eb1a1fa93c5aa8ec6668767b2afff69494287c795744296b8dbe1d7b2c540784451538016f213c22624bd4d745b56881898eee133a30aed01"}]}}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x5, 0xa, 0x8, 0x20, 0xa8}, 0x15, &(0x7f0000000940)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x1, 0xf00, 0xfff, [0xc0c0]}]}, 0x2, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x860}}, {0x9f, &(0x7f00000009c0)=@string={0x9f, 0x3, "016d571c6f7478d3fdd7b30e7fe7a9647030853de947243a3e80f83f84829e36345b25d59ad40d2222a4c2fae80a5c19e241b8eaa4e1812fa08694e01b6295d7f27d4d8b502d21f6c1d794c48737b2ce23b631076aaa118752b0e7002a73ef1f395597f7edf9f2d93c12a4b09234ebfb3bc5ac1a727799b03aeb1a4067b8aa2ccff972b7044331f3dc05e0dede618f227b944d6358dfe0f049c3063dd6"}}]}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x2, 0x10000, 0x8, r4, 0x1}) 3.814440989s ago: executing program 6 (id=2064): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000180)={0x3, 0x1, 0x1, 0x0, 0x7}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002800000085000000052d317ac68d902d51d512b0c2386c53765abe2a78017476b623e635cb00918d51fa00f277615b572bd9158c7d57b2858108332b7a4fd886c69771098b956e50dcf8efd1af8c683ee60ceaad1443ce3dc560e1a4bd35dd898403111d84c3645d9407980c716f1eed7764f0502e3f703b1bc2c628aa5ebd1eedf996668e7082c013eb66e3651b7c140dc3c2872e7e8f1b939cbec14cb6"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = epoll_create1(0x80000) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000340)={0xe0000019}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f00000000c0)) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000)) 3.803662343s ago: executing program 5 (id=2065): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) 3.292314257s ago: executing program 6 (id=2066): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2.689984882s ago: executing program 5 (id=2067): r0 = socket$kcm(0x10, 0x2, 0x4) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bic', 0x3) socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="100000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000980100002800c000180080001400033be00140000001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r3, 0x4, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x4) userfaultfd(0x80001) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2.686405682s ago: executing program 2 (id=2068): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) prlimit64(r0, 0x5, &(0x7f0000000140)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@xino_on}, {@uuid_null}]}) chdir(&(0x7f0000000380)='./file2\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200004400000000000000000000008500000027000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e02742e8680d88ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e02742e8680d88ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket(0x10, 0x80003, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 1.895637444s ago: executing program 0 (id=2069): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) recvfrom$inet(r0, &(0x7f0000000200)=""/104, 0x68, 0x2020, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') fsetxattr$security_ima(r1, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x2, "f507f2e723a0824120d9200f72bd"}, 0xf, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0xfffffffffffffe1f) 1.656887807s ago: executing program 6 (id=2070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000009108ca5ccd30218b020000", @ANYRES16=r2, @ANYBLOB="1b5a2cbd7000ffdbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'virt_wifi0\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "20c23cfbba6810f7e6da8b896a8447a0a1c811cd4c66410c8da2d6deea94dc07", "5e47b1b4e24532f2cbb9164676a177d5984b311e2c5f017203ef114657abea85", "ebc3be57af1a710e6a526e24d42e3261e57d8d84ff3769d07ddbbbc9c2af0a41", "599d6c1eb8458e7b02f73489118d9a7c647650c3c19daa01e127d3b88cb63b30", "7fa9d72b9eb11157e35de3ac2ce2ed2f8253684375b595fbee24f473437eac8f", "c7c04eae40828185480a4142", 0x9, 0x605e1383, 0xa, 0xfffffffb, 0x2eb1a8da}}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000ffdbdf254c0000000c00580004000000000000000c0058004a000000000000000c00580026000000000001000c0058006000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4c000}, 0x4004010) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x5b, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002400010122bd7000fcffff70923dfa000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) 1.458536489s ago: executing program 5 (id=2071): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) mount$9p_fd(0x0, 0x0, 0x0, 0x804844, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX]) 1.354269522s ago: executing program 1 (id=2072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000002480)={0x9, 0x0, [{0x7fff, 0x0, 0x3}, {0x8}, {0x0, 0x0, 0x7}, {0x4}, {0x5, 0x0, 0x7}, {0x3ff, 0x0, 0x80}, {0x6, 0x0, 0x1ff}, {0x1, 0x0, 0x4}, {0x101}, {0x7, 0x0, 0x8000}, {0xfff, 0x0, 0x4}, {0x10001, 0x0, 0xfffffffffffffff7}, {0x1, 0x0, 0x48}, {0x400, 0x0, 0x8}, {0x517f}, {0x2, 0x0, 0xfffffffffffffffd}]}) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x9880) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@ignoreqv}, {@access_user}]}}) 1.263106238s ago: executing program 6 (id=2073): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6, 0x0, 0xdffffffffffffffa}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(r8, &(0x7f00000004c0)=""/161, 0xa1) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="1100001b0d00007f0000000094a2e65b24764b381b79e8afe6fe243ecbfa5303917abf21f3039eaa5054f94cd5ee616c292b0fa8112b7db1a87eed6fdc922c4b15e8195c1ae0084cf2251db82cffb03cfe857673434e960bf9e3996cdbd0e5f56072512b01dce9358f9137ae7c531c07864688553da122971753d44b9f34bf2393afef2d093208006c5c7163c7367832efe10cf2529a3d5acf569b0cab2eb91d7581bb847f90904175571c17481eb392a66022f32460abfd899fb0ffebf47ce3b2e8ee3dd660ff9e9ccf484f60e158", @ANYRES32=r9, @ANYBLOB, @ANYRES64=0x0], 0x20) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x2f, 0xe, 0x4, 0xb8000000, 0x40, @private2, @empty, 0x40, 0x40, 0x4, 0xa}}) bind$xdp(r11, &(0x7f0000000300)={0x2c, 0x1, r12, 0x1f, r8}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r9, 0x28, 0x6, &(0x7f0000000140)={0x0, 0x2710}, 0x10) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.214413931s ago: executing program 0 (id=2074): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 23) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97) 934.875349ms ago: executing program 1 (id=2075): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x0, 0x81) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000002200010300000000fbdbdf2502200000000000000000000008000100ac1e010108000b00070000000c000c400000000000000003"], 0x38}}, 0x0) 911.130705ms ago: executing program 5 (id=2076): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x583441, 0x41) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB="2c5ff080000000e6", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80502, 0x0) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES32=0xee00, @ANYBLOB="04010003000000f20f000400000000002000000000"], 0x2c, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) accept$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) (fail_nth: 24) 334.464564ms ago: executing program 6 (id=2077): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007b54af10d21925015389010213010902240001000090000904060402d0464d0009050202ff030200000905820c0004060003"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x20, 0x0, 0x20}, {@in6=@mcast1, 0x0, 0x33}, @in=@multicast1, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xffffffffffffffff}, {0x10, 0x9, 0x1000000}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x7}}]}, 0x144}}, 0x80) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x280, 0xffffffff, 0xffffffff, 0x280, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'wg2\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x80}, 0x0, 0x128, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@ipv6header={{0x28}, {0x10, 0x26}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) openat$dsp(0xffffffffffffff9c, 0x0, 0x202342, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) 0s ago: executing program 1 (id=2078): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x0, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00', 0x182, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): denied { read write open } for pid=5816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 747.923315][ T30] audit: type=1400 audit(1760359164.120:37530): avc: denied { ioctl } for pid=5816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 748.057155][ T30] audit: type=1400 audit(1760359164.185:37531): avc: denied { name_bind } for pid=12792 comm="syz.1.1691" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 748.140276][T12799] FAULT_INJECTION: forcing a failure. [ 748.140276][T12799] name failslab, interval 1, probability 0, space 0, times 0 [ 748.153147][ T30] audit: type=1400 audit(1760359164.185:37532): avc: denied { node_bind } for pid=12792 comm="syz.1.1691" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 748.177191][T12799] CPU: 1 UID: 0 PID: 12799 Comm: syz.0.1692 Not tainted syzkaller #0 PREEMPT(full) [ 748.177222][T12799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 748.177232][T12799] Call Trace: [ 748.177238][T12799] [ 748.177244][T12799] dump_stack_lvl+0x16c/0x1f0 [ 748.177269][T12799] should_fail_ex+0x512/0x640 [ 748.177289][T12799] ? __kmalloc_cache_noprof+0x5f/0x780 [ 748.177312][T12799] should_failslab+0xc2/0x120 [ 748.177336][T12799] __kmalloc_cache_noprof+0x72/0x780 [ 748.177354][T12799] ? v9fs_mount+0xa6/0xa90 [ 748.177376][T12799] ? v9fs_mount+0xa6/0xa90 [ 748.177392][T12799] v9fs_mount+0xa6/0xa90 [ 748.177408][T12799] ? __pfx_v9fs_mount+0x10/0x10 [ 748.177426][T12799] ? cap_capable+0xb3/0x250 [ 748.177447][T12799] ? __pfx_v9fs_mount+0x10/0x10 [ 748.177460][T12799] legacy_get_tree+0x10c/0x220 [ 748.177487][T12799] vfs_get_tree+0x8e/0x340 [ 748.177505][T12799] path_mount+0x7b9/0x23a0 [ 748.177533][T12799] ? __pfx_path_mount+0x10/0x10 [ 748.177558][T12799] ? kmem_cache_free+0x2d4/0x6c0 [ 748.177575][T12799] ? putname+0x154/0x1a0 [ 748.177604][T12799] ? putname+0x154/0x1a0 [ 748.177626][T12799] ? putname+0x154/0x1a0 [ 748.177653][T12799] ? __x64_sys_mount+0x293/0x310 [ 748.177673][T12799] __x64_sys_mount+0x293/0x310 [ 748.177696][T12799] ? __pfx___x64_sys_mount+0x10/0x10 [ 748.177727][T12799] do_syscall_64+0xcd/0xfa0 [ 748.177748][T12799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.177764][T12799] RIP: 0033:0x7f12a298eec9 [ 748.177777][T12799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.177792][T12799] RSP: 002b:00007f12a3910038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 748.177808][T12799] RAX: ffffffffffffffda RBX: 00007f12a2be5fa0 RCX: 00007f12a298eec9 [ 748.177818][T12799] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 748.177828][T12799] RBP: 00007f12a3910090 R08: 0000200000000500 R09: 0000000000000000 [ 748.177837][T12799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 748.177846][T12799] R13: 00007f12a2be6038 R14: 00007f12a2be5fa0 R15: 00007ffd713f03f8 [ 748.177867][T12799] [ 748.217470][ T30] audit: type=1400 audit(1760359164.316:37533): avc: denied { sys_module } for pid=12669 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 748.531241][ T30] audit: type=1400 audit(1760359164.316:37534): avc: denied { sys_admin } for pid=12794 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 748.610774][ T30] audit: type=1400 audit(1760359164.316:37535): avc: denied { sys_admin } for pid=12794 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 748.748515][ T30] audit: type=1400 audit(1760359164.316:37536): avc: denied { read } for pid=12792 comm="syz.1.1691" dev="nsfs" ino=4026532801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 748.807266][T12669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.840233][T12809] netlink: 'syz.5.1695': attribute type 11 has an invalid length. [ 748.899131][T12813] futex_wake_op: syz.5.1695 tries to shift op by -1; fix this program [ 750.198772][T12828] FAULT_INJECTION: forcing a failure. [ 750.198772][T12828] name failslab, interval 1, probability 0, space 0, times 0 [ 750.261683][T12828] CPU: 0 UID: 0 PID: 12828 Comm: syz.0.1697 Not tainted syzkaller #0 PREEMPT(full) [ 750.261709][T12828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 750.261720][T12828] Call Trace: [ 750.261726][T12828] [ 750.261733][T12828] dump_stack_lvl+0x16c/0x1f0 [ 750.261760][T12828] should_fail_ex+0x512/0x640 [ 750.261782][T12828] ? fs_reclaim_acquire+0xae/0x150 [ 750.261811][T12828] should_failslab+0xc2/0x120 [ 750.261838][T12828] __kmalloc_noprof+0xdd/0x880 [ 750.261855][T12828] ? kfree+0x252/0x6d0 [ 750.261870][T12828] ? trace_kmalloc+0x2b/0xd0 [ 750.261892][T12828] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 750.261923][T12828] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 750.261948][T12828] tomoyo_realpath_from_path+0xc2/0x6e0 [ 750.261975][T12828] ? tomoyo_fill_path_info+0x233/0x420 [ 750.261997][T12828] tomoyo_mount_acl+0x1ae/0x850 [ 750.262019][T12828] ? bpf_ksym_find+0x127/0x1c0 [ 750.262039][T12828] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 750.262060][T12828] ? is_bpf_text_address+0x94/0x1a0 [ 750.262090][T12828] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 750.262111][T12828] ? unwind_get_return_address+0x59/0xa0 [ 750.262166][T12828] ? tomoyo_domain+0xbb/0x150 [ 750.262181][T12828] ? tomoyo_profile+0x47/0x60 [ 750.262217][T12828] tomoyo_mount_permission+0x16d/0x420 [ 750.262239][T12828] ? tomoyo_mount_permission+0x14f/0x420 [ 750.262263][T12828] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 750.262302][T12828] security_sb_mount+0x9b/0x260 [ 750.262326][T12828] path_mount+0x158/0x23a0 [ 750.262358][T12828] ? __pfx_path_mount+0x10/0x10 [ 750.262385][T12828] ? kmem_cache_free+0x2d4/0x6c0 [ 750.262405][T12828] ? putname+0x154/0x1a0 [ 750.262435][T12828] ? putname+0x154/0x1a0 [ 750.262459][T12828] ? putname+0x154/0x1a0 [ 750.262488][T12828] ? __x64_sys_mount+0x293/0x310 [ 750.262511][T12828] __x64_sys_mount+0x293/0x310 [ 750.262537][T12828] ? __pfx___x64_sys_mount+0x10/0x10 [ 750.262571][T12828] do_syscall_64+0xcd/0xfa0 [ 750.262594][T12828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.262613][T12828] RIP: 0033:0x7f12a298eec9 [ 750.262628][T12828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.262645][T12828] RSP: 002b:00007f12a3910038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 750.262663][T12828] RAX: ffffffffffffffda RBX: 00007f12a2be5fa0 RCX: 00007f12a298eec9 [ 750.262674][T12828] RDX: 0000200000000380 RSI: 0000200000000140 RDI: 0000000000000000 [ 750.262685][T12828] RBP: 00007f12a3910090 R08: 0000200000000180 R09: 0000000000000000 [ 750.262695][T12828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 750.262706][T12828] R13: 00007f12a2be6038 R14: 00007f12a2be5fa0 R15: 00007ffd713f03f8 [ 750.262735][T12828] [ 750.269052][T12828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 751.245170][ T43] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 751.479546][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.509401][ T43] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 751.682099][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.712801][ T43] usb 6-1: config 0 descriptor?? [ 751.726592][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 752.454183][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 752.476979][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 752.496258][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 752.518639][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 752.602904][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 752.686474][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 752.723190][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 753.197721][ T30] kauditd_printk_skb: 245 callbacks suppressed [ 753.197751][ T30] audit: type=1400 audit(1760359169.264:37782): avc: denied { ioctl } for pid=12831 comm="syz.5.1699" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 753.201548][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 753.457681][ T30] audit: type=1400 audit(1760359169.507:37783): avc: denied { sys_admin } for pid=12867 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 753.468748][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 753.891147][ T30] audit: type=1400 audit(1760359169.507:37784): avc: denied { sys_admin } for pid=12867 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 753.912530][ T30] audit: type=1400 audit(1760359169.507:37785): avc: denied { sys_admin } for pid=12867 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 753.998019][ T30] audit: type=1400 audit(1760359169.507:37786): avc: denied { sys_admin } for pid=12867 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 754.006746][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 754.054779][ T30] audit: type=1400 audit(1760359169.507:37787): avc: denied { sys_admin } for pid=12867 comm="dhcpcd" capability=21 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 754.130780][T12669] veth0_vlan: entered promiscuous mode [ 754.133749][ T43] pwc: recv_control_msg error -32 req 02 val 2400 [ 754.145567][ T30] audit: type=1400 audit(1760359169.517:37788): avc: denied { ioctl } for pid=12831 comm="syz.5.1699" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 754.238563][ T30] audit: type=1400 audit(1760359169.592:37789): avc: denied { create } for pid=12861 comm="syz.0.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 754.258905][ T30] audit: type=1400 audit(1760359169.592:37790): avc: denied { getopt } for pid=12861 comm="syz.0.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 754.284342][ T43] pwc: recv_control_msg error -32 req 02 val 2600 [ 754.317579][ T30] audit: type=1400 audit(1760359169.601:37791): avc: denied { allowed } for pid=12861 comm="syz.0.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 754.334889][ T43] pwc: recv_control_msg error -32 req 02 val 2900 [ 754.349273][T12669] veth1_vlan: entered promiscuous mode [ 754.374211][ T43] pwc: recv_control_msg error -32 req 02 val 2800 [ 754.607745][T12669] veth0_macvtap: entered promiscuous mode [ 754.618629][ T43] pwc: Registered as video103. [ 754.633667][T12669] veth1_macvtap: entered promiscuous mode [ 754.648481][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input33 [ 754.858292][T12669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.100662][ T43] usb 6-1: USB disconnect, device number 7 [ 755.143074][T12669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.160324][T12876] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 755.278275][T10193] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.298247][T10193] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.451339][T10193] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.599004][T10193] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.833301][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.841141][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.110741][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.137865][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.663816][T12900] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1714'. [ 756.678433][T12900] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1714'. [ 757.462242][T12911] overlay: filesystem on ./bus not supported as upperdir [ 757.498063][T12907] netlink: 'syz.6.1666': attribute type 1 has an invalid length. [ 757.506230][T12907] netlink: 'syz.6.1666': attribute type 3 has an invalid length. [ 757.513997][T12907] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1666'. [ 757.528685][T12907] erofs (device nbd6): cannot find valid erofs superblock [ 758.590485][ T30] kauditd_printk_skb: 297 callbacks suppressed [ 758.590501][ T30] audit: type=1400 audit(1760359174.315:38089): avc: denied { search } for pid=12918 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.664659][ T30] audit: type=1400 audit(1760359174.343:38090): avc: denied { search } for pid=12918 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.733324][ T30] audit: type=1400 audit(1760359174.343:38091): avc: denied { search } for pid=12918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.803718][ T30] audit: type=1400 audit(1760359174.343:38092): avc: denied { search } for pid=12918 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.841811][T12924] audit: audit_backlog=65 > audit_backlog_limit=64 [ 758.908638][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 758.928628][ T5816] audit: audit_lost=2495 audit_rate_limit=0 audit_backlog_limit=64 [ 758.973093][ T5816] audit: backlog limit exceeded [ 758.996879][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 759.006498][T12924] audit: audit_lost=2496 audit_rate_limit=0 audit_backlog_limit=64 [ 759.179840][T12928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.621290][T12932] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 759.692528][T12934] dummy0: vlans aren't supported yet for dev_uc|mc_add() [ 762.110020][T12961] fuse: Bad value for 'fd' [ 764.093537][ T30] kauditd_printk_skb: 373 callbacks suppressed [ 764.093553][ T30] audit: type=1400 audit(1760359179.460:38445): avc: denied { unmount } for pid=12251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 764.202412][ T30] audit: type=1400 audit(1760359179.507:38446): avc: denied { search } for pid=12972 comm="sed" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.716238][ T30] audit: type=1400 audit(1760359179.507:38447): avc: denied { read } for pid=12972 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 764.882175][ T30] audit: type=1400 audit(1760359179.507:38448): avc: denied { read open } for pid=12972 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 764.984568][ T30] audit: type=1400 audit(1760359179.507:38449): avc: denied { getattr } for pid=12972 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 765.103898][T12991] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.153691][T12991] audit: audit_lost=2504 audit_rate_limit=0 audit_backlog_limit=64 [ 765.154106][T12669] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.169574][T12992] audit: audit_backlog=65 > audit_backlog_limit=64 [ 765.175528][T12991] audit: backlog limit exceeded [ 765.335384][ T43] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 765.622730][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 765.665115][ T43] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 765.698860][ T43] usb 6-1: config 0 has no interface number 0 [ 765.784843][ T43] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 765.815041][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.838891][ T43] usb 6-1: Product: syz [ 765.852385][ T43] usb 6-1: Manufacturer: syz [ 765.863104][ T43] usb 6-1: SerialNumber: syz [ 765.914810][ T43] usb 6-1: config 0 descriptor?? [ 765.979850][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'. [ 766.048627][ T43] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 766.419097][ T43] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 766.506670][ T43] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 766.794956][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 767.053828][T13016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1741'. [ 768.251469][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 768.255145][T11032] usb 6-1: USB disconnect, device number 8 [ 768.299862][T11032] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 768.363991][T11032] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 768.471883][T11032] quatech2 6-1:0.51: device disconnected [ 769.216932][T10019] Bluetooth: hci0: unexpected event for opcode 0x200c [ 769.731757][ T30] kauditd_printk_skb: 499 callbacks suppressed [ 769.731771][ T30] audit: type=1400 audit(1760359184.736:38945): avc: denied { search } for pid=13033 comm="sed" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 769.854464][ T30] audit: type=1400 audit(1760359184.754:38946): avc: denied { create } for pid=13034 comm="syz.6.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 769.879246][ T30] audit: type=1400 audit(1760359184.764:38947): avc: denied { execmem } for pid=13034 comm="syz.6.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 769.900908][ T30] audit: type=1400 audit(1760359184.764:38948): avc: denied { read } for pid=13033 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 769.932174][ T30] audit: type=1400 audit(1760359184.764:38949): avc: denied { read open } for pid=13033 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 770.027114][ T30] audit: type=1400 audit(1760359184.764:38950): avc: denied { getattr } for pid=13033 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 770.055460][ T30] audit: type=1400 audit(1760359184.895:38951): avc: denied { name_bind } for pid=13034 comm="syz.6.1745" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 770.156803][ T30] audit: type=1400 audit(1760359184.895:38952): avc: denied { node_bind } for pid=13034 comm="syz.6.1745" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 770.181421][ T30] audit: type=1400 audit(1760359184.914:38953): avc: denied { read write } for pid=13034 comm="syz.6.1745" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 770.206036][ T30] audit: type=1400 audit(1760359184.914:38954): avc: denied { read write open } for pid=13034 comm="syz.6.1745" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 772.380477][T11032] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 772.519516][T11032] usb 2-1: device descriptor read/64, error -71 [ 772.623966][T13078] xt_hashlimit: max too large, truncated to 1048576 [ 772.637252][T13078] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 773.139554][T11032] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 773.310944][T11032] usb 2-1: device descriptor read/64, error -71 [ 773.439853][T11032] usb usb2-port1: attempt power cycle [ 773.656398][T13071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 773.819759][T13088] xt_hashlimit: overflow, try lower: 3/0 [ 773.826573][T11032] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 773.890984][T11032] usb 2-1: device descriptor read/8, error -71 [ 774.003550][T13092] ptrace attach of "./syz-executor exec"[5810] was attempted by ""[13092] [ 774.144832][T11032] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 774.317089][T11032] usb 2-1: device descriptor read/8, error -71 [ 774.452894][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 774.796183][T11032] usb usb2-port1: unable to enumerate USB device [ 775.094247][ T30] kauditd_printk_skb: 248 callbacks suppressed [ 775.094258][ T30] audit: type=1400 audit(1760359189.750:39203): avc: denied { search } for pid=13097 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 775.204357][ T30] audit: type=1400 audit(1760359189.787:39204): avc: denied { search } for pid=13097 comm="rm" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 775.286375][ T30] audit: type=1400 audit(1760359189.787:39205): avc: denied { search } for pid=13097 comm="rm" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 775.405992][ T30] audit: type=1400 audit(1760359189.899:39206): avc: denied { search } for pid=13011 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 775.544880][ T30] audit: type=1400 audit(1760359189.927:39207): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 775.673220][ T30] audit: type=1400 audit(1760359189.927:39208): avc: denied { read write open } for pid=5806 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 775.797674][ T30] audit: type=1400 audit(1760359189.927:39209): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 775.896094][ T30] audit: type=1400 audit(1760359189.955:39210): avc: denied { read write } for pid=12251 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 775.920510][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.985800][T13110] audit: audit_backlog=65 > audit_backlog_limit=64 [ 776.003052][T13110] audit: audit_lost=2507 audit_rate_limit=0 audit_backlog_limit=64 [ 777.847571][ T43] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 778.042175][ T43] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 778.058324][T13135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1766'. [ 778.065363][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.104093][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 778.131836][ T43] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 778.161305][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.190005][ T43] usb 6-1: config 0 descriptor?? [ 778.248097][T13139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1768'. [ 778.267713][T13137] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1767'. [ 778.725831][ T43] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0 [ 778.762818][ T43] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0 [ 778.788444][ T43] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0 [ 779.020263][T13148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1769'. [ 779.124805][ T43] waterforce 0003:1044:7A4D.0012: hidraw0: USB HID v0.08 Device [HID 1044:7a4d] on usb-dummy_hcd.5-1/input0 [ 779.149624][T13121] netlink: 'syz.5.1760': attribute type 1 has an invalid length. [ 779.169509][ T5857] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 779.429826][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'. [ 779.566307][ T43] waterforce 0003:1044:7A4D.0012: fw version request failed with -38 [ 779.793401][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 779.821103][ T5857] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 779.861383][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 779.965223][ T5857] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 780.004089][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.045949][ T5857] usb 3-1: Product: syz [ 780.050500][ T5857] usb 3-1: Manufacturer: syz [ 780.055111][ T5857] usb 3-1: SerialNumber: syz [ 780.072360][T13163] netlink: 'syz.1.1772': attribute type 12 has an invalid length. [ 780.085158][ T5857] usb 3-1: config 0 descriptor?? [ 780.124078][T13152] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 780.125600][T13152] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 780.139854][ T5857] usb 3-1: ucan: probing device on interface #0 [ 780.319715][T13162] tty tty23: ldisc open failed (-12), clearing slot 22 [ 780.449846][ T30] kauditd_printk_skb: 596 callbacks suppressed [ 780.449862][ T30] audit: type=1400 audit(1760359194.754:39803): avc: denied { prog_load } for pid=13147 comm="syz.2.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 780.489825][ T43] usb 6-1: USB disconnect, device number 9 [ 780.577780][ T30] audit: type=1400 audit(1760359194.754:39804): avc: denied { bpf } for pid=13147 comm="syz.2.1771" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 780.731785][ T30] audit: type=1400 audit(1760359194.754:39805): avc: denied { perfmon } for pid=13147 comm="syz.2.1771" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 781.240695][ T30] audit: type=1400 audit(1760359194.754:39806): avc: denied { perfmon } for pid=13147 comm="syz.2.1771" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 781.291075][ T5857] usb 3-1: ucan: could not read protocol version, ret=-110 [ 781.307114][ T5857] usb 3-1: ucan: probe failed; try to update the device firmware [ 781.414055][ T30] audit: type=1400 audit(1760359194.754:39807): avc: denied { perfmon } for pid=13147 comm="syz.2.1771" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 781.464163][T13175] tc_dump_action: action bad kind [ 781.511046][ T30] audit: type=1400 audit(1760359194.754:39808): avc: denied { perfmon } for pid=13147 comm="syz.2.1771" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 781.602682][ T30] audit: type=1400 audit(1760359194.754:39809): avc: denied { perfmon } for pid=13147 comm="syz.2.1771" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 781.641895][ T5806] audit: audit_backlog=65 > audit_backlog_limit=64 [ 781.642037][ T5816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 781.648422][ T5806] audit: audit_lost=2509 audit_rate_limit=0 audit_backlog_limit=64 [ 781.711198][T13172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.720190][T13172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.493983][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 782.734449][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 782.762837][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.792197][ T9] usb 2-1: Product: syz [ 782.857308][ T9] usb 2-1: Manufacturer: syz [ 782.875471][ T9] usb 2-1: SerialNumber: syz [ 782.970251][ T43] usb 3-1: USB disconnect, device number 55 [ 783.087761][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1781'. [ 783.429879][ T9] usb 2-1: config 0 descriptor?? [ 783.804594][ T9] usb 2-1: f81604_read: reg: 105 failed: -EPIPE [ 783.825736][ T9] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 783.868662][ T9] f81604 2-1:0.0: probe with driver f81604 failed with error -32 [ 784.035564][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'. [ 784.215312][ T43] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 784.243062][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 784.429348][ T43] usb 6-1: device descriptor read/64, error -32 [ 784.739229][ T43] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 785.113074][ T43] usb 6-1: not running at top speed; connect to a high speed hub [ 785.140592][ T43] usb 6-1: config 168 has an invalid interface number: 92 but max is 0 [ 785.154024][ T43] usb 6-1: config 168 contains an unexpected descriptor of type 0x2, skipping [ 785.175336][ T43] usb 6-1: config 168 has an invalid descriptor of length 214, skipping remainder of the config [ 785.208833][ T43] usb 6-1: config 168 has no interface number 0 [ 785.299836][ T43] usb 6-1: config 168 interface 92 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 785.311923][ T43] usb 6-1: config 168 interface 92 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 785.322903][ T43] usb 6-1: config 168 interface 92 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 785.336309][ T43] usb 6-1: config 168 interface 92 has no altsetting 0 [ 785.382106][ T43] usb 6-1: New USB device found, idVendor=12d1, idProduct=8b31, bcdDevice=20.38 [ 785.396885][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.904782][ T30] kauditd_printk_skb: 701 callbacks suppressed [ 785.904798][ T30] audit: type=1400 audit(1760359199.871:40484): avc: denied { read } for pid=13187 comm="syz.5.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 786.017837][ T43] usb 6-1: Product: 䥥⎍ࠞ૎䑬汛縖ﭵ㽝᯦便Ὡ讜哏⇮쩮䋥䒬芎ࡣ䗋ᮙ쌇⦜ﳘ䜱㥇嘳賂㘰鋂倨砇璋嬄㱏㳗ﴐ䥪ꖔ䑤ꠉ큑䰯遅坶犬乶䖸㐋≇嶨蝛ᜁ쳭৓歔ಷ츴∼倒ꎪ邯꾻ﮟ᥌鈠ى䏣툳醺䩀᳗Ს倱ⱏᏄ㏀즷곈冨ꋡ틵⤗慊䭥ⶇ铚ਛ젊첱쵌ﻈ虓﩯洛踥ﭟꗾ꺧赳嗖ꟽ㎟´糬䎔悳 [ 786.043104][ T30] audit: type=1400 audit(1760359199.871:40485): avc: denied { read } for pid=13187 comm="syz.5.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 786.055205][ T43] usb 6-1: Manufacturer: 㐊 [ 786.084531][ T43] usb 6-1: SerialNumber: చ [ 786.211682][ T9] usb 2-1: USB disconnect, device number 62 [ 786.278296][ T30] audit: type=1400 audit(1760359199.871:40486): avc: denied { read } for pid=13187 comm="syz.5.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 786.322599][T13189] audit: audit_backlog=66 > audit_backlog_limit=64 [ 786.329129][T13189] audit: audit_lost=2519 audit_rate_limit=0 audit_backlog_limit=64 [ 786.361733][ T30] audit: type=1400 audit(1760359199.871:40487): avc: denied { read } for pid=13187 comm="syz.5.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 786.406642][T13189] audit: backlog limit exceeded [ 786.412526][T13189] audit: audit_backlog=65 > audit_backlog_limit=64 [ 786.465084][ T30] audit: type=1400 audit(1760359199.871:40488): avc: denied { read } for pid=13187 comm="syz.5.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 786.488956][T13228] audit: audit_backlog=65 > audit_backlog_limit=64 [ 786.579983][T13230] netlink: 'syz.2.1787': attribute type 8 has an invalid length. [ 786.599019][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1787'. [ 786.811238][T13230] bond0: entered promiscuous mode [ 786.812857][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 787.229788][T13230] bond_slave_0: entered promiscuous mode [ 787.235633][T13230] bond_slave_1: entered promiscuous mode [ 787.295224][T13230] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 787.321315][T13230] veth1_to_bridge: entered promiscuous mode [ 787.382755][T13230] hsr1: entered promiscuous mode [ 787.422372][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 787.452053][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 787.480458][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.518552][ T9] usb 2-1: Product: syz [ 787.534119][ T9] usb 2-1: Manufacturer: syz [ 787.538740][ T9] usb 2-1: SerialNumber: syz [ 787.593898][ T9] usb 2-1: config 0 descriptor?? [ 788.218648][T13228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.277722][T13228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.383200][ T5940] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 788.591926][ T5940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 788.625904][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 788.671452][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 4 [ 788.731379][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 221, setting to 0 [ 788.775577][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 788.801232][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 788.811146][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 788.901210][T10019] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 788.920733][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 789.062919][ T5940] usb 3-1: string descriptor 0 read error: -22 [ 789.077190][ T43] usb 6-1: can't set config #168, error -71 [ 789.088177][ T5940] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 789.126818][ T43] usb 6-1: USB disconnect, device number 11 [ 789.153444][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.206292][ T5940] usb 3-1: config 0 descriptor?? [ 789.241607][T13243] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 789.311872][ T5940] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 789.539587][T13243] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1792'. [ 789.617210][ T6337] udevd[6337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 789.722193][T13243] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1792'. [ 789.735040][ T5940] usb 3-1: USB disconnect, device number 56 [ 789.740904][ T9] usb 2-1: USB disconnect, device number 63 [ 791.159306][T13262] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1796'. [ 791.410422][ T30] kauditd_printk_skb: 922 callbacks suppressed [ 791.410437][ T30] audit: type=1400 audit(1760359205.015:41332): avc: denied { create } for pid=13279 comm="syz.5.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 791.441480][T13280] netlink: 'syz.5.1800': attribute type 1 has an invalid length. [ 791.454651][ T30] audit: type=1400 audit(1760359205.034:41333): avc: denied { write } for pid=13279 comm="syz.5.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 791.486243][ T30] audit: type=1400 audit(1760359205.034:41334): avc: denied { read } for pid=13279 comm="syz.5.1800" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 791.521217][ T30] audit: type=1400 audit(1760359205.034:41335): avc: denied { read open } for pid=13279 comm="syz.5.1800" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 791.554448][ T30] audit: type=1400 audit(1760359205.109:41336): avc: denied { create } for pid=13279 comm="syz.5.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 791.576865][ T30] audit: type=1400 audit(1760359205.137:41337): avc: denied { create } for pid=13279 comm="syz.5.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 791.716198][ T30] audit: type=1400 audit(1760359205.296:41338): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.744619][ T30] audit: type=1400 audit(1760359205.296:41339): avc: denied { read write open } for pid=5810 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.771613][ T30] audit: type=1400 audit(1760359205.296:41340): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 791.818992][ T30] audit: type=1400 audit(1760359205.399:41341): avc: denied { execmem } for pid=13284 comm="syz.2.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 792.380192][T13287] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1801'. [ 792.623497][T13288] netlink: 'syz.2.1801': attribute type 4 has an invalid length. [ 792.632199][T13288] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1801'. [ 793.726336][T10019] Bluetooth: hci0: unexpected event for opcode 0x200c [ 796.674934][T13310] ip6erspan0: entered promiscuous mode [ 796.695179][T13310] ip6erspan0: entered allmulticast mode [ 797.003433][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 797.003448][ T30] audit: type=1400 audit(1760359210.244:41444): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 797.132899][ T30] audit: type=1400 audit(1760359210.244:41445): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 797.213365][ T30] audit: type=1400 audit(1760359210.244:41446): avc: denied { read write open } for pid=5806 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 797.322748][ T30] audit: type=1400 audit(1760359210.244:41447): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 797.394832][ T30] audit: type=1400 audit(1760359210.291:41448): avc: denied { read write open } for pid=5816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 797.439488][ T5916] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 797.662159][ T30] audit: type=1400 audit(1760359210.291:41449): avc: denied { ioctl } for pid=5816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 797.818146][ T30] audit: type=1400 audit(1760359210.328:41450): avc: denied { read write } for pid=12251 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 797.926648][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.339737][ T30] audit: type=1400 audit(1760359210.328:41451): avc: denied { read write open } for pid=12251 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 798.369382][ T30] audit: type=1400 audit(1760359210.328:41452): avc: denied { ioctl } for pid=12251 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 798.395087][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.401295][ T30] audit: type=1400 audit(1760359210.356:41453): avc: denied { read write } for pid=13318 comm="syz.2.1810" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 798.404708][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.424959][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.465662][ T5916] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 798.523605][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.565361][ T5916] usb 3-1: config 0 descriptor?? [ 798.853616][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1814'. [ 799.337651][ T5916] logitech 0003:046D:C29C.0013: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 799.615900][T13337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1816'. [ 799.995191][ T5916] logitech 0003:046D:C29C.0013: no inputs found [ 800.036783][ T5916] usb 3-1: USB disconnect, device number 57 [ 801.803733][T13366] Invalid logical block size (768) [ 802.380795][ T30] kauditd_printk_skb: 247 callbacks suppressed [ 802.380810][ T30] audit: type=1400 audit(1760359215.277:41701): avc: denied { read write } for pid=12251 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.500834][ T30] audit: type=1400 audit(1760359215.305:41702): avc: denied { read write open } for pid=12251 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.526038][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.550558][ T30] audit: type=1400 audit(1760359215.305:41703): avc: denied { ioctl } for pid=12251 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.576295][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.590383][ T30] audit: type=1400 audit(1760359215.333:41704): avc: denied { module_request } for pid=13375 comm="syz.2.1825" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 802.613015][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.649775][ T30] audit: type=1400 audit(1760359215.351:41705): avc: denied { read write } for pid=12669 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.678704][ T30] audit: type=1400 audit(1760359215.351:41706): avc: denied { read write open } for pid=12669 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.703908][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.733240][ T30] audit: type=1400 audit(1760359215.351:41707): avc: denied { ioctl } for pid=12669 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 802.759000][ C1] vkms_vblank_simulate: vblank timer overrun [ 803.046541][ T30] audit: type=1400 audit(1760359215.417:41708): avc: denied { map_create } for pid=13375 comm="syz.2.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 803.153931][ T30] audit: type=1400 audit(1760359215.585:41709): avc: denied { create } for pid=13383 comm="syz.6.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 803.236736][ T30] audit: type=1400 audit(1760359215.585:41710): avc: denied { create } for pid=13381 comm="syz.5.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 803.835665][T13384] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1827'. [ 805.428298][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1835'. [ 806.210133][T13409] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13409 comm=syz.5.1835 [ 807.763733][ T30] kauditd_printk_skb: 710 callbacks suppressed [ 807.785561][ T30] audit: type=1400 audit(1760359220.290:42421): avc: denied { ioctl } for pid=13436 comm="syz.0.1843" path="socket:[41123]" dev="sockfs" ino=41123 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 807.926784][ T30] audit: type=1400 audit(1760359220.309:42422): avc: denied { watch } for pid=13436 comm="syz.0.1843" path="/351" dev="tmpfs" ino=1908 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 808.036540][ T30] audit: type=1400 audit(1760359220.318:42423): avc: denied { map_create } for pid=13436 comm="syz.0.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 808.099502][ T30] audit: type=1400 audit(1760359220.318:42424): avc: denied { perfmon } for pid=13436 comm="syz.0.1843" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 808.199570][ T30] audit: type=1400 audit(1760359220.318:42425): avc: denied { map_read map_write } for pid=13436 comm="syz.0.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 808.309000][ T30] audit: type=1400 audit(1760359220.468:42426): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 808.600367][ T30] audit: type=1400 audit(1760359220.468:42427): avc: denied { read write open } for pid=5810 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 809.024587][ T30] audit: type=1400 audit(1760359220.468:42428): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 809.168703][ T30] audit: type=1400 audit(1760359220.646:42429): avc: denied { unmount } for pid=12669 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 809.259251][ T30] audit: type=1400 audit(1760359220.674:42430): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 809.307703][T13459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1850'. [ 809.367741][T13457] mkiss: ax0: crc mode is auto. [ 809.423566][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 810.802517][ T5916] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 811.177517][ T5916] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 811.188265][ T5916] usb 3-1: config 0 has no interface number 0 [ 811.194368][ T5916] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.224925][ T5916] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.347859][ T5916] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 811.348144][ T43] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 811.357085][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.454176][ T5916] usb 3-1: config 0 descriptor?? [ 811.583560][ T43] usb 7-1: Invalid ep0 maxpacket: 64 [ 811.707623][T13473] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 811.722013][ T43] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 811.782782][T10019] Bluetooth: hci2: unexpected event for opcode 0x200c [ 811.905270][ T43] usb 7-1: Invalid ep0 maxpacket: 64 [ 811.911712][ T43] usb usb7-port1: attempt power cycle [ 811.982126][ T5916] prodikeys 0003:041E:2801.0014: collection stack underflow [ 811.995709][ T5916] prodikeys 0003:041E:2801.0014: item 0 1 0 12 parsing failed [ 812.003956][ T5916] prodikeys 0003:041E:2801.0014: hid parse failed [ 812.011164][ T5916] prodikeys 0003:041E:2801.0014: probe with driver prodikeys failed with error -22 [ 812.299357][ T43] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 812.339218][ T43] usb 7-1: Invalid ep0 maxpacket: 64 [ 812.491670][ T43] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 812.525916][ T43] usb 7-1: Invalid ep0 maxpacket: 64 [ 812.537335][ T43] usb usb7-port1: unable to enumerate USB device [ 813.211414][ T30] kauditd_printk_skb: 266 callbacks suppressed [ 813.211425][ T30] audit: type=1400 audit(1760359225.407:42697): avc: denied { read write } for pid=12251 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 813.314896][ T30] audit: type=1400 audit(1760359225.435:42698): avc: denied { read write open } for pid=12251 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 813.359248][ T30] audit: type=1400 audit(1760359225.435:42699): avc: denied { ioctl } for pid=12251 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 813.411711][T13502] 9pnet_fd: Insufficient options for proto=fd [ 813.426220][ T30] audit: type=1400 audit(1760359225.538:42700): avc: denied { read } for pid=13501 comm="syz.5.1861" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 813.587931][ T30] audit: type=1400 audit(1760359225.538:42701): avc: denied { read open } for pid=13501 comm="syz.5.1861" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 813.616651][ T30] audit: type=1400 audit(1760359225.547:42702): avc: denied { read } for pid=13501 comm="syz.5.1861" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 813.688266][ T30] audit: type=1400 audit(1760359225.547:42703): avc: denied { read open } for pid=13501 comm="syz.5.1861" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 813.730478][ T43] usb 3-1: USB disconnect, device number 58 [ 813.737559][ T30] audit: type=1400 audit(1760359225.575:42704): avc: denied { read write } for pid=13501 comm="syz.5.1861" name="sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 813.793863][T13503] program syz.5.1861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 814.002555][ T30] audit: type=1400 audit(1760359225.575:42705): avc: denied { read write open } for pid=13501 comm="syz.5.1861" path="/dev/sg0" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 814.106549][ T30] audit: type=1400 audit(1760359225.575:42706): avc: denied { allowed } for pid=13489 comm="syz.1.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 814.628187][T13515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13515 comm=syz.0.1863 [ 816.802999][ T5916] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 816.975919][ T5916] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 816.992619][ T5916] usb 7-1: config 0 has no interface number 0 [ 817.020378][ T5916] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 817.098964][ T5916] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 817.109967][T11032] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 817.135169][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.152851][ T5916] usb 7-1: Product: syz [ 817.157022][ T5916] usb 7-1: Manufacturer: syz [ 817.161608][ T5916] usb 7-1: SerialNumber: syz [ 817.186390][ T5916] usb 7-1: config 0 descriptor?? [ 817.374721][T13546] Bluetooth: MGMT ver 1.23 [ 817.380194][T11032] usb 6-1: Using ep0 maxpacket: 16 [ 817.389278][T13537] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 817.390627][T11032] usb 6-1: too many configurations: 10, using maximum allowed: 8 [ 817.413922][T11032] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 817.422562][T11032] usb 6-1: can't read configurations, error -61 [ 817.433538][ T5916] usb-storage 7-1:0.20: USB Mass Storage device detected [ 817.505880][ T5916] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 817.612454][T13155] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 817.623360][T11032] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 817.783701][T13155] usb 3-1: Using ep0 maxpacket: 16 [ 817.788638][T11032] usb 6-1: Using ep0 maxpacket: 16 [ 817.823726][T11032] usb 6-1: too many configurations: 10, using maximum allowed: 8 [ 817.836980][ T5916] scsi host1: usb-storage 7-1:0.20 [ 817.840977][T13155] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 817.864020][T13155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.909582][T11032] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 817.922510][T13155] usb 3-1: Product: syz [ 817.926710][T13155] usb 3-1: Manufacturer: syz [ 817.931298][T13155] usb 3-1: SerialNumber: syz [ 817.949589][T11032] usb 6-1: can't read configurations, error -61 [ 817.983278][T11032] usb usb6-port1: attempt power cycle [ 817.997152][T13155] usb 3-1: config 0 descriptor?? [ 818.062698][T13155] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 818.095530][ T5916] usb 7-1: USB disconnect, device number 6 [ 818.371515][T11032] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 818.409121][T11032] usb 6-1: Using ep0 maxpacket: 16 [ 818.437164][T11032] usb 6-1: too many configurations: 10, using maximum allowed: 8 [ 818.475139][T11032] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 818.499309][T11032] usb 6-1: can't read configurations, error -61 [ 818.551123][T13155] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 818.576102][ T30] kauditd_printk_skb: 339 callbacks suppressed [ 818.576116][ T30] audit: type=1400 audit(1760359230.430:43046): avc: denied { read } for pid=13562 comm="syz.1.1879" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 818.605063][ C1] vkms_vblank_simulate: vblank timer overrun [ 818.642894][ T30] audit: type=1400 audit(1760359230.458:43047): avc: denied { read open } for pid=13562 comm="syz.1.1879" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 818.677229][ T30] audit: type=1400 audit(1760359230.458:43048): avc: denied { ioctl } for pid=13562 comm="syz.1.1879" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 818.728049][ T30] audit: type=1400 audit(1760359230.514:43049): avc: denied { ioctl } for pid=13541 comm="syz.5.1872" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 818.771519][T11032] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 818.779521][ T30] audit: type=1400 audit(1760359230.514:43050): avc: denied { ioctl } for pid=13562 comm="syz.1.1879" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 818.834446][T11032] usb 6-1: Using ep0 maxpacket: 16 [ 818.853954][T11032] usb 6-1: too many configurations: 10, using maximum allowed: 8 [ 818.864870][ T9] usb 3-1: USB disconnect, device number 59 [ 818.873201][ T30] audit: type=1400 audit(1760359230.598:43051): avc: denied { prog_load } for pid=13565 comm="syz.0.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 818.906017][T11032] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 818.914599][ T9] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 818.927069][T11032] usb 6-1: can't read configurations, error -61 [ 818.938963][ T9] visor 3-1:0.0: device disconnected [ 818.950206][T11032] usb usb6-port1: unable to enumerate USB device [ 818.960131][ T30] audit: type=1400 audit(1760359230.598:43052): avc: denied { bpf } for pid=13565 comm="syz.0.1880" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 819.014889][ T30] audit: type=1400 audit(1760359230.598:43053): avc: denied { bind } for pid=13565 comm="syz.0.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 819.077962][ T30] audit: type=1400 audit(1760359230.598:43054): avc: denied { name_bind } for pid=13565 comm="syz.0.1880" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 819.103718][ T30] audit: type=1400 audit(1760359230.598:43055): avc: denied { node_bind } for pid=13565 comm="syz.0.1880" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 819.898642][T13580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 820.231663][ T5940] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 820.380446][T13586] netlink: 'syz.6.1886': attribute type 1 has an invalid length. [ 820.388430][T13586] netlink: 'syz.6.1886': attribute type 2 has an invalid length. [ 820.421098][T13591] fuse: Bad value for 'rootmode' [ 820.456144][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 820.480036][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.506266][ T5940] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 820.528126][ T5940] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 820.568881][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.600958][ T5940] usb 2-1: config 0 descriptor?? [ 820.851838][ T43] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 821.129917][T13583] netlink: 'syz.1.1885': attribute type 1 has an invalid length. [ 821.137734][T13583] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1885'. [ 821.151128][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 821.152230][T13583] NCSI netlink: No device for ifindex 0 [ 821.226737][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1890'. [ 821.269193][T13602] FAULT_INJECTION: forcing a failure. [ 821.269193][T13602] name failslab, interval 1, probability 0, space 0, times 0 [ 821.281867][T13602] CPU: 0 UID: 0 PID: 13602 Comm: syz.5.1890 Not tainted syzkaller #0 PREEMPT(full) [ 821.281890][T13602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 821.281902][T13602] Call Trace: [ 821.281908][T13602] [ 821.281915][T13602] dump_stack_lvl+0x16c/0x1f0 [ 821.281941][T13602] should_fail_ex+0x512/0x640 [ 821.281963][T13602] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 821.281987][T13602] should_failslab+0xc2/0x120 [ 821.282014][T13602] kmem_cache_alloc_noprof+0x75/0x6e0 [ 821.282034][T13602] ? getname_kernel+0x52/0x370 [ 821.282065][T13602] ? getname_kernel+0x52/0x370 [ 821.282090][T13602] getname_kernel+0x52/0x370 [ 821.282117][T13602] kern_path+0x1d/0x50 [ 821.282140][T13602] unix_find_other+0x3d5/0xb50 [ 821.282161][T13602] ? __pfx_unix_find_other+0x10/0x10 [ 821.282189][T13602] unix_stream_connect+0x4cb/0x1a30 [ 821.282215][T13602] ? __local_bh_enable_ip+0xa4/0x120 [ 821.282235][T13602] ? __pfx_unix_stream_connect+0x10/0x10 [ 821.282256][T13602] ? selinux_socket_connect+0x6b/0x80 [ 821.282281][T13602] ? __pfx_unix_stream_connect+0x10/0x10 [ 821.282299][T13602] __sys_connect_file+0x141/0x1a0 [ 821.282326][T13602] __sys_connect+0x13b/0x160 [ 821.282343][T13602] ? __pfx___sys_connect+0x10/0x10 [ 821.282359][T13602] ? file_seek_cur_needs_f_lock+0xb0/0xc0 [ 821.282395][T13602] ? __pfx_ksys_write+0x10/0x10 [ 821.282423][T13602] __x64_sys_connect+0x72/0xb0 [ 821.282439][T13602] ? lockdep_hardirqs_on+0x7c/0x110 [ 821.282460][T13602] do_syscall_64+0xcd/0xfa0 [ 821.282482][T13602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.282500][T13602] RIP: 0033:0x7f99b118eec9 [ 821.282515][T13602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.282533][T13602] RSP: 002b:00007f99af3b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 821.282550][T13602] RAX: ffffffffffffffda RBX: 00007f99b13e6180 RCX: 00007f99b118eec9 [ 821.282563][T13602] RDX: 000000000000006e RSI: 00002000000005c0 RDI: 0000000000000009 [ 821.282573][T13602] RBP: 00007f99af3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 821.282584][T13602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.282594][T13602] R13: 00007f99b13e6218 R14: 00007f99b13e6180 R15: 00007ffd3fb5e4d8 [ 821.282620][T13602] [ 821.566891][T13155] usb 2-1: USB disconnect, device number 64 [ 821.583755][ T43] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 821.596736][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.632336][ T43] usb 3-1: config 0 has no interface number 0 [ 821.638484][ T43] usb 3-1: config 0 interface 216 has no altsetting 0 [ 821.652360][ T43] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 821.664160][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.679931][ T43] usb 3-1: config 0 descriptor?? [ 821.743682][T13604] FAULT_INJECTION: forcing a failure. [ 821.743682][T13604] name failslab, interval 1, probability 0, space 0, times 0 [ 821.756849][T13604] CPU: 1 UID: 0 PID: 13604 Comm: syz.6.1891 Not tainted syzkaller #0 PREEMPT(full) [ 821.756865][T13604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 821.756871][T13604] Call Trace: [ 821.756875][T13604] [ 821.756879][T13604] dump_stack_lvl+0x16c/0x1f0 [ 821.756896][T13604] should_fail_ex+0x512/0x640 [ 821.756909][T13604] ? __kmalloc_noprof+0xca/0x880 [ 821.756923][T13604] should_failslab+0xc2/0x120 [ 821.756939][T13604] __kmalloc_noprof+0xdd/0x880 [ 821.756950][T13604] ? bpf_test_init.isra.0+0x88/0x130 [ 821.756965][T13604] ? bpf_test_init.isra.0+0x88/0x130 [ 821.756976][T13604] bpf_test_init.isra.0+0x88/0x130 [ 821.756988][T13604] bpf_prog_test_run_xdp+0x556/0x1670 [ 821.757005][T13604] ? __fget_files+0x204/0x3c0 [ 821.757021][T13604] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 821.757035][T13604] ? __might_fault+0xa0/0x190 [ 821.757057][T13604] ? fput+0x9b/0xd0 [ 821.757074][T13604] ? __bpf_prog_get+0x97/0x2a0 [ 821.757091][T13604] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 821.757106][T13604] __sys_bpf+0x1035/0x4980 [ 821.757130][T13604] ? __pfx___sys_bpf+0x10/0x10 [ 821.757149][T13604] ? find_held_lock+0x2b/0x80 [ 821.757172][T13604] ? find_held_lock+0x2b/0x80 [ 821.757193][T13604] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 821.757216][T13604] ? fput+0x9b/0xd0 [ 821.757225][T13604] ? ksys_write+0x1ac/0x250 [ 821.757238][T13604] ? __pfx_ksys_write+0x10/0x10 [ 821.757254][T13604] __x64_sys_bpf+0x78/0xc0 [ 821.757272][T13604] ? lockdep_hardirqs_on+0x7c/0x110 [ 821.757292][T13604] do_syscall_64+0xcd/0xfa0 [ 821.757315][T13604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.757332][T13604] RIP: 0033:0x7fecfe38eec9 [ 821.757341][T13604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.757352][T13604] RSP: 002b:00007fecff171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 821.757362][T13604] RAX: ffffffffffffffda RBX: 00007fecfe5e5fa0 RCX: 00007fecfe38eec9 [ 821.757370][T13604] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 821.757376][T13604] RBP: 00007fecff171090 R08: 0000000000000000 R09: 0000000000000000 [ 821.757383][T13604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.757389][T13604] R13: 00007fecfe5e6038 R14: 00007fecfe5e5fa0 R15: 00007ffd5d7feef8 [ 821.757403][T13604] [ 822.003348][ T5857] usb 3-1: USB disconnect, device number 60 [ 822.195376][T13608] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 822.215527][T13609] tun0: tun_chr_ioctl cmd 1074025675 [ 822.221687][T13609] tun0: persist enabled [ 822.226513][T13608] netlink: 'syz.5.1892': attribute type 14 has an invalid length. [ 822.233569][T13609] tun0: tun_chr_ioctl cmd 1074025675 [ 822.234497][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1892'. [ 822.239556][T13609] tun0: persist enabled [ 822.259753][T13608] netlink: 'syz.5.1892': attribute type 14 has an invalid length. [ 822.267647][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1892'. [ 822.279782][ T6680] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.299863][ T6680] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.327235][ T6680] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.336307][ T6680] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 822.551681][ T5857] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 823.278705][ T5916] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 823.606802][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.639106][ T5916] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 823.673840][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.725994][ T5916] usb 2-1: config 0 descriptor?? [ 823.934626][ T30] kauditd_printk_skb: 366 callbacks suppressed [ 823.934642][ T30] audit: type=1400 audit(1760359235.434:43422): avc: denied { create } for pid=13624 comm="syz.6.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 824.107623][ T5916] usbhid 2-1:0.0: can't add hid device: -71 [ 824.112345][ T30] audit: type=1400 audit(1760359235.472:43423): avc: denied { create } for pid=13623 comm="syz.0.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 824.137780][ T5916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 824.191101][ T5916] usb 2-1: USB disconnect, device number 65 [ 824.212859][ T30] audit: type=1400 audit(1760359235.472:43424): avc: denied { write } for pid=13623 comm="syz.0.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 824.294087][ T30] audit: type=1400 audit(1760359235.472:43425): avc: denied { read } for pid=13623 comm="syz.0.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 824.357458][ T30] audit: type=1400 audit(1760359235.472:43426): avc: denied { read } for pid=13623 comm="syz.0.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 824.432790][ T30] audit: type=1400 audit(1760359235.481:43427): avc: denied { create } for pid=13624 comm="syz.6.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 824.537156][T13631] fuse: Bad value for 'rootmode' [ 824.570343][ T30] audit: type=1400 audit(1760359235.481:43428): avc: denied { write } for pid=13624 comm="syz.6.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 824.709813][ T5916] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 824.773250][ T30] audit: type=1400 audit(1760359235.481:43429): avc: denied { read } for pid=13624 comm="syz.6.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 824.806366][T13620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 824.806428][ T30] audit: type=1400 audit(1760359235.481:43430): avc: denied { read } for pid=13624 comm="syz.6.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 824.875552][T13638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1902'. [ 825.016893][ T5916] usb 2-1: device descriptor read/64, error -71 [ 825.379895][T13644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.414200][T13644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 825.568454][ T5916] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 825.737081][ T5916] usb 2-1: device descriptor read/64, error -71 [ 826.264930][ T5916] usb usb2-port1: attempt power cycle [ 826.553407][T13655] binder: 13647:13655 ioctl 40182103 200000000300 returned -22 [ 827.566451][T13674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13674 comm=syz.5.1909 [ 829.379617][ T30] kauditd_printk_skb: 305 callbacks suppressed [ 829.379633][ T30] audit: type=1400 audit(1760359240.523:43674): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.503219][ T30] audit: type=1400 audit(1760359240.523:43675): avc: denied { read write open } for pid=5816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.535537][T13699] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 829.576447][ T30] audit: type=1400 audit(1760359240.523:43676): avc: denied { ioctl } for pid=5816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.583978][T13698] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 829.650869][ T30] audit: type=1400 audit(1760359240.635:43677): avc: denied { create } for pid=13696 comm="syz.1.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 829.670635][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.677480][ T30] audit: type=1400 audit(1760359240.635:43678): avc: denied { read write } for pid=13696 comm="syz.1.1916" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 829.742266][ T30] audit: type=1400 audit(1760359240.635:43679): avc: denied { read write open } for pid=13696 comm="syz.1.1916" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 829.998945][ T30] audit: type=1400 audit(1760359240.645:43680): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 830.031391][ T30] audit: type=1400 audit(1760359240.673:43681): avc: denied { mounton } for pid=13696 comm="syz.1.1916" path="/397/file1" dev="tmpfs" ino=2155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 830.056764][ T30] audit: type=1400 audit(1760359240.710:43682): avc: denied { read } for pid=13696 comm="syz.1.1916" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 830.080317][ T30] audit: type=1400 audit(1760359240.710:43683): avc: denied { read open } for pid=13696 comm="syz.1.1916" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 830.128428][T13698] bond1: entered allmulticast mode [ 830.134299][T13698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 830.147041][T13702] netlink: 'syz.0.1917': attribute type 5 has an invalid length. [ 830.221540][T13704] bond1: (slave ip6gretap1): making interface the new active one [ 830.230445][T13704] ip6gretap1: entered allmulticast mode [ 830.237285][T13704] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 830.612658][ T5857] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 830.850351][ T5857] usb 3-1: config 0 interface 0 has no altsetting 0 [ 830.859032][ T5857] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 830.868090][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.108314][ T5857] usb 3-1: config 0 descriptor?? [ 831.559927][ T5857] wacom 0003:056A:0063.0015: item fetching failed at offset 0/3 [ 832.461908][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 832.761909][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 832.826518][ T5857] wacom 0003:056A:0063.0015: parse failed [ 832.832396][ T5857] wacom 0003:056A:0063.0015: probe with driver wacom failed with error -22 [ 832.862438][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.938283][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 832.995905][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 832.998752][T13722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1922'. [ 833.047486][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 833.108435][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 833.132985][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1922'. [ 833.147954][T13722] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1922'. [ 833.176177][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 833.210716][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 833.234400][ T9] usb 7-1: Manufacturer: syz [ 833.250814][ T9] usb 7-1: config 0 descriptor?? [ 833.465925][ T43] usb 3-1: USB disconnect, device number 61 [ 833.500841][T13722] hugetlbfs: syz.1.1922 (13722): Using mlock ulimits for SHM_HUGETLB is obsolete [ 834.167490][T13715] fuse: Bad value for 'fd' [ 834.279607][ T9] rc_core: IR keymap rc-hauppauge not found [ 834.299304][ T9] Registered IR keymap rc-empty [ 834.319855][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 834.655101][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 834.949092][ T30] kauditd_printk_skb: 328 callbacks suppressed [ 834.949110][ T30] audit: type=1400 audit(1760359245.612:44012): avc: denied { read } for pid=13744 comm="syz.5.1927" dev="nsfs" ino=4026532692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 834.961165][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 835.128990][ T30] audit: type=1400 audit(1760359245.621:44013): avc: denied { read open } for pid=13744 comm="syz.5.1927" path="net:[4026532692]" dev="nsfs" ino=4026532692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 835.235011][ T30] audit: type=1400 audit(1760359245.621:44014): avc: denied { create } for pid=13744 comm="syz.5.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 835.277358][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input35 [ 835.344028][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.369759][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.409691][ T30] audit: type=1400 audit(1760359245.715:44015): avc: denied { bind } for pid=13744 comm="syz.5.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 835.431456][ T30] audit: type=1400 audit(1760359245.771:44016): avc: denied { sys_module } for pid=13739 comm="syz.0.1925" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 835.453828][ T30] audit: type=1400 audit(1760359245.771:44017): avc: denied { module_request } for pid=13739 comm="syz.0.1925" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 835.476184][ T30] audit: type=1400 audit(1760359245.780:44018): avc: denied { create } for pid=13744 comm="syz.5.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 835.498621][ T30] audit: type=1400 audit(1760359245.789:44019): avc: denied { execmem } for pid=13745 comm="syz.1.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 835.519307][ T30] audit: type=1400 audit(1760359245.874:44020): avc: denied { prog_load } for pid=13741 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 835.570318][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.686394][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.765294][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.807922][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.895877][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 835.896277][ T30] audit: type=1400 audit(1760359245.874:44021): avc: denied { bpf } for pid=13741 comm="syz.2.1926" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 835.947446][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 836.000306][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 836.032526][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 836.079646][ T9] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 836.117892][ T9] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 836.172092][ T9] usb 7-1: USB disconnect, device number 8 [ 837.229119][T13768] netlink: 'syz.5.1931': attribute type 10 has an invalid length. [ 837.274073][ T43] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 837.320737][T13768] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1931'. [ 837.341940][ T43] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 837.363430][ T43] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 837.399221][ T43] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 837.409997][ T43] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 837.443541][ T43] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 837.469135][ T43] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 837.499856][ T43] hid-generic 00A0:0006:0003.0016: unknown main item tag 0x0 [ 837.529298][ T43] hid-generic 00A0:0006:0003.0016: hidraw0: HID v0.05 Device [syz1] on syz0 [ 837.646903][ T5857] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 837.998449][ T5857] usb 6-1: config 0 has no interfaces? [ 838.004789][ T5857] usb 6-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 838.032036][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.079395][ T5857] usb 6-1: config 0 descriptor?? [ 838.116507][T13777] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1933'. [ 838.259070][T13785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1935'. [ 838.395709][ T5884] usb 6-1: USB disconnect, device number 16 [ 840.254881][T13806] FAULT_INJECTION: forcing a failure. [ 840.254881][T13806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.324300][T13806] CPU: 0 UID: 0 PID: 13806 Comm: syz.0.1942 Not tainted syzkaller #0 PREEMPT(full) [ 840.324317][T13806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 840.324323][T13806] Call Trace: [ 840.324327][T13806] [ 840.324332][T13806] dump_stack_lvl+0x16c/0x1f0 [ 840.324350][T13806] should_fail_ex+0x512/0x640 [ 840.324367][T13806] _copy_from_user+0x2e/0xd0 [ 840.324382][T13806] copy_msghdr_from_user+0x98/0x160 [ 840.324396][T13806] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 840.324416][T13806] ___sys_sendmsg+0xfe/0x1d0 [ 840.324429][T13806] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.324440][T13806] ? __lock_acquire+0x622/0x1c90 [ 840.324474][T13806] __sys_sendmsg+0x16d/0x220 [ 840.324487][T13806] ? __pfx___sys_sendmsg+0x10/0x10 [ 840.324508][T13806] do_syscall_64+0xcd/0xfa0 [ 840.324522][T13806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.324534][T13806] RIP: 0033:0x7f12a298eec9 [ 840.324544][T13806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.324555][T13806] RSP: 002b:00007f12a3910038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.324566][T13806] RAX: ffffffffffffffda RBX: 00007f12a2be5fa0 RCX: 00007f12a298eec9 [ 840.324573][T13806] RDX: 0000000000040810 RSI: 0000200000000140 RDI: 0000000000000003 [ 840.324579][T13806] RBP: 00007f12a3910090 R08: 0000000000000000 R09: 0000000000000000 [ 840.324586][T13806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.324592][T13806] R13: 00007f12a2be6038 R14: 00007f12a2be5fa0 R15: 00007ffd713f03f8 [ 840.324606][T13806] [ 840.570986][ T30] kauditd_printk_skb: 245 callbacks suppressed [ 840.571003][ T30] audit: type=1400 audit(1760359250.934:44267): avc: denied { read write } for pid=12251 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 840.660204][ T30] audit: type=1400 audit(1760359250.934:44268): avc: denied { read write open } for pid=12251 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 840.693455][ T30] audit: type=1400 audit(1760359250.934:44269): avc: denied { ioctl } for pid=12251 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 840.771348][T13813] vlan2: entered allmulticast mode [ 840.776492][T13813] dummy0: entered allmulticast mode [ 840.787888][ T30] audit: type=1400 audit(1760359250.953:44270): avc: denied { read write } for pid=12669 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 840.813611][T13813] input: syz1 as /devices/virtual/input/input36 [ 840.819840][T13813] input: failed to attach handler leds to device input36, error: -6 [ 840.875254][ T30] audit: type=1400 audit(1760359250.953:44271): avc: denied { read write open } for pid=12669 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 840.908256][ T30] audit: type=1400 audit(1760359250.953:44272): avc: denied { ioctl } for pid=12669 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 840.946581][ T30] audit: type=1400 audit(1760359250.990:44273): avc: denied { append } for pid=13807 comm="syz.1.1941" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 841.495616][ T30] audit: type=1400 audit(1760359250.990:44274): avc: denied { append open } for pid=13807 comm="syz.1.1941" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 841.879949][ T30] audit: type=1400 audit(1760359251.009:44275): avc: denied { prog_load } for pid=13809 comm="syz.5.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 841.956777][ T30] audit: type=1400 audit(1760359251.009:44276): avc: denied { bpf } for pid=13809 comm="syz.5.1943" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 842.961543][T13842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1950'. [ 844.808838][T13858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1954'. [ 845.990906][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 845.990946][ T30] audit: type=1400 audit(1760359256.069:44530): avc: denied { write } for pid=13867 comm="syz.1.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 846.100930][ T30] audit: type=1400 audit(1760359256.069:44531): avc: denied { read write } for pid=12669 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 846.192792][ T30] audit: type=1400 audit(1760359256.069:44532): avc: denied { read write open } for pid=12669 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 846.230423][ T30] audit: type=1400 audit(1760359256.069:44533): avc: denied { ioctl } for pid=12669 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 846.260631][ T30] audit: type=1400 audit(1760359256.200:44534): avc: denied { write } for pid=13867 comm="syz.1.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 846.283663][ T30] audit: type=1400 audit(1760359256.275:44535): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 846.335915][ T30] audit: type=1400 audit(1760359256.275:44536): avc: denied { read write open } for pid=5806 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 846.386489][T13876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 846.514080][ T30] audit: type=1400 audit(1760359256.275:44537): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 846.747663][ T30] audit: type=1400 audit(1760359256.425:44538): avc: denied { prog_load } for pid=13874 comm="syz.6.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 846.778748][ T30] audit: type=1400 audit(1760359256.425:44539): avc: denied { bpf } for pid=13874 comm="syz.6.1960" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 847.194526][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1963'. [ 847.610454][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 847.813459][ T9] usb 7-1: device descriptor read/64, error -71 [ 848.971777][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 849.192774][ T9] usb 7-1: device descriptor read/64, error -71 [ 849.338729][ T9] usb usb7-port1: attempt power cycle [ 849.717120][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 849.743622][ T9] usb 7-1: device descriptor read/8, error -71 [ 850.111920][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 850.450662][ T9] usb 7-1: device descriptor read/8, error -71 [ 850.677538][ T9] usb usb7-port1: unable to enumerate USB device [ 851.417669][ T30] kauditd_printk_skb: 220 callbacks suppressed [ 851.417694][ T30] audit: type=1400 audit(1760359261.055:44760): avc: denied { execmem } for pid=13930 comm="syz.5.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 851.468184][ T30] audit: type=1400 audit(1760359261.177:44761): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 851.977858][ T30] audit: type=1400 audit(1760359261.186:44762): avc: denied { read write open } for pid=5816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 852.003532][ T30] audit: type=1400 audit(1760359261.186:44763): avc: denied { ioctl } for pid=5816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 852.221148][ T30] audit: type=1400 audit(1760359261.878:44764): avc: denied { execmem } for pid=13934 comm="syz.0.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 852.250001][ T30] audit: type=1400 audit(1760359261.878:44765): avc: denied { execmem } for pid=13934 comm="syz.0.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 852.330415][ T30] audit: type=1400 audit(1760359261.888:44766): avc: denied { read write } for pid=13934 comm="syz.0.1973" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 852.410485][ T30] audit: type=1400 audit(1760359261.888:44767): avc: denied { read write open } for pid=13934 comm="syz.0.1973" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 852.474555][ T30] audit: type=1400 audit(1760359261.888:44768): avc: denied { ioctl } for pid=13934 comm="syz.0.1973" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 852.538699][ T30] audit: type=1400 audit(1760359261.888:44769): avc: denied { ioctl } for pid=13934 comm="syz.0.1973" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 853.543631][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1977'. [ 853.832668][T13953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1976'. [ 853.860973][T13946] bond2: Removing last ns target with arp_interval on [ 854.099530][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 854.227784][ T5916] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 854.399286][ T5916] usb 7-1: Using ep0 maxpacket: 8 [ 855.044360][ T5916] usb 7-1: unable to get BOS descriptor or descriptor too short [ 855.054747][ T9] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 855.064146][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.072147][ T9] usb 3-1: Product: syz [ 855.082635][ T9] usb 3-1: Manufacturer: syz [ 855.096007][ T5916] usb 7-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 855.122493][ T9] usb 3-1: SerialNumber: syz [ 855.136904][ T5916] usb 7-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 855.159867][ T9] usb 3-1: config 0 descriptor?? [ 855.175857][ T5916] usb 7-1: config 8 interface 0 has no altsetting 0 [ 855.301378][T10019] Bluetooth: hci6: urb ffff88803249a800 submission failed (2) [ 855.316212][ T5916] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 855.336286][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.361001][ T5916] usb 7-1: Product: syz [ 855.365191][ T5916] usb 7-1: Manufacturer: syz [ 855.369864][ T5916] usb 7-1: SerialNumber: syz [ 856.553664][T11032] usb 3-1: USB disconnect, device number 62 [ 856.810585][ T5916] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 856.833636][ T30] kauditd_printk_skb: 199 callbacks suppressed [ 856.833650][ T30] audit: type=1400 audit(1760359266.209:44969): avc: denied { create } for pid=13976 comm="syz.5.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 856.870890][ T5916] usb 7-1: selecting invalid altsetting 0 [ 856.903090][ T30] audit: type=1400 audit(1760359266.256:44970): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 856.964567][ T30] audit: type=1400 audit(1760359266.321:44971): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 857.082292][ T30] audit: type=1400 audit(1760359266.331:44972): avc: denied { read write open } for pid=5816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 857.127144][ T5916] snd-usb-audio 7-1:8.0: probe with driver snd-usb-audio failed with error -12 [ 857.202909][ T5916] usb 7-1: USB disconnect, device number 13 [ 857.222768][ T30] audit: type=1400 audit(1760359266.331:44973): avc: denied { ioctl } for pid=5816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 857.341339][T13984] netlink: 'syz.1.1986': attribute type 1 has an invalid length. [ 857.360015][ T30] audit: type=1400 audit(1760359266.480:44974): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 857.471087][ T30] audit: type=1400 audit(1760359266.480:44975): avc: denied { read write open } for pid=5806 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 857.482523][T13984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 857.505260][ T30] audit: type=1400 audit(1760359266.508:44976): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 857.531209][ T30] audit: type=1400 audit(1760359266.546:44977): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 857.568057][ T30] audit: type=1400 audit(1760359266.546:44978): avc: denied { read write open } for pid=5810 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 857.678155][ T6337] udevd[6337]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 857.823342][T13986] bond1: entered allmulticast mode [ 857.894747][T13993] cgroup: name respecified [ 857.934649][T13993] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1987'. [ 857.944039][T13993] openvswitch: netlink: Message has 512 unknown bytes. [ 858.236832][ T43] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 858.458782][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 858.543144][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1990'. [ 858.927912][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 858.942438][ T43] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 858.952056][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.967425][ T43] usb 3-1: config 0 descriptor?? [ 858.977195][T13993] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 859.499783][ T43] hid-retrode 0003:0403:97C1.0017: unknown main item tag 0x7 [ 859.528792][ T43] hid-retrode 0003:0403:97C1.0017: item fetching failed at offset 1/5 [ 859.548465][ T43] hid-retrode 0003:0403:97C1.0017: probe with driver hid-retrode failed with error -22 [ 859.969090][T10019] Bluetooth: hci2: unexpected event for opcode 0x200c [ 861.708445][ T5857] usb 3-1: USB disconnect, device number 63 [ 862.224816][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 862.224831][ T30] audit: type=1400 audit(1760359271.260:45161): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 862.331618][ T30] audit: type=1400 audit(1760359271.260:45162): avc: denied { read write open } for pid=5810 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 862.388432][ T30] audit: type=1400 audit(1760359271.260:45163): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 862.439126][ T30] audit: type=1400 audit(1760359271.307:45164): avc: denied { read write } for pid=12669 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 862.466608][ T30] audit: type=1400 audit(1760359271.307:45165): avc: denied { read write open } for pid=12669 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 862.789496][ T30] audit: type=1400 audit(1760359271.307:45166): avc: denied { ioctl } for pid=12669 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 862.818593][ T30] audit: type=1400 audit(1760359271.438:45167): avc: denied { create } for pid=14032 comm="syz.0.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 862.841714][ T30] audit: type=1400 audit(1760359271.485:45168): avc: denied { bind } for pid=14032 comm="syz.0.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 863.416780][ T30] audit: type=1400 audit(1760359271.532:45169): avc: denied { read } for pid=14032 comm="syz.0.2000" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 863.446861][ T30] audit: type=1400 audit(1760359271.532:45170): avc: denied { read open } for pid=14032 comm="syz.0.2000" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 863.669305][T14044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 864.328657][T14056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.453833][T14066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2009'. [ 865.495085][T14066] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2009'. [ 865.613345][T14066] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2009'. [ 867.644634][ T30] kauditd_printk_skb: 222 callbacks suppressed [ 867.644650][ T30] audit: type=1400 audit(1760359276.311:45393): avc: denied { allowed } for pid=14088 comm="syz.0.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 867.766500][ T30] audit: type=1400 audit(1760359276.321:45394): avc: denied { create } for pid=14088 comm="syz.0.2015" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 868.492473][ T30] audit: type=1400 audit(1760359276.349:45395): avc: denied { map } for pid=14088 comm="syz.0.2015" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 868.694730][ T30] audit: type=1400 audit(1760359276.368:45396): avc: denied { read write } for pid=14088 comm="syz.0.2015" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 868.793528][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 869.203469][ T30] audit: type=1400 audit(1760359276.405:45397): avc: denied { map } for pid=14088 comm="syz.0.2015" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 869.688630][ T30] audit: type=1400 audit(1760359276.414:45398): avc: denied { read write } for pid=14088 comm="syz.0.2015" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 869.893358][ T30] audit: type=1400 audit(1760359276.770:45399): avc: denied { read write } for pid=5810 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 869.931585][ T5940] kernel read not supported for file /vga_arbiter (pid: 5940 comm: kworker/1:7) [ 870.178334][ T30] audit: type=1400 audit(1760359276.770:45400): avc: denied { read write open } for pid=5810 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 870.214369][ T30] audit: type=1400 audit(1760359276.770:45401): avc: denied { ioctl } for pid=5810 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 870.381915][ T30] audit: type=1400 audit(1760359277.181:45402): avc: denied { prog_load } for pid=14094 comm="syz.1.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 870.682821][T14075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.746996][ T5940] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 870.926656][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 870.952204][ T5940] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 870.979997][ T5940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.004612][ T5940] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 871.053243][ T5940] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 871.074897][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.095014][ T5940] usb 2-1: Product: syz [ 871.103876][ T5940] usb 2-1: Manufacturer: syz [ 871.113107][T14119] afs: Bad value for 'flock' [ 871.117744][ T5940] usb 2-1: SerialNumber: syz [ 871.199382][T14117] binder_alloc: 14116: binder_alloc_buf size -16 failed, no address space [ 871.226134][T14117] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 871.700641][ T5940] usb 2-1: 0:2 : does not exist [ 872.648081][ T43] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 872.830537][ T43] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 872.911940][ T43] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 872.922569][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.931022][ T43] usb 3-1: Product: syz [ 872.935240][ T43] usb 3-1: Manufacturer: syz [ 872.937450][T14136] sctp: [Deprecated]: syz.5.2030 (pid 14136) Use of int in maxseg socket option. [ 872.937450][T14136] Use struct sctp_assoc_value instead [ 872.939989][ T43] usb 3-1: SerialNumber: syz [ 873.008512][ T30] kauditd_printk_skb: 241 callbacks suppressed [ 873.008543][ T30] audit: type=1400 audit(1760359281.335:45644): avc: denied { ioctl } for pid=14128 comm="syz.2.2027" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 873.263786][ T30] audit: type=1400 audit(1760359281.419:45645): avc: denied { create } for pid=14132 comm="syz.6.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 873.299837][ T30] audit: type=1400 audit(1760359281.447:45646): avc: denied { read write } for pid=14132 comm="syz.6.2029" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 873.319983][ T5940] usb 2-1: USB disconnect, device number 69 [ 873.334923][T14136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2030'. [ 873.386376][ T30] audit: type=1400 audit(1760359281.447:45647): avc: denied { read write open } for pid=14132 comm="syz.6.2029" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 873.415817][ T30] audit: type=1400 audit(1760359281.466:45648): avc: denied { ioctl } for pid=14132 comm="syz.6.2029" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 873.453967][ T6152] udevd[6152]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 873.477703][ T30] audit: type=1400 audit(1760359281.494:45649): avc: denied { ioctl } for pid=14132 comm="syz.6.2029" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 873.518943][ T30] audit: type=1400 audit(1760359281.540:45650): avc: denied { ioctl } for pid=14128 comm="syz.2.2027" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 873.544282][ T30] audit: type=1400 audit(1760359281.606:45651): avc: denied { ioctl } for pid=14128 comm="syz.2.2027" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 873.552043][ T43] usb 3-1: selecting invalid altsetting 1 [ 873.573074][ T30] audit: type=1400 audit(1760359281.606:45652): avc: denied { ioctl } for pid=14132 comm="syz.6.2029" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 873.602441][ T30] audit: type=1400 audit(1760359281.690:45653): avc: denied { create } for pid=14135 comm="syz.5.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 873.802431][ T43] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 873.802528][ T43] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 874.030246][ T9] usb 3-1: USB disconnect, device number 64 [ 874.207158][T14151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 875.045068][T14156] evm: overlay not supported [ 875.070955][T14156] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=14156 comm=syz.1.2033 [ 875.509893][T14159] sit1: entered allmulticast mode [ 877.440283][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2039'. [ 878.565852][ T30] kauditd_printk_skb: 232 callbacks suppressed [ 878.565868][ T30] audit: type=1400 audit(1760359286.535:45886): avc: denied { perfmon } for pid=14185 comm="syz.5.2042" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 878.603269][ T30] audit: type=1400 audit(1760359286.535:45887): avc: denied { perfmon } for pid=14185 comm="syz.5.2042" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 878.625710][ T30] audit: type=1400 audit(1760359286.563:45888): avc: denied { bpf } for pid=14185 comm="syz.5.2042" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 878.647079][ T30] audit: type=1400 audit(1760359286.563:45889): avc: denied { bpf } for pid=14185 comm="syz.5.2042" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 878.667961][ T30] audit: type=1400 audit(1760359286.573:45890): avc: denied { perfmon } for pid=14185 comm="syz.5.2042" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 878.696464][ T30] audit: type=1400 audit(1760359286.573:45891): avc: denied { bpf } for pid=14185 comm="syz.5.2042" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 878.719296][ T30] audit: type=1400 audit(1760359286.620:45892): avc: denied { perfmon } for pid=14185 comm="syz.5.2042" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 878.742044][ T30] audit: type=1400 audit(1760359286.638:45893): avc: denied { bpf } for pid=14185 comm="syz.5.2042" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 878.923161][ T30] audit: type=1400 audit(1760359286.638:45894): avc: denied { perfmon } for pid=14185 comm="syz.5.2042" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 879.147803][ T43] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 879.243828][ T30] audit: type=1400 audit(1760359286.638:45895): avc: denied { bpf } for pid=14185 comm="syz.5.2042" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 879.424059][ T43] usb 2-1: config 0 has an invalid interface number: 220 but max is 0 [ 879.446916][ T43] usb 2-1: config 0 has no interface number 0 [ 879.467035][ T43] usb 2-1: config 0 interface 220 has no altsetting 0 [ 879.512110][ T43] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=26.e9 [ 879.532000][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.545925][ T43] usb 2-1: Product: syz [ 879.551500][ T43] usb 2-1: Manufacturer: syz [ 879.562977][ T43] usb 2-1: SerialNumber: syz [ 879.616276][ T43] usb 2-1: config 0 descriptor?? [ 879.910126][T11032] Process accounting resumed [ 879.944806][T10019] Bluetooth: hci0: connection err: -111 [ 879.993042][ T9] Process accounting resumed [ 880.008092][T14194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 880.053441][T14194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.220861][ T43] legousbtower 2-1:0.220: interrupt endpoints not found [ 880.267832][ T43] usb 2-1: USB disconnect, device number 70 [ 880.567096][T14212] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2049'. [ 883.928846][ T30] kauditd_printk_skb: 372 callbacks suppressed [ 883.928857][ T30] audit: type=1400 audit(1760359291.558:46268): avc: denied { create } for pid=14251 comm="syz.0.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 883.977419][ T30] audit: type=1400 audit(1760359291.587:46269): avc: denied { write } for pid=14251 comm="syz.0.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 884.047231][ T30] audit: type=1400 audit(1760359291.587:46270): avc: denied { read } for pid=14251 comm="syz.0.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 884.112523][ T30] audit: type=1400 audit(1760359291.587:46271): avc: denied { read } for pid=14251 comm="syz.0.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 884.424438][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2059'. [ 884.770922][ T30] audit: type=1400 audit(1760359291.587:46272): avc: denied { ioctl } for pid=14251 comm="syz.0.2058" path="socket:[43697]" dev="sockfs" ino=43697 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 884.861737][ T30] audit: type=1400 audit(1760359291.587:46273): avc: denied { read } for pid=14248 comm="syz.2.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 885.123720][ T30] audit: type=1400 audit(1760359291.587:46274): avc: denied { create } for pid=14251 comm="syz.0.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 885.187765][ T30] audit: type=1400 audit(1760359291.587:46275): avc: denied { create } for pid=14251 comm="syz.0.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 885.254592][ T30] audit: type=1400 audit(1760359291.596:46276): avc: denied { ioctl } for pid=14251 comm="syz.0.2058" path="socket:[43699]" dev="sockfs" ino=43699 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 885.288252][T14263] audit: audit_backlog=65 > audit_backlog_limit=64 [ 885.818628][T13155] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 886.087427][T13155] usb 2-1: config 0 has an invalid interface number: 220 but max is 0 [ 886.101147][T13155] usb 2-1: config 0 has no interface number 0 [ 886.132888][T13155] usb 2-1: config 0 interface 220 has no altsetting 0 [ 886.236306][T13155] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=26.e9 [ 886.245372][T13155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.314915][T13155] usb 2-1: Product: syz [ 886.319114][T13155] usb 2-1: Manufacturer: syz [ 886.342677][T13155] usb 2-1: SerialNumber: syz [ 886.364724][T13155] usb 2-1: config 0 descriptor?? [ 886.684516][T10019] Bluetooth: hci0: connection err: -111 [ 886.695079][T14263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.726098][T14263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.877682][T13155] legousbtower 2-1:0.220: interrupt endpoints not found [ 887.017546][T13155] usb 2-1: USB disconnect, device number 71 [ 887.752656][T14293] efs: cannot read volume header [ 887.845624][T14298] 9pnet_fd: Insufficient options for proto=fd [ 888.033874][T14303] FAULT_INJECTION: forcing a failure. [ 888.033874][T14303] name failslab, interval 1, probability 0, space 0, times 0 [ 888.164321][T14303] CPU: 1 UID: 0 PID: 14303 Comm: syz.0.2074 Not tainted syzkaller #0 PREEMPT(full) [ 888.164344][T14303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 888.164355][T14303] Call Trace: [ 888.164361][T14303] [ 888.164368][T14303] dump_stack_lvl+0x16c/0x1f0 [ 888.164395][T14303] should_fail_ex+0x512/0x640 [ 888.164415][T14303] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 888.164443][T14303] should_failslab+0xc2/0x120 [ 888.164469][T14303] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 888.164492][T14303] ? kasan_save_stack+0x42/0x60 [ 888.164514][T14303] ? v9fs_session_init+0xb3/0x1a80 [ 888.164539][T14303] ? kasan_save_track+0x14/0x30 [ 888.164566][T14303] ? kstrdup+0x53/0x100 [ 888.164586][T14303] kstrdup+0x53/0x100 [ 888.164608][T14303] v9fs_session_init+0xb3/0x1a80 [ 888.164646][T14303] ? __pfx_v9fs_session_init+0x10/0x10 [ 888.164690][T14303] v9fs_mount+0xc5/0xa90 [ 888.164708][T14303] ? __pfx_v9fs_mount+0x10/0x10 [ 888.164728][T14303] ? cap_capable+0xb3/0x250 [ 888.164750][T14303] ? __pfx_v9fs_mount+0x10/0x10 [ 888.164767][T14303] legacy_get_tree+0x10c/0x220 [ 888.164795][T14303] vfs_get_tree+0x8e/0x340 [ 888.164814][T14303] path_mount+0x7b9/0x23a0 [ 888.164844][T14303] ? __pfx_path_mount+0x10/0x10 [ 888.164870][T14303] ? kmem_cache_free+0x2d4/0x6c0 [ 888.164889][T14303] ? putname+0x154/0x1a0 [ 888.164918][T14303] ? putname+0x154/0x1a0 [ 888.164941][T14303] ? putname+0x154/0x1a0 [ 888.164969][T14303] ? __x64_sys_mount+0x293/0x310 [ 888.164993][T14303] __x64_sys_mount+0x293/0x310 [ 888.165019][T14303] ? __pfx___x64_sys_mount+0x10/0x10 [ 888.165053][T14303] do_syscall_64+0xcd/0xfa0 [ 888.165076][T14303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.165094][T14303] RIP: 0033:0x7f12a298eec9 [ 888.165108][T14303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.165125][T14303] RSP: 002b:00007f12a3910038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 888.165142][T14303] RAX: ffffffffffffffda RBX: 00007f12a2be5fa0 RCX: 00007f12a298eec9 [ 888.165154][T14303] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 888.165164][T14303] RBP: 00007f12a3910090 R08: 0000200000000500 R09: 0000000000000000 [ 888.165175][T14303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 888.165186][T14303] R13: 00007f12a2be6038 R14: 00007f12a2be5fa0 R15: 00007ffd713f03f8 [ 888.165212][T14303] [ 888.286546][T14307] netlink: 'syz.1.2075': attribute type 7 has an invalid length. [ 888.301366][ T6686] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.301528][ T6686] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.301571][ T6686] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.301600][ T6686] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 888.302823][T14307] netlink: 'syz.1.2075': attribute type 7 has an invalid length. [ 888.391379][T14311] FAULT_INJECTION: forcing a failure. [ 888.391379][T14311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.391422][T14311] CPU: 0 UID: 0 PID: 14311 Comm: syz.5.2076 Not tainted syzkaller #0 PREEMPT(full) [ 888.391442][T14311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 888.391452][T14311] Call Trace: [ 888.391458][T14311] [ 888.391465][T14311] dump_stack_lvl+0x16c/0x1f0 [ 888.391492][T14311] should_fail_ex+0x512/0x640 [ 888.391509][T14311] _copy_to_user+0x32/0xd0 [ 888.391524][T14311] rng_dev_read+0x1ea/0x810 [ 888.391536][T14311] ? __pfx_virtio_read+0x10/0x10 [ 888.391547][T14311] ? __pfx_rng_dev_read+0x10/0x10 [ 888.391557][T14311] ? __import_iovec+0x1dd/0x650 [ 888.391573][T14311] ? bpf_lsm_file_permission+0x9/0x10 [ 888.391587][T14311] ? security_file_permission+0x71/0x210 [ 888.391604][T14311] ? rw_verify_area+0xcf/0x6c0 [ 888.391617][T14311] ? __pfx_rng_dev_read+0x10/0x10 [ 888.391626][T14311] vfs_readv+0x5c1/0x8b0 [ 888.391642][T14311] ? __pfx_vfs_readv+0x10/0x10 [ 888.391655][T14311] ? find_held_lock+0x2b/0x80 [ 888.391674][T14311] ? __fget_files+0x20e/0x3c0 [ 888.391693][T14311] ? do_preadv+0x1a6/0x270 [ 888.391704][T14311] do_preadv+0x1a6/0x270 [ 888.391717][T14311] ? __pfx_do_preadv+0x10/0x10 [ 888.391733][T14311] do_syscall_64+0xcd/0xfa0 [ 888.391747][T14311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.391759][T14311] RIP: 0033:0x7f99b118eec9 [ 888.391769][T14311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 888.391779][T14311] RSP: 002b:00007f99af3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 888.391790][T14311] RAX: ffffffffffffffda RBX: 00007f99b13e6090 RCX: 00007f99b118eec9 [ 888.391797][T14311] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000007 [ 888.391803][T14311] RBP: 00007f99af3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 888.391810][T14311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 888.391816][T14311] R13: 00007f99b13e6128 R14: 00007f99b13e6090 R15: 00007ffd3fb5e4d8 [ 888.391830][T14311] [ 889.220194][ T31] INFO: task syz.3.1626:12484 blocked for more than 143 seconds. [ 889.220212][ T31] Not tainted syzkaller #0 [ 889.220219][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 889.220224][ T31] task:syz.3.1626 state:D stack:24856 pid:12484 tgid:12476 ppid:5819 task_flags:0x400140 flags:0x00080002 [ 889.220256][ T31] Call Trace: [ 889.220260][ T31] [ 889.220268][ T31] __schedule+0x1190/0x5de0 [ 889.220293][ T31] ? __pfx___schedule+0x10/0x10 [ 889.220309][ T31] ? find_held_lock+0x2b/0x80 [ 889.220321][ T31] ? schedule+0x2d7/0x3a0 [ 889.220335][ T31] schedule+0xe7/0x3a0 [ 889.220347][ T31] schedule_timeout+0x257/0x290 [ 889.220365][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 889.220388][ T31] ? mark_held_locks+0x49/0x80 [ 889.220402][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 889.220416][ T31] __wait_for_common+0x2fc/0x4e0 [ 889.220429][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 889.220449][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 889.220471][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 889.220489][ T31] disable_device+0x16f/0x280 [ 889.220503][ T31] ? __pfx_disable_device+0x10/0x10 [ 889.220520][ T31] __ib_unregister_device+0x2b4/0x480 [ 889.220533][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 889.220551][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 889.220566][ T31] nldev_dellink+0x21f/0x320 [ 889.220577][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 889.220625][ T31] ? cap_capable+0xb3/0x250 [ 889.220640][ T31] ? bpf_lsm_capable+0x9/0x10 [ 889.220657][ T31] ? security_capable+0x7e/0x260 [ 889.220671][ T31] ? ns_capable+0xd7/0x110 [ 889.220687][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 889.220699][ T31] rdma_nl_rcv_msg+0x38a/0x6e0 [ 889.220719][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 889.220736][ T31] ? rcu_is_watching+0x12/0xc0 [ 889.220747][ T31] ? trace_sched_exit_tp+0xd1/0x120 [ 889.220766][ T31] ? __lock_acquire+0x622/0x1c90 [ 889.220783][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 889.220804][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 889.220829][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 889.220847][ T31] netlink_unicast+0x5aa/0x870 [ 889.220864][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 889.220880][ T31] ? security_netlink_send+0x2b/0x210 [ 889.220893][ T31] ? __sanitizer_cov_trace_pc+0x56/0x70 [ 889.220914][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 889.220932][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 889.220952][ T31] ____sys_sendmsg+0xa98/0xc70 [ 889.220970][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 889.220983][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 889.221003][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 889.221022][ T31] ___sys_sendmsg+0x134/0x1d0 [ 889.221035][ T31] ? futex_private_hash_put+0x176/0x300 [ 889.221049][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 889.221062][ T31] ? __lock_acquire+0x622/0x1c90 [ 889.221093][ T31] __sys_sendmsg+0x16d/0x220 [ 889.221106][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 889.221120][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 889.221143][ T31] do_syscall_64+0xcd/0xfa0 [ 889.221158][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.221171][ T31] RIP: 0033:0x7f44d578eec9 [ 889.221180][ T31] RSP: 002b:00007f44d6635038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 889.221192][ T31] RAX: ffffffffffffffda RBX: 00007f44d59e6180 RCX: 00007f44d578eec9 [ 889.221200][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000c [ 889.221207][ T31] RBP: 00007f44d5811f91 R08: 0000000000000000 R09: 0000000000000000 [ 889.221214][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.221221][ T31] R13: 00007f44d59e6218 R14: 00007f44d59e6180 R15: 00007ffe28c07478 [ 889.221237][ T31] [ 889.221250][ T31] [ 889.221250][ T31] Showing all locks held in the system: [ 889.221256][ T31] 1 lock held by khungtaskd/31: [ 889.221263][ T31] #0: ffffffff8e3c4460 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 889.221312][ T31] 2 locks held by getty/5567: [ 889.221319][ T31] #0: ffff888035e090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 889.221350][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 889.221382][ T31] 4 locks held by kworker/u8:8/6072: [ 889.221388][ T31] #0: ffff88801bad4948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 889.221421][ T31] #1: ffffc9000496fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 889.221452][ T31] #2: ffffffff900e4f70 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 889.221486][ T31] #3: ffff88802b8a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 889.221517][ T31] 6 locks held by kworker/0:2/11032: [ 889.221524][ T31] #0: ffff888144292948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 889.221555][ T31] #1: ffffc90003807d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 889.221587][ T31] #2: ffff888029d80198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 889.221617][ T31] #3: ffff888029d83518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 889.221646][ T31] #4: ffff888029999f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 889.221675][ T31] #5: ffffffff8f6c4c70 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1cb0 [ 889.221704][ T31] 2 locks held by syz.3.1626/12484: [ 889.221710][ T31] #0: ffffffff9ae945b8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 889.221743][ T31] #1: ffff88802b8a0700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 889.221773][ T31] 3 locks held by syz.0.2074/14301: [ 889.221780][ T31] 1 lock held by syz.1.2078/14317: [ 889.221786][ T31] [ 889.221790][ T31] ============================================= [ 889.221790][ T31] [ 889.221794][ T31] NMI backtrace for cpu 1 [ 889.221801][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 889.221813][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 889.221819][ T31] Call Trace: [ 889.221823][ T31] [ 889.221827][ T31] dump_stack_lvl+0x116/0x1f0 [ 889.221840][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 889.221857][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 889.221871][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 889.221888][ T31] watchdog+0xf3f/0x1170 [ 889.221900][ T31] ? rcu_is_watching+0x12/0xc0 [ 889.221911][ T31] ? __pfx_watchdog+0x10/0x10 [ 889.221919][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 889.221933][ T31] ? __kthread_parkme+0x19e/0x250 [ 889.221945][ T31] ? __pfx_watchdog+0x10/0x10 [ 889.221955][ T31] kthread+0x3c5/0x780 [ 889.221969][ T31] ? __pfx_kthread+0x10/0x10 [ 889.221984][ T31] ? rcu_is_watching+0x12/0xc0 [ 889.221993][ T31] ? __pfx_kthread+0x10/0x10 [ 889.222008][ T31] ret_from_fork+0x675/0x7d0 [ 889.222021][ T31] ? __pfx_kthread+0x10/0x10 [ 889.222035][ T31] ret_from_fork_asm+0x1a/0x30 [ 889.222053][ T31] [ 889.222057][ T31] Sending NMI from CPU 1 to CPUs 0: [ 889.222083][ C0] NMI backtrace for cpu 0 [ 889.222093][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 889.222108][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 889.222116][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 889.222132][ C0] Code: f7 74 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 05 24 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 889.222146][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 889.222157][ C0] RAX: 000000000223e72f RBX: 0000000000000000 RCX: ffffffff8b6622a9 [ 889.222166][ C0] RDX: 0000000000000000 RSI: ffffffff8db032d9 RDI: ffffffff8bf1e2c0 [ 889.222176][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 889.222184][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 889.222193][ C0] R13: ffffffff8e097a00 R14: ffffffff90832dd0 R15: 0000000000000000 [ 889.222201][ C0] FS: 0000000000000000(0000) GS:ffff8881249d9000(0000) knlGS:0000000000000000 [ 889.222222][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 889.222232][ C0] CR2: 000000110c352af5 CR3: 000000007a047000 CR4: 00000000003526f0 [ 889.222241][ C0] Call Trace: [ 889.222246][ C0] [ 889.222250][ C0] default_idle+0x13/0x20 [ 889.222267][ C0] default_idle_call+0x6c/0xb0 [ 889.222284][ C0] do_idle+0x38d/0x500 [ 889.222297][ C0] ? __pfx_do_idle+0x10/0x10 [ 889.222310][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 889.222330][ C0] cpu_startup_entry+0x4f/0x60 [ 889.222342][ C0] rest_init+0x16b/0x2b0 [ 889.222360][ C0] ? acpi_subsystem_init+0x133/0x180 [ 889.222374][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 889.222391][ C0] start_kernel+0x3f6/0x4e0 [ 889.222406][ C0] x86_64_start_reservations+0x18/0x30 [ 889.222421][ C0] x86_64_start_kernel+0x130/0x190 [ 889.222437][ C0] common_startup_64+0x13e/0x148 [ 889.222461][ C0] [ 889.223074][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 889.223082][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 889.223095][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 889.223101][ T31] Call Trace: [ 889.223105][ T31] [ 889.223110][ T31] dump_stack_lvl+0x3d/0x1f0 [ 889.223123][ T31] vpanic+0x640/0x6f0 [ 889.223137][ T31] panic+0xca/0xd0 [ 889.223149][ T31] ? __pfx_panic+0x10/0x10 [ 889.223161][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 889.223177][ T31] ? irq_work_queue+0xce/0x100 [ 889.223188][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 889.223200][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 889.223218][ T31] ? watchdog+0xe48/0x1170 [ 889.223229][ T31] ? watchdog+0xe3b/0x1170 [ 889.223239][ T31] watchdog+0xe59/0x1170 [ 889.223251][ T31] ? rcu_is_watching+0x12/0xc0 [ 889.223261][ T31] ? __pfx_watchdog+0x10/0x10 [ 889.223270][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 889.223284][ T31] ? __kthread_parkme+0x19e/0x250 [ 889.223296][ T31] ? __pfx_watchdog+0x10/0x10 [ 889.223306][ T31] kthread+0x3c5/0x780 [ 889.223321][ T31] ? __pfx_kthread+0x10/0x10 [ 889.223336][ T31] ? rcu_is_watching+0x12/0xc0 [ 889.223346][ T31] ? __pfx_kthread+0x10/0x10 [ 889.223361][ T31] ret_from_fork+0x675/0x7d0 [ 889.223374][ T31] ? __pfx_kthread+0x10/0x10 [ 889.223388][ T31] ret_from_fork_asm+0x1a/0x30 [ 889.223406][ T31] [ 889.223608][ T31] Kernel Offset: disabled