last executing test programs: 4m16.801323681s ago: executing program 32 (id=197): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2e, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000080)) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x0, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x40007, 0x0}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002500)={0x0, [{0x3, 0x0, 0x61c8, 0x0}, {0x0, 0x0, 0x4855bac6, 0x0}, {0x1, 0x0, 0x10, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x2, 0x0, 0xb2, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x0, 0x0, 0xf5, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0xbbd6, 0x0}, {0x1, 0x0, 0xffffb0f2, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x3, 0x5e08, 0x1000, &(0x7f0000001440)="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"}, {0x4, 0x0, 0x3, 0x0}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x1, 0x1}}}, 0x24}}, 0x0) 3m0.17216457s ago: executing program 2 (id=476): munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000002c40)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x5, 0x58, 0x66, 0x0, 0xd, 0x2f, 0x0, @private=0xa010102, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x3, 0x0, 0x0, 0x3, 0x5, 0x9}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x4, 0x2, 0x2, 0x0, 0x1, 0x1, 0x2, 0x40}, 0x2, {0x3, 0x7fff, 0x0, 0x5, 0x0, 0x0, 0x3, 0x1, 0x1}}}}}}}}, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) ptrace$peeksig(0x4209, r3, &(0x7f0000000200)={0x401, 0x0, 0x5}, &(0x7f0000019500)=[{}, {}, {}, {}, {}]) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000500)=""/102400, 0x19000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000001}, 0x10) r8 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x3}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f00000007c0)="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", 0x104, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r8, r9, r9}, &(0x7f0000000540)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000340)={'wp256-generic\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714", 0x33}) 2m58.537979565s ago: executing program 2 (id=479): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/syz_tun/napi_defer_hard_irqs\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='10', 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r2, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x14, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x28003, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) write(r7, &(0x7f0000001640)="8b", 0x11) 2m53.67318299s ago: executing program 2 (id=490): socket$inet_tcp(0x2, 0x1, 0x0) (async) tkill(0x0, 0x9) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = dup(r0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) (async) r2 = getpid() sched_setattr(r2, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x9, 0x80000001, 0x3, 0x4, 0xffff, 0x0, 0x300000}, 0x0) (async) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf947b000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sched_setscheduler(r2, 0x6, &(0x7f00000001c0)=0xfffffff4) (async) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=rdma,port=\x00\x00\x00\x00\x00\x00\x00\t0000004e24,\x00']) (async) r5 = socket$kcm(0xa, 0x7, 0x0) r6 = socket(0x2, 0x80805, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xa2) r8 = getuid() setsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={r2, r8, 0xee00}, 0xc) (async) setns(0xffffffffffffffff, 0x64000000) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000140)={0x84, @private=0xa010100, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6d}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) write$binfmt_register(r1, &(0x7f00000003c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8, 0x3a, ',\x00\xaa0\xebo\xa5\x0f\xbe^\x97\xfck\xc5\\\x85\xe0S\xba\xecl\xf2>wA\xf0\x1b]\xe4\xe8\x9c\x11\x94\x7f\xd9\x16\xe8\xfc\xbb\x169\xc0\xb7\x8e\xfe\x16\x18\x9b\xf2\xe7g\b\xe4\xc4]\xd9\xb4\xf3&\xb3\x96^\x8aI\xe4\x96\x1a\xd0\f8\x82>\x87IIJ\x82f\xdf\xff\xc0\x85\x05\xe6xJs\xc0s\x12\xd3{\x0e>\x98\x96\x06\xa1]x.}\xae~\xe93\x90&1\xc5@_Avg\x00G9H\x81i\xb2\x03\x9c\x9f\x99RqI=\xff\x1b\x18\x83\x8c\xca^*\xf5n^\x04\xe0\x8f|\xb4\xed\xe1\x0f\x11\x94\xc3d>Y\x8f_,l\xef\xb1\x94\'\xf55XRC)\xa55\x87v\xb0\xe6\xa5\xf9+\xd3@\xe6\x81\xe9H\xb0\xe1\xb0\x99C\x1b=\x05\xd34\xa6Z?\xb99\xaex\xc8-\x17\x87[\xc1In|:\x9a\xc4;v\x17Qm\xe3\xdc\xa5\xd2\xbf\xe5:B\xc5\xe7W\x0e\xcb\x16|\xef\x9e\xb8\xc7J\x18\xd3_\x02\xe1p\xa7f\xca\x10\xfc\xa7g\xfe\x8f}8\xd0\x1b\x7f\xfb\x00\x9fX!\xe1A\xaf\f\x11\x1c\x01\xfc\xf6\xcf1\x11\x01s\xbb2\xa6\xa6\xeb\xe5\xf0\xdd\x95C\xe0\xca\x11*\x02\xd8|\xd1[\xe2/-\xa1\x8a\xd2\xb0S\xa8E\xad\x9d1\x15e\xf9\b\xa8', 0x3a, 'lblc\x00', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x46, 0x4f, 0x220407399f043597, 0x50, 0x43]}, 0x187) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, 0x0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000180)={0x6, 0x4}, 0x8) 2m52.244815523s ago: executing program 2 (id=493): ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x72, {"b8010000000f01d966ba2000b047eeb9800000c00f3235000400000f30410f01f80fc77dd1c744240200000000c744240600000000c482f2f7500048b83c000000000000000f23d8420f210035000000e00f23f8e999b90000c48285bce4f3dfcd"}}], 0x72}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x2, 0x2000, &(0x7f0000001000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000002c0)={[{0x5, 0x4, 0x5, 0x5, 0x2, 0x12, 0x5, 0xd, 0xb6, 0x3, 0xe, 0x5, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xfb, 0x2, 0x3, 0x1f, 0x3, 0x4, 0x7b, 0x20e}, {0x6, 0x15, 0x18, 0x34, 0x48, 0xfd, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x0, 0x7f, 0x2004cb, 0x1, 0xfffffd, 0x5, 0x5, 0x745, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) utimes(&(0x7f0000000500)='./cgroup.cpu/cgroup.procs\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x17}, @l2cap_cid_signaling={{0x13}, [@l2cap_info_req={{0xa, 0xd, 0x2}, {0x13}}, @l2cap_info_req={{0xa, 0xf4, 0x2}, {0x3}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x9, 0x68}}]}}, 0x1c) 2m48.688572009s ago: executing program 2 (id=503): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) io_uring_enter(r1, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) ioctl$UBLK_U_CMD_START_DEV(r1, 0xc0207506, &(0x7f0000002080)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002100)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000002140)='auxv\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0xda2) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000040)={0x0, 0x0, 0x0, @lost_msgs}) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0) 2m47.172947967s ago: executing program 2 (id=509): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="54000000270001000000000000000000060100002000018008000200746370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$pppl2tp(r1, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) connect$unix(r6, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000200)) 2m42.960666022s ago: executing program 5 (id=519): socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001964d408861a92e03f53010203010902240001020010030904"], 0x0) 2m40.421096211s ago: executing program 5 (id=526): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000004c0)={{0x2, 0x4e22, @multicast1}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @empty}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048847) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002500)=ANY=[@ANYRESOCT], 0x5c}}, 0x4048081) syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x1e1000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd690349e8001406fffe800000000000000000000000000039fe8000000000bafdbdb57eeae90800aa4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2000190780ffd"], 0x0) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002480)={0x50, 0xfffffffffffffff5, r10, {0x7, 0x2d, 0x400, 0x200, 0x4, 0x0, 0x5, 0x3, 0x0, 0x0, 0x80, 0x9}}, 0x50) 2m39.494714323s ago: executing program 5 (id=529): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00', @ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00000008001100070000000800", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x96cd, 0x400, 0x0, 0x277}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000001c0)=""/157, 0x9d}], 0x2) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x40, 0x0, 0xffffffffffffffff, 0x9, 0x3, 0x2f05, 0x18, 0x0, {0x1}}) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r7, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$comedi(0xffffff9c, &(0x7f0000000480)='/dev/comedi4\x00', 0x80a000, 0x0) ioctl$COMEDI_SETRSUBD(r12, 0x6410) 2m39.291424922s ago: executing program 5 (id=531): r0 = openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000100), 0x8) 2m38.384279276s ago: executing program 5 (id=532): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgid(0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x60}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000004c0)=""/32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) 2m34.523366048s ago: executing program 5 (id=536): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x2, 0x200, 0x2, 0x2b}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r3, 0x1a, 0x0, 0x1) r4 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000080)={0xe00, 0x34324142, 0x640, 0x2d0, 0x3, @stepwise={{0x9, 0x80000000}, {0x10001, 0x101}, {0x4, 0xa05}}}) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x38201) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000180)="660f73f3c1b8a3058ed80fc75cb1660f3acf80386c67660fc7340f221abad104b030eef0818e1be506860f8bca00652e260f01cf", 0x34}], 0x1, 0x3d, &(0x7f00000004c0)=[@cstype3={0x5, 0x3}], 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz2\x00', 0x1ff) 2m32.977585846s ago: executing program 4 (id=542): munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000002c40)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x5, 0x58, 0x66, 0x0, 0xd, 0x2f, 0x0, @private=0xa010102, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x3, 0x0, 0x0, 0x3, 0x5, 0x9}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x4, 0x2, 0x2, 0x0, 0x1, 0x1, 0x2, 0x40}, 0x2, {0x3, 0x7fff, 0x0, 0x5, 0x0, 0x0, 0x3, 0x1, 0x1}}}}}}}}, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) ptrace$peeksig(0x4209, r3, &(0x7f0000000200)={0x401, 0x0, 0x5}, &(0x7f0000019500)=[{}, {}, {}, {}, {}]) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000500)=""/102400, 0x19000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2=0xe0000001}, 0x10) r8 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x3}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f00000007c0)="370c099069effa43de3e1404db09b4ce1ef77bde4bf6e750026f23029a50d442d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e88827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbdc642dd67d970604a69b4f22cd0076beedda8056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84010000000000668e8fd0e52ce0705ae511456c4d540796f9ae7d360fc41b1bbadf8b456ff7f5b3b265090000000000000000000000000000000000000000000000fbb55ea3cbf52f2c9c9fbf99c32e0a28b4b12c5a92a8986671e6855db6d1205955326a07d5db96e89c535f433277244a359105f0b98bfac9bff9", 0x104, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r8, r9, r9}, &(0x7f0000000540)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000340)={'wp256-generic\x00'}, &(0x7f0000000280)="708803449262ddb5bda92158536f78c390609a10de442b2c85a693afd7d8e5ffc37e1b3aebbdae8dc970f20781e971fc777714", 0x33}) 2m31.851944601s ago: executing program 4 (id=544): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe0000010000000005000100", @ANYRES32], 0x2c}}, 0x0) (fail_nth: 6) 2m30.759054898s ago: executing program 33 (id=509): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="54000000270001000000000000000000060100002000018008000200746370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$pppl2tp(r1, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) connect$unix(r6, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000200)) 2m29.776504591s ago: executing program 4 (id=552): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x9, 0x3}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r5, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x28000004}, 0x2400c054) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000200)=r10) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r11 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r12, 0x890b, &(0x7f0000000340)={@null, 0x5, 'veth1_to_team\x00'}) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) fsmount(r11, 0x0, 0x0) 2m28.10026237s ago: executing program 4 (id=555): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$khugepaged_scan(r0, 0x0, 0x0) 2m28.092131387s ago: executing program 4 (id=556): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgid(0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x60}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000004c0)=""/32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r5, &(0x7f00000000c0)='mydomain / 64\n', 0xe) sched_setaffinity(r3, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xe, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1}, {0x2, 0x0, 0x7}, {0x1, 0x5, 0x4}, 0x0, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) sched_setaffinity(r3, 0x8, &(0x7f0000000500)=0x3c00000000000000) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 2m25.400769237s ago: executing program 4 (id=558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 2m17.724501557s ago: executing program 34 (id=536): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x2, 0x200, 0x2, 0x2b}, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r3, 0x1a, 0x0, 0x1) r4 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000080)={0xe00, 0x34324142, 0x640, 0x2d0, 0x3, @stepwise={{0x9, 0x80000000}, {0x10001, 0x101}, {0x4, 0xa05}}}) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x38201) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, &(0x7f0000000180)="660f73f3c1b8a3058ed80fc75cb1660f3acf80386c67660fc7340f221abad104b030eef0818e1be506860f8bca00652e260f01cf", 0x34}], 0x1, 0x3d, &(0x7f00000004c0)=[@cstype3={0x5, 0x3}], 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz2\x00', 0x1ff) 2m9.289048099s ago: executing program 35 (id=558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 1m47.899234827s ago: executing program 6 (id=654): r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000080)={0x40000000, 0x274, "71201151327bb002f756da55136cf72eaa36c0d37441d3e22939878d4d3b1ea0", 0x3, 0x0, 0xffffffffffffffff, 0x7, 0xb7e5, 0x9ec2, 0x9, 0x6a399438, [0x1, 0xe, 0x2, 0xfffffff9]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) mkdirat(r1, &(0x7f0000000000)='./tracing\x00', 0x0) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/trace_clock\x00', 0x1, 0x0) write(r2, 0x0, 0x3f) 1m47.744150887s ago: executing program 6 (id=655): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f05000000dc3800000200000009000000005f00003e2e"], &(0x7f0000000340)=""/250, 0x37, 0xfa, 0x9}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgrp2\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cgrp2\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgrp2/cgroup.subtree_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='+cpuset\n\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cgrp2/p0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgrp2/p0/cpuset.cpus\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='0\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./cgrp2/p0/cpuset.cpus.partition\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='root\n', 0x5) write(r3, &(0x7f0000000500)='member\n\x00', 0x7) write(r3, &(0x7f0000000480)='root\n\x00', 0x5) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r5 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000d2e000/0x4000)=nil, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x1, 0x62}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000b1e30b70f9eaf0f59f1e18fcedd845e3a97cf221667f34f8fff3757d38ff3daefb37583ad48e9eceb59da3002bb066e90bb2304885ee93adce74bb01bedfb5b6d3d014dee9680ce977de5b0e1dee8345e66fe50c26bdba8edf381a8784471302489a8dc773b05f55a1002c952a41e9eabcfcbe72f4fcd5a8cc3e1cae2c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000040)) 1m46.573335489s ago: executing program 6 (id=658): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r2, @ANYRES64, @ANYRES32=r2, @ANYBLOB="aa294ce22ad1817d4caa3d59bb53", @ANYRESDEC, @ANYRES64=r2, @ANYRESOCT=r1, @ANYBLOB="df959f6a95c7298dbda5bd3a938799126370f4a3b4d8c180b9530d76c3034d97dc1fa135d161d850fd6d66d799f38d08ddab120ff9d75a4ebae3b299ee81d5d6a8b0cbdafe27b9c3f256d39c82865eba56dbf4d8eb926e258e0b0529cbe0e38b87559f1f7d2d62eb20cace0d9582a5727e775243b356822f6ce82f21e98a65014b74b1604b06545e6bc1232f0aa3aa295a9597e8f6cb6290"], 0x1c}}, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x41) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r7 = getpgrp(0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r9 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r9, 0x1, 0x0) read$msr(r5, &(0x7f0000032680)=""/102396, 0xfffffffffffffcb7) unshare(0x20000400) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) pipe2(&(0x7f0000001440), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="b8fae1e4e9290b33bd97bd4523141f826619e7504fdbef9ec9018d5c33dcdac70a5f878e5e8625bcbf0a490bf85e04216204403b93d58dad0913e9805f935c811b3dacaebfc67a88e9fe5c4732b7ec7d8573bd5aa098e3ff3530120be257400c081971c388296527e4166a1902418b5d16b338bab97c7e04e6b31c3d6ccec31d2d149d8b8f24538bf21e741dd6e747c6"], 0x50) 1m44.396310054s ago: executing program 6 (id=663): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0xfe, 0xf}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 1m43.130453197s ago: executing program 6 (id=667): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgid(0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x60}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000004c0)=""/32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r5, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 1m39.408887214s ago: executing program 6 (id=670): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000004c0)={{0x2, 0x4e22, @multicast1}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @empty}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048847) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002500)=ANY=[@ANYRESOCT], 0x5c}}, 0x4048081) syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x1e1000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd690349e8001406fffe800000000000000000000000000039fe8000000000bafdbdb57eeae90800aa4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2000190780ffd"], 0x0) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002480)={0x50, 0xfffffffffffffff5, r9, {0x7, 0x2d, 0x400, 0x200, 0x4, 0x0, 0x5, 0x3, 0x0, 0x0, 0x80, 0x9}}, 0x50) 1m23.283484677s ago: executing program 36 (id=670): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000004c0)={{0x2, 0x4e22, @multicast1}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @empty}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048847) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002500)=ANY=[@ANYRESOCT], 0x5c}}, 0x4048081) syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x1e1000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd690349e8001406fffe800000000000000000000000000039fe8000000000bafdbdb57eeae90800aa4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2000190780ffd"], 0x0) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002480)={0x50, 0xfffffffffffffff5, r9, {0x7, 0x2d, 0x400, 0x200, 0x4, 0x0, 0x5, 0x3, 0x0, 0x0, 0x80, 0x9}}, 0x50) 55.995576912s ago: executing program 3 (id=742): setns(0xc9, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 55.806293448s ago: executing program 3 (id=744): socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000380)='binfmt_misc\x00', 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001000000050010008000000005001b00df000000080007000200000008003a"], 0x94}}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4740099b7424ba0f, 0x8010, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000300)='(', 0x1}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc8}, 0x12180) r8 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r8, 0x0, 0x0, &(0x7f0000000300)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f0000000440)="af827bd31474cce0969114e987054beb66ff6d14e27c1ac8ab24c1bc891ef27d93141d8978ce9fa59db1e893fc448ad2320e3ef80f820a0453567a3efc2880e147d949f1447d9736490c521ab373784b5979c8bbd71a8d8528d4268d8ffc7443fa7601b8c8061fb781a625bb812dc5047229d0565660fe99eebd0b5541e5d1b6696e5c6576487f91c1ab8a1132a7eaaa61ebd862a7030c076a2fc996dae65418265de39d69eb57555f5b0776a2b7f887522604eb6c9e28c38011ed6edcc39bb067e2b66709c4fa", &(0x7f0000000540)=""/48, &(0x7f0000000580), &(0x7f00000005c0)="f3a1e54daf5c0a13cfe62ab7250b1b258ce96dc5fd7222", 0xe, r6, 0x4}, 0x38) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000340)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r8, 0x0, &(0x7f0000000140)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x4, 0x8f0, 0x0, 0x0, 0x1000, 0x7f, r4, 0x0, 0x48}}}, &(0x7f00000001c0)=0x0) syz_ublk_setup_queues(r10, r11, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x42044, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2080, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa11, 0x0, 0x40000003, 0x3d2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd39e, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 52.753117693s ago: executing program 3 (id=750): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='V;', 0x2) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[], 0x40000) r4 = accept4$unix(r2, 0x0, 0x0, 0x80000) recvmmsg(r4, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)=""/240, 0xf0}, {0x0}], 0x2}, 0x1bf}], 0x1, 0x20022, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x5, 0x55, {0x55, 0x38, "5360f30db48216235d3725e1c4d852054c12c60f903bf6f702b1ce7b38c2edac453b5b9321da4d9c38961670b83a247c0ce45cff04aae848e149fb0e61bd77097a51b9b9073a4bc6f091b4f7f6431a49cc97d7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000140)={0x40, 0xa, 0x62, "ff4f330e171b0be07163f7cb7d2a62097dc2638db2061a1079feda45ed6623de803212524d2682353acf1a25b76370003bcbdc3858644a78a3726699a33a281ebe18b4c8491578053c57fd325acb0507fcb1d87e27a64ba09f4d23ca71595d637742"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000240)={0x20, 0x81, 0x2, "f5dc"}, &(0x7f0000000280)={0x20, 0x82, 0x2, "9836"}, &(0x7f00000002c0)={0x20, 0x83, 0x1, "f2"}, &(0x7f0000000300)={0x20, 0x84, 0x4, "3b42d0d1"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "701340"}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 48.000486202s ago: executing program 3 (id=759): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r3, 0x4b46, &(0x7f0000000140)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r4, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001a40)=[@decrefs, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001980)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x100b}}, &(0x7f0000001a00)={0x0, 0x18, 0x30}}, 0x40}, @dead_binder_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) 47.700073431s ago: executing program 3 (id=762): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgid(0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x60}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000004c0)=""/32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r5, &(0x7f00000000c0)='mydomain / 64\n', 0xe) sched_setaffinity(r3, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xe, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1}, {0x2, 0x0, 0x7}, {0x1, 0x5, 0x4}, 0x0, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) 43.922629903s ago: executing program 3 (id=767): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 38.175720231s ago: executing program 8 (id=775): syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x0, 0x0, {0x7, r2}}, 0x18}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@RTM_DELMDB={0x17, 0x55, 0x1, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x0, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}}, 0x0) 38.05130575s ago: executing program 8 (id=776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) lsm_get_self_attr(0x69, &(0x7f0000000100)={0x0, 0x0, 0x11c, 0xfc, ""/252}, &(0x7f0000000280)=0x11c, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r2, &(0x7f0000001840)={@void, @val={0x1, 0x3, 0x1c, 0x3, 0x14, 0x6}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x33, 0x801c, 0x67, 0x0, 0xfd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "414dc1c90728557ded5995abd8c2dd746ed1b8e7b953b5e7039ee546652f979f45a699fe21e64016"}}, 0xfdef) ioctl$XFS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000080)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x10}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 37.764569015s ago: executing program 8 (id=778): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r5 = mq_open(&(0x7f00000000c0)='!sinux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\xa1L\xb1\xef\x00\x00\x00\x00C\xb2\x8e9\xb8\xec\xf6&\x8f\xb8d\xe9\xf3\xf4Y+\xafp<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1e\x00\xe2U\xce\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3\xbfOS;\x85\xe0\x0fV\xf4\x8e1:\xd1^~\x13\x86\x17', 0x6e93ebbbcc0884f2, 0x6d, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x4001}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r5, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 36.23198785s ago: executing program 8 (id=779): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) tkill(r1, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/snmp\x00') r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) inotify_init() setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000240)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x10}}], 0x10}, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 34.338757511s ago: executing program 8 (id=782): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgid(0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x60}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000004c0)=""/32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r5, &(0x7f00000000c0)='mydomain / 64\n', 0xe) sched_setaffinity(r3, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xe, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1}, {0x2, 0x0, 0x7}, {0x1, 0x5, 0x4}, 0x0, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) 27.611266269s ago: executing program 37 (id=767): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 27.591666646s ago: executing program 8 (id=793): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgid(0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x60}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r5, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 13.185942632s ago: executing program 0 (id=818): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000002085100000030000001800000000000000000000000000000195000800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="680000001800050602000000000000000a540000fe0400010000000014000b0020010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c0001001234567890abcdef0500080020000000f5eb05ff52cebdd3", 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000580)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000380)=@IORING_OP_MSG_RING={0x28, 0x14, 0x0, r5, 0x0, 0x0, 0x8, 0x2, 0x1}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000340)) 12.171500666s ago: executing program 0 (id=819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x25dfdbff, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff12}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x2000a804) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r2 = fanotify_init(0x0, 0x8000) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000003e40)) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x10000, 0x8, 0x7fffffff, 0x1, 0x2]}, &(0x7f0000000100)=0x78) 12.033252051s ago: executing program 1 (id=820): fsopen(&(0x7f0000000380)='binfmt_misc\x00', 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001000000050010008000000005001b00df000000080007000200000008003a"], 0x94}}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4740099b7424ba0f, 0x8010, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000300)='(', 0x1}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc8}, 0x12180) r8 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r8, 0x0, 0x0, &(0x7f0000000300)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f0000000440)="af827bd31474cce0969114e987054beb66ff6d14e27c1ac8ab24c1bc891ef27d93141d8978ce9fa59db1e893fc448ad2320e3ef80f820a0453567a3efc2880e147d949f1447d9736490c521ab373784b5979c8bbd71a8d8528d4268d8ffc7443fa7601b8c8061fb781a625bb812dc5047229d0565660fe99eebd0b5541e5d1b6696e5c6576487f91c1ab8a1132a7eaaa61ebd862a7030c076a2fc996dae65418265de39d69eb57555f5b0776a2b7f887522604eb6c9e28c38011ed6edcc39bb067e2b66709c4fa", &(0x7f0000000540)=""/48, &(0x7f0000000580), &(0x7f00000005c0)="f3a1e54daf5c0a13cfe62ab7250b1b258ce96dc5fd7222", 0xe, r6, 0x4}, 0x38) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000340)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r8, 0x0, &(0x7f0000000140)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x4, 0x8f0, 0x0, 0x0, 0x1000, 0x7f, r4, 0x0, 0x48}}}, &(0x7f00000001c0)=0x0) syz_ublk_setup_queues(r10, r11, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x42044, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2080, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa11, 0x0, 0x40000003, 0x3d2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd39e, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 10.80533047s ago: executing program 9 (id=822): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xfffffffc, 0x5, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x7, 0x6}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, 0x0, r1}, {0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x3fffffffffffff, 0x200000000000000}, 0xfffffffe, 0x6e6bbb}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002340)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x6, 0x0, 0x8, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000004}}, [@mark={0xc, 0x15, {0x35075a, 0x10}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x0) 10.473501482s ago: executing program 38 (id=793): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgid(0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x60}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r5, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 10.378682958s ago: executing program 1 (id=825): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f00000000a54c10ffa341c76386ef000009000000850000002e000000850000000e00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000c0000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000001980)={r0, 0x58, &(0x7f0000000600)}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000020) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x5dd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4c840) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xa, 0x2, 0x0, 0x0, 0x3000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r5 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) writev(r5, &(0x7f0000001a40)=[{&(0x7f00000000c0)="9211a3ee", 0x20000}, {0x0, 0xe4}], 0x2) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10.255835895s ago: executing program 9 (id=826): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) userfaultfd(0x1) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec03, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x20004040) 9.191868386s ago: executing program 9 (id=827): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000240)=""/222, 0x0, 0x8}, 0x94) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8914, &(0x7f0000000080)='veth0:0') 9.024406513s ago: executing program 9 (id=828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0xfffffffe) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0x4, {0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x3a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) futex(&(0x7f0000000040)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, 0x0, 0x0) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) quotactl_fd$Q_SYNC(r5, 0xffffffff80000102, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone3(&(0x7f0000000300)={0xd8cbab7520ef4fd0, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) dup(r1) 8.956359031s ago: executing program 0 (id=829): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = epoll_create1(0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffec5) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) (async, rerun: 32) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) (rerun: 32) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) (async) r6 = msgget$private(0x0, 0x193) msgrcv(r6, 0x0, 0x0, 0x0, 0x2000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) (async) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) (async, rerun: 64) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 8.174838878s ago: executing program 7 (id=831): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000040)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "955f598869b806"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001040)={{r1, 0x2, 0x8000000, 0x2741, 0x1, 0x2, 0x565c, 0x5, 0xe, 0x81, 0x3, 0x7, 0xffffffffffffff0b, 0x4, 0x3}}) r2 = io_uring_setup(0x1b54, &(0x7f0000000100)={0x0, 0x1d49, 0x400, 0x4, 0x3d8}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r6, &(0x7f00000083c0)=[{{&(0x7f0000002040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002200)=[{&(0x7f00000020c0)="49b934ec159f413df38dc06f6a8ae7e70ad666fe17eccacee93e65d93a9c7a9d46dc356cf9410179beabeca8963dd285c49eb39e7c9197c37e717f6b4cae8e8b128c1c0e8907ac2ab93b4ab717616898", 0x50}, {&(0x7f0000002140)="ee9fd9a461a2954a556dd0b70b0d72c81ac7355a33d18433ba312cdca4bba141021437acc2b285281ad1ead066ec3324b9ea1c1c922de07ce4c41ddff20d79ce13b773d47d4070a4f01f8642ed34d03c8839600224b937eca5cd026e7d85bc929b621d20dcec0f3fb3846fcf204eb78827564bdaeba6fcbf8d493ca8adb2e206419fa38a128efa43a024552898c162790957d90afa7f1b73e1cd897b8e3e308fec6fb19dc335bcd962aea81c7b4f0f4343ff", 0xb2}], 0x2, &(0x7f0000002300)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x4885}}, {{&(0x7f0000002340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002500)=[{&(0x7f00000023c0)="ffb3251b3d8e779370b084493c4cbb4a82e0e2aff004fdbc2be5d77a1e42706906673e1129bd85f9e6462859568c01dda9a3f89594d92ec2e58b38e42e7f5d70b454481e64482f0f7d66db445f0abb3dc84368f9c6876a93ac7547bf1d4f36a5003c8f7416a1f9c09a1788bbec84d4c4313a801d2adf1342c510c404c90cef4f06d1aab02795f7937c46b6529b609ec58facc3587226beb00640e2bcc8d9a728027684fcd846d0d152a9c988bbee24abc49e0662ac1151aa1a246edca363a0044085608c7526a9fcddd1893ce7c07b8b06090b12bbab14e2737491c0", 0xdc}, {&(0x7f00000024c0)="61df253f6b0cfe2ecd5b0da7d70942babfbd5436ce2a7c65af2dd11680d0d2f20424ad512e13b1fdb6078388928daeab3b468a9a0d2614f475ab", 0x3a}], 0x2, &(0x7f00000027c0)=[@rights={{0x1c, 0x1, 0x1, [r5, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x60, 0x800}}, {{&(0x7f0000002840)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002b00)=[{&(0x7f00000028c0)="ae4ce01953c8006b0c97e23efe9d74ccbe28ff36bd8c2a386fce4166b10d02852c7ec0853706c46ad4dfabce18a1c4eeb509cc2b0ff75c780bae4d2ee4a8a3951b25850a7ee541542d55b6db30d62886264253fcf55f2bbd975987db6e43675a9767a4", 0x63}, {&(0x7f0000002940)="254c2a59508bc71072b67726a4ead17293e63dc9cd7c97bfc5414711f678fb11616acdef01beeaacc8ee9ee58e4b409e2c4e83b4949308d98d66a3a70b3250d796befdcfdb904f9fb9a38f5f1e8a0472e2d0ea040a3adfaa199af6fe6ade57e964a0294e8e7b2a0b8cb6ae1338721e00b714b4e8c5b91807af0c24e6db4c061d9dd8f8c6ba6f4c9a5c6d47cb392e11d4e08abb2b9361", 0x96}, {&(0x7f0000002a00)="6fd1359ad4", 0x5}, {&(0x7f0000002a40)="0e9a1d3d8a3dfc2cd1aa63063d23474e4ae6a98bd8ec70f716a71268d87bb3b0333e081204f9df6048eaa384e1326a9609545630e7e8a700d9d2cdc82347395c5e3a177f8945e79fab6b815d9b", 0x4d}, {&(0x7f0000002ac0)}], 0x5, &(0x7f00000065c0)=[@rights={{0x28, 0x1, 0x1, [r5, r3, r0, r6, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xd8}}, {{&(0x7f00000066c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000068c0)=[{&(0x7f0000006740)="2bb6d1ba199822e158049cf1c8191d28c99fb2a3727d284f48f73a72e6240d19d76636f7711241e389d843b66e683f7820e549ecb682f0038ed23db32328f46eed44beac58df4e82d81163a1ec9d59c8d0d3a0b68b4df29e4068d87c4d3127ce529c9dda6f1a3024d259932a643bcca0469117ed4ea0272c7f8f17ff66f99b9993c119d34c393456d018310c1e06177fe644db143069ae8538cc", 0x9a}, {&(0x7f0000006800)="70200543a44ca95c1971fc8422c73eaa20f650d907d23b26682c30b8c3a441748622c2cfac6529236497939e903bd17d935f030bc6574acfab9f000447a661d4b054529792640e1980e207564a0548adfe77aa0ee50eadf9", 0x58}, {&(0x7f0000006880)="29cfa7ff6d37d30ed845094b9dc72336b6327642940d1b13cb207eb42a1d475fe5ff380470252c294a309c8a9144847d306fccd6e5", 0x35}], 0x3, &(0x7f0000006900)=[@cred={{0x1c}}], 0x20, 0x4004006}}, {{&(0x7f0000006940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006bc0)=[{&(0x7f00000069c0)="3bfb639f9adfba4728a8d64522352e0db36883c84ebba76d811acd90d6895c873c572c73dbb6e3425762fcb1894a1fa9d369db797ea0e021a3bc18629194b7aa19bd450f9039cc392a8feb8d5b1302e20fd28055dc80e94b26affed5d94a0267e9d83308de724d9bb2189f5bac201b0910e968ebdf1cb89a50c15a07cfc7e98931d89796ce0863f5f35ea545c193a0fbe843f0e799a0729074e7d878a34be9d98950796939d940efe7e245bc5ac92e681e8f15ea511708a96093a0e772bf595076f817b3cce90dbcc75e04255d91c2235705a25696c76a3092", 0xd9}, {&(0x7f0000006ac0)}, {&(0x7f0000006b00)="3b35d5400159260c64c3af7c77fab2df5c95e275f100f023fce6fcc060d3380da463ea155d7decf578cd0a55b3cf16b89f0ec5979fc694de7e62f4c70249bdba6e3652c14ad70221538d2048e11e8c78e1a51d18bb1546bb4d41e2dd814f81408d10d2de2cb2876f8282b1abbe062599dcd8fac8ecd605276a983ae40acf1a50d49326cbebb1dd320968bc7bbed253c01bfa7f70557044b029aac391fa", 0x9d}], 0x3, &(0x7f0000002540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r5, r3, r5, r5, r2, r5, r5]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r2, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}], 0x118, 0x80000}}], 0x5, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) socket$netlink(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) write(r8, &(0x7f0000000100)="7c0000001800051105000000000000000a430000fe0400010000000014000b0020010db800d000000000000000e0ff001c00080008000200dc05000008000300e8030000080004000a00000008000400010000000600150003000000200016800c0001001234567890abcdef050ec700010000000500070002000000", 0x7c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000007060500010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x10, 0x1) userfaultfd(0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 7.662437671s ago: executing program 9 (id=832): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgid(0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x60}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000004c0)=""/32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) sched_setaffinity(r3, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xe, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1}, {0x2, 0x0, 0x7}, {0x1, 0x5, 0x4}, 0x0, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) sched_setaffinity(r3, 0x8, &(0x7f0000000500)=0x3c00000000000000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) 4.94580522s ago: executing program 7 (id=833): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x88, @broadcast, 0x4e20, 0x0, 'ovf\x00', 0x8, 0x85, 0x57}, 0x2c) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x11223344]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x11) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="000704000008000000000000000000000000000000000000052600000000000100"/64], 0x40) sendto$inet6(r3, &(0x7f0000000400)="112233", 0x3, 0x0, &(0x7f0000000500)={0xa, 0x1234, 0x0, @loopback}, 0x1c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r4, &(0x7f0000000200)='./file0\x00', 0x1000, 0x1) chdir(&(0x7f0000000000)='./bus\x00') open(&(0x7f0000000000)='./file0\x00', 0x4040, 0x100) 4.93060839s ago: executing program 9 (id=834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r2, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r4, 0x7, 0x2, r3}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r6, 0x7, 0x2, r4}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0x1, 0x9, 0x1, 0x41, 0x3, 0x58, 0x7, 0x5, 0xb, 0x7f}}) r7 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r8, 0x0) sendmmsg$inet(r7, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x7d}]}}}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x9}]}}}], 0x18}}], 0x2, 0x4000) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2, 0x4000000001002, 0x80000ef, 0x7f, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0x5, 0x7, 0xbdf], 0x200000, 0x67a64fa265da9e51}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.868472141s ago: executing program 1 (id=835): fsopen(&(0x7f0000000380)='binfmt_misc\x00', 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001000000050010008000000005001b00df000000080007000200000008003a"], 0x94}}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4740099b7424ba0f, 0x8010, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000300)='(', 0x1}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc8}, 0x12180) r8 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r8, 0x0, 0x0, &(0x7f0000000300)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f0000000440)="af827bd31474cce0969114e987054beb66ff6d14e27c1ac8ab24c1bc891ef27d93141d8978ce9fa59db1e893fc448ad2320e3ef80f820a0453567a3efc2880e147d949f1447d9736490c521ab373784b5979c8bbd71a8d8528d4268d8ffc7443fa7601b8c8061fb781a625bb812dc5047229d0565660fe99eebd0b5541e5d1b6696e5c6576487f91c1ab8a1132a7eaaa61ebd862a7030c076a2fc996dae65418265de39d69eb57555f5b0776a2b7f887522604eb6c9e28c38011ed6edcc39bb067e2b66709c4fa", &(0x7f0000000540)=""/48, &(0x7f0000000580), &(0x7f00000005c0)="f3a1e54daf5c0a13cfe62ab7250b1b258ce96dc5fd7222", 0xe, r6, 0x4}, 0x38) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000340)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r8, 0x0, &(0x7f0000000140)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x4, 0x8f0, 0x0, 0x0, 0x1000, 0x7f, r4, 0x0, 0x48}}}, &(0x7f00000001c0)=0x0) syz_ublk_setup_queues(r10, r11, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x42044, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2080, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa11, 0x0, 0x40000003, 0x3d2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd39e, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 4.265058564s ago: executing program 1 (id=836): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) userfaultfd(0x1) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec03, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x20004040) 3.363257781s ago: executing program 7 (id=837): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000240)=""/222, 0x0, 0x8}, 0x94) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x8914, &(0x7f0000000080)='veth0:0') 3.228652727s ago: executing program 1 (id=838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000340), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r4) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000280)={&(0x7f0000000000)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f00000024c0)="e0", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="ba02c1fe5e77e885754480e173c0cb72f877e6e22a3a302c20aa8edc18ba156a9411", @ANYRESOCT, @ANYRES16=r4], 0x30}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="b2e8d43f4aaacffdcb6f1a4216bb2d7b", 0x10) inotify_init1(0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 3.105547858s ago: executing program 7 (id=839): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2b}, @empty, 0x8, 0x6, 0x0, 0x0, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={@private1, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x0, 0x8, 0x3, 0x0, 0xdc7, 0x180123, r1}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r4 = socket$inet6(0x10, 0x2, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) mknod$loop(&(0x7f0000000500)='./file0\x00', 0x10, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x3, 0xfffffffd, 0x14, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x10, 0xba08}}) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) socket(0x1d, 0x4, 0x6) bpf$MAP_CREATE(0xb00000000000014, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xf, &(0x7f0000000780)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) 2.756030892s ago: executing program 7 (id=840): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) r5 = mq_open(&(0x7f00000000c0)='!sinux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\xa1L\xb1\xef\x00\x00\x00\x00C\xb2\x8e9\xb8\xec\xf6&\x8f\xb8d\xe9\xf3\xf4Y+\xafp<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1e\x00\xe2U\xce\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3\xbfOS;\x85\xe0\x0fV\xf4\x8e1:\xd1^~\x13\x86\x17', 0x6e93ebbbcc0884f2, 0x6d, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x4001}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0xa, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_pgetevents(0x0, 0x1, 0x1, &(0x7f0000000100)=[{}], 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0, 0x0, 0x5}]) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000140), 0x10) close(r7) 2.605921961s ago: executing program 0 (id=841): r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="140001800800010000000100"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003c80)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f00000000c0), 0xa7c, r4}, 0x38) 1.903469779s ago: executing program 1 (id=842): socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 64) r0 = getpgrp(0x0) (rerun: 64) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sigaltstack(0x0, &(0x7f0000001500)={0x0}) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0xaf) (async) syz_open_dev$usbmon(0x0, 0x0, 0x20120) (async) r4 = socket(0x10, 0x803, 0x3) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 64) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async, rerun: 64) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000000)={0x2, 0x3}, 0x2) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000), 0x4) 1.780188017s ago: executing program 7 (id=843): prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgid(0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) quotactl$Q_QUOTAOFF(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x60}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000004c0)=""/32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) sched_setaffinity(r3, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xe, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1}, {0x2, 0x0, 0x7}, {0x1, 0x5, 0x4}, 0x0, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) sched_setaffinity(r3, 0x8, &(0x7f0000000500)=0x3c00000000000000) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) 380.235455ms ago: executing program 0 (id=844): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000440)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x25, 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=845): fsopen(&(0x7f0000000380)='binfmt_misc\x00', 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001000000050010008000000005001b00df000000080007000200000008003a"], 0x94}}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4740099b7424ba0f, 0x8010, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000300)='(', 0x1}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc8}, 0x12180) r8 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r8, 0x0, 0x0, &(0x7f0000000300)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f0000000440)="af827bd31474cce0969114e987054beb66ff6d14e27c1ac8ab24c1bc891ef27d93141d8978ce9fa59db1e893fc448ad2320e3ef80f820a0453567a3efc2880e147d949f1447d9736490c521ab373784b5979c8bbd71a8d8528d4268d8ffc7443fa7601b8c8061fb781a625bb812dc5047229d0565660fe99eebd0b5541e5d1b6696e5c6576487f91c1ab8a1132a7eaaa61ebd862a7030c076a2fc996dae65418265de39d69eb57555f5b0776a2b7f887522604eb6c9e28c38011ed6edcc39bb067e2b66709c4fa", &(0x7f0000000540)=""/48, &(0x7f0000000580), &(0x7f00000005c0)="f3a1e54daf5c0a13cfe62ab7250b1b258ce96dc5fd7222", 0xe, r6, 0x4}, 0x38) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000340)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r8, 0x0, &(0x7f0000000140)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x4, 0x8f0, 0x0, 0x0, 0x1000, 0x7f, r4, 0x0, 0x48}}}, &(0x7f00000001c0)=0x0) syz_ublk_setup_queues(r10, r11, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x42044, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2080, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa11, 0x0, 0x40000003, 0x3d2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd39e, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): T984] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 255.980723][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.980741][ T984] usb 5-1: Product: syz [ 255.980750][ T984] usb 5-1: Manufacturer: syz [ 255.980759][ T984] usb 5-1: SerialNumber: syz [ 256.229731][ T5791] ath9k_htc: Failed to initialize the device [ 256.247871][ T5778] usb 1-1: ath9k_htc: USB layer deinitialized [ 256.264962][ T984] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 256.281579][ T984] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 256.292731][ T984] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 257.120334][ T5778] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 257.276120][ T7958] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 257.288218][ T31] audit: type=1400 audit(1790819101.290:567): avc: denied { create } for pid=7957 comm="syz.4.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 257.290618][ T31] audit: type=1400 audit(1790819101.290:568): avc: denied { bind } for pid=7957 comm="syz.4.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 257.319106][ T31] audit: type=1400 audit(1790819101.300:569): avc: denied { write } for pid=7957 comm="syz.4.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 257.320818][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.518'. [ 257.347802][ T5791] usb 5-1: USB disconnect, device number 14 [ 257.382786][ T5791] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 257.395174][ T5778] usb 6-1: Using ep0 maxpacket: 8 [ 257.395910][ T5791] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 257.396615][ T5791] ti_usb_3410_5052 5-1:2.0: device disconnected [ 257.400795][ T5778] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 257.404740][ T5778] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 257.408868][ T5778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.408887][ T5778] usb 6-1: Product: syz [ 257.408900][ T5778] usb 6-1: Manufacturer: syz [ 257.408912][ T5778] usb 6-1: SerialNumber: syz [ 257.429362][ T5778] ch9200 6-1:2.0: probe with driver ch9200 failed with error -22 [ 257.487520][ T7972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.523'. [ 257.503210][ T7972] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 257.507546][ T7972] bond2 (unregistering): Released all slaves [ 257.645754][ T5791] usb 6-1: USB disconnect, device number 8 [ 257.934063][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.524'. [ 258.270855][ T31] audit: type=1400 audit(1790819102.217:570): avc: denied { wake_alarm } for pid=7976 comm="syz.4.524" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 258.931939][ T7983] syzkaller0: entered promiscuous mode [ 258.931960][ T7983] syzkaller0: entered allmulticast mode [ 259.060429][ T7983] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.913551][ T5778] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 260.089118][ T5778] usb 4-1: Using ep0 maxpacket: 8 [ 260.090349][ T5778] usb 4-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.40 [ 260.091096][ T5778] usb 4-1: config 1 interface 0 has no altsetting 0 [ 260.092560][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.092574][ T5778] usb 4-1: Product: syz [ 260.092581][ T5778] usb 4-1: Manufacturer: syz [ 260.092589][ T5778] usb 4-1: SerialNumber: syz [ 260.675871][ T8003] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 260.675887][ T8003] netlink: 200 bytes leftover after parsing attributes in process `syz.0.530'. [ 260.675897][ T8003] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 260.675904][ T8003] netlink: 29 bytes leftover after parsing attributes in process `syz.0.530'. [ 260.837227][ T8003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.530'. [ 262.933155][ T5778] usbhid 4-1:1.0: can't add hid device: -71 [ 262.933201][ T5778] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 262.937247][ T5778] usb 4-1: USB disconnect, device number 13 [ 263.999806][ T8013] tipc: Started in network mode [ 263.999833][ T8013] tipc: Node identity daa8818585bd, cluster identity 4711 [ 264.000036][ T8013] tipc: Enabled bearer , priority 0 [ 264.001539][ T8013] syzkaller0: entered promiscuous mode [ 264.001556][ T8013] syzkaller0: entered allmulticast mode [ 264.776312][ T8017] syzkaller0: mtu greater than device maximum [ 264.779697][ T8012] tipc: Resetting bearer [ 264.821789][ T8012] tipc: Disabling bearer [ 265.133305][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.538'. [ 265.359785][ T31] audit: type=1400 audit(1790819108.840:571): avc: denied { ioctl } for pid=8026 comm="syz.3.540" path="socket:[19536]" dev="sockfs" ino=19536 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.401028][ T31] audit: type=1400 audit(1790819108.887:572): avc: denied { accept } for pid=8028 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 266.311728][ T8033] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 267.196293][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 267.369448][ T25] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 267.377583][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.377598][ T25] usb 4-1: Product: syz [ 267.377607][ T25] usb 4-1: Manufacturer: syz [ 267.377615][ T25] usb 4-1: SerialNumber: syz [ 267.390210][ T25] usb 4-1: config 0 descriptor?? [ 267.404215][ T25] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 014 [ 267.610946][ T25] (null): error -EIO: failure setting delay to 10us [ 267.610981][ T25] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 268.287679][ T25] usb 4-1: USB disconnect, device number 14 [ 268.625321][ T31] audit: type=1400 audit(1790819111.890:573): avc: denied { read } for pid=8047 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 268.758573][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.759789][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.761247][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.762220][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.763364][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.818208][ T31] audit: type=1400 audit(1790819112.040:574): avc: denied { create } for pid=8047 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 269.130891][ T8063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.551'. [ 269.248274][ T31] audit: type=1400 audit(1790819112.451:575): avc: denied { read write } for pid=8060 comm="syz.0.550" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 269.272008][ T31] audit: type=1400 audit(1790819112.451:576): avc: denied { open } for pid=8060 comm="syz.0.550" path="/120/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 269.445871][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.544'. [ 269.446037][ T8071] FAULT_INJECTION: forcing a failure. [ 269.446037][ T8071] name failslab, interval 1, probability 0, space 0, times 0 [ 269.446080][ T8071] CPU: 1 UID: 0 PID: 8071 Comm: syz.4.544 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.446106][ T8071] Tainted: [L]=SOFTLOCKUP [ 269.446113][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 269.446122][ T8071] Call Trace: [ 269.446128][ T8071] [ 269.446133][ T8071] dump_stack_lvl+0x100/0x190 [ 269.446152][ T8071] should_fail_ex.cold+0x5/0xa [ 269.446169][ T8071] should_failslab+0xc2/0x120 [ 269.446184][ T8071] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 269.446198][ T8071] ? preempt_schedule_thunk+0x16/0x40 [ 269.446212][ T8071] ? __alloc_skb+0x140/0x710 [ 269.446229][ T8071] __alloc_skb+0x140/0x710 [ 269.446242][ T8071] ? __alloc_skb+0x5b7/0x710 [ 269.446256][ T8071] ? __pfx___alloc_skb+0x10/0x10 [ 269.446275][ T8071] netlink_ack+0x117/0xb80 [ 269.446289][ T8071] ? irqentry_exit+0x24d/0xa10 [ 269.446300][ T8071] ? lockdep_hardirqs_on+0x7d/0x110 [ 269.446313][ T8071] netlink_rcv_skb+0x333/0x420 [ 269.446328][ T8071] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 269.446348][ T8071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.446367][ T8071] ? rcu_is_watching+0x13/0xc0 [ 269.446386][ T8071] netlink_unicast+0x585/0x850 [ 269.446402][ T8071] ? __pfx_netlink_unicast+0x10/0x10 [ 269.446420][ T8071] netlink_sendmsg+0x8b0/0xda0 [ 269.446436][ T8071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.446452][ T8071] ? selinux_socket_sendmsg+0x198/0x2f0 [ 269.446471][ T8071] ____sys_sendmsg+0xa4d/0xbe0 [ 269.446482][ T8071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.446497][ T8071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.446511][ T8071] ? find_held_lock+0x2b/0x80 [ 269.446527][ T8071] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 269.446543][ T8071] ___sys_sendmsg+0x190/0x1e0 [ 269.446556][ T8071] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.446568][ T8071] ? rcu_is_watching+0x13/0xc0 [ 269.446589][ T8071] ? find_held_lock+0x2b/0x80 [ 269.446614][ T8071] __sys_sendmsg+0x160/0x210 [ 269.446630][ T8071] ? __pfx___sys_sendmsg+0x10/0x10 [ 269.446652][ T8071] do_syscall_64+0x123/0x790 [ 269.446665][ T8071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.446677][ T8071] RIP: 0033:0x7fc0fed9e159 [ 269.446687][ T8071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.446697][ T8071] RSP: 002b:00007fc0ffba9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.446708][ T8071] RAX: ffffffffffffffda RBX: 00007fc0ff025fa0 RCX: 00007fc0fed9e159 [ 269.446716][ T8071] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 269.446722][ T8071] RBP: 00007fc0ffba9090 R08: 0000000000000000 R09: 0000000000000000 [ 269.446729][ T8071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.446735][ T8071] R13: 00007fc0ff026038 R14: 00007fc0ff025fa0 R15: 00007fffe39b7328 [ 269.446749][ T8071] [ 269.515126][ T8063] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 269.553549][ T8063] bond1 (unregistering): Released all slaves [ 269.793473][ T8073] syzkaller0: entered promiscuous mode [ 269.793493][ T8073] syzkaller0: entered allmulticast mode [ 269.825783][ T31] audit: type=1400 audit(1790819112.994:577): avc: denied { relabelfrom } for pid=8072 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 269.825826][ T31] audit: type=1400 audit(1790819113.003:578): avc: denied { relabelto } for pid=8072 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 271.013708][ T52] Bluetooth: hci4: command tx timeout [ 271.084667][ T8081] ip6gretap1: entered allmulticast mode [ 271.086050][ T8081] batman_adv: batadv0: Adding interface: ip6gretap1 [ 271.086065][ T8081] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.086092][ T8081] batman_adv: batadv0: Interface activated: ip6gretap1 [ 271.100794][ T8083] vlan0: entered allmulticast mode [ 271.100812][ T8083] bond0: entered allmulticast mode [ 271.126921][ T31] audit: type=1400 audit(1790819114.219:579): avc: denied { read } for pid=5264 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 271.139754][ T8089] syzkaller0: entered promiscuous mode [ 271.139772][ T8089] syzkaller0: entered allmulticast mode [ 273.173193][ T31] audit: type=1400 audit(1790819116.156:580): avc: denied { read } for pid=8100 comm="syz.4.556" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 273.173484][ T31] audit: type=1400 audit(1790819116.156:581): avc: denied { open } for pid=8100 comm="syz.4.556" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 273.252504][ T52] Bluetooth: hci4: command tx timeout [ 275.434025][ T8053] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.434113][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.434169][ T8053] bridge_slave_0: entered allmulticast mode [ 275.441803][ T8053] bridge_slave_0: entered promiscuous mode [ 275.447345][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.447454][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.447541][ T8053] bridge_slave_1: entered allmulticast mode [ 275.448355][ T5778] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 275.452000][ T52] Bluetooth: hci4: command tx timeout [ 275.452963][ T8053] bridge_slave_1: entered promiscuous mode [ 275.507465][ T31] audit: type=1400 audit(1790819118.336:582): avc: denied { write } for pid=8112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.514815][ T8053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.524154][ T8053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.582056][ T8053] team0: Port device team_slave_0 added [ 275.586711][ T8053] team0: Port device team_slave_1 added [ 275.611054][ T5778] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 275.620807][ T5778] usb 1-1: string descriptor 0 read error: -22 [ 275.620903][ T5778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.630263][ T5778] usb 1-1: config 0 descriptor?? [ 275.638982][ T5778] usbtest 1-1:0.0: FX2 device [ 275.638998][ T5778] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 275.649460][ T8053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.649472][ T8053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.649491][ T8053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.656044][ T8053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.656055][ T8053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.656073][ T8053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.755624][ T31] audit: type=1400 audit(1790819118.504:583): avc: denied { write } for pid=8134 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.780109][ T8053] hsr_slave_0: entered promiscuous mode [ 275.782391][ T8053] hsr_slave_1: entered promiscuous mode [ 275.782830][ T8053] debugfs: 'hsr0' already exists in 'hsr' [ 275.782844][ T8053] Cannot create hsr debugfs directory [ 275.900720][ T8117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.900952][ T8117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.913201][ T5778] usb 1-1: USB disconnect, device number 7 [ 275.951910][ T8135] netlink: 44 bytes leftover after parsing attributes in process `syz.3.561'. [ 275.952583][ T8135] macvlan0: entered promiscuous mode [ 275.984418][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 276.250153][ T8053] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 276.256724][ T8053] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 276.257332][ T8053] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 276.297046][ T8053] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.297545][ T8053] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 276.302427][ T31] audit: type=1326 audit(1790819119.075:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.3.562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1366f9e159 code=0x7ffc0000 [ 276.302550][ T31] audit: type=1326 audit(1790819119.075:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.3.562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1366f9e159 code=0x7ffc0000 [ 276.305240][ T8053] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 276.308080][ T8053] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 276.310682][ T31] audit: type=1326 audit(1790819119.084:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.3.562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1366f9e159 code=0x7ffc0000 [ 276.310725][ T31] audit: type=1326 audit(1790819119.084:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.3.562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1366f9e159 code=0x7ffc0000 [ 276.310763][ T31] audit: type=1326 audit(1790819119.084:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.3.562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=470 compat=0 ip=0x7f1366f9e159 code=0x7ffc0000 [ 276.354515][ T8053] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.536671][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 276.536688][ T31] audit: type=1326 audit(1790819119.290:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.3.562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1366f5e98e code=0x7ffc0000 [ 276.672766][ T31] audit: type=1326 audit(1790819119.421:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.3.562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1366f5e98e code=0x7ffc0000 [ 276.677034][ T8053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.686383][ T8053] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.722470][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.722557][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.724196][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.725252][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.386786][ T8167] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 277.386801][ T8167] netlink: 200 bytes leftover after parsing attributes in process `syz.0.563'. [ 277.386811][ T8167] netlink: 'syz.0.563': attribute type 1 has an invalid length. [ 277.386817][ T8167] netlink: 29 bytes leftover after parsing attributes in process `syz.0.563'. [ 277.389402][ T8166] netlink: 36 bytes leftover after parsing attributes in process `syz.0.563'. [ 277.390400][ T31] audit: type=1326 audit(1790819120.094:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.3.562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1366f5e98e code=0x7ffc0000 [ 277.399654][ T8053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.399672][ T8053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.500018][ T31] audit: type=1326 audit(1790819120.188:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz.3.562" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1366f9e159 code=0x7ffc0000 [ 277.657036][ T8175] 9pnet_fd: Insufficient options for proto=fd [ 277.672131][ T52] Bluetooth: hci4: command tx timeout [ 277.776314][ T31] audit: type=1400 audit(1790819120.450:619): avc: denied { setopt } for pid=8181 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 278.907257][ T8053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.916719][ T8196] jffs2: notice: (8196) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 278.947264][ T31] audit: type=1400 audit(1790819121.544:620): avc: denied { write } for pid=8195 comm="syz.3.571" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.949529][ T31] audit: type=1400 audit(1790819121.554:621): avc: denied { add_name } for pid=8195 comm="syz.3.571" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.949776][ T31] audit: type=1400 audit(1790819121.554:622): avc: denied { create } for pid=8195 comm="syz.3.571" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 278.976502][ T31] audit: type=1400 audit(1790819121.563:623): avc: denied { read open } for pid=8195 comm="syz.3.571" path="/130/file0/file0" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 280.187183][ T8053] veth0_vlan: entered promiscuous mode [ 280.196198][ T8053] veth1_vlan: entered promiscuous mode [ 280.232213][ T8053] veth0_macvtap: entered promiscuous mode [ 280.238829][ T8053] veth1_macvtap: entered promiscuous mode [ 280.265395][ T8053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.281843][ T8053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.305405][ T112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.305444][ T112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.305475][ T112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.379278][ T8211] netlink: 20 bytes leftover after parsing attributes in process `syz.0.570'. [ 280.426781][ T5918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.426801][ T5918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.474739][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.498105][ T5918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.498123][ T5918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.953442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 281.832125][ T5606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 281.833091][ T5606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.834165][ T5606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.835279][ T5606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.835669][ T5606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.514343][ T8230] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 282.514359][ T8230] netlink: 200 bytes leftover after parsing attributes in process `syz.3.573'. [ 282.514367][ T8230] netlink: 'syz.3.573': attribute type 1 has an invalid length. [ 282.514374][ T8230] netlink: 29 bytes leftover after parsing attributes in process `syz.3.573'. [ 282.537400][ T8228] netlink: 36 bytes leftover after parsing attributes in process `syz.3.573'. [ 282.599480][ T5778] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 283.438505][ T5778] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 283.444110][ T5778] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 283.444153][ T5778] usb 7-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 283.445038][ T5778] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 283.445070][ T5778] usb 7-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 283.446772][ T5778] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.446791][ T5778] usb 7-1: Product: syz [ 283.446804][ T5778] usb 7-1: Manufacturer: syz [ 283.446816][ T5778] usb 7-1: SerialNumber: syz [ 283.554070][ T5778] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 283.558559][ T5778] ti_usb_3410_5052 7-1:2.0: missing endpoints [ 283.782734][ T8223] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 283.782813][ T8223] audit: out of memory in audit_log_start [ 284.000563][ T52] Bluetooth: hci6: command tx timeout [ 284.044501][ T5778] usb 7-1: USB disconnect, device number 2 [ 284.395681][ T8226] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.397483][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.397541][ T8226] bridge_slave_0: entered allmulticast mode [ 284.398251][ T8226] bridge_slave_0: entered promiscuous mode [ 284.402347][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.404045][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.404291][ T8226] bridge_slave_1: entered allmulticast mode [ 284.405427][ T8226] bridge_slave_1: entered promiscuous mode [ 284.471913][ T8226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.474243][ T8226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.527569][ T8226] team0: Port device team_slave_0 added [ 284.530811][ T8226] team0: Port device team_slave_1 added [ 285.336324][ T31] audit: type=1400 audit(1790819127.354:624): avc: denied { write } for pid=8252 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 285.376295][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.376310][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.376325][ T8226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.392850][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.392863][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.392882][ T8226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.223376][ T52] Bluetooth: hci6: command tx timeout [ 286.434667][ T8226] hsr_slave_0: entered promiscuous mode [ 286.435117][ T8226] hsr_slave_1: entered promiscuous mode [ 286.439299][ T8226] debugfs: 'hsr0' already exists in 'hsr' [ 286.439315][ T8226] Cannot create hsr debugfs directory [ 286.693479][ T5791] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 286.832835][ T8226] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 286.840613][ T8226] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.842739][ T8226] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 286.849265][ T8226] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.851616][ T8226] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 286.854979][ T5791] usb 7-1: Using ep0 maxpacket: 32 [ 286.855599][ T5791] usb 7-1: New USB device found, idVendor=0c45, idProduct=6253, bcdDevice=82.25 [ 286.856438][ T5791] usb 7-1: config 139 has an invalid interface number: 104 but max is 0 [ 286.856458][ T5791] usb 7-1: config 139 has no interface number 0 [ 286.856478][ T5791] usb 7-1: config 139 interface 104 has no altsetting 0 [ 286.858147][ T5791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.858163][ T5791] usb 7-1: Product: syz [ 286.858175][ T5791] usb 7-1: Manufacturer: syz [ 286.858187][ T5791] usb 7-1: SerialNumber: syz [ 286.910917][ T8226] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 286.913192][ T8226] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 286.954454][ T8226] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 287.087696][ T8226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.108034][ T8226] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.121422][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.121506][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.128636][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.128700][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.161950][ T5791] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6253 [ 287.165755][ T5791] gspca_sn9c20x: Write register 1000 failed -71 [ 287.165769][ T5791] gspca_sn9c20x: Device initialization failed [ 287.165817][ T5791] gspca_sn9c20x 7-1:139.104: probe with driver gspca_sn9c20x failed with error -71 [ 287.757139][ T5791] usb 7-1: USB disconnect, device number 3 [ 288.528804][ T8226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.538829][ T52] Bluetooth: hci6: command tx timeout [ 289.355495][ T31] audit: type=1400 audit(1790819131.283:625): avc: denied { ioctl } for pid=8295 comm="syz.6.586" path="socket:[22150]" dev="sockfs" ino=22150 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 289.835235][ T8226] veth0_vlan: entered promiscuous mode [ 289.853689][ T8226] veth1_vlan: entered promiscuous mode [ 289.927091][ T8226] veth0_macvtap: entered promiscuous mode [ 289.938942][ T8226] veth1_macvtap: entered promiscuous mode [ 289.972127][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.992266][ T8226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.060558][ T8315] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 290.092899][ T1099] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.092940][ T1099] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.092969][ T1099] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.092999][ T1099] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.167755][ T30] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 290.199041][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.199060][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.250961][ T31] audit: type=1400 audit(1790819132.125:626): avc: denied { write } for pid=8299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.299027][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.299048][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.328238][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 290.328863][ T30] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 290.333291][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.333306][ T30] usb 4-1: Product: syz [ 290.333315][ T30] usb 4-1: Manufacturer: syz [ 290.333323][ T30] usb 4-1: SerialNumber: syz [ 290.334841][ T30] usb 4-1: config 0 descriptor?? [ 290.343195][ T5606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 290.354247][ T30] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 290.354278][ T30] pctv452e: pctv452e_power_ctrl: 1 [ 290.354278][ T30] [ 290.354309][ T30] usb 4-1: selecting invalid altsetting 3 [ 290.354320][ T30] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 290.354320][ T30] [ 290.356225][ T30] dvb-usb: bulk message failed: -22 (5/0) [ 290.364157][ T5606] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 290.365601][ T5606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 290.378182][ T5606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 290.388352][ T5606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 290.450455][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 290.451236][ T30] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 290.451275][ T30] usb 4-1: media controller created [ 290.460067][ T30] dvb-usb: bulk message failed: -22 (8/0) [ 290.460084][ T30] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 290.460136][ T30] dvb-usb: MAC address reading failed. [ 290.532207][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.545415][ T31] audit: type=1400 audit(1790819132.340:627): avc: denied { write } for pid=8323 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.634685][ T8310] dvb-usb: bulk message failed: -22 (7/0) [ 290.634708][ T8310] pctv452e: I2C error -22; AA 02 14E 00 00 -> aa 02 31 03 4e 00 00 [ 290.701605][ T30] DVB: Unable to find symbol stb0899_attach() [ 290.701621][ T30] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 290.753266][ T8331] syzkaller0: entered promiscuous mode [ 290.754489][ T8331] syzkaller0: entered allmulticast mode [ 290.762335][ T52] Bluetooth: hci6: command tx timeout [ 290.808098][ T8331] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 290.830150][ T30] rc_core: IR keymap rc-tt-1500 not found [ 290.830168][ T30] Registered IR keymap rc-empty [ 290.831132][ T30] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 290.833479][ T30] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input15 [ 290.885358][ T30] dvb-usb: schedule remote query interval to 100 msecs. [ 290.885379][ T30] pctv452e: pctv452e_power_ctrl: 0 [ 290.885379][ T30] [ 290.885389][ T30] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 290.893764][ T30] usb 4-1: USB disconnect, device number 15 [ 292.099160][ T30] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 292.635804][ T30] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 292.636902][ T52] Bluetooth: hci7: command tx timeout [ 293.060921][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 293.082770][ T30] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 293.108128][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.108146][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.108166][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.121153][ T30] usb 4-1: config 0 descriptor?? [ 293.529653][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.529724][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.529800][ T8321] bridge_slave_0: entered allmulticast mode [ 293.533941][ T8321] bridge_slave_0: entered promiscuous mode [ 293.539330][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.541144][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.547887][ T8321] bridge_slave_1: entered allmulticast mode [ 293.553058][ T8321] bridge_slave_1: entered promiscuous mode [ 293.628945][ T8321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.646070][ T8321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.702297][ T8321] team0: Port device team_slave_0 added [ 293.709108][ T8321] team0: Port device team_slave_1 added [ 293.762939][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.762955][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.762973][ T8321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.763936][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.763948][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.763968][ T8321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.498078][ T30] usbhid 4-1:0.0: can't add hid device: -32 [ 294.498153][ T30] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 294.879879][ T52] Bluetooth: hci7: command tx timeout [ 294.969925][ T8379] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 294.974722][ T8321] hsr_slave_0: entered promiscuous mode [ 294.975164][ T8321] hsr_slave_1: entered promiscuous mode [ 294.978683][ T8321] debugfs: 'hsr0' already exists in 'hsr' [ 294.978700][ T8321] Cannot create hsr debugfs directory [ 294.985213][ T31] audit: type=1400 audit(1790819136.550:628): avc: denied { bind } for pid=8376 comm="syz.6.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 294.985254][ T31] audit: type=1400 audit(1790819136.550:629): avc: denied { name_bind } for pid=8376 comm="syz.6.601" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 294.985288][ T31] audit: type=1400 audit(1790819136.550:630): avc: denied { node_bind } for pid=8376 comm="syz.6.601" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 295.049711][ T31] audit: type=1400 audit(1790819136.588:631): avc: denied { setopt } for pid=8376 comm="syz.6.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 295.306281][ T8384] loop5: detected capacity change from 0 to 7 [ 295.337962][ T8384] loop5: [ 295.337975][ T8384] loop5: partition table partially beyond EOD, truncated [ 295.343030][ T8321] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 295.351481][ T8321] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 295.354624][ T8321] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 295.377214][ T8321] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 295.379482][ T8321] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 295.390522][ T8321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 295.392779][ T8321] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 295.419979][ T8321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 295.447969][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 295.509784][ T8321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.525806][ T8321] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.530515][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.530599][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.539828][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.539900][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.609585][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 295.610095][ T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.611045][ T25] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 295.611086][ T25] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.611107][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.611128][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.611149][ T25] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.611184][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.778806][ T8395] syzkaller0: entered promiscuous mode [ 295.778828][ T8395] syzkaller0: entered allmulticast mode [ 295.806293][ T8395] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 295.838832][ T25] usb 7-1: GET_CAPABILITIES returned 0 [ 295.838872][ T25] usbtmc 7-1:16.0: can't read capabilities [ 295.925853][ T8402] ip_tables: iptables: counters copy to user failed while replacing table [ 296.073459][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.075122][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.075468][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.084765][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.085873][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.092967][ T25] usb 7-1: USB disconnect, device number 4 [ 296.307605][ T8321] veth0_vlan: entered promiscuous mode [ 296.310902][ T8321] veth1_vlan: entered promiscuous mode [ 296.327326][ T8321] veth0_macvtap: entered promiscuous mode [ 296.333838][ T8321] veth1_macvtap: entered promiscuous mode [ 296.340925][ T31] audit: type=1400 audit(1790819137.823:632): avc: denied { read } for pid=8407 comm="syz.7.606" path="socket:[23143]" dev="sockfs" ino=23143 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 296.347835][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.350685][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.461529][ T5778] usb 4-1: USB disconnect, device number 16 [ 296.516925][ T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.516964][ T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.516993][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.517023][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.518084][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.518099][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.593148][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.593166][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.328388][ T5606] Bluetooth: hci7: command tx timeout [ 297.675379][ T5778] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 298.458569][ T5778] usb 4-1: Using ep0 maxpacket: 32 [ 298.463406][ T5778] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 298.467820][ T5778] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.467846][ T5778] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.480179][ T5778] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 298.480199][ T5778] usb 4-1: Product: syz [ 298.480211][ T5778] usb 4-1: Manufacturer: syz [ 298.843929][ T5778] hub 4-1:4.0: USB hub found [ 298.969901][ T8443] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 299.478010][ T5606] Bluetooth: hci7: command tx timeout [ 299.484057][ T5778] hub 4-1:4.0: 2 ports detected [ 300.167909][ T31] audit: type=1400 audit(1790819141.406:633): avc: denied { ioctl } for pid=8457 comm="syz.7.620" path="socket:[23600]" dev="sockfs" ino=23600 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.220636][ T31] audit: type=1400 audit(1790819142.379:634): avc: denied { ioctl } for pid=8458 comm="syz.8.621" path="socket:[23612]" dev="sockfs" ino=23612 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 301.408675][ T5778] hub 4-1:4.0: set hub depth failed [ 301.425859][ T5778] usb 4-1: USB disconnect, device number 17 [ 301.540782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 301.690784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 301.785673][ T5720] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 301.969818][ T5720] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 301.977865][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.977882][ T5720] usb 1-1: Product: syz [ 301.977890][ T5720] usb 1-1: Manufacturer: syz [ 301.977898][ T5720] usb 1-1: SerialNumber: syz [ 301.983340][ T5720] usb 1-1: config 0 descriptor?? [ 302.109377][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 302.265100][ T8489] macvlan1: entered promiscuous mode [ 302.265118][ T8489] macvlan1: entered allmulticast mode [ 302.280921][ T8492] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 302.336548][ T8493] IPVS: stopping backup sync thread 8492 ... [ 302.417305][ T5720] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 302.475929][ T8495] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 302.513498][ T5791] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 302.578092][ T5720] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 302.578936][ T5720] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 302.578950][ T5720] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 302.578959][ T5720] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 302.578979][ T5720] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 302.578993][ T5720] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 302.580224][ T5720] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 302.580236][ T5720] usb 9-1: Product: syz [ 302.580244][ T5720] usb 9-1: Manufacturer: syz [ 302.584503][ T5720] cdc_wdm 9-1:1.0: skipping garbage [ 302.584514][ T5720] cdc_wdm 9-1:1.0: skipping garbage [ 302.587897][ T5720] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 302.587909][ T5720] cdc_wdm 9-1:1.0: Unknown control protocol [ 302.673834][ T5791] usb 8-1: Using ep0 maxpacket: 16 [ 302.674414][ T5791] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 302.683862][ T5791] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.683881][ T5791] usb 8-1: Product: syz [ 302.683893][ T5791] usb 8-1: Manufacturer: syz [ 302.683905][ T5791] usb 8-1: SerialNumber: syz [ 303.019635][ T31] audit: type=1800 audit(1790819144.072:635): pid=8499 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.633" name="sysfs" dev="sda1" ino=2057 res=0 errno=0 [ 303.021488][ T8499] EXT4-fs warning (device sda1): verify_group_input:158: Reserved blocks too high (5) [ 303.170792][ T5791] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 303.172480][ T5791] usb 8-1: USB disconnect, device number 2 [ 303.397297][ T8514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.397498][ T8514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.409123][ T31] audit: type=1400 audit(1790819144.437:636): avc: denied { read write } for pid=8485 comm="syz.8.628" name="cdc-wdm0" dev="devtmpfs" ino=3300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 303.409166][ T31] audit: type=1400 audit(1790819144.437:637): avc: denied { open } for pid=8485 comm="syz.8.628" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 303.721677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 304.287141][ T5720] usb 9-1: USB disconnect, device number 2 [ 305.524323][ T5720] usb 1-1: USB disconnect, device number 8 [ 306.587773][ T8533] xt_hashlimit: max too large, truncated to 1048576 [ 306.601847][ T8533] xt_IDLETIMER: timeout value is zero [ 306.619875][ T31] audit: type=1400 audit(1790819147.440:638): avc: denied { write } for pid=8532 comm="syz.8.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 306.620070][ T8533] ieee802154 phy0 wpan0: encryption failed: -22 [ 306.720540][ T8535] ip_tables: iptables: counters copy to user failed while replacing table [ 308.134385][ T31] audit: type=1400 audit(1790819148.852:639): avc: denied { write } for pid=8548 comm="syz.0.646" path="socket:[24035]" dev="sockfs" ino=24035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 308.149142][ T8549] netlink: 'syz.0.646': attribute type 8 has an invalid length. [ 308.149157][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 308.203022][ T8550] netlink: 'syz.0.646': attribute type 8 has an invalid length. [ 308.203041][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 309.431240][ T31] audit: type=1326 audit(1790819150.068:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.6.651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9beff9e159 code=0x7ffc0000 [ 309.431289][ T31] audit: type=1326 audit(1790819150.068:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.6.651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9beff9e159 code=0x7ffc0000 [ 309.486778][ T31] audit: type=1326 audit(1790819150.078:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.6.651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9beff9e159 code=0x7ffc0000 [ 309.486825][ T31] audit: type=1326 audit(1790819150.078:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.6.651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9beff9e159 code=0x7ffc0000 [ 309.486865][ T31] audit: type=1326 audit(1790819150.078:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.6.651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9beff9e159 code=0x7ffc0000 [ 309.486901][ T31] audit: type=1326 audit(1790819150.078:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.6.651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9beff9e159 code=0x7ffc0000 [ 309.486938][ T31] audit: type=1326 audit(1790819150.097:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.6.651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9beff9e159 code=0x7ffc0000 [ 309.486973][ T31] audit: type=1326 audit(1790819150.106:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.6.651" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9beff9e159 code=0x7ffc0000 [ 310.391858][ T8563] block nbd0: NBD_DISCONNECT [ 311.404039][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.653'. [ 311.442662][ T8576] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 311.451561][ T8576] bond2 (unregistering): Released all slaves [ 313.117485][ T5606] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 313.117712][ T5791] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 313.870503][ T5791] usb 8-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 313.883734][ T5791] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 90, changing to 10 [ 313.883770][ T5791] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24764, setting to 1024 [ 313.883802][ T5791] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.129593][ T5791] usb 8-1: config 0 descriptor?? [ 314.378809][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.382829][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.443218][ T8606] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 314.757118][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 314.757135][ T31] audit: type=1400 audit(1790819155.055:670): avc: denied { ioctl } for pid=8614 comm="syz.3.656" path="socket:[24295]" dev="sockfs" ino=24295 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 316.107078][ T5791] usbhid 8-1:0.0: can't add hid device: -71 [ 316.107129][ T5791] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 316.115184][ T5791] usb 8-1: USB disconnect, device number 3 [ 316.190080][ T31] audit: type=1400 audit(1790819156.393:671): avc: denied { append } for pid=8624 comm="syz.0.665" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 317.224282][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'. [ 318.250284][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.250330][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.257069][ T8638] netlink: 88 bytes leftover after parsing attributes in process `syz.8.662'. [ 320.330510][ T8647] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 320.606411][ T25] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 320.867266][ T5606] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 321.136341][ T25] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 321.527868][ T25] usb 9-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 321.527906][ T25] usb 9-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 321.527931][ T25] usb 9-1: config 1 interface 0 has no altsetting 0 [ 321.529084][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 321.529106][ T25] usb 9-1: SerialNumber: syz [ 321.548490][ T25] hub 9-1:1.0: bad descriptor, ignoring hub [ 321.548515][ T25] hub 9-1:1.0: probe with driver hub failed with error -5 [ 321.548883][ T25] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 321.853593][ T25] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 321.896217][ T25] usb 9-1: USB disconnect, device number 3 [ 323.306712][ T8660] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 323.549802][ T8664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.668'. [ 323.589355][ T8664] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 323.590889][ T8664] bond1 (unregistering): Released all slaves [ 331.404103][ T5606] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 334.822451][ T8699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.688'. [ 335.775222][ T8699] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 335.804796][ T8699] bond2 (unregistering): Released all slaves [ 337.277584][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 337.284809][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 337.307540][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 337.315327][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 337.325336][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 339.498331][ T52] Bluetooth: hci8: command tx timeout [ 340.544915][ T52] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 340.828636][ T8752] FAULT_INJECTION: forcing a failure. [ 340.828636][ T8752] name failslab, interval 1, probability 0, space 0, times 0 [ 340.828670][ T8752] CPU: 1 UID: 0 PID: 8752 Comm: syz.0.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.828698][ T8752] Tainted: [L]=SOFTLOCKUP [ 340.828706][ T8752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 340.828718][ T8752] Call Trace: [ 340.828725][ T8752] [ 340.828733][ T8752] dump_stack_lvl+0x100/0x190 [ 340.828764][ T8752] should_fail_ex.cold+0x5/0xa [ 340.828790][ T8752] should_failslab+0xc2/0x120 [ 340.828808][ T8752] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 340.828823][ T8752] ? kstrdup_const+0x63/0x80 [ 340.828839][ T8752] kstrdup+0x51/0xe0 [ 340.828852][ T8752] kstrdup_const+0x63/0x80 [ 340.828863][ T8752] kvasprintf_const+0x10f/0x1a0 [ 340.828878][ T8752] kobject_set_name_vargs+0x5a/0x140 [ 340.828894][ T8752] dev_set_name+0xc7/0x100 [ 340.828906][ T8752] ? __pfx_dev_set_name+0x10/0x10 [ 340.828917][ T8752] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 340.828933][ T8752] ? lockdep_init_map_type+0x5c/0x250 [ 340.828948][ T8752] ? __init_waitqueue_head+0xca/0x150 [ 340.828966][ T8752] netdev_register_kobject+0xc5/0x410 [ 340.828982][ T8752] register_netdevice+0x15b6/0x25a0 [ 340.829001][ T8752] ? __pfx_register_netdevice+0x10/0x10 [ 340.829017][ T8752] ? net_generic+0xea/0x2a0 [ 340.829035][ T8752] ppp_dev_configure+0x8e2/0xbd0 [ 340.829053][ T8752] ppp_ioctl+0x9ef/0x27b0 [ 340.829069][ T8752] ? __fget_files+0x34/0x3d0 [ 340.829085][ T8752] ? __pfx_ppp_ioctl+0x10/0x10 [ 340.829106][ T8752] ? selinux_file_ioctl+0xb6/0x290 [ 340.829121][ T8752] ? __pfx_ppp_ioctl+0x10/0x10 [ 340.829140][ T8752] __x64_sys_ioctl+0x18e/0x210 [ 340.829155][ T8752] do_syscall_64+0x123/0x790 [ 340.829168][ T8752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.829180][ T8752] RIP: 0033:0x7f165dd9e159 [ 340.829190][ T8752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.829200][ T8752] RSP: 002b:00007f165ed16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.829215][ T8752] RAX: ffffffffffffffda RBX: 00007f165e025fa0 RCX: 00007f165dd9e159 [ 340.829222][ T8752] RDX: 0000200000000100 RSI: 00000000c004743e RDI: 0000000000000004 [ 340.829229][ T8752] RBP: 00007f165de3506b R08: 0000000000000000 R09: 0000000000000000 [ 340.829235][ T8752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.829242][ T8752] R13: 00007f165e026038 R14: 00007f165e025fa0 R15: 00007ffc2b56d708 [ 340.829256][ T8752] [ 340.946590][ T984] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 341.065065][ T31] audit: type=1400 audit(1790819179.631:672): avc: denied { connect } for pid=8755 comm="syz.0.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 341.157463][ T984] usb 9-1: Using ep0 maxpacket: 8 [ 341.159621][ T984] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 341.170581][ T984] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.170602][ T984] usb 9-1: Product: syz [ 341.170614][ T984] usb 9-1: Manufacturer: syz [ 341.170627][ T984] usb 9-1: SerialNumber: syz [ 341.209731][ T984] usb 9-1: config 0 descriptor?? [ 341.452446][ T984] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 341.721650][ T52] Bluetooth: hci8: command tx timeout [ 342.235528][ T8761] netlink: 'syz.3.701': attribute type 1 has an invalid length. [ 342.235551][ T8761] netlink: 200 bytes leftover after parsing attributes in process `syz.3.701'. [ 342.235565][ T8761] netlink: 'syz.3.701': attribute type 1 has an invalid length. [ 342.235575][ T8761] netlink: 29 bytes leftover after parsing attributes in process `syz.3.701'. [ 342.409977][ T8760] netlink: 36 bytes leftover after parsing attributes in process `syz.3.701'. [ 342.509922][ T1005] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.717070][ T984] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 343.946617][ T5606] Bluetooth: hci8: command tx timeout [ 344.686435][ T5778] usb 9-1: USB disconnect, device number 4 [ 344.827729][ T1005] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.666396][ T8779] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 345.666411][ T8779] netlink: 200 bytes leftover after parsing attributes in process `syz.3.706'. [ 345.666419][ T8779] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 345.666426][ T8779] netlink: 29 bytes leftover after parsing attributes in process `syz.3.706'. [ 345.751340][ T8778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.706'. [ 345.804544][ T1005] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.062506][ T1005] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.168428][ T5606] Bluetooth: hci8: command tx timeout [ 347.050431][ T5880] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 347.062230][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.8.708'. [ 347.062255][ T8787] netlink: 16 bytes leftover after parsing attributes in process `syz.8.708'. [ 347.214844][ T8720] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.215414][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.215471][ T8720] bridge_slave_0: entered allmulticast mode [ 347.362081][ T8720] bridge_slave_0: entered promiscuous mode [ 347.367304][ T8720] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.367371][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.367632][ T8720] bridge_slave_1: entered allmulticast mode [ 347.371107][ T8720] bridge_slave_1: entered promiscuous mode [ 347.409579][ T25] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 347.454484][ T8720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.480910][ T8720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.483627][ T5791] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 347.492242][ T31] audit: type=1400 audit(1790819185.674:673): avc: denied { read } for pid=5264 comm="dhcpcd" name="n38" dev="tmpfs" ino=2989 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.492285][ T31] audit: type=1400 audit(1790819185.674:674): avc: denied { open } for pid=5264 comm="dhcpcd" path="/run/udev/data/n38" dev="tmpfs" ino=2989 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.492322][ T31] audit: type=1400 audit(1790819185.674:675): avc: denied { getattr } for pid=5264 comm="dhcpcd" path="/run/udev/data/n38" dev="tmpfs" ino=2989 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.548850][ T25] usb 9-1: device descriptor read/64, error -71 [ 347.572428][ T31] audit: type=1400 audit(1790819185.721:676): avc: denied { block_suspend } for pid=8797 comm="syz.0.704" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 347.572464][ T31] audit: type=1400 audit(1790819185.749:677): avc: denied { write } for pid=8797 comm="syz.0.704" name="nullb1" dev="configfs" ino=10724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 347.578823][ T31] audit: type=1400 audit(1790819185.749:678): avc: denied { create } for pid=8797 comm="syz.0.704" name="power" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 347.601212][ T31] audit: type=1400 audit(1790819185.759:679): avc: denied { write } for pid=8797 comm="syz.0.704" name="ports" dev="configfs" ino=3565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 347.601251][ T31] audit: type=1400 audit(1790819185.759:680): avc: denied { write } for pid=8797 comm="syz.0.704" name="subsystems" dev="configfs" ino=25138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 347.601281][ T31] audit: type=1400 audit(1790819185.759:681): avc: denied { create } for pid=8797 comm="syz.0.704" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 347.601309][ T31] audit: type=1400 audit(1790819185.777:682): avc: denied { write } for pid=8797 comm="syz.0.704" name="subsystems" dev="configfs" ino=25138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 347.649897][ T5791] usb 4-1: unable to get BOS descriptor or descriptor too short [ 347.650334][ T5791] usb 4-1: not running at top speed; connect to a high speed hub [ 347.650356][ T5791] usb 4-1: New USB device found, idVendor=0582, idProduct=0010, bcdDevice= 0.40 [ 347.655408][ T5791] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 347.663152][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.663173][ T5791] usb 4-1: Product: syz [ 347.663186][ T5791] usb 4-1: Manufacturer: syz [ 347.663199][ T5791] usb 4-1: SerialNumber: syz [ 347.667774][ T8720] team0: Port device team_slave_0 added [ 347.682286][ T8720] team0: Port device team_slave_1 added [ 347.778716][ T8720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.778730][ T8720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.778748][ T8720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.780318][ T8720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.780328][ T8720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.780346][ T8720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.804188][ T25] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 347.969792][ T25] usb 9-1: device descriptor read/64, error -71 [ 347.987320][ T1005] bridge_slave_1: left allmulticast mode [ 347.987343][ T1005] bridge_slave_1: left promiscuous mode [ 347.987582][ T1005] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.010789][ T1005] bridge_slave_0: left allmulticast mode [ 348.010810][ T1005] bridge_slave_0: left promiscuous mode [ 348.010996][ T1005] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.082246][ T25] usb usb9-port1: attempt power cycle [ 349.071140][ T25] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 349.162063][ T25] usb 9-1: device descriptor read/8, error -71 [ 349.656665][ T8823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.715'. [ 349.766906][ T8829] netlink: 44 bytes leftover after parsing attributes in process `syz.0.715'. [ 349.768942][ T8829] UBIFS error (pid: 8829): cannot open "ubi0_0", error -19 [ 349.783372][ T1005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.789692][ T1005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.791347][ T1005] bond0 (unregistering): Released all slaves [ 349.831303][ T8720] hsr_slave_0: entered promiscuous mode [ 349.831804][ T8720] hsr_slave_1: entered promiscuous mode [ 349.833356][ T8720] debugfs: 'hsr0' already exists in 'hsr' [ 349.833373][ T8720] Cannot create hsr debugfs directory [ 349.858391][ T5791] usb 4-1: cannot setup if 1: error -71 [ 349.858703][ T5791] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 349.873077][ T5791] usb 4-1: cannot setup if 1: error -71 [ 349.873341][ T5791] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 349.886064][ T8831] 9pnet_virtio: no channels available for device syz [ 349.887649][ T5791] usb 4-1: cannot setup if 1: error -71 [ 349.907467][ T30] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 349.923349][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 350.011930][ T5791] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 350.018860][ T5791] usb 4-1: USB disconnect, device number 18 [ 350.059536][ T30] usb 8-1: Using ep0 maxpacket: 16 [ 350.060991][ T30] usb 8-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 350.061305][ T8716] udevd[8716]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.061754][ T30] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 350.061770][ T30] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 350.065649][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.065663][ T30] usb 8-1: Product: syz [ 350.065671][ T30] usb 8-1: Manufacturer: syz [ 350.065679][ T30] usb 8-1: SerialNumber: syz [ 350.082572][ T25] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 350.105566][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 350.106063][ T25] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 350.108683][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.108702][ T25] usb 9-1: Product: syz [ 350.108715][ T25] usb 9-1: Manufacturer: syz [ 350.108726][ T25] usb 9-1: SerialNumber: syz [ 350.183320][ T25] usb 9-1: config 0 descriptor?? [ 350.422483][ T25] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 350.770637][ T8849] input: syz0 as /devices/virtual/input/input16 [ 351.687833][ T1005] hsr_slave_0: left promiscuous mode [ 351.723326][ T1005] hsr_slave_1: left promiscuous mode [ 351.723833][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.723845][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.742414][ T1005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.742447][ T1005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.886559][ T1005] veth1_macvtap: left promiscuous mode [ 351.886593][ T1005] veth0_macvtap: left promiscuous mode [ 351.886667][ T1005] veth1_vlan: left promiscuous mode [ 351.886698][ T1005] veth0_vlan: left promiscuous mode [ 352.145494][ T30] usb 8-1: USB disconnect, device number 4 [ 352.303339][ T8718] udevd[8718]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.813157][ T25] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 352.830933][ T25] usb 9-1: USB disconnect, device number 8 [ 354.154497][ T1005] team0 (unregistering): Port device team_slave_1 removed [ 354.255398][ T1005] team0 (unregistering): Port device team_slave_0 removed [ 355.230017][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6 [ 355.230145][ T8868] netlink: 20 bytes leftover after parsing attributes in process `syz.7.722'. [ 355.384124][ T8885] netlink: 68 bytes leftover after parsing attributes in process `syz.7.727'. [ 355.983151][ T31] kauditd_printk_skb: 40 callbacks suppressed [ 355.983171][ T31] audit: type=1400 audit(1790819193.626:723): avc: denied { ioctl } for pid=8898 comm="syz.0.730" path="socket:[25856]" dev="sockfs" ino=25856 ioctlcmd=0x3b88 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.009997][ T8900] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.300605][ T31] audit: type=1400 audit(1790819193.916:724): avc: denied { write } for pid=8894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.422315][ T31] audit: type=1400 audit(1790819194.029:725): avc: denied { write } for pid=8912 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.628379][ T5264] 8021q: adding VLAN 0 to HW filter on device eth7 [ 357.776949][ T25] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 357.937314][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 357.937885][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 357.940943][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.940964][ T25] usb 4-1: Product: syz [ 357.940977][ T25] usb 4-1: Manufacturer: syz [ 357.940990][ T25] usb 4-1: SerialNumber: syz [ 357.945680][ T25] usb 4-1: config 0 descriptor?? [ 358.165978][ T25] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 358.555249][ T8885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.557920][ T8720] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 358.625285][ T8720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 358.631383][ T8720] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 358.673948][ T8720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 358.674440][ T8720] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 358.697074][ T8720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 358.704740][ T8720] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 358.734180][ T8720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 358.982649][ T8937] FAULT_INJECTION: forcing a failure. [ 358.982649][ T8937] name failslab, interval 1, probability 0, space 0, times 0 [ 358.982682][ T8937] CPU: 1 UID: 0 PID: 8937 Comm: syz.7.737 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.982709][ T8937] Tainted: [L]=SOFTLOCKUP [ 358.982715][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 358.982726][ T8937] Call Trace: [ 358.982732][ T8937] [ 358.982739][ T8937] dump_stack_lvl+0x100/0x190 [ 358.982769][ T8937] should_fail_ex.cold+0x5/0xa [ 358.982795][ T8937] should_failslab+0xc2/0x120 [ 358.982820][ T8937] __kmalloc_noprof+0xfc/0x840 [ 358.982841][ T8937] ? __pfx_dynamic_dname+0x10/0x10 [ 358.982862][ T8937] ? tomoyo_encode2+0xfb/0x3c0 [ 358.982892][ T8937] tomoyo_encode2+0xfb/0x3c0 [ 358.982919][ T8937] tomoyo_encode+0x29/0x50 [ 358.982941][ T8937] tomoyo_realpath_from_path+0x18c/0x690 [ 358.982971][ T8937] tomoyo_path_number_perm+0x23c/0x580 [ 358.982991][ T8937] ? tomoyo_path_number_perm+0x22e/0x580 [ 358.983012][ T8937] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 358.983042][ T8937] ? __lock_acquire+0x5c0/0x1f40 [ 358.983075][ T8937] ? __fget_files+0x34/0x3d0 [ 358.983099][ T8937] ? find_held_lock+0x2b/0x80 [ 358.983124][ T8937] ? hook_file_ioctl_common+0x140/0x440 [ 358.983157][ T8937] ? __fget_files+0x21f/0x3d0 [ 358.983184][ T8937] security_file_ioctl+0xd3/0x230 [ 358.983208][ T8937] __x64_sys_ioctl+0xb7/0x210 [ 358.983230][ T8937] do_syscall_64+0x123/0x790 [ 358.983256][ T8937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.983274][ T8937] RIP: 0033:0x7f639019e159 [ 358.983289][ T8937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.983305][ T8937] RSP: 002b:00007f63910b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.983328][ T8937] RAX: ffffffffffffffda RBX: 00007f6390425fa0 RCX: 00007f639019e159 [ 358.983340][ T8937] RDX: 0000200000000080 RSI: 0000000000008916 RDI: 0000000000000004 [ 358.983351][ T8937] RBP: 00007f63910b3090 R08: 0000000000000000 R09: 0000000000000000 [ 358.983362][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.983373][ T8937] R13: 00007f6390426038 R14: 00007f6390425fa0 R15: 00007ffedc3ce068 [ 358.983398][ T8937] [ 358.983435][ T8937] ERROR: Out of memory at tomoyo_realpath_from_path. [ 358.990755][ T8720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.363627][ T25] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 360.379776][ T25] usb 4-1: USB disconnect, device number 19 [ 360.397407][ T8938] netlink: 20 bytes leftover after parsing attributes in process `syz.8.736'. [ 360.453487][ T8720] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.467459][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.467504][ T5880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.501218][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.501306][ T5880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.655170][ T31] audit: type=1400 audit(1790819198.921:726): avc: denied { write } for pid=8931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.842615][ T31] audit: type=1400 audit(1790819200.035:727): avc: denied { write } for pid=8969 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 363.030822][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8 [ 363.446869][ T8720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.734659][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.744'. [ 364.848793][ T8996] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 364.861213][ T8996] bond1 (unregistering): Released all slaves [ 364.996961][ T9001] FAULT_INJECTION: forcing a failure. [ 364.996961][ T9001] name failslab, interval 1, probability 0, space 0, times 0 [ 364.996986][ T9001] CPU: 1 UID: 0 PID: 9001 Comm: syz.7.745 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.997004][ T9001] Tainted: [L]=SOFTLOCKUP [ 364.997009][ T9001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 364.997017][ T9001] Call Trace: [ 364.997021][ T9001] [ 364.997026][ T9001] dump_stack_lvl+0x100/0x190 [ 364.997047][ T9001] should_fail_ex.cold+0x5/0xa [ 364.997063][ T9001] ? __netlink_lookup+0x652/0x900 [ 364.997081][ T9001] should_failslab+0xc2/0x120 [ 364.997098][ T9001] kmem_cache_alloc_noprof+0x92/0x6a0 [ 364.997114][ T9001] ? skb_clone+0x190/0x400 [ 364.997134][ T9001] skb_clone+0x190/0x400 [ 364.997151][ T9001] netlink_deliver_tap+0xaed/0xcc0 [ 364.997185][ T9001] netlink_unicast+0x62b/0x850 [ 364.997204][ T9001] ? __pfx_netlink_unicast+0x10/0x10 [ 364.997225][ T9001] netlink_sendmsg+0x8b0/0xda0 [ 364.997244][ T9001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.997263][ T9001] ? selinux_socket_sendmsg+0x198/0x2f0 [ 364.997280][ T9001] ____sys_sendmsg+0xa4d/0xbe0 [ 364.997292][ T9001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.997310][ T9001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.997329][ T9001] ___sys_sendmsg+0x190/0x1e0 [ 364.997343][ T9001] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.997357][ T9001] ? futex_wait+0x11e/0x370 [ 364.997375][ T9001] ? find_held_lock+0x2b/0x80 [ 364.997404][ T9001] __sys_sendmsg+0x160/0x210 [ 364.997421][ T9001] ? __pfx___sys_sendmsg+0x10/0x10 [ 364.997446][ T9001] do_syscall_64+0x123/0x790 [ 364.997460][ T9001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.997473][ T9001] RIP: 0033:0x7f639019e159 [ 364.997485][ T9001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.997497][ T9001] RSP: 002b:00007f63910b3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.997510][ T9001] RAX: ffffffffffffffda RBX: 00007f6390425fa0 RCX: 00007f639019e159 [ 364.997518][ T9001] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 364.997528][ T9001] RBP: 00007f639023506b R08: 0000000000000000 R09: 0000000000000000 [ 364.997535][ T9001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.997543][ T9001] R13: 00007f6390426038 R14: 00007f6390425fa0 R15: 00007ffedc3ce068 [ 364.997559][ T9001] [ 365.081035][ T8720] veth0_vlan: entered promiscuous mode [ 365.110962][ T8720] veth1_vlan: entered promiscuous mode [ 365.164378][ T8720] veth0_macvtap: entered promiscuous mode [ 365.173088][ T8720] veth1_macvtap: entered promiscuous mode [ 365.380688][ T8720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.390983][ T8720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.391827][ T9012] netlink: 20 bytes leftover after parsing attributes in process `syz.7.747'. [ 366.574322][ T50] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.574363][ T50] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.574390][ T50] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.574581][ T50] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.678725][ T5880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.678738][ T5880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.454531][ T5791] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 367.661984][ T6516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.662004][ T6516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.730550][ T5791] usb 4-1: Using ep0 maxpacket: 8 [ 367.735170][ T5791] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 367.737951][ T5791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.737966][ T5791] usb 4-1: Product: syz [ 367.737975][ T5791] usb 4-1: Manufacturer: syz [ 367.737983][ T5791] usb 4-1: SerialNumber: syz [ 367.744911][ T5791] usb 4-1: config 0 descriptor?? [ 367.893670][ T9037] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 367.921452][ T30] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 367.969017][ T5791] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 368.084143][ T30] usb 1-1: not running at top speed; connect to a high speed hub [ 368.084161][ T30] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 368.084915][ T30] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 368.084968][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.154399][ T30] uvcvideo 1-1:1.0: Found UVC 1.00 device (046d:0825) [ 368.154477][ T30] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 368.342964][ T9022] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 368.366105][ T30] usb 1-1: USB disconnect, device number 9 [ 368.371012][ T5720] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 368.530921][ T5720] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 368.531324][ T5720] usb 8-1: config 0 has no interfaces? [ 368.532815][ T5720] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.532828][ T5720] usb 8-1: Product: syz [ 368.532853][ T5720] usb 8-1: Manufacturer: syz [ 368.532861][ T5720] usb 8-1: SerialNumber: syz [ 368.535090][ T5720] usb 8-1: config 0 descriptor?? [ 368.678219][ T9044] jffs2: notice: (9044) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 368.696492][ T31] audit: type=1400 audit(1790819205.498:728): avc: denied { write } for pid=9043 comm="syz.8.754" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 368.696534][ T31] audit: type=1400 audit(1790819205.498:729): avc: denied { write } for pid=9043 comm="syz.8.754" path="/28/mnt/test" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 370.133508][ T5791] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 370.140701][ T5791] usb 4-1: USB disconnect, device number 20 [ 370.210184][ T9051] can0: slcan on ttyS3. [ 370.339231][ T9051] can0 (unregistered): slcan off ttyS3. [ 370.355619][ T9051] netlink: 132732 bytes leftover after parsing attributes in process `syz.0.756'. [ 371.297470][ T31] audit: type=1400 audit(1790819207.940:730): avc: denied { write } for pid=9059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.401327][ T31] audit: type=1400 audit(1790819208.043:731): avc: denied { call } for pid=9072 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 371.424114][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.8.760'. [ 372.484745][ T31] audit: type=1400 audit(1790819209.053:732): avc: denied { write } for pid=9076 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.562043][ T5791] usb 8-1: USB disconnect, device number 5 [ 374.737170][ T9084] syz.3.762 (9084) used greatest stack depth: 18776 bytes left [ 375.947478][ T9094] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 378.172398][ T31] audit: type=1400 audit(1790819214.348:733): avc: denied { map } for pid=9089 comm="syz.7.765" path="/dev/sg0" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 378.172445][ T31] audit: type=1400 audit(1790819214.367:734): avc: denied { execute } for pid=9089 comm="syz.7.765" path="/dev/sg0" dev="devtmpfs" ino=833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 378.694015][ T31] audit: type=1400 audit(1790819214.862:735): avc: denied { setopt } for pid=9108 comm="syz.8.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 378.731882][ T31] audit: type=1400 audit(1790819214.900:736): avc: denied { accept } for pid=9108 comm="syz.8.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 379.602449][ T31] audit: type=1400 audit(1790819215.714:737): avc: denied { mount } for pid=9113 comm="syz.9.771" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 379.785110][ T31] audit: type=1400 audit(1790819215.882:738): avc: denied { write } for pid=9100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.964818][ T31] audit: type=1400 audit(1790819216.051:739): avc: denied { write } for pid=9129 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.020032][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.9.773'. [ 381.281731][ T31] audit: type=1400 audit(1790819217.285:740): avc: denied { append } for pid=9139 comm="syz.8.776" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 381.298208][ T9142] PKCS7: Unsupported SignedData version [ 381.468339][ T5791] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 383.068169][ T5791] usb 8-1: Using ep0 maxpacket: 8 [ 383.068583][ T5791] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 383.073875][ T5791] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.073895][ T5791] usb 8-1: Product: syz [ 383.073903][ T5791] usb 8-1: Manufacturer: syz [ 383.073911][ T5791] usb 8-1: SerialNumber: syz [ 383.076279][ T5791] usb 8-1: config 0 descriptor?? [ 383.302637][ T5791] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 383.712253][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.712294][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.819119][ T9168] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 385.110711][ T31] audit: type=1400 audit(1790819220.869:741): avc: denied { write } for pid=9157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.202989][ T5791] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 386.207368][ T5791] usb 8-1: USB disconnect, device number 6 [ 386.261219][ T31] audit: type=1400 audit(1790819221.944:742): avc: denied { write } for pid=9182 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.305818][ T9179] CIFS: Attempting to mount //127.0.0.1/share [ 386.394730][ T9188] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=12593 len=0) [ 386.394982][ T9179] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=12593 len=0) [ 386.395951][ T9188] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 386.397800][ T9179] CIFS: VFS: \\127.0.0.1 failed to create a new SMB session with Unknown: -11 [ 386.397954][ T9179] CIFS: VFS: cifs_mount failed w/return code = -11 [ 387.083536][ T5606] Bluetooth: hci7: command 0x0406 tx timeout [ 387.580701][ T31] audit: type=1400 audit(1790819223.179:743): avc: denied { write } for pid=9199 comm="syz.7.787" name="usb_gadget" dev="configfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.616514][ T9202] FAULT_INJECTION: forcing a failure. [ 387.616514][ T9202] name failslab, interval 1, probability 0, space 0, times 0 [ 387.616545][ T9202] CPU: 1 UID: 0 PID: 9202 Comm: syz.0.788 Tainted: G L syzkaller #0 PREEMPT(full) [ 387.616570][ T9202] Tainted: [L]=SOFTLOCKUP [ 387.616576][ T9202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 387.616585][ T9202] Call Trace: [ 387.616591][ T9202] [ 387.616597][ T9202] dump_stack_lvl+0x100/0x190 [ 387.616628][ T9202] should_fail_ex.cold+0x5/0xa [ 387.616653][ T9202] should_failslab+0xc2/0x120 [ 387.616679][ T9202] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 387.616701][ T9202] ? __alloc_skb+0x5b7/0x710 [ 387.616725][ T9202] ? __alloc_skb+0x140/0x710 [ 387.616752][ T9202] __alloc_skb+0x140/0x710 [ 387.616773][ T9202] ? __alloc_skb+0x5b7/0x710 [ 387.616795][ T9202] ? __pfx___alloc_skb+0x10/0x10 [ 387.616840][ T9202] netlink_ack+0x117/0xb80 [ 387.616872][ T9202] netlink_rcv_skb+0x333/0x420 [ 387.616899][ T9202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 387.616928][ T9202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.616959][ T9202] ? netlink_deliver_tap+0x1ae/0xcc0 [ 387.616986][ T9202] netlink_unicast+0x585/0x850 [ 387.617012][ T9202] ? __pfx_netlink_unicast+0x10/0x10 [ 387.617035][ T9202] ? __pfx_sock_has_perm+0x10/0x10 [ 387.617061][ T9202] netlink_sendmsg+0x8b0/0xda0 [ 387.617087][ T9202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.617112][ T9202] ? selinux_socket_sendmsg+0x198/0x2f0 [ 387.617137][ T9202] ____sys_sendmsg+0xa4d/0xbe0 [ 387.617154][ T9202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.617178][ T9202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.617202][ T9202] ? lock_acquire+0x1d1/0x380 [ 387.617222][ T9202] ? get_pid_task+0x2a/0x250 [ 387.617249][ T9202] ___sys_sendmsg+0x190/0x1e0 [ 387.617270][ T9202] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.617289][ T9202] ? get_pid_task+0x106/0x250 [ 387.617322][ T9202] ? find_held_lock+0x2b/0x80 [ 387.617364][ T9202] __sys_sendmsg+0x160/0x210 [ 387.617390][ T9202] ? __pfx___sys_sendmsg+0x10/0x10 [ 387.617427][ T9202] do_syscall_64+0x123/0x790 [ 387.617448][ T9202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.617467][ T9202] RIP: 0033:0x7f165dd9e159 [ 387.617482][ T9202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.617499][ T9202] RSP: 002b:00007f165ed16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.617519][ T9202] RAX: ffffffffffffffda RBX: 00007f165e025fa0 RCX: 00007f165dd9e159 [ 387.617531][ T9202] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006 [ 387.617541][ T9202] RBP: 00007f165ed16090 R08: 0000000000000000 R09: 0000000000000000 [ 387.617551][ T9202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.617562][ T9202] R13: 00007f165e026038 R14: 00007f165e025fa0 R15: 00007ffc2b56d708 [ 387.617586][ T9202] [ 387.617993][ T31] audit: type=1400 audit(1790819223.198:744): avc: denied { write } for pid=9199 comm="syz.7.787" name="configs" dev="configfs" ino=27213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.618034][ T31] audit: type=1400 audit(1790819223.198:745): avc: denied { write } for pid=9199 comm="syz.7.787" name="functions" dev="configfs" ino=27212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.791674][ T31] audit: type=1400 audit(1790819223.376:746): avc: denied { write } for pid=9199 comm="syz.7.787" name="fs" dev="configfs" ino=27253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.791718][ T31] audit: type=1400 audit(1790819223.376:747): avc: denied { write } for pid=9199 comm="syz.7.787" name="header" dev="configfs" ino=27246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.816466][ T31] audit: type=1400 audit(1790819223.385:748): avc: denied { write } for pid=9199 comm="syz.7.787" name="fs" dev="configfs" ino=27253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 387.840812][ T31] audit: type=1400 audit(1790819223.422:749): avc: denied { write } for pid=9199 comm="syz.7.787" name="header" dev="configfs" ino=27229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.573569][ T31] audit: type=1400 audit(1790819224.021:750): avc: denied { write } for pid=9199 comm="syz.7.787" name="c.1" dev="configfs" ino=27221 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 388.641768][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.787'. [ 388.665222][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.7.787'. [ 391.751513][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 391.751531][ T31] audit: type=1400 audit(1790819227.080:753): avc: denied { write } for pid=9221 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.748821][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.751591][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.757054][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 392.777124][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 392.785231][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 392.856952][ T9238] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 393.332620][ T31] audit: type=1400 audit(1790819228.558:754): avc: denied { write } for pid=9230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.347199][ T9260] netlink: 60 bytes leftover after parsing attributes in process `syz.9.796'. [ 394.071661][ T9265] 9p: Bad value for 'rfdno' [ 394.460587][ T31] audit: type=1400 audit(1790819229.616:755): avc: denied { write } for pid=9267 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.486350][ T9272] netlink: 16 bytes leftover after parsing attributes in process `syz.7.798'. [ 394.576229][ T9272] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 394.587298][ T9272] bond1 (unregistering): Released all slaves [ 395.244196][ T52] Bluetooth: hci4: command tx timeout [ 395.785736][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.785862][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.785978][ T9231] bridge_slave_0: entered allmulticast mode [ 395.794699][ T9231] bridge_slave_0: entered promiscuous mode [ 395.809457][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.809524][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.809617][ T9231] bridge_slave_1: entered allmulticast mode [ 395.819912][ T9231] bridge_slave_1: entered promiscuous mode [ 395.918142][ T9231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.925292][ T9231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.997110][ T9231] team0: Port device team_slave_0 added [ 396.015283][ T9231] team0: Port device team_slave_1 added [ 396.065644][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.065660][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.065677][ T9231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.073684][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.073696][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.073713][ T9231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.214386][ T9231] hsr_slave_0: entered promiscuous mode [ 396.214934][ T9231] hsr_slave_1: entered promiscuous mode [ 396.215275][ T9231] debugfs: 'hsr0' already exists in 'hsr' [ 396.215291][ T9231] Cannot create hsr debugfs directory [ 396.333474][ T984] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 396.351310][ T31] audit: type=1400 audit(1790819231.384:756): avc: denied { write } for pid=9286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.498939][ T984] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 396.500941][ T984] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.500959][ T984] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.500983][ T984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.503260][ T984] usb 8-1: config 0 descriptor?? [ 396.551750][ T31] audit: type=1400 audit(1790819231.543:757): avc: denied { write } for pid=9302 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.712057][ T25] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 396.869530][ T25] usb 10-1: Using ep0 maxpacket: 8 [ 396.883452][ T25] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 396.890627][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.890648][ T25] usb 10-1: Product: syz [ 396.890661][ T25] usb 10-1: Manufacturer: syz [ 396.890674][ T25] usb 10-1: SerialNumber: syz [ 396.894641][ T25] usb 10-1: config 0 descriptor?? [ 397.194610][ T25] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 397.341219][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.350172][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.403287][ T52] Bluetooth: hci4: command tx timeout [ 397.412039][ T984] usbhid 8-1:0.0: can't add hid device: -71 [ 397.416662][ T984] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 397.508680][ T984] usb 8-1: USB disconnect, device number 7 [ 398.589297][ T25] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 399.570466][ T31] audit: type=1400 audit(1790819234.396:758): avc: denied { write } for pid=9307 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.571591][ T31] audit: type=1400 audit(1790819234.396:759): avc: denied { write } for pid=9326 comm="syz.0.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 399.617810][ T52] Bluetooth: hci4: command tx timeout [ 399.820504][ T31] audit: type=1400 audit(1790819234.630:760): avc: denied { write } for pid=9334 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.824142][ T25] usb 10-1: USB disconnect, device number 2 [ 400.581995][ T30] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 400.829953][ T30] usb 1-1: device descriptor read/64, error -71 [ 400.843544][ T9347] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 400.963731][ T9231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 400.979131][ T9231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.979699][ T9231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 400.986643][ T9231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.989285][ T9231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 401.020504][ T9231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.022270][ T9231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.030666][ T9231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.080011][ T30] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 401.168251][ T9231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.202789][ T9231] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.215046][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.215131][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.218167][ T30] usb 1-1: device descriptor read/64, error -71 [ 401.243843][ T181] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.243927][ T181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.318076][ T31] audit: type=1400 audit(1790819236.033:761): avc: denied { write } for pid=9348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.336033][ T30] usb usb1-port1: attempt power cycle [ 401.478015][ T31] audit: type=1400 audit(1790819236.183:762): avc: denied { write } for pid=9367 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.699372][ T30] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 401.724286][ T30] usb 1-1: device descriptor read/8, error -71 [ 401.756881][ T9231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.761298][ T9383] netlink: 16 bytes leftover after parsing attributes in process `syz.7.808'. [ 401.799819][ T9383] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 401.800585][ T9383] bond1 (unregistering): Released all slaves [ 401.838201][ T52] Bluetooth: hci4: command tx timeout [ 401.901938][ T9231] veth0_vlan: entered promiscuous mode [ 401.908314][ T5791] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 401.933741][ T9231] veth1_vlan: entered promiscuous mode [ 401.978274][ T30] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 401.989093][ T9231] veth0_macvtap: entered promiscuous mode [ 402.000089][ T30] usb 1-1: device descriptor read/8, error -71 [ 402.000193][ T9231] veth1_macvtap: entered promiscuous mode [ 402.035231][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.041989][ T31] audit: type=1400 audit(1790819236.716:763): avc: denied { write } for pid=9375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.045462][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.062619][ T5791] usb 10-1: Using ep0 maxpacket: 32 [ 402.064557][ T5791] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 402.070753][ T5791] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.070772][ T5791] usb 10-1: Product: syz [ 402.070785][ T5791] usb 10-1: Manufacturer: syz [ 402.070796][ T5791] usb 10-1: SerialNumber: syz [ 402.117730][ T30] usb usb1-port1: unable to enumerate USB device [ 402.121720][ T5791] usb 10-1: config 0 descriptor?? [ 402.130069][ T5791] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 402.130134][ T5791] dvb-usb: bulk message failed: -22 (4/0) [ 402.130145][ T5791] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 402.130224][ T5791] dvb-usb: bulk message failed: -22 (5/0) [ 402.130234][ T5791] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 402.165423][ T8480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.167204][ T1005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.167250][ T1005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.167278][ T1005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.205314][ T5791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 402.206105][ T5791] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 402.206140][ T5791] usb 10-1: media controller created [ 402.213822][ T31] audit: type=1400 audit(1790819236.866:764): avc: denied { write } for pid=9394 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.249172][ T5791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.328624][ T5791] usb 10-1: selecting invalid altsetting 3 [ 402.328640][ T5791] ttusb2: set interface to alts=3 failed [ 402.368219][ T9377] dvb-usb: bulk message failed: -22 (7/0) [ 402.368238][ T9377] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 402.368270][ T9377] ttusb2: i2c transfer failed. [ 402.387580][ T9377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.387890][ T9377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.425155][ T5791] DVB: Unable to find symbol tda10086_attach() [ 402.425164][ T5791] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 402.425725][ T5791] dvb-usb: bulk message failed: -22 (4/0) [ 402.425735][ T5791] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 402.425781][ T5791] dvb-usb: bulk message failed: -22 (5/0) [ 402.425787][ T5791] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 402.425813][ T5791] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 402.432835][ T9377] binder_alloc: 9374: binder_alloc_buf, no vma [ 402.433312][ T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.433327][ T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.617174][ T30] usb 10-1: USB disconnect, device number 3 [ 403.620925][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.620942][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.746407][ T30] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 404.741213][ T9412] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 404.767036][ T31] audit: type=1400 audit(1790819239.233:765): avc: denied { mount } for pid=9411 comm="syz.0.812" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 404.767082][ T31] audit: type=1400 audit(1790819239.233:766): avc: denied { write } for pid=9411 comm="syz.0.812" name="kvm" dev="tracefs" ino=28268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 404.883566][ T31] audit: type=1400 audit(1790819239.364:767): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 405.756852][ T31] audit: type=1400 audit(1790819240.187:768): avc: denied { read } for pid=9424 comm="syz.0.815" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 405.756896][ T31] audit: type=1400 audit(1790819240.187:769): avc: denied { open } for pid=9424 comm="syz.0.815" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 405.830312][ T31] audit: type=1400 audit(1790819240.252:770): avc: denied { write } for pid=9399 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.075439][ T31] audit: type=1400 audit(1790819240.486:771): avc: denied { write } for pid=9436 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.150029][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 406.868654][ T5791] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 407.139989][ T5791] usb 10-1: Using ep0 maxpacket: 8 [ 407.142526][ T5791] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 407.143702][ T5791] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.143715][ T5791] usb 10-1: config 0 has no interfaces? [ 407.143729][ T5791] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.148495][ T5791] usb 10-1: config 0 descriptor?? [ 407.318277][ T9454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.820'. [ 407.346812][ T9454] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 407.358712][ T9454] bond1 (unregistering): Released all slaves [ 407.388687][ T9435] FAULT_INJECTION: forcing a failure. [ 407.388687][ T9435] name failslab, interval 1, probability 0, space 0, times 0 [ 407.388708][ T9435] CPU: 1 UID: 0 PID: 9435 Comm: syz.9.816 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.388725][ T9435] Tainted: [L]=SOFTLOCKUP [ 407.388730][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 407.388737][ T9435] Call Trace: [ 407.388740][ T9435] [ 407.388745][ T9435] dump_stack_lvl+0x100/0x190 [ 407.388765][ T9435] should_fail_ex.cold+0x5/0xa [ 407.388782][ T9435] should_failslab+0xc2/0x120 [ 407.388798][ T9435] kmem_cache_alloc_noprof+0x92/0x6a0 [ 407.388814][ T9435] ? security_file_alloc+0x34/0x2c0 [ 407.388832][ T9435] security_file_alloc+0x34/0x2c0 [ 407.388847][ T9435] init_file+0x95/0x480 [ 407.388863][ T9435] alloc_empty_file+0x79/0x1c0 [ 407.388879][ T9435] alloc_file_pseudo+0x183/0x290 [ 407.388897][ T9435] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 407.388917][ T9435] __shmem_file_setup+0x205/0x460 [ 407.388933][ T9435] ? __pfx___shmem_file_setup+0x10/0x10 [ 407.388950][ T9435] ? vm_area_alloc+0x1f/0x160 [ 407.388967][ T9435] shmem_zero_setup+0x96/0x1b0 [ 407.388979][ T9435] __mmap_region+0x26b6/0x32e0 [ 407.388993][ T9435] ? __pfx___mmap_region+0x10/0x10 [ 407.389014][ T9435] ? __lock_acquire+0x5c0/0x1f40 [ 407.389035][ T9435] ? __lock_acquire+0x5c0/0x1f40 [ 407.389079][ T9435] mmap_region+0x3db/0x6d0 [ 407.389092][ T9435] ? __pfx_mmap_region+0x10/0x10 [ 407.389104][ T9435] ? shmem_get_unmapped_area+0x141/0x960 [ 407.389121][ T9435] ? selinux_mmap_addr+0x2b/0x110 [ 407.389133][ T9435] ? bpf_lsm_mmap_addr+0x9/0x30 [ 407.389148][ T9435] ? security_mmap_addr+0x71/0x1e0 [ 407.389162][ T9435] ? __get_unmapped_area+0x255/0x3e0 [ 407.389178][ T9435] do_mmap+0x12c7/0x1c30 [ 407.389196][ T9435] ? lock_acquire+0x1d1/0x380 [ 407.389208][ T9435] ? __pfx_do_mmap+0x10/0x10 [ 407.389227][ T9435] ? __pfx_down_write_killable+0x10/0x10 [ 407.389243][ T9435] vm_mmap_pgoff+0x28d/0x470 [ 407.389259][ T9435] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 407.389275][ T9435] ? __pfx_do_futex+0x10/0x10 [ 407.389293][ T9435] ksys_mmap_pgoff+0xe4/0x610 [ 407.389308][ T9435] ? __x64_sys_futex+0x358/0x4d0 [ 407.389324][ T9435] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 407.389338][ T9435] ? xfd_validate_state+0x129/0x190 [ 407.389353][ T9435] __x64_sys_mmap+0x125/0x190 [ 407.389368][ T9435] do_syscall_64+0x123/0x790 [ 407.389381][ T9435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.389392][ T9435] RIP: 0033:0x7f62deb9e159 [ 407.389402][ T9435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.389413][ T9435] RSP: 002b:00007f62dcdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 407.389427][ T9435] RAX: ffffffffffffffda RBX: 00007f62dee25fa0 RCX: 00007f62deb9e159 [ 407.389435][ T9435] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 407.389442][ T9435] RBP: 00007f62dec3506b R08: ffffffffffffffff R09: 0000000000000000 [ 407.389449][ T9435] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 407.389456][ T9435] R13: 00007f62dee26038 R14: 00007f62dee25fa0 R15: 00007ffc5420f458 [ 407.389472][ T9435] [ 407.392680][ T5791] usb 10-1: USB disconnect, device number 4 [ 407.798184][ T31] audit: type=1400 audit(1790819242.095:772): avc: denied { write } for pid=9447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.003651][ T31] audit: type=1400 audit(1790819243.218:773): avc: denied { write } for pid=9472 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.930052][ T5606] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 409.930967][ T5606] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 409.932028][ T5606] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 409.936650][ T5606] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 409.937008][ T5606] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 410.101208][ T5791] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 410.207380][ T9495] netlink: 32 bytes leftover after parsing attributes in process `syz.0.819'. [ 410.207404][ T9495] netlink: 32 bytes leftover after parsing attributes in process `syz.0.819'. [ 410.240042][ T5791] usb 2-1: device descriptor read/64, error -71 [ 410.398235][ T9504] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 410.496622][ T5791] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 410.619464][ T31] audit: type=1400 audit(1790819244.734:774): avc: denied { write } for pid=9479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.636704][ T5791] usb 2-1: device descriptor read/64, error -71 [ 410.656947][ T984] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 410.753429][ T5791] usb usb2-port1: attempt power cycle [ 410.809573][ T31] audit: type=1400 audit(1790819244.911:775): avc: denied { write } for pid=9519 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.827789][ T984] usb 1-1: Using ep0 maxpacket: 8 [ 410.828704][ T984] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 410.831193][ T984] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.831227][ T984] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.831258][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.842446][ T984] usb 1-1: config 0 descriptor?? [ 410.844728][ T984] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 410.970576][ T9478] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.970619][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.970674][ T9478] bridge_slave_0: entered allmulticast mode [ 410.975120][ T9478] bridge_slave_0: entered promiscuous mode [ 410.986047][ T9478] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.986506][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.986590][ T9478] bridge_slave_1: entered allmulticast mode [ 410.997394][ T9478] bridge_slave_1: entered promiscuous mode [ 411.088795][ T9478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.090319][ T9478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.117951][ T5791] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 411.139440][ T5791] usb 2-1: device descriptor read/8, error -71 [ 411.177173][ T9478] team0: Port device team_slave_0 added [ 411.190315][ T9478] team0: Port device team_slave_1 added [ 411.342697][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.342713][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.342727][ T9478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.357472][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.357485][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.357504][ T9478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.391223][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.7.831'. [ 411.392012][ T9541] netlink: 16 bytes leftover after parsing attributes in process `syz.7.831'. [ 411.392424][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.7.831'. [ 411.469148][ T5791] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 411.492686][ T5791] usb 2-1: device descriptor read/8, error -71 [ 411.537635][ T9478] hsr_slave_0: entered promiscuous mode [ 411.542622][ T9478] hsr_slave_1: entered promiscuous mode [ 411.542946][ T9478] debugfs: 'hsr0' already exists in 'hsr' [ 411.542964][ T9478] Cannot create hsr debugfs directory [ 411.612755][ T5791] usb usb2-port1: unable to enumerate USB device [ 412.711239][ T52] Bluetooth: hci9: command tx timeout [ 413.610912][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 413.824295][ T31] audit: type=1400 audit(1790819247.737:776): avc: denied { write } for pid=9528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.440832][ T9556] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 414.483009][ T9557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.835'. [ 414.500288][ T5791] usb 1-1: USB disconnect, device number 14 [ 414.559891][ T9557] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 414.563323][ T31] audit: type=1400 audit(1790819248.419:777): avc: denied { write } for pid=9558 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.566255][ T9557] bond1 (unregistering): Released all slaves [ 414.923364][ T5606] Bluetooth: hci9: command tx timeout [ 415.928929][ T31] audit: type=1400 audit(1790819249.701:778): avc: denied { write } for pid=9562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.073973][ T9478] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 416.079427][ T9478] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 416.080276][ T9478] bridge0: port 3(netdevsim0) entered disabled state [ 416.127328][ T31] audit: type=1400 audit(1790819249.879:779): avc: denied { create } for pid=9581 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 416.153447][ T31] audit: type=1400 audit(1790819249.898:780): avc: denied { write } for pid=9580 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.195692][ T31] audit: type=1400 audit(1790819249.954:781): avc: denied { setopt } for pid=9581 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 416.195837][ T31] audit: type=1400 audit(1790819249.954:782): avc: denied { bind } for pid=9581 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 416.195996][ T31] audit: type=1400 audit(1790819249.954:783): avc: denied { write } for pid=9581 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 417.375569][ T5606] Bluetooth: hci9: command tx timeout [ 417.681218][ T9478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.709483][ T9478] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.711424][ T9478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.730422][ T9478] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.734359][ T9478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.753901][ T31] audit: type=1400 audit(1790819251.404:784): avc: denied { write } for pid=9587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.763561][ T9478] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.763813][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 417.768874][ T9478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.305930][ T9478] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 418.974210][ T31] audit: type=1400 audit(1790819252.554:785): avc: denied { write } for pid=9617 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.976230][ T9478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.031248][ T9478] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.053976][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.054022][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.075830][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.075918][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.394985][ T9629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.845'. [ 419.442916][ T9629] bond2: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 419.458545][ T9629] bond2 (unregistering): Released all slaves [ 419.532859][ T9634] misc userio: No port type given on /dev/userio [ 419.540106][ T5606] Bluetooth: hci9: command tx timeout [ 420.912472][ T32] INFO: task syz-executor:6783 blocked for more than 143 seconds. [ 420.912499][ T32] Tainted: G L syzkaller #0 [ 420.912510][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.912516][ T32] task:syz-executor state:D stack:22600 pid:6783 tgid:6783 ppid:1 task_flags:0x400140 flags:0x00080002 [ 420.912565][ T32] Call Trace: [ 420.912571][ T32] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 420.912582][ T32] __schedule+0x1259/0x6920 [ 420.912612][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 420.912637][ T32] ? do_raw_spin_lock+0x128/0x260 [ 420.912667][ T32] ? __pfx___schedule+0x10/0x10 [ 420.912691][ T32] ? find_held_lock+0x2b/0x80 [ 420.912716][ T32] ? schedule+0x225/0x2c0 [ 420.912743][ T32] schedule+0xdd/0x2c0 [ 420.912765][ T32] schedule_preempt_disabled+0x13/0x30 [ 420.912798][ T32] __mutex_lock+0xccb/0x1bd0 [ 420.912817][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 420.912845][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 420.912869][ T32] ? net_generic+0x25/0x2a0 [ 420.912889][ T32] ? net_generic+0xea/0x2a0 [ 420.912905][ T32] ? net_generic+0xea/0x2a0 [ 420.912928][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 420.912949][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 420.912971][ T32] nfsd_umount+0x3b/0x60 [ 420.912992][ T32] deactivate_locked_super+0xbd/0x130 [ 420.913014][ T32] deactivate_super+0xea/0x110 [ 420.913035][ T32] cleanup_mnt+0x21f/0x450 [ 420.913058][ T32] task_work_run+0x150/0x240 [ 420.913083][ T32] ? __pfx_task_work_run+0x10/0x10 [ 420.913116][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 420.913141][ T32] ? rcu_is_watching+0x13/0xc0 [ 420.913168][ T32] do_syscall_64+0x661/0x790 [ 420.913189][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.913208][ T32] RIP: 0033:0x7f4e05d9f397 [ 420.913223][ T32] RSP: 002b:00007ffe4bf11598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 420.913240][ T32] RAX: 0000000000000000 RBX: 00007f4e05e344bb RCX: 00007f4e05d9f397 [ 420.913251][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4bf11650 [ 420.913261][ T32] RBP: 00007ffe4bf11650 R08: 00007ffe4bf12650 R09: 00000000ffffffff [ 420.913272][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4bf126e0 [ 420.913283][ T32] R13: 00007f4e05e344bb R14: 000000000003f79c R15: 00007ffe4bf12720 [ 420.913307][ T32] [ 420.913352][ T32] [ 420.913352][ T32] Showing all locks held in the system: [ 420.913361][ T32] locks held by kworker/1:1/30: 3, on CPU#1: [ 420.913375][ T32] #0: ffff88801c05b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 420.913426][ T32] #1: ffffc90000a57d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 420.913476][ T32] #2: ffff88807e6d6250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x6330 [ 420.913520][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 420.913532][ T32] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 420.913583][ T32] locks held by kworker/u8:2/43: 2, on CPU#0: [ 420.913595][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 420.913645][ T32] #1: ffffc90000b37d08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 420.913698][ T32] locks held by kworker/u8:7/1005: 5, last CPU#1: [ 420.913710][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 420.913772][ T32] #1: ffffc90004e57d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 420.913830][ T32] #2: ffff888085a55258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 421.889270][ T31] audit: type=1400 audit(1790819254.369:786): avc: denied { write } for pid=9622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 421.910706][ T32] #3: ffff8880b8524568 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2e0c/0x6920 [ 421.911335][ T32] #4: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: ip_output+0xb3/0xc10 [ 421.916167][ T32] locks held by getty/5356: 2, on CPU#0: [ 421.916182][ T32] #0: ffff888026cc50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 421.916224][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 421.916257][ T32] locks held by syz-executor/5586: 2, last CPU#1: [ 421.916282][ T32] #0: ffff888036a8b440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 421.916322][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 421.916359][ T32] locks held by syz-executor/5597: 2, on CPU#1: [ 421.916369][ T32] #0: ffff88805137c0e8 (&type->s_umount_key#88){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 421.916407][ T32] #1: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 421.916443][ T32] locks held by syz-executor/5600: 2, on CPU#1: [ 421.916452][ T32] #0: ffff88807e5b80e8 (&type->s_umount_key#88){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 421.916487][ T32] #1: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 421.916526][ T32] locks held by kworker/0:5/5700: 2, last CPU#0: [ 421.916535][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 421.916577][ T32] #1: ffffc9000431fd08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 421.916620][ T32] locks held by kworker/u8:13/6516: 3, last CPU#0: [ 421.916630][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 421.916671][ T32] #1: ffffc90007707d08 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 421.993017][ T32] #2: ffff8880593b4258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x56/0xd20 [ 421.993066][ T32] locks held by syz-executor/6783: 2, on CPU#1: [ 421.993076][ T32] #0: ffff888021b300e8 (&type->s_umount_key#88){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 421.993113][ T32] #1: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 421.993153][ T32] locks held by syz.2.509/7927: 2, on CPU#1: [ 421.993163][ T32] #0: ffffffff90d84248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.993198][ T32] #1: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x1a3/0x1dc0 [ 421.993241][ T32] locks held by syz-executor/8321: 2, on CPU#1: [ 421.993250][ T32] #0: ffff88802c0f00e8 (&type->s_umount_key#88){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 421.993292][ T32] #1: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 421.993330][ T32] locks held by syz-executor/8720: 2, on CPU#1: [ 421.993341][ T32] #0: ffff8880b09860e8 (&type->s_umount_key#88){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 421.993378][ T32] #1: ffffffff8f2899c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 421.993421][ T32] locks held by syz.0.845/9629: 2, last CPU#1: [ 421.993430][ T32] #0: ffff88803b74c080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 421.993468][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 421.993504][ T32] locks held by syz.1.842/9636: 1, last CPU#1: [ 421.993514][ T32] #0: ffff88807d921bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 421.993559][ T32] locks held by modprobe/9650: 2, last CPU#0: [ 421.993571][ T32] #0: ffff88807e04f180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x22c/0xa00 [ 422.637310][ T32] #1: ffff8880b843bf60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 422.637365][ T32] locks held by cmp/9653: 2, last CPU#1: [ 422.637378][ T32] #0: ffff888034cab440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 422.637425][ T32] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 422.637484][ T32] [ 422.637489][ T32] ============================================= [ 422.637489][ T32] [ 422.637497][ T32] NMI backtrace for cpu 0 [ 422.637510][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 422.637533][ T32] Tainted: [L]=SOFTLOCKUP [ 422.637539][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 422.637548][ T32] Call Trace: [ 422.637554][ T32] [ 422.637560][ T32] dump_stack_lvl+0x100/0x190 [ 422.637587][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 422.637616][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 422.637638][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 422.637666][ T32] sys_info+0x141/0x190 [ 422.637688][ T32] watchdog+0xcb1/0x1030 [ 422.637714][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 422.637742][ T32] ? __pfx_watchdog+0x10/0x10 [ 422.637763][ T32] ? __kthread_parkme+0x18f/0x230 [ 422.637787][ T32] ? kthread+0x13a/0x450 [ 422.637810][ T32] ? __pfx_watchdog+0x10/0x10 [ 422.637829][ T32] kthread+0x373/0x450 [ 422.637848][ T32] ? __pfx_kthread+0x10/0x10 [ 422.637867][ T32] ret_from_fork+0x730/0xd60 [ 422.637880][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 422.637894][ T32] ? __switch_to+0x800/0x10f0 [ 422.637909][ T32] ? __pfx_kthread+0x10/0x10 [ 422.637925][ T32] ret_from_fork_asm+0x1a/0x30 [ 422.637943][ T32] [ 422.637947][ T32] Sending NMI from CPU 0 to CPUs 1: [ 422.637970][ C1] NMI backtrace for cpu 1 [ 422.637983][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.638001][ C1] Tainted: [L]=SOFTLOCKUP [ 422.638005][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 422.638013][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 422.638029][ C1] Code: 47 93 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 38 19 00 fb f4 0c 50 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 422.638042][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 00000246 [ 422.638053][ C1] RAX: 000000000048ef09 RBX: ffff88801f684b00 RCX: ffffffff8bd28215 [ 422.638063][ C1] RDX: 0000000000000001 RSI: ffffffff8e38e957 RDI: ffffffff8c623980 [ 422.638071][ C1] RBP: ffffed1003ed0960 R08: 0000000000000001 R09: ffffed10170a67bd [ 422.638080][ C1] R10: ffff8880b8533deb R11: 0000000000000001 R12: 0000000000000000 [ 422.638088][ C1] R13: 0000000000000000 R14: 1ffff92000034fc4 R15: dffffc0000000000 [ 422.638097][ C1] FS: 0000000000000000(0000) GS:ffff888123c4f000(0000) knlGS:0000000000000000 [ 422.638111][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.638120][ C1] CR2: 00007f2fca17fe9c CR3: 000000005e4e8000 CR4: 00000000003526f0 [ 422.638129][ C1] Call Trace: [ 422.638134][ C1] [ 422.638138][ C1] default_idle+0x9/0x10 [ 422.638153][ C1] default_idle_call+0x6c/0xb0 [ 422.638168][ C1] do_idle+0x3ae/0x5b0 [ 422.638185][ C1] ? __pfx_do_idle+0x10/0x10 [ 422.638201][ C1] ? finish_task_switch.isra.0+0x149/0x10d0 [ 422.638220][ C1] cpu_startup_entry+0x4f/0x60 [ 422.638237][ C1] start_secondary+0x21d/0x2d0 [ 422.638252][ C1] ? __pfx_start_secondary+0x10/0x10 [ 422.638269][ C1] common_startup_64+0x13e/0x158 [ 422.638290][ C1] [ 422.807051][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 423.544340][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 423.555002][ T32] Tainted: [L]=SOFTLOCKUP [ 423.559315][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 423.569451][ T32] Call Trace: [ 423.572719][ T32] [ 423.575636][ T32] dump_stack_lvl+0x100/0x190 [ 423.580310][ T32] vpanic+0x553/0x970 [ 423.584287][ T32] ? __pfx_vpanic+0x10/0x10 [ 423.588776][ T32] panic+0xd1/0xe0 [ 423.592482][ T32] ? __pfx_panic+0x10/0x10 [ 423.596897][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 423.603051][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 423.609192][ T32] ? watchdog.cold+0x1ec/0x234 [ 423.613946][ T32] watchdog.cold+0x1fd/0x234 [ 423.618547][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 423.624355][ T32] ? __pfx_watchdog+0x10/0x10 [ 423.629025][ T32] ? __kthread_parkme+0x18f/0x230 [ 423.634044][ T32] ? kthread+0x13a/0x450 [ 423.638279][ T32] ? __pfx_watchdog+0x10/0x10 [ 423.642949][ T32] kthread+0x373/0x450 [ 423.647009][ T32] ? __pfx_kthread+0x10/0x10 [ 423.651596][ T32] ret_from_fork+0x730/0xd60 [ 423.656184][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 423.661285][ T32] ? __switch_to+0x800/0x10f0 [ 423.665963][ T32] ? __pfx_kthread+0x10/0x10 [ 423.670551][ T32] ret_from_fork_asm+0x1a/0x30 [ 423.675324][ T32] [ 423.678520][ T32] Kernel Offset: disabled [ 423.682820][ T32] Rebooting in 86400 seconds..