last executing test programs: 21m33.156379317s ago: executing program 1 (id=37): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x6024}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x2010, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs_dir\x00', 0xbf) mount(0x0, &(0x7f0000000100)='./tracefs_dir\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000440)={'pcl711\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x8, 0x4ce, 0x569, 0xfc, 0xed, 0x6, 0x5, 0x4, 0x0, 0x36, 0x4000b, 0x1002, 0x20002f, 0xaf, 0x0, 0xd98e, 0x1, 0x4]}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x20c000) r7 = fsopen(&(0x7f0000000580)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000001600)='source', &(0x7f0000001640)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) readv(r7, &(0x7f0000001680)=[{&(0x7f00000016c0)=""/232, 0xe8}], 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000017c0)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f0000001900)='/\x00\x01\x00H\x98', 0x0) 21m29.674943496s ago: executing program 1 (id=49): fchmod(0xffffffffffffffff, 0x183) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fadvise64(r0, 0x101, 0x3, 0x3) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) splice(r0, &(0x7f00000000c0)=0x3, r0, &(0x7f0000000100)=0x80000001, 0x7, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_REUSE_PORT(r2, 0x84, 0x24, &(0x7f0000000140)=0x5, 0x4) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r0, 0xc0106440, &(0x7f00000001c0)={0x2, 0x3, &(0x7f0000000180)}) ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000000200)) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000240)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}], 0x70}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_clone(0x101000, &(0x7f00000005c0)="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", 0x1000, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)="c296f039191a98506ec9b8f00c21b9b4ef9e69e6a7d10a7a1c9fc64ef7dc986c2010657df80ea3e366f45e174b7307429344e7269037c1835985720654f6e74e015192a1808a85d8d713cf8af970b7bb5b7da900444bf27d27828c0bbe731131a64ec6baaf8132fd8f1d722f0e7483e5e90645c7b78acf4b3744188fd94d2292d55ac5f32d9b3966b2e3f110382d81609665ede9380e57d3ba108ca51c41d89b393bcaae1f062e31f76ea6dc") r5 = gettid() r6 = syz_clone(0x500, &(0x7f0000001700)="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", 0x1000, &(0x7f0000002700), &(0x7f0000002740), &(0x7f0000002780)="ca0016f2794fd95692de5ce5008b14d96994fbfe98e7a323f6db33480c23feca6fcfa4c6d166e0ccdadd57ba89172e290eef1da611f18ea8d002b3f9ec971198032b8a6deffeaf216a06e3c8ad98305f019fe2f4658547e79469ba96eeb8444fe9136d468b29ab22860e8ffd773055e669e1b2643528b58e59d1855bdb518da3c3cf034f2082c3a5a4777801a4c27190bb70d7a7f83b630bd003c2423d320eefc36b17d1f40a83c3df15dacce9cc45c5df4e7ab25f6e") r7 = fcntl$getown(r2, 0x9) r8 = gettid() r9 = syz_clone3(&(0x7f0000002880)={0x20000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0, {0x21}, &(0x7f00000003c0)=""/244, 0xf4, &(0x7f00000004c0)=""/252, &(0x7f0000002840)=[r4, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, r8], 0x8, {r0}}, 0x58) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002900), 0x180, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r11, 0x3b66, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002940)='./file0\x00', 0x220) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000039c0)={0x1, 0x6, 0x1000, 0x3f, &(0x7f0000002980)="2c8fdca62c7a359a146db5fe6cca7c02a6a9dfb5348934b27a95e349ff0abc5a3e7c29cf9d9cea111fc374a21e74b1a76387f0a6f8fe96c643956995624f6f", 0x1000, 0x0, &(0x7f00000029c0)="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"}) tkill(r9, 0x17) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000003a80)={{0xa, 0x6, 0x80000000, 0x2, '\x00', 0x6}, 0x4, 0x3, 0x9, r10, 0x4, 0x88b7, 'syz0\x00', &(0x7f0000003a40)=['/dev/iommu\x00', '/\xf6\x00', '!\x00', '.]\x03)\x00'], 0x15}) r12 = syz_open_dev$loop(&(0x7f0000003bc0), 0x100000000, 0x210801) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r12, 0x4c06, r13) r14 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000003c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r14, 0x82, 0x1398, &(0x7f0000003cc0)={[{0x6b, 0x4e00, "bcef79dceaefd9e1e6e3c7ea5ef2f54b4d0b1e668745c975d789dd457c18613fa1d708328d3acbe0c626867e642349d17fe368b8b6482ef68a3e7f875f11c2f6fd02750d110a6c88d2d52ddbfedec2bc60cf4f11792ba25fc29d2a539dcb61af7869f544753e6b2de5eb00"}, {0x3e, 0x4e00, "16e4b31acc0d61e5d70c2a1c7a756dd32d617e15b5cfdc70155160341c908e09700d3fc4643c397bbec32c348e46c70c8adf1a70625891ce1bf5afabc9c1"}, {0xdc, 0x4e00, "732e72c0390ad28a52c03e621a46fbaa7b50afb471b43fc6d3b126b58e301e503aae5d73406ee17b50896a68a36e7072318c34ee1afbf26c68716bb037a441d782b39d3f3e13f38b3f2d2c3687551c7345b28ecc37d295b487658892fdbd9a6a54fbbe48bd047e8a2969c0a217001f170cc95696c8d78d2a10c782776f7d4628abfed59f56b5f774e90ac4d759c62ce249ff9d65328eb5292ccbe41b36cb4c781cd4bf85e8f3dee19325b76d9313f6824fee0ebd5d9f42850ab63ffe20eccc8342f69f2ae95f495435c4eff34c297c566fde6c51274a88779f5e542a"}, {0xdd, 0x4e00, "5fdb015d48e8b7331b5e85b0af5a2027979a23ec5d712a62b308bb9fb54095b619f61217e7dbdd7f0bb30c37f7c15ce706adeb130b76f3feabf05d8a4cd3e52f730a4da4812d4a3e74d77420968c294fd81c9d4640b374cac9f507010a61331c767c4393c4059eff82e4ce8e74395a3ab942943d4fcbc866dad7c200097f83514c54b708ddd68692008e717690bb4409b445ffa8fe7b5e995c406113ab1a414123a893016c20d7249f9881991002bf19b06507a91cbc3722143abd0b1037fac56eb28ee9a7a8c14660051c54192ed3b436627d8791aefec5ddcebb750b"}, {0x35, 0x4e00, "7d71e8789b3b19dbc427884f7f8ec8dc6668e5e4819877331bec831f158b1579cb8da0a0405d50badf01d1a596e993aa2e3c719df7"}, {0x1000, 0x4e00, "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"}, {0xdc, 0x4e00, "89bf7bd4b76e9621d599ba3b5ec5549dc1840fd315e49f08cefdcbc36d9e76e55534ffa73027cc7cd9628a46a63cb9b3e8288a88e2ea5e5af4d994fec1eb5ecfc016937278bb56d14465945068978341293b004a6f14ed09592c773aea598e35d37b44ec42ac5a1ca4cb149f0a766212e9d0aba18dec6e990e08418e8a0ef15bf0f8affcbc300895d8ef07d9f717ae57fb793f4963acd7952dd8ed3fbb60af527752a7743e67a999d8f1cb1926ac10a812e73b5063197b5c5bfe0764f18d7cd20a24702afcbc5bc4cfdffdb66b7097074eb46fd7fa1957ea56b4fea4"}]}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000005080)={r1, 0x3b, "f78988f45318a765006acd734aeff0cbe22d84fd4140549a15a5869bb9be1ea03c1ec723e3bc8ed20de6aae8aa59d65868ac9014f771c2b2a5af3d"}, &(0x7f0000005100)=0x43) write$selinux_validatetrans(r0, &(0x7f0000005140)={'system_u:object_r:tpm_device_t:s0', 0x20, 'system_u:object_r:ld_so_t:s0', 0x20, 0xb, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x6b) 21m26.153847825s ago: executing program 1 (id=57): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x0, 0x2563718f, {0xffffffffffffffff}, {0xee01}, 0x3, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000380)) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000400)={0x1, 0xa, 0x2}, 0x8, 0x2, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x14) syz_open_dev$vim2m(&(0x7f0000000440), 0x3, 0x2) fsopen(&(0x7f0000000480)='romfs\x00', 0x1) 21m23.064409958s ago: executing program 1 (id=69): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4000074) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r3, &(0x7f0000002a40)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001ba40)=0x7) r4 = syz_open_dev$dri(&(0x7f0000000680), 0xe, 0x400000) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000740)={0xa6c, 0x5, {r2}, {}, 0x65b49b38, 0x7f2}) bpf$PROG_LOAD(0x5, &(0x7f000001ba80)={0x2, 0x4, &(0x7f000001bb40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2ca60}]}, &(0x7f000001bb80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x67, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "d20cb3", 0x31, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, {[@srh={0x73, 0x0, 0x4, 0x0, 0x9, 0x40, 0xa}, @routing={0xc, 0x0, 0x0, 0x5}], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x80, 0x6, 0x0, 0x3, {[@exp_smc={0xfe, 0x6}]}}, {"af89eaba98"}}}}}}}, 0x0) 21m21.630924111s ago: executing program 1 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0xc841}, 0x4010) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f00000007c0)={0x7, 0x0, [{0x7, 0xffffffff, 0x1, 0xffffff89, 0x6, 0x6, 0x2}, {0xa, 0x4, 0x6, 0x8000, 0x27, 0x7, 0x9}, {0x80000019, 0x5, 0x1, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x80000019, 0xe63, 0x0, 0x7, 0xdf3, 0x6, 0x80008001}, {0x2, 0x2bb, 0x1, 0xd, 0x3, 0x7, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0xa, 0x8, 0x3, 0xfffffff7, 0xfffffff9, 0x100, 0x6}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21m17.564956364s ago: executing program 1 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffb1, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x8, 0x3, 0x18, 0x6, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x20005}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40048e4}, 0x44890) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000ac0), 0x56) sendmsg$kcm(r5, &(0x7f0000000b00)={&(0x7f0000000b40)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 21m1.854475588s ago: executing program 32 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xffb1, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x8, 0x3, 0x18, 0x6, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x20005}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40048e4}, 0x44890) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000ac0), 0x56) sendmsg$kcm(r5, &(0x7f0000000b00)={&(0x7f0000000b40)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 10m2.459487839s ago: executing program 5 (id=1515): mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000500), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x8001, 0xd) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600060009000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4) sendmmsg(r6, &(0x7f00000006c0), 0x40000000000009f, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000700)={0x0, 0x0, 0xf}) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000740)={&(0x7f0000000780)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000800)=[{&(0x7f0000000840)="ee", 0xfffffdef}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xfffe) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x240000, 0x7, {{0x1f, 0x4, 0x2, 0x20, 0x7c, 0x68, 0x0, 0x5, 0x2b, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x7, 0x3f, [@multicast1]}, @lsrr={0x83, 0x7, 0x89, [@rand_addr=0x64010102]}, @cipso={0x86, 0x13, 0x1, [{0x5, 0xd, "baf566d3207cda8962a55c"}]}, @rr={0x7, 0xf, 0xe3, [@multicast2, @loopback, @remote]}, @generic={0x89, 0x4, "51a1"}, @generic={0x82, 0x3, '|'}, @timestamp={0x44, 0x1c, 0x3b, 0x0, 0x9, [0x1ff, 0x81, 0x6, 0x4, 0x9, 0xcf2]}, @timestamp_addr={0x44, 0x14, 0xd0, 0x1, 0x3, [{@loopback, 0xd4}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x9}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB, @ANYBLOB="58aebfaac7bced05ef170c733b52eeff34304570011ed782"], 0x50) mount(0x0, &(0x7f0000000a80)='./proc\x00', &(0x7f0000000ac0)='proc\x00', 0x4000, 0x0) 10m0.620783784s ago: executing program 5 (id=1517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x10040) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close_range(r5, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000480)={0x180801400, &(0x7f0000000500)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) pidfd_send_signal(r6, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r6, 0x0, 0x40000004, 0x0) ppoll(&(0x7f0000000540)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffb0900030073797a3236ad00000900010073797a300000000008000a400000000420000000080a01080000040000000000010000000900010073797a30"], 0x9c}, 0x1, 0x0, 0x0, 0x4000884}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) write$FUSE_INTERRUPT(r7, &(0x7f00000087c0)={0x10, 0xfffffffffffffffe}, 0x66) 9m57.095143127s ago: executing program 5 (id=1525): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x5, 0xa, 0x4}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000dc0)={0xa, @win={{0x6, 0x7fff, 0x7, 0x9}, 0x3, 0x4, 0x0, 0xd43, 0x0, 0x86}}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x6, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x10000) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x844) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r7 = fsopen(&(0x7f0000000600)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x82) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000640)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000680)={@host}) socket$tipc(0x1e, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x401, 0x80, 0x2, 0x3, 0x1, 0x20000002, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x7, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x400007, 0x4000200, 0x3e, 0x1c0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x5, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3f], [0x10000004, 0x9, 0x82000133, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0xe, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000007, 0x5, 0xfdfffffe, 0x1, 0x8d2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x8000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x101, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x0, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x3, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f0000000b40)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000b80)={0x4, &(0x7f0000000bc0)=[{0x31, '\x00', @buffer={"8348883a39c09225399678207147af12dc401acf382c14448a2006902c480f4e", 0x20}, 0x7}, {0x24, '\x00', @st={0x4, [{0x3}, {0x0, @svalue=0x54}, {0x1, @svalue=0x7f}, {0x1, @uvalue=0x5}]}, 0x6}, {0x12, '\x00', @buffer={"ae2ea93f39e9d72df9e1079b5b913355f933502c0a9975e73566b90754fc08ec", 0x20}, 0x6}, {0x1e, '\x00', @data=0x400, 0x8}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="200000002f00090027bd7000fbdbdf25040000000c0017004000000000000000b005715ac98c8792ca16d671632a7af4bbbd14695a5dd53473ef4d6ecf22ce579c9dc31da40dc4898151c8d2bb338fdb4aae261d83a48666c60f0f9cb2403b168e07024e3e1dc94548fc3ff0d6e9507a01713cce0f31681eca64834ead35db9663e38034b4ce33883ac03852f59eeb811f89f1d7a0cf1bc202adb4ca008380"], 0x20}, 0x1, 0x0, 0x0, 0x42914}, 0x4c000) syz_usb_control_io(r2, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m51.630656663s ago: executing program 5 (id=1539): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000000500)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000019500), 0x84042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='res', 0x3) 9m49.408060094s ago: executing program 5 (id=1541): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x6) (rerun: 32) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) (async, rerun: 32) r2 = getpgrp(0x0) (rerun: 32) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r3 = getpid() (rerun: 64) sched_setscheduler(r3, 0x2, &(0x7f00000001c0)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async) r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000000c40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000019c40)='./file1\x00', 0x1c0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000019c80)='./file0\x00', 0x20a000, 0x85) landlock_restrict_self(0xffffffffffffffff, 0x0) (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000019cc0)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000019d00)='./file0\x00', 0x2) (rerun: 32) mkdir(0x0, 0x1ff) (async) sched_setaffinity(r4, 0x27, &(0x7f0000019d40)=0x80000000000003) symlinkat(&(0x7f00000000c0)='./proc/net/afs/rootcell/file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file1\x00') (async) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000019d80)={0x2, {0x2, 0x3bf, 0x804, 0x14a, 0x100}}) (async) write(r0, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) (async, rerun: 64) r7 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 64) bind$rxrpc(r7, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) 9m46.357170144s ago: executing program 5 (id=1548): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x2, 0x1, "5cdea2fbe5649d0005d2e5dd6b5f9293dad8bd"}) sendmsg$tipc(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000001580), 0x0, 0x8010}, 0x40010) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f00000001c0)=0x1, 0x4) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x123) ioctl(r2, 0x40480923, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000420)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl(r2, 0x932, 0x0) 9m30.96226893s ago: executing program 33 (id=1548): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x2, 0x1, "5cdea2fbe5649d0005d2e5dd6b5f9293dad8bd"}) sendmsg$tipc(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000001580), 0x0, 0x8010}, 0x40010) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f00000001c0)=0x1, 0x4) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x123) ioctl(r2, 0x40480923, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000420)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl(r2, 0x932, 0x0) 6m12.539948207s ago: executing program 6 (id=1933): msgget$private(0x0, 0x230) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 6m8.812454154s ago: executing program 6 (id=1938): pipe(&(0x7f00000002c0)) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x541481, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x2adc0, 0x1c1, 0x6}, 0x18) (async) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) syz_emit_ethernet(0xca, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000bc0000000000019078ac1e0001ac1414bb050090780000000048000000006800000011000064010100ac1414aa830300000dee0dd9de36ed4bcc5b4e23440c00037f00002f00000000890f0000000000ffff05d59f342b39a1a00001ac1e00010000000000000000000000000000000000000000ffffffff000000007f000001000000000000000000000000e000000200000000ffffffff0000000000000000000000004414000000000200"/202], 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000003280)=@IORING_OP_EPOLL_WAIT={0x3b, 0x32, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x40002013}, {0x2}, {0x4}, {0x80000000}], 0x4}) (async) write$binfmt_register(r2, &(0x7f0000000580)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbfi\xd9\r\x8d\x9f\xbe\x0ei\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x50, 0x46]}, 0x35) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='mountinfo\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0x0, 0xffff}, {0xfff2, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x8, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0x1}, {0x4, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) io_uring_enter(r1, 0x26ce, 0x7e8f, 0x21, &(0x7f00000000c0)={[0x400]}, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, r10, {0xc, 0x1}, {0x0, 0x9}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xfffffffffffffe5f}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) syz_open_procfs(0x0, &(0x7f0000000a40)='fd/3\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) 6m6.941598398s ago: executing program 6 (id=1943): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1163, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x8, 0x1}}]}}]}}]}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x26, 0x301, 0x670bd28, 0x25dfdbfc, {0x15}, [@typed={0x11, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd295c87"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) socket$inet6(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) close(0xffffffffffffffff) 6m2.424516563s ago: executing program 6 (id=1950): r0 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r0, 0x80088a02, &(0x7f0000000000)) r1 = socket$kcm(0x23, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f00000005c0)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f00000195c0), 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000004c0)=r2, 0x4) 6m0.821358297s ago: executing program 6 (id=1953): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="aee09823e5ae4e8dd1b11aac000edc52", 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/usb/devices/usb1/product\x00', 0x100, 0x0) read(r3, &(0x7f0000000500)=""/128, 0x80) copy_file_range(r2, &(0x7f00000001c0)=0x162, r0, 0x0, 0x8000000000000003, 0x0) sendfile(r2, r1, 0x0, 0x3a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x104}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f00000064c0)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)="889dd60e5127722444fac53511ba936a963fd5b7ac951be79c7fa5c7017970e32d92aa27b8a315621c", 0x29}, {&(0x7f0000000640)="ae0e3362ffcc733b2c35e3275359ce128be03397ee36ffeba7f6bf67a39a647280ddde34b73dacd10614afbc3532123b3e42103fe6a02d9991aa4df931f07c65814fbe95444f9d074be39cc70391e272f7229dd0ff9e20ddf2a404c08489a7814acc28652ffbdff31ba311", 0x6b}], 0x2, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}], 0x60, 0x4044}}, {{&(0x7f0000000b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000f80)="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", 0x107}, {&(0x7f0000000c80)="b26e141b455722b7e4619b8e8b34460890e340a5cce9d41aad73e3d904eb9267f33e8515c7a33adee0490350a977a8bc28df00be601da988e2a002ed08dfb7ea2ca886dea438e7e3e34e6bddb80800f8bf9938920dd1b0b1ad208c4c6067928ebac11689bc39d5800659aa68d9c8aeb15398952942e9698694620d9960adebffe93d5e2dd53994343507e7d0058b6718ebd1a73c075cc228eae52fc38aff4f7a5110b7ce2727c6d476a7c840468403cfdd122fa12381cf3de0eca38ce5a950cd327376579adf9e78ec8f4fa099980b02a1314a8500c685555ff0f9495fbdb5c709cb896f2af06653f9a88ed3", 0xec}, {&(0x7f0000000d80)="9783ff566b0bbf95d10d1da57a9d1b688d2f4df62960ea707b316d2fec5d52e7c71e0da9eb3b8f6d6535de0060a2200d627aaa167552dde875f0d934c442c55302903c07cda5c5e1174e2821e0a4c95d10d46d563c2d2c264fc6a03909702eaf0893a85686e24459260d31f6529722d9845a8b3434db95cce76e58d8d49cdd49bafd3d6e45b93e88d80b11636aa200dc8b2b710185f288279bf71ce5bc2f3541548d2564ae48add8ce768fc05fc8ca775736f8e6b3339e", 0xb7}, {&(0x7f0000000e40)="4eb7b0f530258425919dafe359688e58b9820d1102dc228d36bc69e4f3ea927e472f158abf7afc06b20448848c00d87ec198783ee2de536bca53e9c2b156503e183902b9846d5beacf1afcbac83d0209277f65f4247c171ce385bd0958ceaba64f9cdf041b2c9ed1bbadcd5a5f958d74de1f2a5ec53bb6e9a89dc11b8b14988da7dcf61430f3b64148d12f88d47b102e3b84d09acf92d4abf31714bd7ec2f97e9b0dc87bc6a7477b35fb69adeeb01a2cdbcbd807ed1b6277a7c49cde05fb3d87a9bf8286dd2b69679b31001dafb0795a5132dcc02e443cf9825236e9f41d68210f620de1", 0xe4}], 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c0000000000000001000000020000007137043ce740d4d82c34ceb37121342e4ec276385a9bb4ed128c03d0d07b37220b34253038d1", @ANYRES32=r5, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r6, @ANYRES32, @ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3], 0x130, 0x240448c4}}, {{&(0x7f00000056c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005940)=[{&(0x7f0000005740)="dd463b3a0bcbed5fb8663a66840c991fb6fb7b2857a8859ceddb12aa8eaab8f1f72a3c015e68ba51d41f4bcd16695ef41581daddbf0beea95726904329751bcb1f5c77ec13d2ded4287228429302f7709374d9cb0e82dfe941d0223a743991e6078047be325dc7d516426367a461358b98a11d9b8ca72c25047077205676b7e88a72f31000169e858fe9d6e3ebff49031248518f5df46b5ae49ee1ed89660567934a219fcbb3fb7ac502162a8ee3c537efafea4d19dcfa971aaf30035dbaf6fa8e1ddffeb83e1347892f24ecbc7a3dc59ee67b259a60551bb715828f486566e7952ca3", 0xe3}, {&(0x7f0000005840)}, {&(0x7f0000005880)="865592ced6b3e5ca1d159ebc6f83831b00ccd94702007b00fe776d85f8d564da6a87fb8c076fd963dd817cab25c88b704a44861244f401e681d794b3ec39d326748d17a4d683d02168f1ba5967b14c8bc3bf34c00e95d3a8e3b30e53da14c893c917c3990df10b8e20dd3f8bdccea9fefd7b97d9e40081233a812cf8783a31c1ee4f0b2b800802a9f7efa964f609fac71d6d244b7ef1a909d52057b794329a4c8a602b3f6a1a5194cd9113ace62692f318fe24db8291ea", 0xb7}], 0x3, &(0x7f00000059c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68, 0x4004}}, {{&(0x7f0000005a40)=@file={0x0, './cgroup.cpu/cgroup.procs\x00'}, 0x6e, &(0x7f0000005e00)=[{&(0x7f0000005ac0)="03b77d9e63d8d57e14270cd399ddb6e372002ce6f84d111e47de1a13ea848ea973062be4b3e063a53e8ac1dccd89a05a353aae0bbaa4e58abb4f051b5b9226d2f3245e6343ced558e5efe55317f751b947aada93d751bf3501b3b59631321dc6960b3dd051527a6fe28c3e238504981647d0", 0x72}, {&(0x7f0000005b40)="997bc3955c26138da0f55b9ebea8a06f5eda4400c02a63fdeae8ad3c005b8fd6d2e8f0e109b6099a2619649602537746bca6ae81d64587c0b550b39711da936fd4ca3c0c70888d898731a2c947ae5793ad56cc79d75d6c44a3e1d8cbcea4ff3691d8cad021b7f3e78ece0530c97499eac0d5dca2dfe9f804f668", 0x7a}, {&(0x7f0000005bc0)="3d538cca51ce0eb654c86bc35c781b53abd347050ed304acd155be77449874ea39543317c50f513b9b99eb3db339b393691ea052b5c36bd3a2d947aa93237d1be9dff206bb786dd254d9a066969266c45a8b4a4580b434b94c81b234762753165fe08f3b470f89a7dd355e42785abcf1a1c93d3c47c830c9d023bb7db00e709fe05e2808e6ac0a2e169e4ec46fb368db9db42a2680a1568875253868238645283668f2e85b8859319ead7b264b8b07891979f144ff866415d344c42c318cff49b7194988782d7c2d3bf3a91f149664b97a73f894e39779491a3d839c22dc021828af3e6b543358fbe7bdefeb784fe93805ac342cf81c7ec391", 0xf9}, {&(0x7f0000005cc0)="ece1a9bdc216639eaa9072f99c418ec293ebc0706959e0b58f382777531f7fd1c70640f6c1bec9be632e1aee602bd1305a7d10d01d9603d8f62f3fef905b923e88b29037df6d83f9717aac96fe513f4aeb8c62593a2e38eab09662ae428a2ea8a88760b88eb47455bdbc3a45f2b18156a77adfd1b5c2b865b95c37957b76121426ea5ae9d89a", 0x86}, {&(0x7f0000005d80)="8fa74adcbba74a2624159b83943e8cad2537cb0ae428ef1fa4ee17e757590fb13bf05ba3d0b85e3a16aaa48b7937c84041773f84b6a4cde09335e11df1cab07a003919ac0576e1f3c7983c1a086bc3f75ababb50c0f842365c6688", 0x5b}], 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000100000002000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r1, @ANYRES32, @ANYRESHEX=r7, @ANYRES32, @ANYRES32=r0, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x4000}}], 0x4, 0x8000) recvmmsg(r3, &(0x7f0000000080), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) munlock(&(0x7f0000629000/0x3000)=nil, 0x3000) socket(0x10, 0x3, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r8, 0x40045567, 0x0) 5m58.667420643s ago: executing program 6 (id=1956): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000440)={0x14, &(0x7f0000000480)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0xd6de1000) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143102) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0xd, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x2) mmap(&(0x7f000000a000)=nil, 0x1000, 0x3, 0x11, r4, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x200440c1}, 0x4008080) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 5m43.290827031s ago: executing program 34 (id=1956): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000440)={0x14, &(0x7f0000000480)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0xd6de1000) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x143102) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0xd, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x2) mmap(&(0x7f000000a000)=nil, 0x1000, 0x3, 0x11, r4, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x200440c1}, 0x4008080) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 4m31.998390723s ago: executing program 7 (id=2122): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000019c00)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000019900)={0xd, 0xc, &(0x7f00000199c0)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019a00)={0x16, 0xc, &(0x7f0000019ac0)=ANY=[], &(0x7f0000019b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019b40)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000019bc0)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r5, &(0x7f0000000900)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000072000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r7}, 0xc) 4m27.233039779s ago: executing program 7 (id=2130): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x28003, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) read$msr(r3, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) openat$panthor(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x7, 0x100}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000580)={0x28, 0x0, 0xffffffff, @local}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000600)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) 4m24.861096367s ago: executing program 7 (id=2133): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1163, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1}}, {{0x9, 0x5, 0x2, 0x3, 0x8, 0x1}}]}}]}}]}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x26, 0x301, 0x670bd28, 0x25dfdbfc, {0x15}, [@typed={0x11, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd295c87"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) socket$inet6(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r3, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) close(0xffffffffffffffff) 4m21.622211706s ago: executing program 7 (id=2139): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="000300000000000000b40000000000"], 0x10}}, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000008c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000900)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f0000019980)='./file0\x00', &(0x7f00000199c0), 0x0, &(0x7f0000019a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, 0x0) 4m20.68234851s ago: executing program 7 (id=2141): syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44e, 0x120b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c6b, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x8}}}}}]}}]}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000b40)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4m12.504968847s ago: executing program 7 (id=2155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000400000008000000fc00000200000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000100)=0x200000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x17f, 0x4, 0x11, 0x1, 0x8}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x81402, 0x0) write(r1, &(0x7f0000000500)='100000', 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3e0000000000000000000000008000000000000041d05fcdf8b8b57abbb5b05926bde16b5b4ae1bf2cf97090716489d3a208304dd36de43509424922b046daa659d2f8c1d1d5fb7986361b36f01073e5ee00933f0058c37b278da6f400ac89d687d0ca08bcc881999f88e238a977d96bdf1ed3c1275415350951f6a4afeaec6300e1d1a086bff5898a57f0eb1173e6c0a1fafd45e2fb51f2bcfeb11b44cea3d78d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES16=r2, @ANYBLOB="81e9c9c99e4f354352789cc15890ac1555d6a565a5c9b5f83f9e3d7602b76276e156"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000840)=r3, 0x4) sendmsg$inet(r5, 0x0, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x20010, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) r7 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r7, &(0x7f0000f4c000/0x2000)=nil, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(r6, 0x0, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000bc0)=0x200a7a) sched_setscheduler(r8, 0x2, &(0x7f0000000c00)=0x4) syz_open_dev$MSR(&(0x7f0000000c40), 0x0, 0x0) 3m56.427393269s ago: executing program 35 (id=2155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000400000008000000fc00000200000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000100)=0x200000000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x17f, 0x4, 0x11, 0x1, 0x8}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x81402, 0x0) write(r1, &(0x7f0000000500)='100000', 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3e0000000000000000000000008000000000000041d05fcdf8b8b57abbb5b05926bde16b5b4ae1bf2cf97090716489d3a208304dd36de43509424922b046daa659d2f8c1d1d5fb7986361b36f01073e5ee00933f0058c37b278da6f400ac89d687d0ca08bcc881999f88e238a977d96bdf1ed3c1275415350951f6a4afeaec6300e1d1a086bff5898a57f0eb1173e6c0a1fafd45e2fb51f2bcfeb11b44cea3d78d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES16=r2, @ANYBLOB="81e9c9c99e4f354352789cc15890ac1555d6a565a5c9b5f83f9e3d7602b76276e156"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000840)=r3, 0x4) sendmsg$inet(r5, 0x0, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x20010, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) r7 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r7, &(0x7f0000f4c000/0x2000)=nil, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(r6, 0x0, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000780)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000bc0)=0x200a7a) sched_setscheduler(r8, 0x2, &(0x7f0000000c00)=0x4) syz_open_dev$MSR(&(0x7f0000000c40), 0x0, 0x0) 39.454963147s ago: executing program 0 (id=2597): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000480), 0x651, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000ac0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000b00)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000280)={0x0, 0xfffffffe, 0x60, 0x4, 0x1f0}, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x200, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x27f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x2000, 0x1, 0x8c}}], 0x1, 0x0, 0x0) 33.808885478s ago: executing program 0 (id=2612): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921080800012201000905810377"], 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f00000007c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r1, 0x0, 0xe, 0x0, &(0x7f0000000880)="e0c0547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f00000002c0)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000300)="6a40c53fb17d4906fcf25435271b0625dd475c5730b8169e86fae4f9855b4831a4608b2a87d5d58d89", 0x29, 0x2404c081, &(0x7f0000000340)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000380)={0x8, 0x22fc73203698a420, 0x41, 0x0, 'syz1\x00', 0x5}) keyctl$dh_compute(0x17, &(0x7f00000003c0), 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x20042, 0x0) add_key$user(&(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) semget$private(0x0, 0x20000000102, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000540)='vegas', 0x5) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000140)={0x20, 0xc, 0x59, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) ioctl$UBLK_U_CMD_START_DEV(r4, 0xc0207506, &(0x7f0000000580)) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x1c00, 0x8, [0x78ff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 30.452206482s ago: executing program 0 (id=2626): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newsa={0x154, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4000, 0x4e24, 0x8001, 0x0, 0x20}, {@in=@multicast1, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x0, 0x0, 0xc0, 0x3ffe}, {}, {}, 0x70bd29, 0x3503, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@private=0xa010101}}]}, 0x154}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x80c42, 0x0) read(r2, &(0x7f0000000300)=""/148, 0xffffff96) 28.46124676s ago: executing program 0 (id=2633): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x750, 0x3, 0x20000008, 0x34e, 0x6cff, 0x7fff, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0x2cf, 0x7, 0x530e, 0xe1c4, 0x0, 0x0, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x100000000000000) 28.2255626s ago: executing program 0 (id=2635): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/pid_max\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/kernel/pid_max\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000080)={0xa, {0x0, 0xd1, 0x1}}, 0xa) syz_genetlink_get_family_id$fou(0x0, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) 26.240016251s ago: executing program 0 (id=2642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002740)={0x28, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x8f}]}]}, 0x28}}, 0x8044) (fail_nth: 7) 18.855637473s ago: executing program 2 (id=2659): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@deltfilter={0x43c, 0x2d, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xe}, {}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0x3, 0x8, 0x4, 0x6, 0x5, 0xfa, 0x101, 0x4, 0x5, 0xffffffff, 0x70f11a29, 0x332afdda, 0x1, 0x100006, 0x4, 0x800, 0x1eb, 0xa0, 0x9, 0x0, 0x8b1d, 0x7, 0xfc8c, 0x10, 0xaa2, 0x608, 0x0, 0x38, 0x4, 0xfffffffd, 0x2, 0x8, 0x1, 0x10, 0xfffffff7, 0x62, 0x1, 0xa24, 0x0, 0x9, 0x4, 0x3, 0x7fff, 0x0, 0x7, 0x0, 0xfffffffb, 0x3116, 0x1, 0xfffffff3, 0xc85, 0x4, 0x4, 0x9, 0x8, 0xf, 0x8, 0x3a02, 0xe, 0x523, 0x7, 0x9, 0x8, 0x81, 0x9, 0xfffffff8, 0x6, 0xdb, 0xa00, 0x0, 0xd8f, 0x8, 0x4, 0x200000, 0xffff, 0xfffff3ae, 0x0, 0x8, 0x7ff, 0x7, 0x5, 0x6, 0x0, 0x800, 0x1fe679e7, 0x1, 0x8, 0x2, 0xb, 0x7fff, 0xe, 0xfff, 0x0, 0x3, 0xffffff53, 0x5c, 0x1, 0x0, 0x76b, 0x9, 0x1, 0x8001, 0xfff, 0xffff, 0xbe7c, 0x3, 0x40, 0x4, 0xa, 0x0, 0x3d9b, 0x4, 0x5, 0x4, 0x8001, 0x8001, 0xfffffb63, 0x2, 0x1, 0x7, 0x9, 0x2d87, 0xfff, 0x7fffffff, 0x7fff, 0x7, 0x3ff, 0xae38, 0x7, 0x923, 0x0, 0x4, 0xffffff81, 0xca, 0x6, 0x1, 0x9, 0x200, 0x401, 0x5, 0xc7, 0x1000, 0x0, 0x48e, 0x1, 0x400, 0x5, 0x0, 0x80000008, 0x40400000, 0x3, 0x2, 0x80000000, 0x40, 0x6, 0x200, 0x8, 0x7, 0x0, 0x976, 0x9, 0x4, 0x1c0000, 0x9ee, 0x6, 0xe3, 0x5, 0x8000, 0x5, 0x9, 0xfc, 0x67, 0x2d, 0x3, 0x9, 0x3, 0x8, 0xed43, 0x5, 0x1000, 0xffff, 0x9, 0x1, 0x8, 0xfffffff9, 0x8, 0x10, 0x384a, 0x7, 0x2, 0x23ed, 0x4, 0x8, 0x7fff, 0x1, 0xfffffff9, 0x80, 0xc83, 0x8f, 0x7, 0x9, 0xc5b, 0x3, 0x3, 0x7, 0x4, 0x40, 0x5, 0xb, 0x0, 0x1000, 0xfffffffa, 0x5, 0x81, 0x1, 0x3, 0x3, 0x800, 0x1, 0x0, 0xfffffffa, 0x28, 0x80000001, 0x2, 0xffffffff, 0x661, 0x1, 0x8, 0x872, 0xb, 0x82, 0x726, 0x0, 0x0, 0x8000, 0xffffffff, 0x83, 0x4, 0x6, 0x81, 0x7, 0x9, 0x9, 0x4, 0x7, 0x4, 0xb0, 0xffffffff, 0x7, 0x80000003, 0xf, 0xf90, 0x7, 0x8586, 0x3d7]}]}]}}]}, 0x43c}}, 0x40844) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f00000004c0)) timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000540)=0x81) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000580)={0x48, 0x0, &(0x7f00000005c0)=[@register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0}}], 0x1, 0x0, &(0x7f0000000c00)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000d00)={0x4, 0x0, &(0x7f0000000d40)=[@register_looper]}) timer_delete(r6) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x11, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r9}, 0xc) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', '', [{0x20, '&},^'}, {0x20, 'wlan1\x00'}, {0x20, 'wlan1f'}, {}, {0x20, 'nl80211\x00'}]}, 0x21) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 14.515044622s ago: executing program 2 (id=2665): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) connect$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x1}}, 0x10) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)="306663353a313232373ad36c06c0f16b", 0x10) r3 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 14.118244226s ago: executing program 2 (id=2668): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) r2 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x8080, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000004c0)=0x2, 0x0) socket(0xa, 0xa, 0xb) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r5, &(0x7f00000003c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000400)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000440)={0xa0000001, 0x1f00}) 11.054199959s ago: executing program 36 (id=2642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002740)={0x28, r1, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x8f}]}]}, 0x28}}, 0x8044) (fail_nth: 7) 10.854698946s ago: executing program 3 (id=2676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2702, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x0, 0x2}) socket$kcm(0x21, 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d00000003000000040000000400000000000000", @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r5, &(0x7f0000000480)="e5d49118c58b3fc3bea1dbfa67f3ca0995ef5de5a9c5ee", 0x0, 0x4}, 0x20) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x100, 0x2, 0xe2ae, 0x6ff, 0x2, 0x8, 0x7a, 0x3, 0x2006, 0x34, 0x22, 0xf8}}, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="043e1f0a"], 0x22) r7 = openat$cgroup_int(r6, &(0x7f0000000600)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x1) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000640)={0x2}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000680)={[{0x2, 0x95c, 0x61, 0x7, 0xfe, 0xe, 0x1, 0x47, 0x8b, 0x3, 0x3, 0x18, 0x7}, {0x9, 0xa, 0x8, 0xff, 0x0, 0x4, 0x5, 0x1, 0x72, 0xc0, 0x5, 0x3, 0x401}, {0x5, 0x5, 0x40, 0x2, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x12, 0x2c, 0xc}], 0x6}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000940)={[0xc9, 0x200000000d, 0x1, 0x6d, 0x2, 0x1002, 0xf1, 0x8, 0x7fffffffffff8, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613}) ioctl$KVM_RUN(r8, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) lsetxattr$security_selinux(&(0x7f0000000000)='./proc/thread-self/fail-nth\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:auditd_initrc_exec_t:s0\x00', 0x2a, 0x1) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r9, &(0x7f0000000300)='27', 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x121301, 0x0) 10.303671343s ago: executing program 4 (id=2679): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000011c0)='X', 0xfee4, 0xa00, &(0x7f0000001200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9.693112548s ago: executing program 4 (id=2680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}}, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x149040, 0x0) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./proc\x00', &(0x7f0000000840)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f00000008c0)='27', 0x2) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000900), 0x201, 0x0) writev(r7, &(0x7f0000000940)=[{&(0x7f0000000980)='*', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x3, &(0x7f0000000a80)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x14, &(0x7f0000000c40)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x3, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000001e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000001f00)=r10, 0x4) sendmsg$inet(r9, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001fc0)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000002080)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0x9b, 0x157c}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r1, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x6e}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x40}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x400}}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8000}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x40004) 9.15798497s ago: executing program 2 (id=2683): openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000008c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000900)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f0000019980)='./file0\x00', &(0x7f00000199c0), 0x0, &(0x7f0000019a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, 0x0) 8.316345715s ago: executing program 2 (id=2685): mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0x1}], 0x1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000500), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x8001, 0xd) sendmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x40000000000009f, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000740)={&(0x7f0000000780)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000800)=[{&(0x7f0000000840)="ee", 0xfffffdef}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xfffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={0x0, 0x0, 0x43}, 0x28) mount(0x0, &(0x7f0000000a80)='./proc\x00', &(0x7f0000000ac0)='proc\x00', 0x4000, 0x0) 8.241427746s ago: executing program 8 (id=2686): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async, rerun: 32) socket$igmp(0x2, 0x3, 0x2) (rerun: 32) socket$l2tp(0x2, 0x2, 0x73) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="f8ffffff0000000000000000000000000000000065f6eb5970268891d66412a292b8b9bdbd6fa79001d9c4269bf28e765a3d35abcfa348e0743a364be78ce6fb9c4cbbb378d50841c8bd8e1c90fb6f06f55364cb4f3af528ff3efc5e490128d2efa77c24167b35c64631980e9b6200"/122, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$unix(0x1, 0x3, 0x0) (async, rerun: 64) socket$kcm(0x1e, 0x4, 0x0) (async, rerun: 64) socket$kcm(0x1e, 0x4, 0x0) (async, rerun: 64) socketpair(0x1e, 0x1, 0x0, &(0x7f00000006c0)={0x0, 0x0}) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r1}, &(0x7f00000009c0), &(0x7f0000000a00)=r2}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000ac0)=ANY=[], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) copy_file_range(r0, 0x0, r5, 0x0, 0x7, 0x0) 8.240951409s ago: executing program 4 (id=2687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x3f00) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) 7.546258623s ago: executing program 4 (id=2688): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0xff, &(0x7f0000002280)={@broadcast, @local, @void, {@mpls_mc={0x8848, {[{0x9}, {0x5}, {0x6, 0x0, 0x1}, {0x5}, {0x4, 0x0, 0x1}, {0x89, 0x0, 0x1}, {0x5}, {0x6, 0x0, 0x1}], @generic="aed69e6f009ae8573d676b860da4710579cefc59812e6ba5514f6b69cc8da47bad01cc7ff339057e19ece474cd1abde86be82471933db1473334fa317966c92417931ce74e0cbed2db0aa115fac7154b4094bdb7d298de9366f586c9355088bc63e646a43626fd89d2bc1be22780c0e972e150579b2d42a5978f28a1eaaaa72edb2abb6cc7706ee0acd76c9bd961d1a2969b917763cd8da029ed966283292bd07f9baec7220c483c405c17fe8bd8598ed4147b08aeab36efafbcf58106f5a082536a48fa37ef9261c3004b41f8a7b8d344"}}}}, &(0x7f0000002380)={0x0, 0x4, [0x5d5, 0x973, 0xf18, 0xf65]}) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000080)={0x0, 0x40, 0x2, 0xffffffff, 0x10, 0xfffffed8, 0x2, 0xfffffed8, 0x20, 0x4000001, 0x20, 0x1, &(0x7f0000000100)=[0x0], 0x1, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000002400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002440)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000002480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000024c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000002500), 0x0, 0x0) read$msr(r4, &(0x7f0000002540)=""/102392, 0x18ff8) sched_setaffinity(r3, 0xfffffffffffffd77, &(0x7f000001b540)=0x3fefff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f000001b640)=@raw={'raw\x00', 0x4001, 0x3, 0x1268, 0x10f0, 0x700001b, 0x148, 0x10f0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x3, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12c8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000001c940)={0x0, 0x0, &(0x7f000001c980)={0x0, 0xcc}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f000001c9c0)=@x86={0x6b, 0x4, 0xc, 0x0, 0x10000000, 0x7f, 0x3, 0xa, 0xd, 0xa0, 0x8, 0x8, 0x0, 0x2, 0x9, 0x43, 0x3, 0x2, 0x7, '\x00', 0x1, 0xffffffffffffff7f}) sendto$inet(0xffffffffffffffff, &(0x7f000001cac0)="8d36a2d20e6973f39ca69e82aed6de", 0xf, 0x4000000, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f000001cb00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x110, 0x6c, 0x0, 0x110, 0x0, 0x1f0, 0x258, 0x258, 0x1f0, 0x258, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, @private0, [0xff000000, 0x0, 0xff000000, 0xffffffff], [0x0, 0x0, 0xff000000], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x6, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x320) 7.525538308s ago: executing program 3 (id=2689): r0 = syz_usb_connect$midi(0x7, 0xd7, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x499, 0x105a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x1, 0x1, 0x38, 0x20, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xd1, 0x5}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x7, 0x1, 0x2, {0x8, 0x25, 0x1, 0x4, "b693ddef"}}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0xca, 0x0, 0x2, {0x12, 0x25, 0x1, 0xe, "8ea4d6f2ccf8e3ec224c918afa93"}}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x3, 0x10, 0x81, {0x13, 0x25, 0x1, 0xf, "c0de6831d1af91b31b3631820f9f4f"}}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x1, 0x9, 0x5, {0x14, 0x25, 0x1, 0x10, "7b669feb2428facb3f0787eb1158a168"}}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0x2, 0x4, 0x7, {0x5, 0x25, 0x1, 0x1, "81"}}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x9, 0x91, 0x80, {0x12, 0x25, 0x1, 0xe, "9c0bec5c4d808538886a23355137"}}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x5, 0x40, 0x2, {0x5, 0x25, 0x1, 0x1, "97"}}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x20, 0xd, 0x4, {0x8, 0x25, 0x1, 0x4, "e645504b"}}}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x7b0, 0xe, 0x5, 0xed, 0x40, 0x6}, 0xc9, &(0x7f0000000140)={0x5, 0xf, 0xc9, 0x3, [@generic={0xb2, 0x10, 0x3, "96be0c6039550101a0dfe49fed4f27d7235ec2d5440cfe8713fb9d93782269bb50e6700a719589648478db680f412a2950f04bb5a447d04563250e387483cec6745380520639dbceaf700c9cc7c788387b825db9d6afc577c73e8b834d6ab70e5c19392803f57b9d6204d0f05f989e0e0e522aa46880388d1ecfbb2add228afc716f3e1b1fa8ef1ce5ff200f449eaf9355a3cb54785e14cd42a0c262fd00416eb7fed73d9c97d929b45ddb72eaa085"}, @ext_cap={0x7, 0x10, 0x2, 0x1, 0x4, 0x5, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x8, 0x1, 0x8}]}, 0x4, [{0x25, &(0x7f0000000240)=@string={0x25, 0x3, "e3e7f0b625bce1bb841222d44197a1a5940f10bda42a99ab645e5644cb5f5eaf6ab21b"}}, {0xaa, &(0x7f0000000280)=@string={0xaa, 0x3, "7d8c05ba9f95f91561ea13929e2b5cf19aca2007c740ad1cdf53f693e21bee7e0b9986c341ea3b1bf544bf70f7089a3a1e9d58e77b816690b5740da2993a058b30eb05f99937c92e9d94ea59bf65c6320de5d3ce4306628a32f6326d333eecf8c161333ee637045eb830e3cafc9f2c09f4e424a86291835c8097bc87ffea9f0700586885e93c894901c7723931ef077baa9fb337ff75e0391f3e4bbfd70c179fb4caa8972ba8b519"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42a}}, {0x84, &(0x7f0000000380)=@string={0x84, 0x3, "0ae157fd30d091b4220c41aa43432ea15fd48f132aea0a85b2c56acd8791931f69e7d0320b6873dcf9b5f97e596478748dfb554846ec6a8632135475c9461f43d42553fbd578cb026f0bc65d43575a3a9a3d906a44f5bbfd45d56302d5f6a852255a169756f77dd74cdab6d26aad891cae51b03382acfdef167e3c148dbef685f00d"}}]}) (async) r1 = syz_usb_connect$midi(0x6, 0xcd, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0x1, 0x10, 0x13, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x29, [@ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x2, 0x3, [{0x10, 0xe}, {0x4, 0x10}, {0x7, 0x4}], 0xde}, @midi_out_jack={0x11, 0x24, 0x3, 0xe4572d62c0aa0bb1, 0x0, 0x5, [{0xf2, 0xc}, {0xf1, 0x1}, {0x7, 0x4}, {0xe, 0xfa}, {0x4, 0x8}], 0x2}, @ms_header={0x7, 0x24, 0x1, 0xffff, 0x7}], [{{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x2, 0x6, 0xa, {0x13, 0x25, 0x1, 0xf, "b8fea0eac64a3cee1ae7e60995fb46"}}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x3, 0x6, 0x7, {0x9, 0x25, 0x1, 0x5, "6207b0f849"}}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x1, 0x9, 0x8d, {0x11, 0x25, 0x1, 0xd, "3f153dc3fb2ee68dce7e37b0cc"}}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0xe, 0x4, 0xc, {0xd, 0x25, 0x1, 0x9, "9978bc2a6ad35b3a8a"}}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x0, 0xee, 0x10, {0x6, 0x25, 0x1, 0x2, "49c2"}}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x10, 0x4, 0x3, {0x7, 0x25, 0x1, 0x3, "4223bc"}}}]}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x7, 0x4, 0xa2, 0x0, 0xc5}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0x2, [{0xe1, &(0x7f0000000640)=@string={0xe1, 0x3, "187ebced759b60ad75090e9eadfa8133d18738430d15311bf2cd078a36936a4e2c7d696e7258de5b5702b71915fe6e230d25d0ed530f2082f0e7a25b668582f0cfc76948293eb8e3b5ef1a8384dbd3b26854a6e630124fa140efb69588b76522524854c12de440c85632f15921c9754e634ff5e7a771844a95de7fb2b95cca15a2b6aaeb4cf5b9e6d7a1a0ba453ba8cf32207f4db4e950326535f5b348588842cbcea3ee4565a8d1d59275bf13973e1cd71209fcdbf1c27f1050e15e7a7b659b516220bd1293a3ec20ba7fa6f9ab108955bb62a04bf37c3a239b2b318f5dce"}}, {0x7, &(0x7f0000000740)=@string={0x7, 0x3, "8b9d0b42ad"}}]}) syz_usb_control_io$rtl8150(r1, &(0x7f0000000900)={0x14, &(0x7f00000007c0)={0x0, 0x22, 0x11, {0x11, 0xa, "7d5c221cd322991f87ba8d7e9d2a95"}}, &(0x7f0000000800)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "dadb821f52697c5cd5dbf9eabbd7117a7a0e619efe6be4f73969b5f6d2e7ac8574fe5ce773bc2fa186235f0379d9308f27471f5f397c86a6e1311f46765d8a5b5edaa5a9e09b566c4372028a4ea9011e78eaaaa54819b7fb60f551321e21f3331b0c69d35baf3d3c875567dde525d34aa08fb5d57097a8fe18c923f87e297516a284ecd683ad5f5003c2f534f2b0bb0d3a431b8f02599079b75e6d65fa338b269185ba9680ac975d47b78aafb35bec4fcdf809d84f4e8e87912b9f079c"}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000940)={0x40, 0x15, 0x7a, "8e7eddf91266fc84248dcc1d987092cb081af80f742922732247cdfbd552aea8df633d55c4c3bdf39155758778b3d526e0d0a2e6626d4fa66c5b71d0383717513a364265d60dd7edaeb24ba7b7070b1daf0161f566f074bc321dabb4f8606a6d10a6916c7133082b2ef9ad0793e67a756cf4c85b9c6a99326c93"}, &(0x7f00000009c0)={0x0, 0xa, 0x1}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000a40)={0xc0, 0x5, 0x2, "aaf5"}, &(0x7f0000000a80)={0x40, 0x5, 0x5, "5bd5e2452c"}}) (async) r2 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000c80)={0x14, &(0x7f0000000b40)={0x0, 0x5, 0x4b, {0x4b, 0x10, "40e03dd08b73c7e2d4de95a89d4657a23e4c93bdd0f10f26026fc490b742884c5376c683edb39df07f102cd8120351d4f73e7c536d2ece4041edf5b5a952b3136e4d385b52d97122a3"}}, &(0x7f0000000bc0)={0x0, 0x3, 0x80, @string={0x80, 0x3, "79601ae5d457f302134bb9eb534ae6c7b2626e881bf31c6070946646e6fc3a505ec19eafb51166c669d72d518c7c2104061f80e249597c2b4fde31c261c38bfdc87759ca6ae8d6e6d2e99669eb54a32fdd4e7b12c775cb76d043c4e0792fcedefe294c8bda6800b9f6f8b7b686e951eb77708d3252f34ed3fdbcfa1330f2"}}}, &(0x7f0000000ec0)={0x34, &(0x7f0000000cc0)={0x20, 0x31, 0x98, "1328af0d6d4f5c548d2c1a307d0d5aace6e931870a21ff5f015b5d8259ffed79b1893d641b9b1e08bd0fe9b44cfe1b3583e4c27052a1f198e5891d6be2e00b55d768e4529e64d08ce8f2dbd688ec701b53a1e2b1ab75a458bd4921332aef2445e7ee12fee54df263ad14edeb152ce70a64e673de1f6955985b24bc08b22974e598435d0e6c0cb4a33575d6b0847ccaaa26504e7e71ed44e8"}, &(0x7f0000000d80)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000e00)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000e40)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000e80)={0xc0, 0xa2, 0x2f, "9ff45d8129e48922a2bf413fbd9e63c4fb7e5837066e5764b49f83e463175900c29d599470a0c97feba443b78492a2"}}) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000010c0)={{0xffffffffffffffff, &(0x7f0000000f00)=':@\x00', 0x400040, &(0x7f0000000f40)={@align=0x280000000000000, {0x9, 0xb747, 0x6, 0x80000001}}, 0x7, &(0x7f0000000f80), &(0x7f0000000fc0)}, {[0x5, 0x2, 0x369dbe3e, 0x6]}, 0x7, 0xad, &(0x7f0000001000)=""/173}) r5 = dup3(r3, r4, 0x0) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000001140), 0x91000, 0x0) (async) syz_usb_control_io$sierra_net(r0, &(0x7f0000001280)={0x14, &(0x7f0000001180)={0x0, 0x22, 0xb7, {0xb7, 0x23, "2baf30cf95fd537b41e0a4650e4a0136f346c8c0aa7e396eb6089106bd41bbafad0b4f3da33dc878ca099ea9fb976b36fbf5332e3590e8f782027b385d95acd84fb05b9b072d300d1df23e37ff7eaad0d54b3919ba105008e969ab167ac888de9175f5e1352fc6d2a17d08e354406cd2f0461659509b1dab14a72dd6d3d8a960530aef13663cd770f9d5702024c2be4ceadc4b075d3aba89d3b8b982c2d8d6e1fb764f9f6ca35741ec5b5a9c218ab504f6fbc35c0d"}}, &(0x7f0000001240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}}, &(0x7f00000017c0)={0x1c, &(0x7f00000012c0)={0x0, 0xf, 0x63, "b6389cd37e1fc50661f6454e96a80e71f91b310991381e8bc2de08ff5177054dac790aa13a6c1c73a105ce7e88faf33446d6f4b913afa9b2fe992744404e156918e9005a64768fbff3979110dbead5bb5f937e09359b33f312caceb530c6d1da5167b3"}, &(0x7f0000001340)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000001780)}) (async) r7 = syz_open_dev$vcsn(&(0x7f0000001800), 0x8e, 0x402000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r6) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x30, r8, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x7}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}}, 0x5) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10200018}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240000d4}, 0x20000840) (async) ioctl$EVIOCRMFF(r7, 0x40044581, &(0x7f0000001a80)=0xfffffffb) (async) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x8004510a, &(0x7f0000001ac0)) syz_usb_control_io(r2, &(0x7f0000001d00)={0x2c, &(0x7f0000001b00)={0x0, 0x4, 0x64, {0x64, 0x24, "eaf79319c91d892d15fcd2e8d1bbde6068c41091b48569913a17001b06c8b4ddf937ed61153fd56bebef63ee1ff4cdae92d6ecce602cf1aab0db92eacac8e74a23c146890c3e3da1add031eb20c7374f10c591f8bf2aedffeb2e537174223e95a8b9"}}, &(0x7f0000001b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}, &(0x7f0000001bc0)={0x0, 0xf, 0xac, {0x5, 0xf, 0xac, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "78f9cf67b9a69af2670fe4e16f784ba4"}, @generic={0x83, 0x10, 0x2, "c80dd748f670365efc2c4006ce53182561707ad758267a5a8ed4c06ed2e7f23c59fbcd0d7d7a656d3fce202fd2aeb0bdeb7d0860f28e68f091ec4d71bf6d6f12a91258e6c2a3b6b38b9ba469ba9adc0901a4cf26c486df81e960e1cbbec5e299a53ad13d36209eeb2f068b64bd6b93c077c791c3d38c253cffe3641092d31c0c"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x2, 0x2, 0xfd5}]}}, &(0x7f0000001c80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x1, 0x7, 0x7f, "8db9161c", "aa2d6981"}}, &(0x7f0000001cc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x8, 0x4, 0x5, 0x8, 0x10}}}, &(0x7f0000002180)={0x84, &(0x7f0000001d40)={0x20, 0xe, 0x56, "b128a97b03ebbe8ab4f0e7935dd5bab1825c11da8f337e82c03a692785b54d5585511099fc2c06ca787fa9ecc59af5f74ce08390bffdc1aa9fd9a349d3e4453c7bdee43c0fbdf5c0acb0950555d33b231d70b7634be7"}, &(0x7f0000001dc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001e00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001e40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000001e80)={0x20, 0x0, 0x8, {0xa8, 0x8, [0xf007]}}, &(0x7f0000001ec0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000001f00)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001f40)={0x40, 0xb, 0x2, "f005"}, &(0x7f0000001f80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000001fc0)={0x40, 0x13, 0x6, @local}, &(0x7f0000002000)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, &(0x7f0000002040)={0x40, 0x19, 0x2, '[)'}, &(0x7f0000002080)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000020c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000002100)={0x40, 0x1e, 0x1, 0x2a}, &(0x7f0000002140)={0x40, 0x21, 0x1, 0x2}}) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x68, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x48}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) recvmsg(r4, &(0x7f0000002580)={&(0x7f0000002380)=@vsock, 0x80, &(0x7f0000002500)=[{&(0x7f0000002400)=""/140, 0x8c}, {&(0x7f00000024c0)=""/23, 0x17}], 0x2, &(0x7f0000002540)=""/59, 0x3b}, 0x40000100) (async) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r9, 0x0, 0xd, &(0x7f00000025c0), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002600)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r10) (async) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000026c0)={0x20, 0x15, 0xfffe, 0x8001, 0x60, 0x1, &(0x7f0000002640)="cc578f7e85674f2167a311f73ab7d5cb1927f636db911168ae77f8ef774157010eb488528b39cc225f252e5c50ce5dd04628dae027814a236d95a80d64269a94090001c86d38ba18bab58c39140c21e86816b7cf4cf08fc91439560da9337d91"}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x1e, &(0x7f0000002700)={@remote, @remote, @void, {@can={0xc, {{0x0, 0x1, 0x1}, 0x1, 0x0, 0x0, 0x0, "c8115af8bda718da"}}}}, &(0x7f0000002740)={0x0, 0x4, [0x548, 0xd2b, 0x41b, 0x720]}) (async) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002780), 0x153040) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r11, 0x40605346, &(0x7f00000027c0)={0x0, 0x2, {0xffffffffffffffff, 0x2, 0xffffffff, 0x1, 0x8}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002840), 0xd87a437245d082ef, 0x0) 6.977482124s ago: executing program 8 (id=2690): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f0000000900)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000072000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r4}, 0xc) 6.303409019s ago: executing program 8 (id=2691): r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x20c02) writev(r0, &(0x7f0000000240), 0x0) read(r0, &(0x7f0000000900)=""/4067, 0xfe3) 6.15403219s ago: executing program 3 (id=2692): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000080)={0x1, 0x0, [{0x1000a, 0xfffffffd, 0x6, [0x12, 0x6, 0x7, 0xd, 0x6, 0x7cb, 0x1, 0x4]}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000380)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000240)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32=r3], 0x50) r4 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) capset(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, 0x17, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xd740c735f1c55f93}, 0x40) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="0202000200090000"], 0x11) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='stat\x00') pread64(r6, &(0x7f0000000740)=""/15, 0xf, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02fa0000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x0) 3.937908448s ago: executing program 4 (id=2693): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000000500)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000019540), 0x80042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x8034, 0x2, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x7) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r4, 0x0, r4, 0x0, 0x276) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='res', 0x3) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000019580)=0xe) syz_open_dev$dvb_frontend(&(0x7f00000195c0), 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000019740), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000019780)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000198c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}], 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000199c0)={&(0x7f0000019a00)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c, &(0x7f0000019a40)}, 0x40054) 3.629286181s ago: executing program 3 (id=2694): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600), 0x80200, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a00), 0x200000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x2, 0x141102) writev(r2, &(0x7f0000000680)=[{&(0x7f00000006c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x2e08, &(0x7f0000000700)={0x0, 0xda80, 0x4, 0x1, 0xfffffffe, 0x0, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000940)={0x1, &(0x7f0000000980)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) clock_settime(0x0, &(0x7f00000009c0)={0x77359400}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f00000007c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r5, 0x0, 0x0) write(r5, &(0x7f0000000900)='1', 0x1) 2.192054431s ago: executing program 3 (id=2695): syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)='27', 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000600)=@nat={'nat\x00', 0x19, 0x3, 0x90, [0x2000000000c0, 0x0, 0x0, 0x2000000000f0, 0x200000000460], 0x0, 0x0, &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x108) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, 0x0) openat2$dir(0xffffff9c, &(0x7f00000001c0)='./tracing\x00', &(0x7f0000000200)={0x24080, 0x2, 0x16}, 0x18) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xd931d3864d39dcdb) close(r2) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000002c0)={0x1, "5660359c3245d3c42317afad7648000000034c0000000000003400"}) r3 = msgget(0x3, 0x710) msgget(0x2, 0x624) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x8040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0\x00'}) set_robust_list(&(0x7f0000000380), 0xc) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) msgctl$IPC_RMID(r3, 0x0) msgget(0x3, 0x693) msgget(0x0, 0x200) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000740)=""/228, &(0x7f0000000500)=0xe4) socket$inet(0x2, 0xa, 0x8) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000f902000200070004000877b1c60b00000000000000000000000000f080f6cb7262c99a8e05d5ca2d9471c9119530daff24d90ac642b02d54c0831ae97aaccdddb06192ea1b3e8bf920edcb9e11820925fded77302cfccee6cc7d34883ef271bf581a937927563d6a0ca0ccbd31e794f767713ae44262bf7616e7196bd343712e52875ece54580f374bda8bb3e7a4c9b43c8b665e230d409edb31020233a8811ee60e815373fd33457708a601f67d15f2a7ef4330adf1ddaffbf78fb8aff353e839d3b9b4392e45e3e7d7c223b728aabb17fd06b8479c7b648bc486"], 0xde) syz_emit_ethernet(0x9e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6018232500682c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa890802"], 0x0) 2.188438145s ago: executing program 8 (id=2696): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000008c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000900)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f0000019980)='./file0\x00', &(0x7f00000199c0), 0x0, &(0x7f0000019a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, 0x0) 1.193094135s ago: executing program 4 (id=2697): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000019240)=@assoc_value={0x0}, &(0x7f0000019280)=0x8) setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r0, 0x84, 0x7d, &(0x7f00000192c0)={r2, 0x1000}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sendmsg$inet_sctp(r1, &(0x7f0000019880)={&(0x7f0000019300)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000197c0)=[{&(0x7f0000019340)="d36e", 0x2}, {&(0x7f0000019380)="7510da2916fa181678e8e52f41404a5a684afe6a4339949785ee9741cb90f6c3dfbf2e9a2d8aaea11d47be8ebf78f02dee6cb85d7d2506a4e390f1ce34b7a3d1e3555c8b55bafb385c5be0575644981b360af221ef6399c6a807db3f612b6b06a834c90d7eb05b427a54bcf8874f67c484f431e610b485d8564883ac2cb98410777327bfb161396154aeaaf3d41f60a4", 0x90}, {&(0x7f0000019440)="d54a81fcf570f4d6ba1cbef58cc0ed99e175a142c494a3c60a0a2a5b8d40e976b84dec743fdc575c6e7c96d8068c98c4c06d2c57d579e2bbbf5bdbfadfa17a10d910e046557bff05ad208418d28fd0ca0981487f71e48c8217111754e5f7", 0x5e}, {&(0x7f00000194c0)="9c4db43a841765c6f53da6b9c96c684dda", 0x11}, {&(0x7f0000019500)="f8c403b0307365f7e0b340ed222e67d4c8222886f32593742d8c6336d0899293a10636a64c185660c0be047c7467616dbcdb8f56f2c5f7e8be29fb79c034b75c77696cd6fbb7ae146c6103564784e43a40864cd1e5776ff1955dc83233f4cdb1ee6d5f3cf11f62b16355b21836d300131e5a61b2fb71cbfc601375206f83f4e56da57887c11d9c024e8d5a2e61fa33e938ddc346af61e714a952a6e400d370140df38cd01f4917de147d354a83df39d429dd2879dcf0b2530b1377dd5a485f1eafb58f577d92e266a48d4e0d861a8680e2560613c7752f69a46fd19151619a03298af3fca92295c7bfe02c8312adb3c8e5330c76", 0xf4}, {&(0x7f0000019600)="effd584a9e07d5a77a95f856f17a949ea1483f87b575a42e4ed06d5b59635a05e11622fc71bc45cc26132b3e0e4fa3d9d8e91c3e5fbd16a885c210428d0a2eb479829043b050c27758ff11e1d66b37edb08b220947d202f8900c793cda5f38482325468a1950609b5c2326b68d1130d2d83b94c70b6bc78b52a086af2bcce7e3427092efdfa2e4741d5adce8212beb9eb9691870f3457627d7765f73ad3e64ee7f57ab19b0e85c3290441835198b487d1e1f9c7396479a99181ce833edfc8b4fbf13de8bb3fbde22b428e6d5b0c944b436473cf98891df21b6673361bb1101a25ad9cb", 0xe3}, {&(0x7f0000019700)="c07cda2e8d4ada32281a5ef803451b134d560af7004410bb9fae55b458c1a1255471476cac3e16a1396e24d97310988a7b1584d1f267d388539a2a3a0cfff5e1cc79a8318c2db7355d3aa75b26fb0c51029a482618d85f92677568a9b325c0a83c888c11442854a55e13ab128da1", 0x6e}, {&(0x7f0000019780)="fcfc7e65", 0x4}], 0x8, &(0x7f0000019c00)=ANY=[@ANYBLOB="180000000000000084000000060000001800000000000000300000000000000084000000010000000200ff030180000000000000018000000500000005000000ff7f0000", @ANYRES32=r2, @ANYBLOB="180000000000000084d37ec3d3ea00000000000000010155f4ffffff0718000000000000008400000006000000080000000000000018000000000000008406000006000002ffff000000000000"], 0x90, 0x48082}, 0x20000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000019840)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000198c0)='./debug\x00', &(0x7f0000019900)='debugfs\x00', 0x1000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019940)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000019980)=0x3, 0xac5) syz_clone3(&(0x7f00000199c0)={0x23800000, &(0x7f0000019a40)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000019a80)=0x0) io_submit(r4, 0x1, &(0x7f0000019ac0)=[&(0x7f0000019b00)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000200)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x141400, 0x45) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x80}, 0x18) renameat2(r8, &(0x7f0000000040)='./file0\x00', r9, &(0x7f0000019200)='./file0\x00', 0x2) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) 1.1245877s ago: executing program 2 (id=2698): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000080)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x22, '\x00', @data=0x2000a, 0x9}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x80432) add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="242fc0c2b75e0ff02265497d932c460d2dd360501d3a91874bc6bea18657d2619a574855e7bb65e44a3416f5bb1629439b9080724c1a28851eef655c3502126c63716998a5746faaa7fa1dc24bccf2e00a9f89dd97beaca23f6f0e68eb10bbe9ff63672e085d430ce38e7977729bbd2f7b13edfef7b25865c2395039c3", 0x7d, r2) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000440)="480000001400190d09004beafd0d8c560a84476080ffe00600030000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000ec000", 0x48}], 0x1) 873.353819ms ago: executing program 8 (id=2699): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x4010, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x5000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000000340)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000019340)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000019480)) add_key(0x0, &(0x7f00000194c0), 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, &(0x7f00000001c0)) 14.554202ms ago: executing program 8 (id=2700): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000100)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20046f39, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000600)=0x474c, 0x4) connect$inet(r1, &(0x7f0000000640)={0x2, 0x0, @empty}, 0x10) sendmmsg(r1, &(0x7f0000000680), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000006c0)=0x6, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x28008841) sendmsg$can_raw(r3, 0x0, 0x84841) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) 0s ago: executing program 3 (id=2701): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x1000000) kernel console output (not intermixed with test programs): ass=phonet_socket permissive=1 [ 1190.611877][ T30] audit: type=1400 audit(1792453055.894:4974): avc: denied { setopt } for pid=15295 comm="syz.2.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1190.616169][ T30] audit: type=1400 audit(1792453055.894:4975): avc: denied { mount } for pid=15295 comm="syz.2.2269" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1190.744854][ T30] audit: type=1400 audit(1792453056.024:4976): avc: denied { ioctl } for pid=15291 comm="syz.0.2267" path="socket:[44836]" dev="sockfs" ino=44836 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1191.500210][T15304] loop9: detected capacity change from 0 to 2640 [ 1191.500569][T15304] ldm_validate_partition_table(): Disk read failed. [ 1191.500612][T15304] Dev loop9: unable to read RDB block 0 [ 1191.500694][T15304] loop9: unable to read partition table [ 1191.500775][T15304] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1191.537078][T15300] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input169 [ 1191.610697][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1191.764202][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1192.253855][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1192.253882][ T9] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=ed.a1 [ 1192.255923][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1192.255944][ T9] usb 3-1: can't read configurations, error -71 [ 1192.414326][T15312] loop9: detected capacity change from 0 to 2640 [ 1192.414647][T15312] ldm_validate_partition_table(): Disk read failed. [ 1192.414688][T15312] Dev loop9: unable to read RDB block 0 [ 1192.414764][T15312] loop9: unable to read partition table [ 1192.414855][T15312] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1192.572907][T15308] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input171 [ 1192.825801][ T30] audit: type=1400 audit(1792453058.104:4977): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1193.568609][T15314] nvme nvme0: rdma_resolve_addr failed (-99). [ 1195.342877][ T30] audit: type=1400 audit(1792453060.624:4978): avc: denied { mount } for pid=15330 comm="syz.8.2281" name="/" dev="configfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1195.389578][T15336] loop9: detected capacity change from 0 to 2640 [ 1195.389813][T15336] buffer_io_error: 38 callbacks suppressed [ 1195.389822][T15336] Buffer I/O error on dev loop9, logical block 0, async page read [ 1195.389841][T15336] Buffer I/O error on dev loop9, logical block 0, async page read [ 1195.389859][T15336] Buffer I/O error on dev loop9, logical block 0, async page read [ 1195.389875][T15336] Buffer I/O error on dev loop9, logical block 0, async page read [ 1195.389892][T15336] Buffer I/O error on dev loop9, logical block 0, async page read [ 1195.389916][T15336] Buffer I/O error on dev loop9, logical block 0, async page read [ 1195.389938][T15336] Buffer I/O error on dev loop9, logical block 0, async page read [ 1195.389955][T15336] Buffer I/O error on dev loop9, logical block 0, async page read [ 1195.389964][T15336] ldm_validate_partition_table(): Disk read failed. [ 1195.389978][T15336] Buffer I/O error on dev loop9, logical block 0, async page read [ 1195.389994][T15336] Buffer I/O error on dev loop9, logical block 0, async page read [ 1195.390018][T15336] Dev loop9: unable to read RDB block 0 [ 1195.390088][T15336] loop9: unable to read partition table [ 1195.390168][T15336] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1195.592655][T15333] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input173 [ 1195.665565][ T30] audit: type=1400 audit(1792453060.944:4979): avc: denied { search } for pid=15330 comm="syz.8.2281" name="/" dev="configfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1195.665594][ T30] audit: type=1400 audit(1792453060.944:4980): avc: denied { search } for pid=15330 comm="syz.8.2281" name="nvmet" dev="configfs" ino=3422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1195.665614][ T30] audit: type=1400 audit(1792453060.944:4981): avc: denied { search } for pid=15330 comm="syz.8.2281" name="ports" dev="configfs" ino=3424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1195.789681][ T30] audit: type=1400 audit(1792453061.064:4982): avc: denied { unmount } for pid=14927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1196.091399][T15340] nvme nvme0: rdma_resolve_addr failed (-99). [ 1196.290894][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1196.440841][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1196.441550][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1196.442353][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.442376][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.442390][ T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.442403][ T9] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1196.442418][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1196.442434][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.443723][ T9] usb 1-1: config 0 descriptor?? [ 1196.450105][ T30] audit: type=1400 audit(1792453061.724:4983): avc: denied { create } for pid=15348 comm="syz.2.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1196.602225][T15349] tipc: Can't bind to reserved service type 1 [ 1196.602260][ T30] audit: type=1400 audit(1792453061.884:4984): avc: denied { bind } for pid=15348 comm="syz.2.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1196.897362][ T9] logitech-djreceiver 0003:046D:C53A.0007: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 1198.023383][ T5713] usb 1-1: USB disconnect, device number 68 [ 1198.359173][T15364] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.2289' sets config #0 [ 1198.359301][T15364] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.2289' sets config #1 [ 1199.208324][ T30] audit: type=1400 audit(1792453064.484:4985): avc: denied { setopt } for pid=15366 comm="syz.4.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1199.323493][ T30] audit: type=1400 audit(1792453064.604:4986): avc: denied { write } for pid=15366 comm="syz.4.2293" path="socket:[45063]" dev="sockfs" ino=45063 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1199.361363][ T30] audit: type=1400 audit(1792453064.644:4987): avc: denied { append } for pid=15368 comm="syz.0.2294" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1199.552094][T15369] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1199.558818][T15369] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1201.590964][ T4920] Bluetooth: hci1: command 0x0406 tx timeout [ 1203.630890][T15371] Bluetooth: hci1: command 0x0406 tx timeout [ 1203.867051][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1203.867065][ T30] audit: type=1400 audit(1792453069.144:4990): avc: denied { read write } for pid=15394 comm="syz.3.2292" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1203.867092][ T30] audit: type=1400 audit(1792453069.144:4991): avc: denied { open } for pid=15394 comm="syz.3.2292" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1204.553268][T15400] hub 5-0:1.0: USB hub found [ 1204.553468][T15400] hub 5-0:1.0: 1 port detected [ 1204.604097][T15401] loop9: detected capacity change from 0 to 2640 [ 1204.604363][T15401] buffer_io_error: 6 callbacks suppressed [ 1204.604372][T15401] Buffer I/O error on dev loop9, logical block 0, async page read [ 1204.604392][T15401] Buffer I/O error on dev loop9, logical block 0, async page read [ 1204.604409][T15401] Buffer I/O error on dev loop9, logical block 0, async page read [ 1204.604425][T15401] Buffer I/O error on dev loop9, logical block 0, async page read [ 1204.604442][T15401] Buffer I/O error on dev loop9, logical block 0, async page read [ 1204.604465][T15401] Buffer I/O error on dev loop9, logical block 0, async page read [ 1204.604487][T15401] Buffer I/O error on dev loop9, logical block 0, async page read [ 1204.604502][T15401] Buffer I/O error on dev loop9, logical block 0, async page read [ 1204.604510][T15401] ldm_validate_partition_table(): Disk read failed. [ 1204.604525][T15401] Buffer I/O error on dev loop9, logical block 0, async page read [ 1204.604541][T15401] Buffer I/O error on dev loop9, logical block 0, async page read [ 1204.604565][T15401] Dev loop9: unable to read RDB block 0 [ 1204.604641][T15401] loop9: unable to read partition table [ 1204.604722][T15401] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1204.772868][T15398] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input175 [ 1205.066440][ T30] audit: type=1400 audit(1792453070.344:4992): avc: denied { create } for pid=15403 comm="syz.4.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1205.066679][ T30] audit: type=1400 audit(1792453070.344:4993): avc: denied { bind } for pid=15403 comm="syz.4.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1205.066824][ T30] audit: type=1400 audit(1792453070.344:4994): avc: denied { listen } for pid=15403 comm="syz.4.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1205.067070][ T30] audit: type=1400 audit(1792453070.344:4995): avc: denied { connect } for pid=15403 comm="syz.4.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1205.069045][ T30] audit: type=1400 audit(1792453070.344:4996): avc: denied { accept } for pid=15403 comm="syz.4.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1205.069195][ T30] audit: type=1400 audit(1792453070.344:4997): avc: denied { write } for pid=15403 comm="syz.4.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1205.069373][ T30] audit: type=1400 audit(1792453070.344:4998): avc: denied { read } for pid=15403 comm="syz.4.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1205.644885][T15411] nvme_fabrics: unknown parameter or missing value 'trsvcid=' in ctrl creation request [ 1206.494135][ T30] audit: type=1400 audit(1792453071.774:4999): avc: denied { ioctl } for pid=15413 comm="syz.2.2300" path="socket:[45276]" dev="sockfs" ino=45276 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1207.133410][ T5713] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1207.280581][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1207.280674][ T5713] usb 9-1: Using ep0 maxpacket: 8 [ 1207.281240][ T5713] usb 9-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice= 0.00 [ 1207.282014][ T5713] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.286419][ T5713] cypress_m8 9-1:1.0: DeLorme Earthmate USB converter detected [ 1207.443786][ T9] usb 1-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 1207.446362][ T9] usb 1-1: config 0 has an invalid descriptor of length 177, skipping remainder of the config [ 1207.446398][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1207.446419][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.449420][ T9] usb 1-1: config 0 descriptor?? [ 1208.604976][ T5713] usb 9-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 1208.624560][ T5713] usb 9-1: USB disconnect, device number 2 [ 1208.643006][ T5713] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 1208.643299][ T5713] cypress_m8 9-1:1.0: device disconnected [ 1208.752135][T15423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2308'. [ 1208.814365][T15424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2305'. [ 1210.811979][ T9] usb 1-1: USB disconnect, device number 69 [ 1213.091365][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1213.856762][ T9] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1213.871619][ T9] usb 9-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1213.871648][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1213.871663][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1213.871676][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 1213.871690][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1213.871702][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 1213.871716][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 1213.871728][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 1213.871742][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1213.871756][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1213.871769][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1213.871782][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 1213.871796][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 14385, setting to 1024 [ 1213.871809][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1213.871822][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 1213.898584][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.898601][ T9] usb 9-1: Product: syz [ 1213.898610][ T9] usb 9-1: Manufacturer: syz [ 1213.898619][ T9] usb 9-1: SerialNumber: syz [ 1213.958512][T15441] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1213.958570][T15441] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1213.958635][T15441] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1213.958684][T15441] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1213.958731][T15441] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1213.958794][T15441] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1213.958841][T15441] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1213.958903][T15441] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1213.958952][T15441] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1213.959000][T15441] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1213.959061][T15441] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1213.959108][T15441] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1214.006177][ T9] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 1214.176872][ T9] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 7 [ 1214.201681][ T9] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1214.229836][ T9] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 1214.248145][ T9] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1214.939999][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1214.940012][ T30] audit: type=1400 audit(1792453080.214:5001): avc: denied { connect } for pid=15450 comm="syz.0.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1214.940035][ T30] audit: type=1400 audit(1792453080.214:5002): avc: denied { name_connect } for pid=15450 comm="syz.0.2318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1215.023080][T15453] IPv6: addrconf: prefix option has invalid lifetime [ 1215.065526][T15456] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 1, id = 0 [ 1215.447624][T15458] FAULT_INJECTION: forcing a failure. [ 1215.447624][T15458] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.447647][T15458] CPU: 0 UID: 0 PID: 15458 Comm: syz.3.2319 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1215.447664][T15458] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1215.447668][T15458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1215.447675][T15458] Call Trace: [ 1215.447680][T15458] [ 1215.447685][T15458] dump_stack_lvl+0x100/0x190 [ 1215.447706][T15458] should_fail_ex.cold+0x5/0xa [ 1215.447722][T15458] should_failslab+0xc2/0x120 [ 1215.447740][T15458] __kmalloc_noprof+0xfc/0x840 [ 1215.447754][T15458] ? rcu_is_watching+0x13/0xc0 [ 1215.447770][T15458] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1215.447785][T15458] tomoyo_realpath_from_path+0xb6/0x690 [ 1215.447799][T15458] tomoyo_path_number_perm+0x23c/0x580 [ 1215.447814][T15458] ? tomoyo_path_number_perm+0x22e/0x580 [ 1215.447830][T15458] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1215.447851][T15458] ? __lock_acquire+0x5c0/0x1f40 [ 1215.447871][T15458] ? __fget_files+0x34/0x3d0 [ 1215.447888][T15458] ? find_held_lock+0x2b/0x80 [ 1215.447904][T15458] ? hook_file_ioctl_common+0x140/0x440 [ 1215.447920][T15458] ? __fget_files+0x21f/0x3d0 [ 1215.447938][T15458] security_file_ioctl+0xd3/0x230 [ 1215.447956][T15458] __x64_sys_ioctl+0xb7/0x210 [ 1215.447971][T15458] do_syscall_64+0x123/0x790 [ 1215.447990][T15458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.448002][T15458] RIP: 0033:0x7f73da59e559 [ 1215.448012][T15458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1215.448023][T15458] RSP: 002b:00007f73db418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1215.448034][T15458] RAX: ffffffffffffffda RBX: 00007f73da825fa0 RCX: 00007f73da59e559 [ 1215.448042][T15458] RDX: 0000200000000100 RSI: 00000000c0285629 RDI: 0000000000000003 [ 1215.448049][T15458] RBP: 00007f73db418090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.448055][T15458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.448062][T15458] R13: 00007f73da826038 R14: 00007f73da825fa0 R15: 00007fff08188358 [ 1215.448077][T15458] [ 1215.448082][T15458] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1215.749334][ T9] usb 9-1: USB disconnect, device number 3 [ 1215.799027][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1215.819241][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1215.819962][ T9] keyspan 9-1:1.0: device disconnected [ 1215.887435][ T30] audit: type=1400 audit(1792453081.164:5003): avc: denied { create } for pid=15459 comm="syz.3.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1215.924710][ T30] audit: type=1400 audit(1792453081.204:5004): avc: denied { bind } for pid=15459 comm="syz.3.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1215.957928][ T30] audit: type=1400 audit(1792453081.234:5005): avc: denied { setopt } for pid=15459 comm="syz.3.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1215.987245][ T30] audit: type=1400 audit(1792453081.264:5006): avc: denied { accept } for pid=15459 comm="syz.3.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1216.016381][T15460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2321'. [ 1216.020301][ T30] audit: type=1400 audit(1792453081.294:5007): avc: denied { write } for pid=15459 comm="syz.3.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1216.061866][ T30] audit: type=1400 audit(1792453081.344:5008): avc: denied { read } for pid=15459 comm="syz.3.2321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1220.662073][T15471] loop9: detected capacity change from 0 to 2640 [ 1220.662318][T15471] buffer_io_error: 6 callbacks suppressed [ 1220.662327][T15471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1220.662347][T15471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1220.662364][T15471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1220.662380][T15471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1220.662397][T15471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1220.662420][T15471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1220.662442][T15471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1220.662457][T15471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1220.662466][T15471] ldm_validate_partition_table(): Disk read failed. [ 1220.662480][T15471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1220.662496][T15471] Buffer I/O error on dev loop9, logical block 0, async page read [ 1220.662519][T15471] Dev loop9: unable to read RDB block 0 [ 1220.662589][T15471] loop9: unable to read partition table [ 1220.662672][T15471] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1220.842764][T15469] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input177 [ 1220.920979][ T30] audit: type=1400 audit(1792453086.194:5009): avc: denied { block_suspend } for pid=15473 comm="syz.4.2317" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1222.202402][T15483] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input179 [ 1222.408960][ T30] audit: type=1400 audit(1792453087.684:5010): avc: denied { create } for pid=15472 comm="syz.2.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1222.436810][ T30] audit: type=1400 audit(1792453087.714:5011): avc: denied { ioctl } for pid=15472 comm="syz.2.2325" path="socket:[45477]" dev="sockfs" ino=45477 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1223.644221][T15488] comedi comedi3: comedi_config --init_data is deprecated [ 1223.660728][T15488] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2326'. [ 1223.667896][T15488] FAULT_INJECTION: forcing a failure. [ 1223.667896][T15488] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.667919][T15488] CPU: 0 UID: 0 PID: 15488 Comm: syz.8.2326 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1223.667936][T15488] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1223.667941][T15488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1223.667948][T15488] Call Trace: [ 1223.667953][T15488] [ 1223.667958][T15488] dump_stack_lvl+0x100/0x190 [ 1223.667978][T15488] should_fail_ex.cold+0x5/0xa [ 1223.667995][T15488] should_failslab+0xc2/0x120 [ 1223.668012][T15488] __kmalloc_cache_node_noprof+0x94/0x720 [ 1223.668030][T15488] ? __get_vm_area_node+0x124/0x350 [ 1223.668049][T15488] __get_vm_area_node+0x124/0x350 [ 1223.668068][T15488] __vmalloc_node_range_noprof+0x268/0x1420 [ 1223.668086][T15488] ? __vcalloc_noprof+0x4d/0x80 [ 1223.668106][T15488] ? __vcalloc_noprof+0x4d/0x80 [ 1223.668122][T15488] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1223.668147][T15488] ? trace_contention_end+0x126/0x160 [ 1223.668163][T15488] ? __mutex_lock+0x26c/0x1bd0 [ 1223.668181][T15488] ? kvm_set_memslot+0x34/0x1740 [ 1223.668199][T15488] ? __vcalloc_noprof+0x4d/0x80 [ 1223.668212][T15488] __vmalloc_node_noprof+0xad/0xf0 [ 1223.668229][T15488] ? __vcalloc_noprof+0x4d/0x80 [ 1223.668243][T15488] __vmalloc_noprof+0xa3/0x120 [ 1223.668261][T15488] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1223.668285][T15488] __vcalloc_noprof+0x4d/0x80 [ 1223.668298][T15488] kvm_set_memslot+0xf8a/0x1740 [ 1223.668314][T15488] ? kvm_set_memory_region+0xc43/0x15e0 [ 1223.668332][T15488] kvm_set_memory_region+0xe78/0x15e0 [ 1223.668355][T15488] kvm_vm_ioctl+0x216a/0x4170 [ 1223.668375][T15488] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1223.668399][T15488] ? kasan_quarantine_put+0x104/0x240 [ 1223.668414][T15488] ? lockdep_hardirqs_on+0x7d/0x110 [ 1223.668431][T15488] ? find_held_lock+0x2b/0x80 [ 1223.668447][T15488] ? tomoyo_path_number_perm+0x28f/0x580 [ 1223.668464][T15488] ? tomoyo_path_number_perm+0x28f/0x580 [ 1223.668482][T15488] ? tomoyo_path_number_perm+0x188/0x580 [ 1223.668499][T15488] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1223.668516][T15488] ? __pfx_futex_wait+0x10/0x10 [ 1223.668533][T15488] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1223.668564][T15488] ? selinux_file_ioctl+0x13b/0x290 [ 1223.668580][T15488] ? selinux_file_ioctl+0xb6/0x290 [ 1223.668599][T15488] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1223.668615][T15488] __x64_sys_ioctl+0x18e/0x210 [ 1223.668630][T15488] do_syscall_64+0x123/0x790 [ 1223.668648][T15488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.668661][T15488] RIP: 0033:0x7f6339d9e559 [ 1223.668671][T15488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.668682][T15488] RSP: 002b:00007f633ac71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1223.668694][T15488] RAX: ffffffffffffffda RBX: 00007f633a025fa0 RCX: 00007f6339d9e559 [ 1223.668702][T15488] RDX: 00002000000001c0 RSI: 000000004020ae46 RDI: 000000000000000c [ 1223.668709][T15488] RBP: 00007f6339e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1223.668715][T15488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1223.668722][T15488] R13: 00007f633a026038 R14: 00007f633a025fa0 R15: 00007ffc5bb3f108 [ 1223.668739][T15488] [ 1223.668768][T15488] syz.8.2326: vmalloc error: size 16, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1223.668819][T15488] CPU: 0 UID: 0 PID: 15488 Comm: syz.8.2326 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1223.668838][T15488] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1223.668843][T15488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1223.668850][T15488] Call Trace: [ 1223.668854][T15488] [ 1223.668859][T15488] dump_stack_lvl+0x100/0x190 [ 1223.668877][T15488] warn_alloc.cold+0x9e/0xb2 [ 1223.668891][T15488] ? __pfx_warn_alloc+0x10/0x10 [ 1223.668903][T15488] ? __kasan_kmalloc+0x8a/0xb0 [ 1223.668925][T15488] ? __get_vm_area_node+0x22b/0x350 [ 1223.668947][T15488] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 1223.668970][T15488] ? __vcalloc_noprof+0x4d/0x80 [ 1223.668988][T15488] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1223.669005][T15488] ? trace_contention_end+0x126/0x160 [ 1223.669020][T15488] ? __mutex_lock+0x26c/0x1bd0 [ 1223.669037][T15488] ? kvm_set_memslot+0x34/0x1740 [ 1223.669055][T15488] ? __vcalloc_noprof+0x4d/0x80 [ 1223.669067][T15488] __vmalloc_node_noprof+0xad/0xf0 [ 1223.669085][T15488] ? __vcalloc_noprof+0x4d/0x80 [ 1223.669099][T15488] __vmalloc_noprof+0xa3/0x120 [ 1223.669116][T15488] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1223.669145][T15488] __vcalloc_noprof+0x4d/0x80 [ 1223.669159][T15488] kvm_set_memslot+0xf8a/0x1740 [ 1223.669174][T15488] ? kvm_set_memory_region+0xc43/0x15e0 [ 1223.669194][T15488] kvm_set_memory_region+0xe78/0x15e0 [ 1223.669218][T15488] kvm_vm_ioctl+0x216a/0x4170 [ 1223.669239][T15488] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1223.669265][T15488] ? kasan_quarantine_put+0x104/0x240 [ 1223.669281][T15488] ? lockdep_hardirqs_on+0x7d/0x110 [ 1223.669299][T15488] ? find_held_lock+0x2b/0x80 [ 1223.669316][T15488] ? tomoyo_path_number_perm+0x28f/0x580 [ 1223.669331][T15488] ? tomoyo_path_number_perm+0x28f/0x580 [ 1223.669350][T15488] ? tomoyo_path_number_perm+0x188/0x580 [ 1223.669366][T15488] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1223.669383][T15488] ? __pfx_futex_wait+0x10/0x10 [ 1223.669398][T15488] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1223.669429][T15488] ? selinux_file_ioctl+0x13b/0x290 [ 1223.669445][T15488] ? selinux_file_ioctl+0xb6/0x290 [ 1223.669462][T15488] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1223.669476][T15488] __x64_sys_ioctl+0x18e/0x210 [ 1223.669492][T15488] do_syscall_64+0x123/0x790 [ 1223.669510][T15488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.669522][T15488] RIP: 0033:0x7f6339d9e559 [ 1223.669531][T15488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.669542][T15488] RSP: 002b:00007f633ac71028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1223.669553][T15488] RAX: ffffffffffffffda RBX: 00007f633a025fa0 RCX: 00007f6339d9e559 [ 1223.669560][T15488] RDX: 00002000000001c0 RSI: 000000004020ae46 RDI: 000000000000000c [ 1223.669567][T15488] RBP: 00007f6339e35ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1223.669574][T15488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1223.669580][T15488] R13: 00007f633a026038 R14: 00007f633a025fa0 R15: 00007ffc5bb3f108 [ 1223.669596][T15488] [ 1223.669627][T15488] Mem-Info: [ 1223.669633][T15488] active_anon:19219 inactive_anon:0 isolated_anon:0 [ 1223.669633][T15488] active_file:0 inactive_file:66993 isolated_file:0 [ 1223.669633][T15488] unevictable:0 dirty:235 writeback:0 [ 1223.669633][T15488] slab_reclaimable:18065 slab_unreclaimable:101935 [ 1223.669633][T15488] mapped:31431 shmem:11937 pagetables:1521 [ 1223.669633][T15488] sec_pagetables:0 bounce:0 [ 1223.669633][T15488] kernel_misc_reclaimable:0 [ 1223.669633][T15488] free:1244652 free_pcp:22143 free_cma:0 [ 1223.669673][T15488] Node 0 active_anon:76876kB inactive_anon:0kB active_file:0kB inactive_file:267652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125608kB dirty:940kB writeback:0kB shmem:47748kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13312kB pagetables:5936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1223.669704][T15488] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1223.669733][T15488] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1223.669763][T15488] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 1223.669785][T15488] Node 0 DMA32 free:1021152kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:76876kB inactive_anon:0kB active_file:0kB inactive_file:267652kB unevictable:0kB writepending:940kB zspages:0kB present:3129332kB managed:2510920kB mlocked:0kB bounce:0kB free_pcp:88572kB local_pcp:88572kB free_cma:0kB [ 1223.669818][T15488] lowmem_reserve[]: 0 0 0 0 0 [ 1223.669838][T15488] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1223.669868][T15488] lowmem_reserve[]: 0 0 0 0 0 [ 1223.669886][T15488] Node 1 Normal free:3942096kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1223.669915][T15488] lowmem_reserve[]: 0 0 0 0 0 [ 1223.669933][T15488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1223.670022][T15488] Node 0 DMA32: 2207*4kB (UME) 2614*8kB (UME) 2003*16kB (UME) 1487*32kB (UME) 1017*64kB (UME) 727*128kB (UME) 240*256kB (UM) 114*512kB (UM) 41*1024kB (UME) 15*2048kB (UME) 137*4096kB (UM) = 1021180kB [ 1223.670117][T15488] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1223.670181][T15488] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 6*16kB (U) 2*32kB (U) 8*64kB (UM) 4*128kB (U) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 3*2048kB (UM) 960*4096kB (UM) = 3942096kB [ 1223.670273][T15488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1223.670283][T15488] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 1223.670293][T15488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1223.670302][T15488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1223.670312][T15488] 78926 total pagecache pages [ 1223.670317][T15488] 0 pages in swap cache [ 1223.670321][T15488] Free swap = 124996kB [ 1223.670326][T15488] Total swap = 124996kB [ 1223.670331][T15488] 2097051 pages RAM [ 1223.670336][T15488] 0 pages HighMem/MovableOnly [ 1223.670340][T15488] 437690 pages reserved [ 1223.670345][T15488] 0 pages cma reserved [ 1223.942309][ T5611] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1224.236597][ T5611] usb 4-1: Using ep0 maxpacket: 8 [ 1224.306885][ T5611] usb 4-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice= 0.00 [ 1224.329808][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.507158][ T5611] cypress_m8 4-1:1.0: DeLorme Earthmate USB converter detected [ 1226.119644][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1226.119757][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1226.180355][ T5611] usb 4-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 1226.197548][T15496] ceph: No mds server is up or the cluster is laggy [ 1226.219408][ T5611] usb 4-1: USB disconnect, device number 82 [ 1226.239659][ T5611] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 1226.239961][ T5611] cypress_m8 4-1:1.0: device disconnected [ 1226.353860][ T30] audit: type=1400 audit(1792453091.634:5012): avc: denied { map } for pid=15493 comm="syz.2.2329" path="/471/bus" dev="tmpfs" ino=2679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1226.412729][ T30] audit: type=1400 audit(1792453091.694:5013): avc: denied { mount } for pid=15507 comm="syz.8.2331" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1226.447478][ T30] audit: type=1400 audit(1792453091.724:5014): avc: denied { map } for pid=15507 comm="syz.8.2331" path="/dev/comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1226.447620][ T30] audit: type=1400 audit(1792453091.724:5015): avc: denied { execute } for pid=15507 comm="syz.8.2331" path="/dev/comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1226.534835][ T30] audit: type=1400 audit(1792453091.814:5016): avc: denied { unmount } for pid=15507 comm="syz.8.2331" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1226.535548][ T30] audit: type=1400 audit(1792453091.814:5017): avc: denied { execute } for pid=15509 comm="syz.3.2332" path="/492/file0" dev="tmpfs" ino=2815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1226.645553][T15512] FAULT_INJECTION: forcing a failure. [ 1226.645553][T15512] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.645577][T15512] CPU: 0 UID: 0 PID: 15512 Comm: syz.3.2332 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1226.645595][T15512] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1226.645601][T15512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1226.645608][T15512] Call Trace: [ 1226.645613][T15512] [ 1226.645619][T15512] dump_stack_lvl+0x100/0x190 [ 1226.645641][T15512] should_fail_ex.cold+0x5/0xa [ 1226.645660][T15512] should_failslab+0xc2/0x120 [ 1226.645678][T15512] __kmalloc_cache_noprof+0x91/0x6d0 [ 1226.645692][T15512] ? __asan_memcpy+0x3c/0x60 [ 1226.645705][T15512] ? pkcs7_note_signed_info+0x32e/0x5c0 [ 1226.645726][T15512] pkcs7_note_signed_info+0x32e/0x5c0 [ 1226.645755][T15512] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1226.645772][T15512] asn1_ber_decoder+0x14cf/0x2170 [ 1226.645794][T15512] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 1226.645810][T15512] ? kasan_save_track+0x14/0x30 [ 1226.645826][T15512] ? __kasan_kmalloc+0xaa/0xb0 [ 1226.645842][T15512] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1226.645855][T15512] ? pkcs7_parse_message+0x15f/0x870 [ 1226.645875][T15512] pkcs7_parse_message+0x289/0x870 [ 1226.645891][T15512] ? down_read+0x13b/0x4c0 [ 1226.645905][T15512] verify_pkcs7_signature+0x30/0xa0 [ 1226.645918][T15512] pkcs7_preparse+0x88/0xc0 [ 1226.645935][T15512] ? __pfx_pkcs7_view_content+0x10/0x10 [ 1226.645952][T15512] ? __pfx_pkcs7_preparse+0x10/0x10 [ 1226.645969][T15512] __key_create_or_update+0x413/0xe30 [ 1226.645990][T15512] ? __pfx___key_create_or_update+0x10/0x10 [ 1226.646009][T15512] ? lookup_user_key+0x3f3/0x1300 [ 1226.646033][T15512] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1226.646053][T15512] key_create_or_update+0x42/0x60 [ 1226.646072][T15512] __do_sys_add_key+0x2e8/0x460 [ 1226.646087][T15512] ? __pfx___do_sys_add_key+0x10/0x10 [ 1226.646106][T15512] do_syscall_64+0x123/0x790 [ 1226.646124][T15512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.646136][T15512] RIP: 0033:0x7f73da59e559 [ 1226.646152][T15512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.646164][T15512] RSP: 002b:00007f73db3f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1226.646176][T15512] RAX: ffffffffffffffda RBX: 00007f73da826090 RCX: 00007f73da59e559 [ 1226.646187][T15512] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 1226.646195][T15512] RBP: 00007f73da635ad8 R08: ffffffffffffffff R09: 0000000000000000 [ 1226.646203][T15512] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000000 [ 1226.646211][T15512] R13: 00007f73da826128 R14: 00007f73da826090 R15: 00007fff08188358 [ 1226.646228][T15512] [ 1226.765159][ T30] audit: type=1804 audit(1792453092.034:5018): pid=15511 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2332" name="/newroot/492/file0" dev="tmpfs" ino=2815 res=1 errno=0 [ 1227.387050][ T30] audit: type=1400 audit(1792453092.664:5019): avc: denied { write } for pid=15514 comm="syz.4.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1227.419911][T15515] nvme_fabrics: missing parameter 'transport=%s' [ 1227.419924][T15515] nvme_fabrics: missing parameter 'nqn=%s' [ 1228.446363][T15523] nvme nvme0: rdma_resolve_addr failed (-99). [ 1230.302590][ T30] audit: type=1400 audit(1792453095.584:5020): avc: denied { read write } for pid=15545 comm="syz.2.2340" name="sg0" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1230.302630][ T30] audit: type=1400 audit(1792453095.584:5021): avc: denied { open } for pid=15545 comm="syz.2.2340" path="/dev/sg0" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1230.651004][T15547] siw: device registration error -23 [ 1231.290692][ T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1231.440795][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1231.442145][ T9] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice= 0.00 [ 1231.444096][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.518180][ T9] cypress_m8 1-1:1.0: DeLorme Earthmate USB converter detected [ 1231.549967][T15564] loop9: detected capacity change from 0 to 2640 [ 1231.550234][T15564] buffer_io_error: 6 callbacks suppressed [ 1231.550244][T15564] Buffer I/O error on dev loop9, logical block 0, async page read [ 1231.550264][T15564] Buffer I/O error on dev loop9, logical block 0, async page read [ 1231.550280][T15564] Buffer I/O error on dev loop9, logical block 0, async page read [ 1231.550297][T15564] Buffer I/O error on dev loop9, logical block 0, async page read [ 1231.550313][T15564] Buffer I/O error on dev loop9, logical block 0, async page read [ 1231.550336][T15564] Buffer I/O error on dev loop9, logical block 0, async page read [ 1231.550371][T15564] Buffer I/O error on dev loop9, logical block 0, async page read [ 1231.550388][T15564] Buffer I/O error on dev loop9, logical block 0, async page read [ 1231.550396][T15564] ldm_validate_partition_table(): Disk read failed. [ 1231.550411][T15564] Buffer I/O error on dev loop9, logical block 0, async page read [ 1231.550427][T15564] Buffer I/O error on dev loop9, logical block 0, async page read [ 1231.636030][ T5611] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1231.651742][T15564] Dev loop9: unable to read RDB block 0 [ 1231.651856][T15564] loop9: unable to read partition table [ 1231.651978][T15564] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1231.802130][ T5611] usb 3-1: Using ep0 maxpacket: 8 [ 1232.186114][ T5611] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1232.250549][ T5611] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1232.250582][ T5611] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1232.250596][ T5611] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1232.250609][ T5611] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1232.250623][ T5611] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1232.250658][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.014067][ T9] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 1233.035374][ T9] usb 1-1: USB disconnect, device number 70 [ 1233.049278][ T9] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 1233.049595][ T9] cypress_m8 1-1:1.0: device disconnected [ 1233.218078][ T5611] usb 3-1: usb_control_msg returned -32 [ 1233.218102][ T5611] usbtmc 3-1:16.0: can't read capabilities [ 1233.233721][ T1311] aoe: packet could not be sent on wpan0. consider increasing tx_queue_len [ 1233.287746][T15558] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input181 [ 1233.422435][ T9] usb 3-1: USB disconnect, device number 73 [ 1234.522235][T15561] Cannot find add_set index 0 as target [ 1236.499472][T15582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2350'. [ 1238.383926][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1238.383941][ T30] audit: type=1400 audit(1792453103.664:5027): avc: denied { bind } for pid=15591 comm="syz.2.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1238.383965][ T30] audit: type=1400 audit(1792453103.664:5028): avc: denied { name_bind } for pid=15591 comm="syz.2.2354" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1238.383985][ T30] audit: type=1400 audit(1792453103.664:5029): avc: denied { node_bind } for pid=15591 comm="syz.2.2354" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1238.384530][ T30] audit: type=1400 audit(1792453103.664:5030): avc: denied { name_connect } for pid=15591 comm="syz.2.2354" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1238.503538][ T30] audit: type=1400 audit(1792453103.784:5031): avc: denied { read } for pid=15591 comm="syz.2.2354" path="socket:[45921]" dev="sockfs" ino=45921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1238.627408][ T30] audit: type=1400 audit(1792453103.904:5032): avc: denied { write } for pid=15602 comm="syz.3.2356" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1238.849023][ T30] audit: type=1400 audit(1792453104.124:5033): avc: denied { ioctl } for pid=15602 comm="syz.3.2356" path="socket:[46006]" dev="sockfs" ino=46006 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1239.036944][ T30] audit: type=1400 audit(1792453104.314:5034): avc: denied { setopt } for pid=15610 comm="syz.4.2360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1239.364392][T15619] loop9: detected capacity change from 0 to 2640 [ 1239.364620][T15619] buffer_io_error: 6 callbacks suppressed [ 1239.364628][T15619] Buffer I/O error on dev loop9, logical block 0, async page read [ 1239.364648][T15619] Buffer I/O error on dev loop9, logical block 0, async page read [ 1239.364682][T15619] Buffer I/O error on dev loop9, logical block 0, async page read [ 1239.364700][T15619] Buffer I/O error on dev loop9, logical block 0, async page read [ 1239.364715][T15619] Buffer I/O error on dev loop9, logical block 0, async page read [ 1239.364739][T15619] Buffer I/O error on dev loop9, logical block 0, async page read [ 1239.364764][T15619] Buffer I/O error on dev loop9, logical block 0, async page read [ 1239.364780][T15619] Buffer I/O error on dev loop9, logical block 0, async page read [ 1239.364788][T15619] ldm_validate_partition_table(): Disk read failed. [ 1239.364810][T15619] Buffer I/O error on dev loop9, logical block 0, async page read [ 1239.364827][T15619] Buffer I/O error on dev loop9, logical block 0, async page read [ 1239.364852][T15619] Dev loop9: unable to read RDB block 0 [ 1239.364923][T15619] loop9: unable to read partition table [ 1239.365023][T15619] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1239.550951][ T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1239.701141][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1239.701547][ T9] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1239.702255][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.702268][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1239.702294][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1239.703784][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.703798][ T9] usb 4-1: Product: syz [ 1239.703813][ T9] usb 4-1: Manufacturer: syz [ 1239.703822][ T9] usb 4-1: SerialNumber: syz [ 1239.869334][T15613] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input183 [ 1239.966077][T15622] nvme nvme0: rdma_resolve_addr failed (-99). [ 1240.061783][ T9] usb 4-1: unit 4 not found! [ 1240.220127][ T9] usb 4-1: USB disconnect, device number 83 [ 1240.357565][ T30] audit: type=1400 audit(1792453105.634:5035): avc: denied { create } for pid=15626 comm="syz.4.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1240.447688][T15629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1240.917733][T15641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=15641 comm=syz.2.2367 [ 1241.107359][T15625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2353'. [ 1242.051195][T15646] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.2368' sets config #0 [ 1242.051324][T15646] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.2368' sets config #1 [ 1242.393398][ T30] audit: type=1400 audit(1792453107.674:5036): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1244.710192][ T30] audit: type=1400 audit(1792453109.984:5037): avc: denied { mount } for pid=15669 comm="syz.0.2376" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1245.845784][ T30] audit: type=1400 audit(1792453111.124:5038): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1245.961737][T15680] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004 [ 1245.961775][ T30] audit: type=1400 audit(1792453111.244:5039): avc: denied { setopt } for pid=15679 comm="syz.3.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1247.327105][ T30] audit: type=1400 audit(1792453112.604:5040): avc: denied { write } for pid=15688 comm="syz.3.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1247.327135][ T30] audit: type=1400 audit(1792453112.604:5041): avc: denied { nlmsg_write } for pid=15688 comm="syz.3.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1249.118188][T15704] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2386'. [ 1250.846774][T15712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1251.774047][T15718] loop9: detected capacity change from 0 to 2640 [ 1251.774281][T15718] buffer_io_error: 6 callbacks suppressed [ 1251.774290][T15718] Buffer I/O error on dev loop9, logical block 0, async page read [ 1251.774314][T15718] Buffer I/O error on dev loop9, logical block 0, async page read [ 1251.774335][T15718] Buffer I/O error on dev loop9, logical block 0, async page read [ 1251.774353][T15718] Buffer I/O error on dev loop9, logical block 0, async page read [ 1251.774369][T15718] Buffer I/O error on dev loop9, logical block 0, async page read [ 1251.774392][T15718] Buffer I/O error on dev loop9, logical block 0, async page read [ 1251.774415][T15718] Buffer I/O error on dev loop9, logical block 0, async page read [ 1251.774432][T15718] Buffer I/O error on dev loop9, logical block 0, async page read [ 1251.774444][T15718] ldm_validate_partition_table(): Disk read failed. [ 1251.774460][T15718] Buffer I/O error on dev loop9, logical block 0, async page read [ 1251.774476][T15718] Buffer I/O error on dev loop9, logical block 0, async page read [ 1251.774499][T15718] Dev loop9: unable to read RDB block 0 [ 1251.774571][T15718] loop9: unable to read partition table [ 1251.774662][T15718] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1251.963208][T15714] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input185 [ 1253.199416][T15717] nvme nvme0: rdma_resolve_addr failed (-99). [ 1254.359536][ T4920] Bluetooth: hci3: unexpected subevent 0x37 length: 25 > 13 [ 1254.437601][T15727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2387'. [ 1255.498841][T15746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1255.576640][T15736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1255.954457][ T30] audit: type=1400 audit(1792453121.234:5042): avc: denied { name_bind } for pid=15750 comm="syz.8.2397" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1256.515272][T15759] bridge1: entered promiscuous mode [ 1256.678590][T15765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1257.063730][ T30] audit: type=1400 audit(1792453122.344:5043): avc: denied { name_bind } for pid=15772 comm="syz.0.2403" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1257.860560][ T5713] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1258.491639][ T5713] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1258.492356][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1258.492378][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.492395][ T5713] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1258.492422][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.500275][ T5713] usb 1-1: config 0 descriptor?? [ 1259.037627][ T30] audit: type=1400 audit(1792453124.314:5044): avc: denied { write } for pid=15772 comm="syz.0.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1259.091481][ T5713] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1259.621990][ T30] audit: type=1400 audit(1792453124.904:5045): avc: denied { read } for pid=15789 comm="syz.2.2408" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1259.622036][ T30] audit: type=1400 audit(1792453124.904:5046): avc: denied { open } for pid=15789 comm="syz.2.2408" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1259.704548][ T30] audit: type=1400 audit(1792453124.984:5047): avc: denied { ioctl } for pid=15789 comm="syz.2.2408" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x671f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1260.100175][ T30] audit: type=1400 audit(1792453125.374:5048): avc: denied { mount } for pid=15794 comm="syz.4.2409" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1264.047956][ T5611] usb 1-1: USB disconnect, device number 71 [ 1264.675397][T15808] netlink: 'syz.3.2413': attribute type 2 has an invalid length. [ 1264.853141][T15805] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input187 [ 1265.597943][T15818] fuse: fd is not a fuse device [ 1265.699378][ T30] audit: type=1400 audit(1792453130.974:5049): avc: denied { read write } for pid=15819 comm="syz.3.2417" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1265.699410][ T30] audit: type=1400 audit(1792453130.974:5050): avc: denied { open } for pid=15819 comm="syz.3.2417" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1266.030556][T15371] Bluetooth: hci3: command 0x0406 tx timeout [ 1267.663315][T15831] xt_MASQUERADE: bad rangesize 20224 [ 1267.768839][T15822] hub 1-0:1.0: USB hub found [ 1267.785304][T15822] hub 1-0:1.0: 1 port detected [ 1267.985203][T15840] netlink: 'syz.8.2421': attribute type 32 has an invalid length. [ 1268.302327][T12523] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1269.072520][T12523] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1269.073263][T12523] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.073291][T12523] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1269.073312][T12523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.074590][T12523] usb 4-1: config 0 descriptor?? [ 1269.076177][T12523] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1270.449834][T12523] usb 4-1: USB disconnect, device number 84 [ 1271.258804][ T30] audit: type=1400 audit(1792453136.494:5051): avc: denied { search } for pid=15861 comm="syz.2.2420" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1271.258840][ T30] audit: type=1400 audit(1792453136.494:5052): avc: denied { write } for pid=15861 comm="syz.2.2420" name="current_tracer" dev="tracefs" ino=1943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1271.258860][ T30] audit: type=1400 audit(1792453136.494:5053): avc: denied { open } for pid=15861 comm="syz.2.2420" path="/488/trace/current_tracer" dev="tracefs" ino=1943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1271.259496][ T30] audit: type=1400 audit(1792453136.534:5054): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1271.817539][T12523] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1272.238560][T12523] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1272.282695][T12523] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.282721][T12523] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1272.282745][T12523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.325335][T12523] usb 4-1: config 0 descriptor?? [ 1272.336926][T12523] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1272.458012][T12523] usb 4-1: USB disconnect, device number 85 [ 1272.762882][ T30] audit: type=1400 audit(1792453138.044:5055): avc: denied { create } for pid=15867 comm="syz.3.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1272.819168][ T30] audit: type=1400 audit(1792453138.094:5056): avc: denied { setopt } for pid=15867 comm="syz.3.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1272.847494][ T30] audit: type=1400 audit(1792453138.124:5057): avc: denied { setopt } for pid=15867 comm="syz.3.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1274.272489][ T30] audit: type=1400 audit(1792453139.554:5058): avc: denied { read write } for pid=15886 comm="syz.2.2427" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1274.273553][ T30] audit: type=1400 audit(1792453139.554:5059): avc: denied { open } for pid=15886 comm="syz.2.2427" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1275.174807][ T30] audit: type=1400 audit(1792453140.454:5060): avc: denied { mounton } for pid=15894 comm="syz.3.2436" path="/516/file0" dev="tmpfs" ino=2948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1275.565789][T15900] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1275.565815][T15900] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1275.565840][T15900] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1275.696562][T15900] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 1276.055348][T15892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2432'. [ 1277.819988][T15920] overlayfs: failed to clone upperpath [ 1277.832012][T15920] overlayfs: missing 'lowerdir' [ 1277.842940][T15920] bridge1: entered promiscuous mode [ 1278.040240][T15926] jffs2: notice: (15926) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1278.060705][ T30] audit: type=1400 audit(1792453143.344:5061): avc: denied { mount } for pid=15925 comm="syz.2.2446" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1278.175638][ T30] audit: type=1400 audit(1792453143.454:5062): avc: denied { write } for pid=15925 comm="syz.2.2446" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1278.175674][ T30] audit: type=1400 audit(1792453143.454:5063): avc: denied { add_name } for pid=15925 comm="syz.2.2446" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1278.175694][ T30] audit: type=1400 audit(1792453143.454:5064): avc: denied { create } for pid=15925 comm="syz.2.2446" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1279.024272][ T30] audit: type=1400 audit(1792453144.304:5065): avc: denied { read write open } for pid=15925 comm="syz.2.2446" path="/492/file0/file2" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1279.086840][T15926] FAULT_INJECTION: forcing a failure. [ 1279.086840][T15926] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.086865][T15926] CPU: 0 UID: 0 PID: 15926 Comm: syz.2.2446 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1279.086882][T15926] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1279.086887][T15926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1279.086894][T15926] Call Trace: [ 1279.086898][T15926] [ 1279.086904][T15926] dump_stack_lvl+0x100/0x190 [ 1279.086924][T15926] should_fail_ex.cold+0x5/0xa [ 1279.086941][T15926] should_failslab+0xc2/0x120 [ 1279.086958][T15926] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1279.086973][T15926] ? rcu_is_watching+0x13/0xc0 [ 1279.086989][T15926] ? jffs2_write_dnode+0x14f/0x9e0 [ 1279.087007][T15926] jffs2_write_dnode+0x14f/0x9e0 [ 1279.087020][T15926] ? jffs2_reserve_space+0x531/0xbb0 [ 1279.087033][T15926] ? finish_task_switch.isra.0+0x948/0x10d0 [ 1279.087050][T15926] ? map_id_range_up+0x2ce/0x3b0 [ 1279.087067][T15926] ? __pfx_jffs2_write_dnode+0x10/0x10 [ 1279.087081][T15926] ? irq_fpu_usable+0x83/0xb0 [ 1279.087100][T15926] ? lockdep_hardirqs_on+0x7d/0x110 [ 1279.087120][T15926] ? kernel_fpu_end+0x5f/0x80 [ 1279.087133][T15926] ? __local_bh_enable_ip+0xa5/0x120 [ 1279.087149][T15926] jffs2_write_begin+0x427/0x9c0 [ 1279.087163][T15926] ? __pfx_jffs2_write_begin+0x10/0x10 [ 1279.087178][T15926] ? inode_to_bdi+0x9e/0x160 [ 1279.087191][T15926] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 1279.087208][T15926] generic_perform_write+0x292/0xa40 [ 1279.087224][T15926] ? preempt_schedule_thunk+0x16/0x40 [ 1279.087248][T15926] ? __pfx_generic_perform_write+0x10/0x10 [ 1279.087265][T15926] ? mnt_put_write_access_file+0x4e/0x100 [ 1279.087283][T15926] ? file_update_time_flags+0x38c/0x520 [ 1279.087298][T15926] __generic_file_write_iter+0x1f7/0x240 [ 1279.087311][T15926] generic_file_write_iter+0xe1/0x390 [ 1279.087325][T15926] vfs_write+0x6af/0x1050 [ 1279.087340][T15926] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1279.087353][T15926] ? __pfx_vfs_write+0x10/0x10 [ 1279.087366][T15926] ? find_held_lock+0x2b/0x80 [ 1279.087393][T15926] __x64_sys_pwrite64+0x1eb/0x250 [ 1279.087408][T15926] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1279.087428][T15926] do_syscall_64+0x123/0x790 [ 1279.087446][T15926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.087457][T15926] RIP: 0033:0x7f68e879e559 [ 1279.087469][T15926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.087480][T15926] RSP: 002b:00007f68e9622028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1279.087492][T15926] RAX: ffffffffffffffda RBX: 00007f68e8a25fa0 RCX: 00007f68e879e559 [ 1279.087499][T15926] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000007 [ 1279.087506][T15926] RBP: 00007f68e9622090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.087513][T15926] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000001 [ 1279.087519][T15926] R13: 00007f68e8a26038 R14: 00007f68e8a25fa0 R15: 00007ffe2ad0d848 [ 1279.087535][T15926] [ 1279.496314][ T30] audit: type=1400 audit(1792453144.774:5066): avc: denied { unmount } for pid=5604 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1280.401918][T15943] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2449'. [ 1280.513997][T15943] syzkaller1: entered promiscuous mode [ 1280.514012][T15943] syzkaller1: entered allmulticast mode [ 1280.514499][ T30] audit: type=1400 audit(1792453145.794:5067): avc: denied { ioctl } for pid=15941 comm="syz.2.2449" path="socket:[47068]" dev="sockfs" ino=47068 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1282.779338][ T30] audit: type=1400 audit(1792453147.644:5068): avc: denied { watch } for pid=15960 comm="syz.2.2455" path="/494" dev="tmpfs" ino=2817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1284.175919][T15972] fuse: Bad value for 'fd' [ 1285.144589][T15983] loop9: detected capacity change from 0 to 2640 [ 1285.144852][T15983] buffer_io_error: 6 callbacks suppressed [ 1285.144861][T15983] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.144880][T15983] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.144897][T15983] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.144913][T15983] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.144929][T15983] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.144952][T15983] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.144974][T15983] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.144989][T15983] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.145016][T15983] ldm_validate_partition_table(): Disk read failed. [ 1285.145033][T15983] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.145049][T15983] Buffer I/O error on dev loop9, logical block 0, async page read [ 1285.145074][T15983] Dev loop9: unable to read RDB block 0 [ 1285.145147][T15983] loop9: unable to read partition table [ 1285.145234][T15983] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1285.343456][T15980] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input189 [ 1286.253449][T15987] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1288.319749][ T30] audit: type=1400 audit(1792453153.594:5069): avc: denied { mount } for pid=15996 comm="syz.8.2467" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1288.572878][ T30] audit: type=1400 audit(1792453153.854:5070): avc: denied { setopt } for pid=15999 comm="syz.8.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1288.614144][ T30] audit: type=1400 audit(1792453153.894:5071): avc: denied { read } for pid=15999 comm="syz.8.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1288.692583][ T30] audit: type=1400 audit(1792453153.964:5072): avc: denied { ioctl } for pid=15999 comm="syz.8.2469" path="socket:[47222]" dev="sockfs" ino=47222 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1288.869811][T16006] rxe_eth0 speed is unknown, defaulting to 1000 [ 1289.360581][ T5713] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1289.513716][ T5713] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1289.515773][ T5713] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.515801][ T5713] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1289.515814][ T5713] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1289.515827][ T5713] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1289.515849][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.273152][T16020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1291.197272][ T5713] gud 4-1:1.0: No supported pixel formats found [ 1291.197294][ T5713] gud 4-1:1.0: probe with driver gud failed with error -22 [ 1291.416048][ T30] audit: type=1400 audit(1792453156.694:5073): avc: denied { create } for pid=16018 comm="syz.0.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1291.679198][ T30] audit: type=1400 audit(1792453156.954:5074): avc: denied { bind } for pid=16018 comm="syz.0.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1291.679228][ T30] audit: type=1400 audit(1792453156.954:5075): avc: denied { node_bind } for pid=16018 comm="syz.0.2472" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1291.800726][T16009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1291.866418][T16031] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2468'. [ 1291.907247][ T30] audit: type=1400 audit(1792453157.184:5076): avc: denied { read } for pid=16028 comm="syz.2.2468" name="binder0" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1291.907280][ T30] audit: type=1400 audit(1792453157.184:5077): avc: denied { open } for pid=16028 comm="syz.2.2468" path="/dev/binderfs/binder0" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1291.974410][ T30] audit: type=1400 audit(1792453157.254:5078): avc: denied { append } for pid=16028 comm="syz.2.2468" name="sg0" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1292.938861][ T5611] usb 4-1: USB disconnect, device number 86 [ 1295.098785][ T1311] aoe: packet could not be sent on wpan0. consider increasing tx_queue_len [ 1299.005941][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1299.005954][ T30] audit: type=1400 audit(1792453164.284:5080): avc: denied { map } for pid=16056 comm="syz.8.2485" path="pipe:[47423]" dev="pipefs" ino=47423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1299.050921][T16057] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1299.050921][T16057] [ 1299.050936][T16057] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1299.050964][T16057] CIFS: Attempting to mount //127.0.0.1/share [ 1299.053183][T16057] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1299.053913][T16057] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1299.054949][ T30] audit: type=1400 audit(1792453164.334:5081): avc: denied { create } for pid=16056 comm="syz.8.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1299.055349][ T30] audit: type=1400 audit(1792453164.334:5082): avc: denied { ioctl } for pid=16056 comm="syz.8.2485" path="socket:[47434]" dev="sockfs" ino=47434 ioctlcmd=0x618c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1299.227219][ T30] audit: type=1400 audit(1792453164.504:5083): avc: denied { open } for pid=16059 comm="syz.0.2486" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1299.265705][ T30] audit: type=1400 audit(1792453164.544:5084): avc: denied { ioctl } for pid=16059 comm="syz.0.2486" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1299.347924][ T30] audit: type=1400 audit(1792453164.624:5085): avc: denied { read } for pid=16059 comm="syz.0.2486" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1299.347955][ T30] audit: type=1400 audit(1792453164.624:5086): avc: denied { open } for pid=16059 comm="syz.0.2486" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1299.482591][T16060] netlink: 'syz.0.2486': attribute type 1 has an invalid length. [ 1299.482608][T16060] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2486'. [ 1299.482617][T16060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2486'. [ 1299.639344][ T30] audit: type=1400 audit(1792453164.914:5087): avc: denied { create } for pid=16062 comm="syz.4.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1299.689476][T16063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1576 sclass=netlink_route_socket pid=16063 comm=syz.4.2487 [ 1299.718541][T16063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2487'. [ 1299.718563][T16063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2487'. [ 1299.845169][ T30] audit: type=1400 audit(1792453165.124:5088): avc: denied { mount } for pid=16075 comm="syz.2.2480" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1300.641736][T16084] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2491'. [ 1300.660388][ T30] audit: type=1400 audit(1792453165.934:5089): avc: denied { connect } for pid=16083 comm="syz.0.2491" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1301.147525][T16095] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2496'. [ 1301.185826][T16097] netlink: 'syz.3.2497': attribute type 32 has an invalid length. [ 1301.386536][T16105] sctp: [Deprecated]: syz.3.2500 (pid 16105) Use of int in max_burst socket option. [ 1301.386536][T16105] Use struct sctp_assoc_value instead [ 1301.484368][T16105] jffs2: notice: (16105) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 1301.800629][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2503'. [ 1303.440939][T12523] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 1303.591752][T12523] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 1303.593456][T12523] usb 1-1: config 127 has an invalid interface number: 57 but max is 0 [ 1303.593475][T12523] usb 1-1: config 127 has no interface number 0 [ 1303.593498][T12523] usb 1-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1303.595152][T12523] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.595166][T12523] usb 1-1: Product: syz [ 1303.595174][T12523] usb 1-1: Manufacturer: syz [ 1303.595183][T12523] usb 1-1: SerialNumber: syz [ 1303.598623][T16112] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1304.003483][T16112] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1304.204578][T12523] asix 1-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1304.204680][T12523] asix 1-1:127.57: probe with driver asix failed with error -61 [ 1305.370549][ T5611] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1305.500650][ T5611] usb 4-1: device descriptor read/64, error -71 [ 1306.180750][ T5611] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1306.267521][ T9] usb 1-1: USB disconnect, device number 72 [ 1306.321914][ T5611] usb 4-1: device descriptor read/64, error -71 [ 1306.431057][ T5611] usb usb4-port1: attempt power cycle [ 1306.448206][T16140] syzkaller0: entered promiscuous mode [ 1307.410797][ T5611] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1307.467501][ T5611] usb 4-1: device descriptor read/8, error -71 [ 1307.619724][T16148] gre0: Master is either lo or non-ether device [ 1308.103965][T16149] Bluetooth: MGMT ver 1.23 [ 1308.172788][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1308.172801][ T30] audit: type=1400 audit(1792453173.454:5095): avc: denied { mount } for pid=16145 comm="syz.3.2516" name="/" dev="autofs" ino=47855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1308.235688][ T30] audit: type=1400 audit(1792453173.514:5096): avc: denied { checkpoint_restore } for pid=16147 comm="syz.2.2515" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1308.266902][T16148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2516'. [ 1308.334448][ T30] audit: type=1400 audit(1792453173.614:5097): avc: denied { connect } for pid=16156 comm="syz.4.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1309.339788][T16161] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2520'. [ 1309.435284][ T30] audit: type=1400 audit(1792453174.714:5098): avc: denied { mount } for pid=16147 comm="syz.2.2515" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1309.591504][ T30] audit: type=1400 audit(1792453174.874:5099): avc: denied { create } for pid=16163 comm="syz.8.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1309.648330][ T30] audit: type=1400 audit(1792453174.924:5100): avc: denied { setopt } for pid=16163 comm="syz.8.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1310.331557][ T30] audit: type=1400 audit(1792453175.604:5101): avc: denied { mount } for pid=16170 comm="syz.3.2523" name="/" dev="hugetlbfs" ino=47930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1310.417073][T16173] syzkaller0: entered promiscuous mode [ 1310.758454][ T30] audit: type=1400 audit(1792453175.944:5102): avc: denied { cmd } for pid=16175 comm="iou-wrk-16178" path="socket:[47950]" dev="sockfs" ino=47950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1312.769409][T16176] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2522'. [ 1313.079396][T16191] nvme nvme0: rdma_resolve_addr failed (-99). [ 1313.509590][T16198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16198 comm=syz.8.2531 [ 1314.419906][T16201] dvmrp0: entered allmulticast mode [ 1314.730044][T16205] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2533'. [ 1315.125947][ T30] audit: type=1400 audit(1792453180.404:5103): avc: denied { connect } for pid=16210 comm="syz.0.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1315.181311][ T30] audit: type=1400 audit(1792453180.464:5104): avc: denied { getopt } for pid=16210 comm="syz.0.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1315.584579][T16220] ip6gretap1: entered allmulticast mode [ 1315.601669][T16220] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1315.601682][T16220] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1315.601699][T16220] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1316.438791][T16195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2529'. [ 1316.543204][ T30] audit: type=1400 audit(1792453181.824:5105): avc: denied { bind } for pid=16226 comm="syz.8.2540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1317.488914][ T30] audit: type=1400 audit(1792453182.764:5106): avc: denied { connect } for pid=16240 comm="syz.8.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1318.639317][T16245] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2547'. [ 1319.340625][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1319.491493][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1319.495615][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=1044, bcdDevice=11.a4 [ 1319.496364][ T9] usb 4-1: config 4 has an invalid interface number: 62 but max is 1 [ 1319.496380][ T9] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 1319.496391][ T9] usb 4-1: config 4 has an invalid interface number: 57 but max is 1 [ 1319.496402][ T9] usb 4-1: config 4 has no interface number 0 [ 1319.496411][ T9] usb 4-1: config 4 has no interface number 1 [ 1319.496434][ T9] usb 4-1: config 4 interface 62 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1319.496450][ T9] usb 4-1: config 4 interface 62 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1319.496463][ T9] usb 4-1: config 4 interface 62 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 1319.496476][ T9] usb 4-1: config 4 interface 62 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1319.496492][ T9] usb 4-1: config 4 interface 62 altsetting 9 endpoint 0x2 has invalid maxpacket 1040, setting to 1024 [ 1319.496506][ T9] usb 4-1: config 4 interface 62 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1319.496518][ T9] usb 4-1: config 4 interface 62 altsetting 9 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1319.496536][ T9] usb 4-1: config 4 interface 57 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 1319.496548][ T9] usb 4-1: config 4 interface 57 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 1319.496560][ T9] usb 4-1: config 4 interface 57 altsetting 4 bulk endpoint 0xE has invalid maxpacket 1024 [ 1319.496572][ T9] usb 4-1: config 4 interface 57 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 1319.496583][ T9] usb 4-1: config 4 interface 57 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1319.496595][ T9] usb 4-1: config 4 interface 62 has no altsetting 0 [ 1319.496605][ T9] usb 4-1: config 4 interface 57 has no altsetting 0 [ 1319.506515][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.506530][ T9] usb 4-1: Product: І [ 1319.506539][ T9] usb 4-1: Manufacturer: 䀊 [ 1319.506548][ T9] usb 4-1: SerialNumber: ␉ [ 1319.869747][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1319.881481][ T9] snd-usb-audio 4-1:4.62: probe with driver snd-usb-audio failed with error -2 [ 1319.914706][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1320.015342][ T9] snd-usb-audio 4-1:4.57: probe with driver snd-usb-audio failed with error -2 [ 1320.039854][ T9] usb 4-1: USB disconnect, device number 91 [ 1320.755043][T16261] loop9: detected capacity change from 0 to 2640 [ 1320.755268][T16261] buffer_io_error: 6 callbacks suppressed [ 1320.755276][T16261] Buffer I/O error on dev loop9, logical block 0, async page read [ 1320.755296][T16261] Buffer I/O error on dev loop9, logical block 0, async page read [ 1320.755312][T16261] Buffer I/O error on dev loop9, logical block 0, async page read [ 1320.755329][T16261] Buffer I/O error on dev loop9, logical block 0, async page read [ 1320.755346][T16261] Buffer I/O error on dev loop9, logical block 0, async page read [ 1320.755370][T16261] Buffer I/O error on dev loop9, logical block 0, async page read [ 1320.755401][T16261] Buffer I/O error on dev loop9, logical block 0, async page read [ 1320.755417][T16261] Buffer I/O error on dev loop9, logical block 0, async page read [ 1320.755426][T16261] ldm_validate_partition_table(): Disk read failed. [ 1320.755442][T16261] Buffer I/O error on dev loop9, logical block 0, async page read [ 1320.755458][T16261] Buffer I/O error on dev loop9, logical block 0, async page read [ 1320.755483][T16261] Dev loop9: unable to read RDB block 0 [ 1320.755553][T16261] loop9: unable to read partition table [ 1320.755647][T16261] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1320.933511][T16259] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input191 [ 1321.988416][T16274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16274 comm=syz.3.2556 [ 1322.003858][ T30] audit: type=1400 audit(1792453187.284:5107): avc: denied { bind } for pid=16272 comm="syz.3.2556" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1322.003885][ T30] audit: type=1400 audit(1792453187.284:5108): avc: denied { name_bind } for pid=16272 comm="syz.3.2556" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1322.003905][ T30] audit: type=1400 audit(1792453187.284:5109): avc: denied { node_bind } for pid=16272 comm="syz.3.2556" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1322.363811][T16271] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2549'. [ 1322.866276][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2561'. [ 1323.089810][T16290] kAFS: unable to lookup cell '(G' [ 1323.098331][T16290] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2562'. [ 1323.126138][T16290] kAFS: unable to lookup cell '(G' [ 1324.268025][ T30] audit: type=1400 audit(1792453189.544:5110): avc: denied { create } for pid=16295 comm="syz.3.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1324.297949][ T30] audit: type=1400 audit(1792453189.574:5111): avc: denied { write } for pid=16295 comm="syz.3.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1324.331371][ T30] audit: type=1400 audit(1792453189.614:5112): avc: denied { read } for pid=16295 comm="syz.3.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1324.337522][ T30] audit: type=1400 audit(1792453189.614:5113): avc: denied { getopt } for pid=16295 comm="syz.3.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1324.393240][T16296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2564'. [ 1324.485125][T16296] bond1: entered promiscuous mode [ 1324.485142][T16296] bond1: entered allmulticast mode [ 1325.614083][T16310] smc: net device team0 applied user defined pnetid SYZ2 [ 1325.690928][ T5611] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1325.842072][ T5611] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1325.846249][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.847562][ T5611] usb 3-1: config 0 descriptor?? [ 1325.849251][ T5611] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1325.998347][T16318] Dead loop on virtual device ip6_vti0 (net 272), fix it urgently! [ 1325.998522][T16318] Dead loop on virtual device ip6_vti0 (net 272), fix it urgently! [ 1325.998643][T16318] Dead loop on virtual device ip6_vti0 (net 272), fix it urgently! [ 1325.998762][T16318] Dead loop on virtual device ip6_vti0 (net 272), fix it urgently! [ 1325.998895][T16318] Dead loop on virtual device ip6_vti0 (net 272), fix it urgently! [ 1325.999015][T16318] Dead loop on virtual device ip6_vti0 (net 272), fix it urgently! [ 1326.131438][ T9] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1326.283423][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1326.284182][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1326.284197][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1326.284217][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.288964][ T9] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 1326.344537][ T9] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 1326.536401][ T30] audit: type=1400 audit(1792453191.814:5114): avc: denied { write } for pid=16313 comm="syz.3.2569" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1326.581823][ T30] audit: type=1400 audit(1792453191.864:5115): avc: denied { mounton } for pid=16321 comm="syz.0.2558" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1326.583610][T16322] tmpfs: Bad value for 'mpol' [ 1327.796612][ T5713] usb 4-1: USB disconnect, device number 92 [ 1327.903938][ T5713] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1327.907740][ T5713] spcp8x5 4-1:1.0: device disconnected [ 1327.957091][ T5611] gspca_stv06xx: I2C: Read error writing address: -71 [ 1327.971613][ T5611] usb 3-1: USB disconnect, device number 74 [ 1328.020820][T16331] netlink: 'syz.0.2573': attribute type 23 has an invalid length. [ 1329.296353][T16337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1329.870114][T16346] loop9: detected capacity change from 0 to 2640 [ 1329.870349][T16346] buffer_io_error: 6 callbacks suppressed [ 1329.870358][T16346] Buffer I/O error on dev loop9, logical block 0, async page read [ 1329.870378][T16346] Buffer I/O error on dev loop9, logical block 0, async page read [ 1329.870394][T16346] Buffer I/O error on dev loop9, logical block 0, async page read [ 1329.870410][T16346] Buffer I/O error on dev loop9, logical block 0, async page read [ 1329.871667][T16346] Buffer I/O error on dev loop9, logical block 0, async page read [ 1329.871694][T16346] Buffer I/O error on dev loop9, logical block 0, async page read [ 1329.871716][T16346] Buffer I/O error on dev loop9, logical block 0, async page read [ 1329.871733][T16346] Buffer I/O error on dev loop9, logical block 0, async page read [ 1329.871741][T16346] ldm_validate_partition_table(): Disk read failed. [ 1329.871757][T16346] Buffer I/O error on dev loop9, logical block 0, async page read [ 1329.871772][T16346] Buffer I/O error on dev loop9, logical block 0, async page read [ 1329.871796][T16346] Dev loop9: unable to read RDB block 0 [ 1329.871871][T16346] loop9: unable to read partition table [ 1329.871954][T16346] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1330.073434][T16340] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input193 [ 1330.412354][T16350] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1330.414013][T16350] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1330.478763][T16350] FAULT_INJECTION: forcing a failure. [ 1330.478763][T16350] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.479064][T16350] CPU: 0 UID: 0 PID: 16350 Comm: syz.0.2579 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1330.479085][T16350] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1330.479091][T16350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1330.479099][T16350] Call Trace: [ 1330.479104][T16350] [ 1330.479110][T16350] dump_stack_lvl+0x100/0x190 [ 1330.479132][T16350] should_fail_ex.cold+0x5/0xa [ 1330.479149][T16350] should_failslab+0xc2/0x120 [ 1330.479168][T16350] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1330.479185][T16350] ? __pfx_map_id_range_down+0x10/0x10 [ 1330.479200][T16350] ? security_inode_alloc+0x3b/0x2c0 [ 1330.479219][T16350] security_inode_alloc+0x3b/0x2c0 [ 1330.479235][T16350] inode_init_always_gfp+0xc6f/0xfb0 [ 1330.479255][T16350] alloc_inode+0x8e/0x250 [ 1330.479268][T16350] new_inode+0x22/0x1c0 [ 1330.479290][T16350] devpts_pty_new+0xca/0x770 [ 1330.479309][T16350] ? __pfx_devpts_pty_new+0x10/0x10 [ 1330.479327][T16350] ? ptmx_open+0x1ad/0x360 [ 1330.479349][T16350] ptmx_open+0x1d9/0x360 [ 1330.479364][T16350] ? __pfx_ptmx_open+0x10/0x10 [ 1330.479380][T16350] chrdev_open+0x234/0x6a0 [ 1330.479397][T16350] ? __pfx_chrdev_open+0x10/0x10 [ 1330.479414][T16350] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1330.479431][T16350] do_dentry_open+0x6ab/0x14d0 [ 1330.479446][T16350] ? __pfx_chrdev_open+0x10/0x10 [ 1330.479466][T16350] vfs_open+0x82/0x3f0 [ 1330.479485][T16350] path_openat+0x1a23/0x2450 [ 1330.479504][T16350] ? __pfx_path_openat+0x10/0x10 [ 1330.479525][T16350] do_file_open+0x20e/0x430 [ 1330.479543][T16350] ? __pfx_do_file_open+0x10/0x10 [ 1330.479570][T16350] ? _raw_spin_unlock+0x28/0x50 [ 1330.479585][T16350] ? alloc_fd+0x471/0x7a0 [ 1330.479606][T16350] do_sys_openat2+0x10f/0x1e0 [ 1330.479617][T16350] ? __pfx_do_sys_openat2+0x10/0x10 [ 1330.479629][T16350] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1330.479650][T16350] __x64_sys_openat+0x12d/0x210 [ 1330.479662][T16350] ? __pfx___x64_sys_openat+0x10/0x10 [ 1330.479679][T16350] do_syscall_64+0x123/0x790 [ 1330.479697][T16350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.479710][T16350] RIP: 0033:0x7faeb1f9e559 [ 1330.479721][T16350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.479733][T16350] RSP: 002b:00007faeb2e33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1330.479745][T16350] RAX: ffffffffffffffda RBX: 00007faeb2225fa0 RCX: 00007faeb1f9e559 [ 1330.479752][T16350] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1330.479760][T16350] RBP: 00007faeb2035ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1330.479766][T16350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.479774][T16350] R13: 00007faeb2226038 R14: 00007faeb2225fa0 R15: 00007ffff03ade98 [ 1330.479790][T16350] [ 1331.060910][ T5611] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1331.212321][ T5611] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1331.216400][ T5611] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.216428][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.263626][ T5611] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1332.319957][ T5611] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1332.319972][ T5611] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 1332.338340][ T5611] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 1332.350595][T15371] Bluetooth: hci1: command 0x0406 tx timeout [ 1332.407479][ T52] Bluetooth: hci2: unexpected subevent 0x03 length: 10 > 9 [ 1332.427062][ T30] audit: type=1400 audit(1792453197.704:5116): avc: denied { read } for pid=16370 comm="syz.0.2585" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1332.427095][ T30] audit: type=1400 audit(1792453197.704:5117): avc: denied { open } for pid=16370 comm="syz.0.2585" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1332.456415][T16365] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input195 [ 1332.521461][ T30] audit: type=1400 audit(1792453197.804:5118): avc: denied { ioctl } for pid=16370 comm="syz.0.2585" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1332.566403][ T5611] usb 4-1: USB disconnect, device number 93 [ 1333.606644][ T30] audit: type=1326 audit(1792453198.884:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16381 comm="syz.4.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0964b9e559 code=0x7ffc0000 [ 1333.606676][ T30] audit: type=1326 audit(1792453198.884:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16381 comm="syz.4.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0964b9e559 code=0x7ffc0000 [ 1333.674622][ T30] audit: type=1326 audit(1792453198.954:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16381 comm="syz.4.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f0964b9e559 code=0x7ffc0000 [ 1333.674655][ T30] audit: type=1326 audit(1792453198.954:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16381 comm="syz.4.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0964b9e559 code=0x7ffc0000 [ 1333.674676][ T30] audit: type=1326 audit(1792453198.954:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16381 comm="syz.4.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0964b9e559 code=0x7ffc0000 [ 1333.709263][ T30] audit: type=1326 audit(1792453198.994:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16381 comm="syz.4.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0964b9e559 code=0x7ffc0000 [ 1333.709291][ T30] audit: type=1326 audit(1792453198.994:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16381 comm="syz.4.2590" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0964b9e559 code=0x7ffc0000 [ 1334.432643][ T4920] Bluetooth: hci2: command 0x0406 tx timeout [ 1334.432674][ T4920] Bluetooth: hci1: command 0x0406 tx timeout [ 1336.551801][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 1337.555482][ T5611] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1338.221012][ T5611] usb 3-1: device not accepting address 75, error -71 [ 1338.357484][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1338.357497][ T30] audit: type=1400 audit(1792453203.634:5132): avc: denied { execute } for pid=16401 comm="syz.8.2589" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=48803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1338.976061][T16400] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input197 [ 1342.488447][T16433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2602'. [ 1342.643151][T16438] netlink: 'syz.3.2611': attribute type 32 has an invalid length. [ 1342.647373][T16434] nvme nvme0: rdma_resolve_addr failed (-99). [ 1344.221822][T12523] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1344.250607][T16452] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2616'. [ 1344.250757][T16453] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2616'. [ 1344.281941][ T30] audit: type=1400 audit(1792453209.564:5133): avc: denied { create } for pid=16451 comm="syz.8.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1344.316513][ T30] audit: type=1400 audit(1792453209.594:5134): avc: denied { write } for pid=16451 comm="syz.8.2616" path="socket:[49013]" dev="sockfs" ino=49013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1344.370924][T12523] usb 1-1: Using ep0 maxpacket: 32 [ 1344.372802][T12523] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1344.375073][T12523] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.375100][T12523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.377710][T12523] usb 1-1: config 0 descriptor?? [ 1344.388323][T12523] hub 1-1:0.0: USB hub found [ 1344.513529][T16434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2610'. [ 1344.558789][T16459] netlink: 'syz.3.2618': attribute type 1 has an invalid length. [ 1344.643172][T16459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1344.814005][T16462] macvtap1: entered allmulticast mode [ 1344.878151][T16459] bond2: (slave geneve2): making interface the new active one [ 1344.902631][T16459] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1344.967442][T12523] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1345.024574][ T30] audit: type=1400 audit(1792453210.304:5135): avc: denied { mount } for pid=16458 comm="syz.3.2618" name="/" dev="ramfs" ino=49110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1345.060141][T16462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2618'. [ 1345.231890][ T30] audit: type=1400 audit(1792453210.514:5136): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1345.985299][T16470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1346.181725][ T5611] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1346.189358][T16473] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1346.189565][T16473] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1346.355029][T16468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.357223][T16468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.455298][ T30] audit: type=1400 audit(1792453211.734:5137): avc: denied { read append } for pid=16467 comm="syz.2.2620" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1346.455331][ T30] audit: type=1400 audit(1792453211.734:5138): avc: denied { open } for pid=16467 comm="syz.2.2620" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1346.532176][ T5611] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1346.532202][ T5611] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1346.532223][ T5611] usb 3-1: no configurations [ 1346.532231][ T5611] usb 3-1: can't read configurations, error -22 [ 1346.657511][T12523] usbhid 1-1:0.0: can't add hid device: -71 [ 1346.657567][T12523] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1347.285767][T12523] usb 1-1: USB disconnect, device number 73 [ 1347.379842][T16486] netlink: 'syz.0.2626': attribute type 32 has an invalid length. [ 1347.765040][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2623'. [ 1347.846692][ T30] audit: type=1400 audit(1792453213.124:5139): avc: denied { mount } for pid=16488 comm="syz.2.2628" name="/" dev="ocfs2_dlmfs" ino=49165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1347.888692][T16489] ip_tables: iptables: counters copy to user failed while replacing table [ 1347.908042][T16489] ip_tables: iptables: counters copy to user failed while replacing table [ 1348.070188][T16491] FAULT_INJECTION: forcing a failure. [ 1348.070188][T16491] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.070212][T16491] CPU: 0 UID: 0 PID: 16491 Comm: syz.3.2622 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1348.070228][T16491] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1348.070233][T16491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1348.070240][T16491] Call Trace: [ 1348.070245][T16491] [ 1348.070249][T16491] dump_stack_lvl+0x100/0x190 [ 1348.070270][T16491] should_fail_ex.cold+0x5/0xa [ 1348.070286][T16491] should_failslab+0xc2/0x120 [ 1348.070304][T16491] __kmalloc_noprof+0xfc/0x840 [ 1348.070319][T16491] ? io_cache_alloc_new+0x45/0xe0 [ 1348.070335][T16491] io_cache_alloc_new+0x45/0xe0 [ 1348.070349][T16491] __io_prep_rw+0x21d/0xfb0 [ 1348.070365][T16491] ? __pfx___io_prep_rw+0x10/0x10 [ 1348.070380][T16491] ? __io_alloc_req_refill+0x2e1/0x330 [ 1348.070395][T16491] io_prep_rw+0x76/0x2c0 [ 1348.070409][T16491] ? __pfx_io_prep_rw+0x10/0x10 [ 1348.070431][T16491] io_submit_sqes+0xa03/0x2480 [ 1348.070455][T16491] __do_sys_io_uring_enter+0xa88/0x1b10 [ 1348.070473][T16491] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1348.070492][T16491] ? __fget_files+0x21f/0x3d0 [ 1348.070508][T16491] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1348.070527][T16491] ? fput+0x7c/0x100 [ 1348.070544][T16491] ? ksys_write+0x1ac/0x250 [ 1348.070557][T16491] ? __pfx_ksys_write+0x10/0x10 [ 1348.070575][T16491] do_syscall_64+0x123/0x790 [ 1348.070600][T16491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.070612][T16491] RIP: 0033:0x7f73da59e559 [ 1348.070622][T16491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1348.070634][T16491] RSP: 002b:00007f73db418028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1348.070645][T16491] RAX: ffffffffffffffda RBX: 00007f73da825fa0 RCX: 00007f73da59e559 [ 1348.070653][T16491] RDX: 0000000000000001 RSI: 000000000000521c RDI: 0000000000000004 [ 1348.070659][T16491] RBP: 00007f73db418090 R08: 0000000000000000 R09: 0000000000000018 [ 1348.070666][T16491] R10: 0000000000000061 R11: 0000000000000246 R12: 0000000000000001 [ 1348.070673][T16491] R13: 00007f73da826038 R14: 00007f73da825fa0 R15: 00007fff08188358 [ 1348.070689][T16491] [ 1348.644718][T16495] nvme nvme0: rdma_resolve_addr failed (-99). [ 1348.776572][ T30] audit: type=1400 audit(1792453214.054:5140): avc: denied { ioctl } for pid=16504 comm="syz.0.2633" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1348.982210][T12523] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1349.132870][T12523] usb 3-1: Using ep0 maxpacket: 16 [ 1349.135583][T12523] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1349.139424][T12523] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.139443][T12523] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1349.139466][T12523] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.140926][T12523] usb 3-1: config 0 descriptor?? [ 1350.040111][T16495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2630'. [ 1350.237727][T16506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.237964][T16506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.281912][ T30] audit: type=1400 audit(1792453215.564:5141): avc: denied { write } for pid=16505 comm="syz.2.2634" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1350.282113][ T30] audit: type=1400 audit(1792453215.564:5142): avc: denied { open } for pid=16505 comm="syz.2.2634" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1350.283214][ T30] audit: type=1400 audit(1792453215.564:5143): avc: denied { ioctl } for pid=16505 comm="syz.2.2634" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1350.284339][T16506] 0x000000000000-0x000000020000 : "" [ 1350.597908][T16506] ftl_cs: FTL header not found. [ 1350.991063][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1351.061158][T12523] microsoft 0003:045E:07DA.0009: item fetching failed at offset 31/34 [ 1351.061553][T12523] microsoft 0003:045E:07DA.0009: parse failed [ 1351.061595][T12523] microsoft 0003:045E:07DA.0009: probe with driver microsoft failed with error -22 [ 1351.127274][ T30] audit: type=1400 audit(1792453216.404:5144): avc: denied { ioctl } for pid=16526 comm="syz.8.2641" path="socket:[49318]" dev="sockfs" ino=49318 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1351.210964][T16530] FAULT_INJECTION: forcing a failure. [ 1351.210964][T16530] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.210986][T16530] CPU: 0 UID: 0 PID: 16530 Comm: syz.3.2643 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1351.211003][T16530] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1351.211008][T16530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1351.211015][T16530] Call Trace: [ 1351.211019][T16530] [ 1351.211024][T16530] dump_stack_lvl+0x100/0x190 [ 1351.211046][T16530] should_fail_ex.cold+0x5/0xa [ 1351.211062][T16530] should_failslab+0xc2/0x120 [ 1351.211079][T16530] __kmalloc_noprof+0xfc/0x840 [ 1351.211094][T16530] ? tomoyo_encode2+0xfb/0x3c0 [ 1351.211115][T16530] tomoyo_encode2+0xfb/0x3c0 [ 1351.211134][T16530] tomoyo_encode+0x29/0x50 [ 1351.211150][T16530] tomoyo_realpath_from_path+0x18c/0x690 [ 1351.211164][T16530] tomoyo_path_number_perm+0x23c/0x580 [ 1351.211179][T16530] ? tomoyo_path_number_perm+0x22e/0x580 [ 1351.211195][T16530] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1351.211216][T16530] ? __lock_acquire+0x5c0/0x1f40 [ 1351.211236][T16530] ? __fget_files+0x34/0x3d0 [ 1351.211253][T16530] ? find_held_lock+0x2b/0x80 [ 1351.211271][T16530] ? hook_file_ioctl_common+0x140/0x440 [ 1351.211287][T16530] ? __fget_files+0x21f/0x3d0 [ 1351.211305][T16530] security_file_ioctl+0xd3/0x230 [ 1351.211322][T16530] __x64_sys_ioctl+0xb7/0x210 [ 1351.211337][T16530] do_syscall_64+0x123/0x790 [ 1351.211355][T16530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.211369][T16530] RIP: 0033:0x7f73da59e1eb [ 1351.211379][T16530] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1351.211390][T16530] RSP: 002b:00007f73db417f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1351.211401][T16530] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f73da59e1eb [ 1351.211409][T16530] RDX: 00007f73db417fc0 RSI: 000000004020ae46 RDI: 0000000000000005 [ 1351.211416][T16530] RBP: 00007f73da6554b0 R08: 0000000000000000 R09: 0000000000000005 [ 1351.211422][T16530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000bff000 [ 1351.211429][T16530] R13: 0000000000000001 R14: 0000000000000000 R15: 00000000003f0000 [ 1351.211444][T16530] [ 1351.211920][T16530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1351.491318][ T30] audit: type=1400 audit(1792453216.774:5145): avc: denied { append } for pid=16505 comm="syz.2.2634" name="dvr0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1352.052890][T16535] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1352.104420][ T30] audit: type=1400 audit(1792453217.364:5146): avc: denied { getopt } for pid=16533 comm="syz.3.2645" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1353.979463][ T9] usb 3-1: USB disconnect, device number 79 [ 1354.640817][T12523] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1355.390558][T12523] usb 4-1: Using ep0 maxpacket: 32 [ 1355.391462][T12523] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1355.393565][T12523] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.393584][T12523] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.393603][T12523] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.394904][T12523] usb 4-1: config 0 descriptor?? [ 1356.424551][ T1311] aoe: packet could not be sent on wpan0. consider increasing tx_queue_len [ 1356.475659][T12523] hid_parser_main: 465 callbacks suppressed [ 1356.475684][T12523] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 1356.475700][T12523] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 1356.686722][T12523] ft260 0003:0403:6030.000A: failed to retrieve chip version [ 1356.686881][T12523] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -5 [ 1357.131588][T16579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16579 comm=syz.8.2655 [ 1358.035989][T16588] ip_tables: iptables: counters copy to user failed while replacing table [ 1358.039550][T16589] loop9: detected capacity change from 0 to 2640 [ 1358.039839][T16589] buffer_io_error: 6 callbacks suppressed [ 1358.039848][T16589] Buffer I/O error on dev loop9, logical block 0, async page read [ 1358.039867][T16589] Buffer I/O error on dev loop9, logical block 0, async page read [ 1358.039883][T16589] Buffer I/O error on dev loop9, logical block 0, async page read [ 1358.039900][T16589] Buffer I/O error on dev loop9, logical block 0, async page read [ 1358.039916][T16589] Buffer I/O error on dev loop9, logical block 0, async page read [ 1358.039940][T16589] Buffer I/O error on dev loop9, logical block 0, async page read [ 1358.039961][T16589] Buffer I/O error on dev loop9, logical block 0, async page read [ 1358.039977][T16589] Buffer I/O error on dev loop9, logical block 0, async page read [ 1358.039986][T16589] ldm_validate_partition_table(): Disk read failed. [ 1358.040000][T16589] Buffer I/O error on dev loop9, logical block 0, async page read [ 1358.040016][T16589] Buffer I/O error on dev loop9, logical block 0, async page read [ 1358.040039][T16589] Dev loop9: unable to read RDB block 0 [ 1358.040109][T16589] loop9: unable to read partition table [ 1358.040199][T16589] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1358.224118][T16586] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input199 [ 1359.017654][ T5713] usb 4-1: USB disconnect, device number 94 [ 1360.400046][T16597] netlink: 'syz.3.2661': attribute type 1 has an invalid length. [ 1360.408309][ T30] audit: type=1400 audit(1792453225.674:5147): avc: denied { unlink } for pid=16595 comm="syz.3.2661" name="#9" dev="tmpfs" ino=3202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1360.456102][T16597] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1360.479126][T16597] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2661'. [ 1362.321740][T16610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2662'. [ 1362.323722][ T30] audit: type=1400 audit(1792453227.604:5148): avc: denied { execute_no_trans } for pid=16600 comm="syz.4.2662" path="/569/file0" dev="tmpfs" ino=3272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1362.407361][ T30] audit: type=1400 audit(1792453227.684:5149): avc: denied { ioctl } for pid=16600 comm="syz.4.2662" path="socket:[49521]" dev="sockfs" ino=49521 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1362.495173][T16612] netlink: 'syz.2.2659': attribute type 11 has an invalid length. [ 1362.863443][ T30] audit: type=1400 audit(1792453228.144:5150): avc: denied { connect } for pid=16614 comm="syz.2.2665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1363.823842][T16638] loop9: detected capacity change from 0 to 2640 [ 1363.824098][T16638] buffer_io_error: 6 callbacks suppressed [ 1363.824107][T16638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.824127][T16638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.824144][T16638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.824161][T16638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.824178][T16638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.824204][T16638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.824225][T16638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.824241][T16638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.824249][T16638] ldm_validate_partition_table(): Disk read failed. [ 1363.824264][T16638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.824280][T16638] Buffer I/O error on dev loop9, logical block 0, async page read [ 1363.824304][T16638] Dev loop9: unable to read RDB block 0 [ 1363.824373][T16638] loop9: unable to read partition table [ 1363.824457][T16638] loop_reread_partitions: partition scan of loop9 (3 ) failed (rc=-5) [ 1364.023578][T16634] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input201 [ 1365.771373][T16647] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2670'. [ 1366.471753][T15371] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1366.477195][T15371] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1366.477855][T15371] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1366.480137][T15371] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1366.480378][T15371] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1366.555691][ T30] audit: type=1400 audit(1792453231.834:5151): avc: denied { mounton } for pid=16657 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1366.816750][T16666] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1366.853362][T16654] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1366.917688][T16654] FAULT_INJECTION: forcing a failure. [ 1366.917688][T16654] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.917712][T16654] CPU: 0 UID: 0 PID: 16654 Comm: syz.3.2676 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1366.917732][T16654] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1366.917737][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1366.917745][T16654] Call Trace: [ 1366.917751][T16654] [ 1366.917757][T16654] dump_stack_lvl+0x100/0x190 [ 1366.917780][T16654] should_fail_ex.cold+0x5/0xa [ 1366.917796][T16654] should_failslab+0xc2/0x120 [ 1366.917815][T16654] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1366.917830][T16654] ? n_tty_open+0x12b/0x170 [ 1366.917843][T16654] ? alloc_inode+0x183/0x250 [ 1366.917859][T16654] alloc_inode+0x183/0x250 [ 1366.917873][T16654] new_inode+0x22/0x1c0 [ 1366.917888][T16654] devpts_pty_new+0xca/0x770 [ 1366.917906][T16654] ? __pfx_devpts_pty_new+0x10/0x10 [ 1366.917923][T16654] ? ptmx_open+0x1ad/0x360 [ 1366.917942][T16654] ptmx_open+0x1d9/0x360 [ 1366.917957][T16654] ? __pfx_ptmx_open+0x10/0x10 [ 1366.917972][T16654] chrdev_open+0x234/0x6a0 [ 1366.917989][T16654] ? __pfx_chrdev_open+0x10/0x10 [ 1366.918006][T16654] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1366.918022][T16654] do_dentry_open+0x6ab/0x14d0 [ 1366.918037][T16654] ? __pfx_chrdev_open+0x10/0x10 [ 1366.918056][T16654] vfs_open+0x82/0x3f0 [ 1366.918075][T16654] path_openat+0x1a23/0x2450 [ 1366.918095][T16654] ? __pfx_path_openat+0x10/0x10 [ 1366.918116][T16654] do_file_open+0x20e/0x430 [ 1366.918134][T16654] ? __pfx_do_file_open+0x10/0x10 [ 1366.918161][T16654] ? _raw_spin_unlock+0x28/0x50 [ 1366.918176][T16654] ? alloc_fd+0x471/0x7a0 [ 1366.918197][T16654] do_sys_openat2+0x10f/0x1e0 [ 1366.918208][T16654] ? __pfx_do_sys_openat2+0x10/0x10 [ 1366.918219][T16654] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1366.918241][T16654] __x64_sys_openat+0x12d/0x210 [ 1366.918253][T16654] ? __pfx___x64_sys_openat+0x10/0x10 [ 1366.918270][T16654] do_syscall_64+0x123/0x790 [ 1366.918288][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.918301][T16654] RIP: 0033:0x7f73da59e559 [ 1366.918312][T16654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.918324][T16654] RSP: 002b:00007f73db418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1366.918336][T16654] RAX: ffffffffffffffda RBX: 00007f73da825fa0 RCX: 00007f73da59e559 [ 1366.918344][T16654] RDX: 0000000000121301 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1366.918351][T16654] RBP: 00007f73da635ad8 R08: 0000000000000000 R09: 0000000000000000 [ 1366.918358][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1366.918365][T16654] R13: 00007f73da826038 R14: 00007f73da825fa0 R15: 00007fff08188358 [ 1366.918381][T16654] [ 1368.049433][T14952] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.696219][ T4920] Bluetooth: hci5: command tx timeout [ 1368.713824][ T30] audit: type=1400 audit(1792453233.994:5152): avc: denied { mount } for pid=16684 comm="syz.8.2684" name="/" dev="gadgetfs" ino=7907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1368.867522][T16657] rxe_eth0 speed is unknown, defaulting to 1000 [ 1369.716609][T14952] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.980161][T14952] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.797633][ T4920] Bluetooth: hci5: command tx timeout [ 1370.865247][T14952] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.079365][ T30] audit: type=1400 audit(1792453236.354:5153): avc: denied { bind } for pid=16709 comm="syz.3.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1371.119188][ T30] audit: type=1400 audit(1792453236.394:5154): avc: denied { setopt } for pid=16709 comm="syz.3.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1372.188322][T16710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2692'. [ 1373.115213][T16717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1373.155321][ T4920] Bluetooth: hci5: command tx timeout [ 1373.335246][T14952] bridge_slave_1: left allmulticast mode [ 1373.335266][T14952] bridge_slave_1: left promiscuous mode [ 1373.335377][T14952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.173764][ T6608] rpcbind: server 127.0.0.1 not responding, timed out [ 1374.786660][ T30] audit: type=1400 audit(2000000000.160:5155): avc: denied { accept } for pid=16720 comm="syz.3.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1374.821374][T16721] ptp ptp0: new virtual clock ptp1 [ 1374.821391][T16721] ptp ptp0: guarantee physical clock free running [ 1374.984720][T14952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.989952][T14952] bond0 (unregistering): Released all slaves [ 1375.119047][T14952] tipc: Left network mode [ 1375.138955][T16731] netlink: 'syz.3.2695': attribute type 1 has an invalid length. [ 1375.138970][T16731] netlink: 756 bytes leftover after parsing attributes in process `syz.3.2695'. [ 1375.231425][T15371] Bluetooth: hci5: command tx timeout [ 1376.292154][T16657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.292201][T16657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.292279][T16657] bridge_slave_0: entered allmulticast mode [ 1376.293063][T16657] bridge_slave_0: entered promiscuous mode [ 1376.328987][T16657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.329036][T16657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.329103][T16657] bridge_slave_1: entered allmulticast mode [ 1376.357939][T16657] bridge_slave_1: entered promiscuous mode [ 1377.126690][ C0] ================================================================== [ 1377.126702][ C0] BUG: KASAN: double-free in rcu_free_sheaf+0x1a/0xe0 [ 1377.126722][ C0] Free of addr ffff88802fdf0c00 by task kworker/u8:1/14952 [ 1377.126730][ C0] [ 1377.126738][ C0] CPU: 0 UID: 0 PID: 14952 Comm: kworker/u8:1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1377.126754][ C0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1377.126760][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1377.126767][ C0] Workqueue: netns cleanup_net [ 1377.126782][ C0] Call Trace: [ 1377.126786][ C0] [ 1377.126791][ C0] dump_stack_lvl+0x100/0x190 [ 1377.126808][ C0] print_report+0x13d/0x4b0 [ 1377.126824][ C0] ? __virt_addr_valid+0x239/0x430 [ 1377.126837][ C0] ? rcu_free_sheaf+0x1a/0xe0 [ 1377.126849][ C0] kasan_report_invalid_free+0xb8/0x190 [ 1377.126866][ C0] ? rcu_free_sheaf+0x1a/0xe0 [ 1377.126881][ C0] ? rcu_free_sheaf+0x1a/0xe0 [ 1377.126893][ C0] check_slab_allocation+0xc3/0xf0 [ 1377.126908][ C0] __rcu_free_sheaf_prepare+0x117/0x300 [ 1377.126918][ C0] ? rcu_core+0x5eb/0x1260 [ 1377.126933][ C0] ? rcu_core+0x5eb/0x1260 [ 1377.126946][ C0] rcu_free_sheaf+0x1a/0xe0 [ 1377.126959][ C0] rcu_core+0x5f0/0x1260 [ 1377.126974][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1377.126989][ C0] ? mark_held_locks+0x40/0x70 [ 1377.127003][ C0] handle_softirqs+0x1e6/0x9d0 [ 1377.127015][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1377.127027][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1377.127038][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1377.127050][ C0] ? __ieee80211_stop_tx_ba_session+0x801/0x910 [ 1377.127066][ C0] do_softirq+0xaf/0xf0 [ 1377.127083][ C0] [ 1377.127087][ C0] [ 1377.127091][ C0] __local_bh_enable_ip+0xff/0x120 [ 1377.127105][ C0] __ieee80211_stop_tx_ba_session+0x801/0x910 [ 1377.127122][ C0] ? __pfx___ieee80211_stop_tx_ba_session+0x10/0x10 [ 1377.127140][ C0] ieee80211_sta_tear_down_BA_sessions+0xc8/0x440 [ 1377.127156][ C0] __sta_info_destroy_part2+0x78/0x510 [ 1377.127172][ C0] __sta_info_flush+0x4f6/0x720 [ 1377.127187][ C0] ? __pfx___sta_info_flush+0x10/0x10 [ 1377.127202][ C0] ? linkwatch_schedule_work+0x16f/0x1a0 [ 1377.127217][ C0] ? linkwatch_fire_event+0x74/0x270 [ 1377.127233][ C0] ieee80211_ibss_disconnect+0x195/0xbc0 [ 1377.127245][ C0] ieee80211_ibss_leave+0x4a/0x160 [ 1377.127257][ C0] cfg80211_leave_ibss+0x1ab/0x490 [ 1377.127273][ C0] cfg80211_leave_locked+0x1ad/0x470 [ 1377.127287][ C0] cfg80211_leave+0x5d/0x90 [ 1377.127300][ C0] cfg80211_netdev_notifier_call+0x30c/0x1140 [ 1377.127313][ C0] ? find_held_lock+0x2b/0x80 [ 1377.127329][ C0] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 1377.127343][ C0] ? mark_held_locks+0x40/0x70 [ 1377.127354][ C0] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1377.127368][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1377.127383][ C0] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1377.127397][ C0] ? rcu_is_watching+0x13/0xc0 [ 1377.127417][ C0] ? trace_sched_exit_tp+0x120/0x160 [ 1377.127431][ C0] ? __schedule+0x126b/0x6920 [ 1377.127444][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1377.127458][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1377.127471][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1377.127484][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1377.127497][ C0] ? lock_acquire+0x1d1/0x380 [ 1377.127509][ C0] ? wireless_nlevent_flush+0x1b/0x100 [ 1377.127523][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1377.127538][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1377.127552][ C0] ? inetdev_event+0x149/0x17f0 [ 1377.127565][ C0] ? igmp_netdev_event+0x7b/0x880 [ 1377.127577][ C0] ? __pfx_igmp_netdev_event+0x10/0x10 [ 1377.127588][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1377.127601][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1377.127614][ C0] ? ipmr_device_event+0x1c4/0x230 [ 1377.127626][ C0] notifier_call_chain+0x99/0x3f0 [ 1377.127643][ C0] call_netdevice_notifiers_info+0xbe/0x110 [ 1377.127657][ C0] __dev_close_many+0xff/0x710 [ 1377.127670][ C0] ? __pfx___dev_close_many+0x10/0x10 [ 1377.127683][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1377.127697][ C0] netif_close_many+0x243/0x810 [ 1377.127710][ C0] ? find_held_lock+0x2b/0x80 [ 1377.127726][ C0] ? debug_mutex_remove_waiter+0xa0/0x320 [ 1377.127742][ C0] ? __pfx_netif_close_many+0x10/0x10 [ 1377.127756][ C0] ? mark_held_locks+0x40/0x70 [ 1377.127769][ C0] netif_close+0x17f/0x230 [ 1377.127781][ C0] ? __pfx_netif_close+0x10/0x10 [ 1377.127796][ C0] dev_close+0xaa/0x240 [ 1377.127808][ C0] cfg80211_shutdown_all_interfaces+0xb4/0x250 [ 1377.127821][ C0] ieee80211_remove_interfaces+0xc3/0x6e0 [ 1377.127835][ C0] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1377.127850][ C0] ieee80211_unregister_hw+0x55/0x360 [ 1377.127865][ C0] hwsim_exit_net+0x891/0x1500 [ 1377.127879][ C0] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1377.127890][ C0] ? ip_vs_sync_net_cleanup+0x84/0x90 [ 1377.127903][ C0] ? __ip_vs_dev_cleanup_batch+0x21e/0x2a0 [ 1377.127914][ C0] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1377.127926][ C0] ops_undo_list+0x2ee/0xab0 [ 1377.127939][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 1377.127951][ C0] ? idr_destroy+0x62/0x2e0 [ 1377.127964][ C0] cleanup_net+0x499/0x920 [ 1377.127977][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1377.127989][ C0] ? process_one_work+0xa2c/0x1b10 [ 1377.128000][ C0] ? process_one_work+0x906/0x1b10 [ 1377.128011][ C0] process_one_work+0xac7/0x1b10 [ 1377.128023][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1377.128040][ C0] ? lock_acquire+0x1d1/0x380 [ 1377.128053][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1377.128066][ C0] worker_thread+0x5ef/0xe50 [ 1377.128078][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1377.128088][ C0] ? kthread+0x13a/0x450 [ 1377.128102][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1377.128111][ C0] kthread+0x373/0x450 [ 1377.128126][ C0] ? __pfx_kthread+0x10/0x10 [ 1377.128140][ C0] ret_from_fork+0x730/0xd60 [ 1377.128153][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1377.128165][ C0] ? __switch_to+0x800/0x10f0 [ 1377.128180][ C0] ? __pfx_kthread+0x10/0x10 [ 1377.128195][ C0] ret_from_fork_asm+0x1a/0x30 [ 1377.128210][ C0] [ 1377.128214][ C0] [ 1377.128217][ C0] Allocated by task 1163: [ 1377.128222][ C0] kasan_save_stack+0x30/0x50 [ 1377.128235][ C0] kasan_save_track+0x14/0x30 [ 1377.128248][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1377.128260][ C0] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1377.128270][ C0] hwsim_update_pib.isra.0+0x53/0x410 [ 1377.128284][ C0] hwsim_set_promiscuous_mode+0x14f/0x3a0 [ 1377.128299][ C0] drv_set_promiscuous_mode+0x133/0x330 [ 1377.128310][ C0] mac802154_scan_worker+0x68e/0x1240 [ 1377.128320][ C0] process_one_work+0xac7/0x1b10 [ 1377.128328][ C0] worker_thread+0x5ef/0xe50 [ 1377.128336][ C0] kthread+0x373/0x450 [ 1377.128349][ C0] ret_from_fork+0x730/0xd60 [ 1377.128360][ C0] ret_from_fork_asm+0x1a/0x30 [ 1377.128370][ C0] [ 1377.128372][ C0] Freed by task 14952: [ 1377.128377][ C0] kasan_save_stack+0x30/0x50 [ 1377.128389][ C0] kasan_save_track+0x14/0x30 [ 1377.128406][ C0] kasan_save_free_info+0x3b/0x70 [ 1377.128416][ C0] __kasan_slab_free+0x5f/0x80 [ 1377.128429][ C0] __rcu_free_sheaf_prepare+0x5d/0x300 [ 1377.128438][ C0] rcu_free_sheaf+0x1a/0xe0 [ 1377.128449][ C0] rcu_core+0x5f0/0x1260 [ 1377.128461][ C0] handle_softirqs+0x1e6/0x9d0 [ 1377.128471][ C0] do_softirq+0xaf/0xf0 [ 1377.128480][ C0] __local_bh_enable_ip+0xff/0x120 [ 1377.128490][ C0] __ieee80211_stop_tx_ba_session+0x801/0x910 [ 1377.128504][ C0] ieee80211_sta_tear_down_BA_sessions+0xc8/0x440 [ 1377.128517][ C0] __sta_info_destroy_part2+0x78/0x510 [ 1377.128530][ C0] __sta_info_flush+0x4f6/0x720 [ 1377.128543][ C0] ieee80211_ibss_disconnect+0x195/0xbc0 [ 1377.128552][ C0] ieee80211_ibss_leave+0x4a/0x160 [ 1377.128562][ C0] cfg80211_leave_ibss+0x1ab/0x490 [ 1377.128575][ C0] cfg80211_leave_locked+0x1ad/0x470 [ 1377.128586][ C0] cfg80211_leave+0x5d/0x90 [ 1377.128597][ C0] cfg80211_netdev_notifier_call+0x30c/0x1140 [ 1377.128608][ C0] notifier_call_chain+0x99/0x3f0 [ 1377.128622][ C0] call_netdevice_notifiers_info+0xbe/0x110 [ 1377.128634][ C0] __dev_close_many+0xff/0x710 [ 1377.128646][ C0] netif_close_many+0x243/0x810 [ 1377.128658][ C0] netif_close+0x17f/0x230 [ 1377.128669][ C0] dev_close+0xaa/0x240 [ 1377.128679][ C0] cfg80211_shutdown_all_interfaces+0xb4/0x250 [ 1377.128690][ C0] ieee80211_remove_interfaces+0xc3/0x6e0 [ 1377.128702][ C0] ieee80211_unregister_hw+0x55/0x360 [ 1377.128715][ C0] hwsim_exit_net+0x891/0x1500 [ 1377.128724][ C0] ops_undo_list+0x2ee/0xab0 [ 1377.128734][ C0] cleanup_net+0x499/0x920 [ 1377.128745][ C0] process_one_work+0xac7/0x1b10 [ 1377.128753][ C0] worker_thread+0x5ef/0xe50 [ 1377.128762][ C0] kthread+0x373/0x450 [ 1377.128774][ C0] ret_from_fork+0x730/0xd60 [ 1377.128785][ C0] ret_from_fork_asm+0x1a/0x30 [ 1377.128795][ C0] [ 1377.128797][ C0] The buggy address belongs to the object at ffff88802fdf0c00 [ 1377.128797][ C0] which belongs to the cache kmalloc-64 of size 64 [ 1377.128805][ C0] The buggy address is located 0 bytes inside of [ 1377.128805][ C0] 64-byte region [ffff88802fdf0c00, ffff88802fdf0c40) [ 1377.128815][ C0] [ 1377.128818][ C0] The buggy address belongs to the physical page: [ 1377.128825][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2fdf0 [ 1377.128835][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1377.128845][ C0] page_type: f5(slab) [ 1377.128854][ C0] raw: 00fff00000000000 ffff88801d0328c0 dead000000000100 dead000000000122 [ 1377.128864][ C0] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 1377.128869][ C0] page dumped because: kasan: bad access detected [ 1377.128874][ C0] page_owner tracks the page as allocated [ 1377.128878][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10028057103 [ 1377.128894][ C0] post_alloc_hook+0xfd/0x120 [ 1377.128905][ C0] get_page_from_freelist+0x110d/0x35d0 [ 1377.128916][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1377.128927][ C0] new_slab+0xa9/0x6e0 [ 1377.128937][ C0] refill_objects+0xe3/0x410 [ 1377.128947][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 1377.128957][ C0] __kmalloc_noprof+0x67c/0x840 [ 1377.128969][ C0] handler_new_ref+0x1ab/0xc60 [ 1377.128982][ C0] v4l2_ctrl_add_handler+0x223/0x300 [ 1377.128994][ C0] vivid_create_controls+0x33ce/0x3e80 [ 1377.129006][ C0] vivid_probe.cold+0x4f1e/0x921e [ 1377.129020][ C0] platform_probe+0x106/0x1d0 [ 1377.129032][ C0] really_probe+0x241/0xa60 [ 1377.129041][ C0] __driver_probe_device+0x210/0x460 [ 1377.129049][ C0] driver_probe_device+0x4a/0x140 [ 1377.129058][ C0] __driver_attach+0x21f/0x5b0 [ 1377.129067][ C0] page_owner free stack trace missing [ 1377.129070][ C0] [ 1377.129073][ C0] Memory state around the buggy address: [ 1377.129078][ C0] ffff88802fdf0b00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1377.129085][ C0] ffff88802fdf0b80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 1377.129093][ C0] >ffff88802fdf0c00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1377.129098][ C0] ^ [ 1377.129104][ C0] ffff88802fdf0c80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1377.129111][ C0] ffff88802fdf0d00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1377.129116][ C0] ================================================================== [ 1377.129129][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1378.240854][ C0] CPU: 0 UID: 0 PID: 14952 Comm: kworker/u8:1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 1378.251937][ C0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 1378.258065][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1378.268117][ C0] Workqueue: netns cleanup_net [ 1378.272870][ C0] Call Trace: [ 1378.276129][ C0] [ 1378.278953][ C0] dump_stack_lvl+0x100/0x190 [ 1378.283612][ C0] vpanic+0x553/0x970 [ 1378.287829][ C0] ? __pfx_vpanic+0x10/0x10 [ 1378.292304][ C0] ? mark_held_locks+0x40/0x70 [ 1378.297041][ C0] ? irqentry_exit+0x2c9/0xa90 [ 1378.301794][ C0] panic+0xd1/0xe0 [ 1378.305501][ C0] ? __pfx_panic+0x10/0x10 [ 1378.309898][ C0] ? rcu_free_sheaf+0x1a/0xe0 [ 1378.314570][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1378.319919][ C0] ? rcu_free_sheaf+0x1a/0xe0 [ 1378.324569][ C0] end_report.part.0+0x3a/0x90 [ 1378.329320][ C0] kasan_report_invalid_free.cold+0xd/0x12 [ 1378.335104][ C0] ? rcu_free_sheaf+0x1a/0xe0 [ 1378.339760][ C0] ? rcu_free_sheaf+0x1a/0xe0 [ 1378.344428][ C0] check_slab_allocation+0xc3/0xf0 [ 1378.349515][ C0] __rcu_free_sheaf_prepare+0x117/0x300 [ 1378.355033][ C0] ? rcu_core+0x5eb/0x1260 [ 1378.359425][ C0] ? rcu_core+0x5eb/0x1260 [ 1378.363816][ C0] rcu_free_sheaf+0x1a/0xe0 [ 1378.368299][ C0] rcu_core+0x5f0/0x1260 [ 1378.372518][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1378.377182][ C0] ? mark_held_locks+0x40/0x70 [ 1378.381920][ C0] handle_softirqs+0x1e6/0x9d0 [ 1378.386657][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1378.391924][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1378.397189][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1378.402911][ C0] ? __ieee80211_stop_tx_ba_session+0x801/0x910 [ 1378.409135][ C0] do_softirq+0xaf/0xf0 [ 1378.413271][ C0] [ 1378.416196][ C0] [ 1378.419116][ C0] __local_bh_enable_ip+0xff/0x120 [ 1378.424201][ C0] __ieee80211_stop_tx_ba_session+0x801/0x910 [ 1378.430244][ C0] ? __pfx___ieee80211_stop_tx_ba_session+0x10/0x10 [ 1378.436811][ C0] ieee80211_sta_tear_down_BA_sessions+0xc8/0x440 [ 1378.443201][ C0] __sta_info_destroy_part2+0x78/0x510 [ 1378.448636][ C0] __sta_info_flush+0x4f6/0x720 [ 1378.453472][ C0] ? __pfx___sta_info_flush+0x10/0x10 [ 1378.458827][ C0] ? linkwatch_schedule_work+0x16f/0x1a0 [ 1378.464449][ C0] ? linkwatch_fire_event+0x74/0x270 [ 1378.469709][ C0] ieee80211_ibss_disconnect+0x195/0xbc0 [ 1378.475316][ C0] ieee80211_ibss_leave+0x4a/0x160 [ 1378.480411][ C0] cfg80211_leave_ibss+0x1ab/0x490 [ 1378.485674][ C0] cfg80211_leave_locked+0x1ad/0x470 [ 1378.490934][ C0] cfg80211_leave+0x5d/0x90 [ 1378.495411][ C0] cfg80211_netdev_notifier_call+0x30c/0x1140 [ 1378.501467][ C0] ? find_held_lock+0x2b/0x80 [ 1378.506120][ C0] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 1378.512595][ C0] ? mark_held_locks+0x40/0x70 [ 1378.517339][ C0] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1378.523225][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1378.528399][ C0] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 1378.534265][ C0] ? rcu_is_watching+0x13/0xc0 [ 1378.539012][ C0] ? trace_sched_exit_tp+0x120/0x160 [ 1378.544340][ C0] ? __schedule+0x126b/0x6920 [ 1378.549013][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1378.553946][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1378.558875][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1378.563796][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1378.568724][ C0] ? lock_acquire+0x1d1/0x380 [ 1378.573399][ C0] ? wireless_nlevent_flush+0x1b/0x100 [ 1378.578863][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1378.584743][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1378.590614][ C0] ? inetdev_event+0x149/0x17f0 [ 1378.595439][ C0] ? igmp_netdev_event+0x7b/0x880 [ 1378.600434][ C0] ? __pfx_igmp_netdev_event+0x10/0x10 [ 1378.605870][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1378.611753][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1378.617638][ C0] ? ipmr_device_event+0x1c4/0x230 [ 1378.622735][ C0] notifier_call_chain+0x99/0x3f0 [ 1378.627751][ C0] call_netdevice_notifiers_info+0xbe/0x110 [ 1378.633621][ C0] __dev_close_many+0xff/0x710 [ 1378.638359][ C0] ? __pfx___dev_close_many+0x10/0x10 [ 1378.643703][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 1378.648615][ C0] netif_close_many+0x243/0x810 [ 1378.653448][ C0] ? find_held_lock+0x2b/0x80 [ 1378.658110][ C0] ? debug_mutex_remove_waiter+0xa0/0x320 [ 1378.663805][ C0] ? __pfx_netif_close_many+0x10/0x10 [ 1378.669250][ C0] ? mark_held_locks+0x40/0x70 [ 1378.673995][ C0] netif_close+0x17f/0x230 [ 1378.678396][ C0] ? __pfx_netif_close+0x10/0x10 [ 1378.683315][ C0] dev_close+0xaa/0x240 [ 1378.687443][ C0] cfg80211_shutdown_all_interfaces+0xb4/0x250 [ 1378.693577][ C0] ieee80211_remove_interfaces+0xc3/0x6e0 [ 1378.699271][ C0] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1378.705577][ C0] ieee80211_unregister_hw+0x55/0x360 [ 1378.710926][ C0] hwsim_exit_net+0x891/0x1500 [ 1378.715664][ C0] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1378.720835][ C0] ? ip_vs_sync_net_cleanup+0x84/0x90 [ 1378.726178][ C0] ? __ip_vs_dev_cleanup_batch+0x21e/0x2a0 [ 1378.731974][ C0] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1378.737229][ C0] ops_undo_list+0x2ee/0xab0 [ 1378.741811][ C0] ? __pfx_ops_undo_list+0x10/0x10 [ 1378.747248][ C0] ? idr_destroy+0x62/0x2e0 [ 1378.751724][ C0] cleanup_net+0x499/0x920 [ 1378.756210][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1378.761123][ C0] ? process_one_work+0xa2c/0x1b10 [ 1378.766204][ C0] ? process_one_work+0x906/0x1b10 [ 1378.771383][ C0] process_one_work+0xac7/0x1b10 [ 1378.776293][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1378.781641][ C0] ? lock_acquire+0x1d1/0x380 [ 1378.786298][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 1378.791212][ C0] worker_thread+0x5ef/0xe50 [ 1378.795775][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1378.800866][ C0] ? kthread+0x13a/0x450 [ 1378.805084][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1378.810167][ C0] kthread+0x373/0x450 [ 1378.814233][ C0] ? __pfx_kthread+0x10/0x10 [ 1378.818804][ C0] ret_from_fork+0x730/0xd60 [ 1378.823406][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1378.828530][ C0] ? __switch_to+0x800/0x10f0 [ 1378.833220][ C0] ? __pfx_kthread+0x10/0x10 [ 1378.837818][ C0] ret_from_fork_asm+0x1a/0x30 [ 1378.842560][ C0] [ 1378.845589][ C0] Kernel Offset: disabled [ 1378.849890][ C0] Rebooting in 86400 seconds..