last executing test programs: 9m43.750360594s ago: executing program 1 (id=434): syz_open_dev$sg(0x0, 0x6f5e, 0xa0001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r4 = syz_open_dev$evdev(0x0, 0x9, 0x101000) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x55, 0x7ffe, 0x1811, {0x0, 0x1}, {0x50, 0x8012}, @const={0x3, {0x9, 0x5, 0x1, 0x305d}}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x13, 0x0, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_ublk_setup_io_uring(0x722f, &(0x7f0000000000)={0x0, 0xc1da, 0x10000, 0x0, 0x376, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) write(r6, &(0x7f0000000000)='3', 0x4e) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, &(0x7f0000000080)={{0x7, 0xe06}, {0xfffffffffffffffc, 0x3}, 0x2d94af69}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = add_key$keyring(&(0x7f0000001100), &(0x7f0000001140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000001180)='\x00', 0x1, r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b00010324bd7022ffdbdf2507"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) 9m43.29384397s ago: executing program 1 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000116, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006e80)={0x2020}, 0x2082) r2 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000200)=0x1) 9m37.831750286s ago: executing program 1 (id=445): mount$nfs4(&(0x7f0000000140)='GPL\x00', &(0x7f0000000340)='./dev\x00', &(0x7f0000000580), 0x2800848, &(0x7f00000005c0)={[{']Z::\'#]'}, {'!-[&#}'}, {}, {'/@&}\xd6\''}], [{@hash}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x18100, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f00"/308) ioctl(r0, 0xc138fd09, &(0x7f0000000400)="0400000000000000000000008001000038010000010000000000000000000000000000000000000000000000000000006d79706f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000063616368650000000000000000000000313a3020313a3120313a32203634203020736d71203000"/372) ioctl(r0, 0xc138fd06, &(0x7f0000000200)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f00"/308) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/dm-0\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='\x00\x00\x00\x00', 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000009500000900040000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x1}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = gettid() timer_create(0x7, &(0x7f00000001c0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r3, 0x1, &(0x7f00000001c0)={&(0x7f0000000280)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2f987f4224ff7dc937253dc5598275597e7207bea32c4c7cf884c2fcd814228e4d1c211d167b8713f83fbff0f000000000000d85468f02e8b5ad561098840402f168e1012bdfd6977a7fe9cd5b8a3ed012d8e74a3479f", 0x34}) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x1208800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 9m37.533743965s ago: executing program 1 (id=446): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x111, 0xa}}, 0x20) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x0, 0x0) syz_clone(0x1000200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000540)={r2, &(0x7f0000000000), 0x0}, 0x20) write$tcp_mem(r1, &(0x7f0000000240)={0x5, 0x20, 0xe, 0x20, 0x8}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') read$eventfd(r4, &(0x7f0000000040), 0x8) read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) read(r0, &(0x7f0000001100)=""/4096, 0x1000) mount(&(0x7f0000000140)=@rnullb, &(0x7f0000000180)='./tracefs\x00', &(0x7f00000001c0)='efs\x00', 0x20800, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 9m36.924695929s ago: executing program 1 (id=447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) (fail_nth: 2) 9m35.709940132s ago: executing program 1 (id=453): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x1ff, 0xa4, 0xffb, 0x7, 0xb69, 0x1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2000fff, 0x9, 0x5, 0x3, 0xff20, 0xd, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x3, 0x13, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0x9, 0x7, 0xbed8, 0x8, 0x8000100, 0x7, 0x3, 0x11000, 0x10001, 0x5, 0x879b, 0x2, 0xbd, 0x7c, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xa9a5, 0x5, 0x5, 0x6, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0x40, 0x8, 0x752, 0x0, 0x1005, 0x88, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x7f, 0x7, 0xfdfffffb, 0x2, 0xff, 0x84, 0x800100, 0x5, 0x252, 0x1, 0xb, 0x5, 0x4, 0x5, 0x8, 0xffffffff, 0x2, 0xd9a, 0xd, 0x2a1, 0xf7fffffd, 0x7, 0x800, 0x8, 0x8, 0x0, 0x4, 0x2, 0x3c, 0x8, 0x2, 0x5, 0x404, 0x66cd, 0x3, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 9m35.101950939s ago: executing program 32 (id=453): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x1ff, 0xa4, 0xffb, 0x7, 0xb69, 0x1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2000fff, 0x9, 0x5, 0x3, 0xff20, 0xd, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x3, 0x13, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0x9, 0x7, 0xbed8, 0x8, 0x8000100, 0x7, 0x3, 0x11000, 0x10001, 0x5, 0x879b, 0x2, 0xbd, 0x7c, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xa9a5, 0x5, 0x5, 0x6, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0x40, 0x8, 0x752, 0x0, 0x1005, 0x88, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x7f, 0x7, 0xfdfffffb, 0x2, 0xff, 0x84, 0x800100, 0x5, 0x252, 0x1, 0xb, 0x5, 0x4, 0x5, 0x8, 0xffffffff, 0x2, 0xd9a, 0xd, 0x2a1, 0xf7fffffd, 0x7, 0x800, 0x8, 0x8, 0x0, 0x4, 0x2, 0x3c, 0x8, 0x2, 0x5, 0x404, 0x66cd, 0x3, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 7m11.293766943s ago: executing program 4 (id=803): r0 = io_uring_setup(0x3bc, &(0x7f0000000280)={0x0, 0xfffffffe, 0x2, 0x0, 0x345}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d"], 0x38}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRESHEX=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000080)=0x2) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 7m8.705942421s ago: executing program 4 (id=808): r0 = timerfd_create(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x2001}, {0xffffffffffffffff, 0x8081}, {0xffffffffffffffff, 0xc00c}], 0x3, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) syz_open_dev$video(&(0x7f0000000440), 0x200000000000008, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d0f46e34180f641a154f33ff78864942d4557d06cea226c7c76805060178b175fa1dbf235f1d5feee9f60cdddf533d3635d63851d7542ba09895510f2b1827bfa016b973d84082627ed755a05fa89c5ab8c8ffabf0bec781a541ab920b479af4596a5d7bc4846f20c633c117c7f33de387c3f8e8f3f8b659e0a5c2a412924bde3911890b987266ec39f5fa4cdc3d3d13341ce347493d04ce0ac5e1b78d42f2c189a2d7aee69107adbc5c1ca9397f612b1cefb32407853f7beec334b2ac071eee9ff", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) write$tun(r1, &(0x7f00000000c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x100000001, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) fchdir(r5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r7}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe26f9000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 7m8.413292157s ago: executing program 4 (id=809): r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000700)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000800)="450000280001400040063ccd7f0000017f00000100153039100000017000000050101000f1820000", 0x28, 0x0, &(0x7f0000000900)={0x2, 0x3039, @loopback}, 0x10) 7m8.234720258s ago: executing program 4 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x280000c6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000580), 0x3) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000001c0)={0x5, 0x81, 0x1, 0x2, 0x9, 0x8, 0x2, 0x7, 0x0, 0x1, 0x7, 0x6}, 0xe) (async) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000001c0)={0x5, 0x81, 0x1, 0x2, 0x9, 0x8, 0x2, 0x7, 0x0, 0x1, 0x7, 0x6}, 0xe) socket$nl_crypto(0x10, 0x3, 0x15) (async) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001080)={0xe0, 0x11, 0x509, 0x0, 0xfffffffd, "", [@generic="f00000000000803c00255bc4015e9b6fbec8af3c225cc4b40c649c0ceaf022c95732f4adf4140b96919b71fe0cc256f26228f9464a652d67efb6297e54709334451de3b1bea7bed647168061e24f6d19d1c4bbb10589a0ae736692eb148288c06ae7505965d7e81645188ea3fd6a8ce34ffc6bb18fcb4d5496bb33dab3d738e88c79a6477cfeabb6f2d8603f07fe1ac3d539806647374206efb255c25f93139bf8938481189439a8f58e69b9b4fc8cca04f5abf1993a1008e3b8f7a1d411e880a38dfef16d3ce80a07c0d4b95c"]}, 0xe0}], 0x1, 0x0, 0x0, 0x1}, 0x40040) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "335831132930313a", "b8297bf6d24101be12089fd0a97defc2", "0f13dce0", "2f1f22e4b276b068"}, 0x28) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r3) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x410800, 0x0) openat$cgroup_ro(r6, &(0x7f0000000140)='memory.swap.events\x00', 0x0, 0x0) 7m7.973422446s ago: executing program 4 (id=811): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000400)="6626f30f38f60ff0830d0aba430066b8894eb17c66ef670f22e40f300f01c86526660f6c944bc2ba2100b000ee66b90e0800000f32360f34", 0x38}], 0x1, 0x43, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffe, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000050000000000000000000000000000d900", [0x80000000008, 0x2]}}) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x1, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./proc\x00', &(0x7f00000002c0)='esdfs\x00', 0x1008, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt/fillfile\x00', 0x42, 0x1ff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r7, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10) write(r6, &(0x7f00000005c0)="000102030405060708", 0x9) pwrite64(r6, &(0x7f0000001540)="a2", 0x1, 0x7) r8 = socket$inet6(0xa, 0x5, 0x5) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @mcast2, 0x3}, 0x1c) 7m6.887644434s ago: executing program 4 (id=816): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) read(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000300)=@file={0x0, './sys\x00'}, 0x6e) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0306"], 0xffdd) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000003c0)="9444a5d7161c659a2291f6d4bee3d050", 0x10}], 0x1, 0x2, 0x2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000140)={0xf5, 0x80000, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e042508fc2900000000000000000000000000000000ab50e704ec074cdf6b575ebb"], 0x7) mkdirat(r4, &(0x7f0000000180)='./sys\x00', 0x40) write(0xffffffffffffffff, &(0x7f0000000500)='0000:0', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1, 0x150) write(r5, &(0x7f0000000900)='FFFFFFFF FFFFFFFF', 0x11) syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000001c0)={0x0, 'syzkaller0\x00', {0x1}, 0xfff9}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x52000, 0x0) 6m51.799536496s ago: executing program 33 (id=816): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e040235"], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) read(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000300)=@file={0x0, './sys\x00'}, 0x6e) rseq(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ffd2acb165fe580cd568cd1f31b87b548cb74136f366da0abe01880b"], 0x3e) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0306"], 0xffdd) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000003c0)="9444a5d7161c659a2291f6d4bee3d050", 0x10}], 0x1, 0x2, 0x2) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000140)={0xf5, 0x80000, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e042508fc2900000000000000000000000000000000ab50e704ec074cdf6b575ebb"], 0x7) mkdirat(r4, &(0x7f0000000180)='./sys\x00', 0x40) write(0xffffffffffffffff, &(0x7f0000000500)='0000:0', 0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x1, 0x150) write(r5, &(0x7f0000000900)='FFFFFFFF FFFFFFFF', 0x11) syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000001c0)={0x0, 'syzkaller0\x00', {0x1}, 0xfff9}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x52000, 0x0) 2m36.12848851s ago: executing program 6 (id=1445): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x57, 0xec}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000300)={0x2, 'lo\x00'}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x20, &(0x7f0000000080)=0x7f000001, 0x4) setsockopt$inet_int(r2, 0x0, 0x22, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) r3 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000700)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000800)="450000280001400040063ccd7f0000017f00000100153039100000017000000050101000f1820000", 0x28, 0x0, &(0x7f0000000900)={0x2, 0x3039, @loopback}, 0x10) 2m35.677880376s ago: executing program 6 (id=1447): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket(0x10, 0x803, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x5, 0x5, 0x0, 0x3, 0xa33f, 0x96f0, 0x200}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x2c, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="d685ea380f4a"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) sendmsg$xdp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="548a", 0x2}], 0x1, 0x0, 0x0, 0x404}, 0x84) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3006c016) 2m34.867258934s ago: executing program 6 (id=1448): r0 = userfaultfd(0x80801) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r1, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r1, &(0x7f0000000080)="cd", 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x40789440, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x7f6e}, 0x18, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) dup3(r2, r4, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 2m32.877562024s ago: executing program 6 (id=1450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2$9p(0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r5, 0x0, 0x0, 0x0, 0x20, 0x1}) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x2000000, 0x30, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r7, &(0x7f00000047c0)={0x2020}, 0x2020) syz_io_uring_submit$UBLK(r2, r6, 0x0, &(0x7f0000002880)=@ublk_io_need_get_data_sqe={0x2e, 0x0, 0x0, r7, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {0x8001}, 0x0, 0x0, '\x00', {0x2, 0x412, 0x100, &(0x7f0000001880)=@buf_512="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"}}) io_setup(0x9, 0x0) eventfd2(0x47, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) process_vm_readv(0x0, &(0x7f0000001840)=[{0x0}], 0x1, &(0x7f0000008640), 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r8, 0x47, &(0x7f0000000200)=0x7) r10 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 2m31.789376623s ago: executing program 6 (id=1453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYBLOB="050000e3ffffffffffff0500000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x7a}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf1ba}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) r3 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) mount(0x0, &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x2080, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000063c0)=[{{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000440)="13384ea2bdb8592e541b265a8d1e7d8d27ea24026c71ae373a94b7152e139d7a149d1149df5a4743039721e2c3f907586bc76c9aeda5fa3552", 0x39}, {&(0x7f0000000480)="197ce7dd88ea422aa925ea456d5b6e619ece2abb27376b872d0498b3c2ef536d2e974471297335138800d2997acd86e391bd48a4527c7f2ee95dd7e43c838ee24788e1f5e1189b1c82ab7d4a84c336cdb4a9be1c4783553dda61b78f4474f73a30b63d07c2210daa810003d8b789520f080bbffb2529ae343f0b511cbeefc0a4991a74419c1922b489dc04621bfc462b6c30636655aa8227ef08d6082f8a605fa4afc7dee90e202f72df00be3a15f126c83635b4c3483d037c097c692e10643fc8f23f17cd1e52a47cab37e5adeef0d02dae2d", 0xd3}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00}}}], 0x40, 0x800}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000880)="ef04b3e6cfc577d2d441d0f695c1ef3d63c4d44784f67722d7bc", 0x1a}, {&(0x7f00000008c0)="c762cf5d225d239152cc7cf25360e648fe1f64f93f7ea84227d1ce75df04b76f8dfab9e2f0c16d0262", 0x29}], 0x2, &(0x7f00000009c0)=[@rights={{0x30, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3, r9, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c}}], 0x90, 0x20040}}, {{&(0x7f0000000a80)=@file={0x1, './ffs/ep0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000b00)="e0a4e0a4d725c8e5f68dbcb2d385c8777423565e5b41956d55bfbe15048dd32404026d47bfb268a559a4309d5708c8b877d3933bb7c78c872f329aec3a2d0a0a104c5f1e5e6a40f4", 0x48}, {&(0x7f0000000b80)="09865605b03cd8ebe25fb4c84a30504bf07ea325f16a60e84b7fb7c871b4ee63c7d3742c153397609b332c54db9f5544d707d6b12a16c41fddd80a84a1bfc16b4085e478041b833eed61646524a6722e2af03ec09273d559a8e9b7cc2b8222a41c8db6a89b48be40a4470d53a6a347676c54a4410956f6d620e87c791e", 0x7d}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=r8, @ANYRES32, @ANYRES32=r9, @ANYRES32=r8, @ANYRES32, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x8800}}, {{&(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000d80)="80f8057c14cb1c5a14f70f2f842f651fbf1e782d42b58484a63e76c351164f2404641c0e7ba418830de59b9a1b95144c1d2f53279d60d3e05f045e4ad157460ac429fe70b61a57cfbece01c96476c7d8af31dd334417332608c8b3ac0be940079dd8c6888dbd7a2249705a572b9f9c492d2fe8d7efc8a72ea42040e68912d225c9033195dd23db1abfb31e50463ae8f153331b07e6a8d88e908fbc1c1965bfc5164f5f0525bacc8daa6cf73ba888df316144f1fdead0901e110d33777b2cbd894a1e4fd18689e0e52e5e1b455909cb456c9b01929ce63a924791406d6e3bbf124cb67941790646c10b4af9aadbe0005dd1b2e230ed348558", 0xf8}, {&(0x7f0000000e80)="3994e74d37f05a1e5214bac30bf1f92a6d8f7e5057cdea092baeec9b857207fc98ba9d756f91182d35b90d6d2e540812e0120b6e3ece7a14c1064ccdd3276198ec3b92270133c7e936d1a6c86d9c0dc3c3ea8a6f8d392ee35d", 0x59}, {&(0x7f0000001000)="33214cbcc481823554a52bae6fc2e7e0453e14ffbdb92027814b82cc76685cc3ee88bfc838263b5509cc71a5fe68b08d89d42683344a0775fd5e518a44842d27e18adf3eba8cbab9a6e1a38417ef547f30d82f2807b6", 0x56}, {&(0x7f0000001080)="76a91a85eff92635068dac6f447bff2d290da031a23d175c414d0fe457ffda9b041321778a976dee0e6fe8c43a6685388ad1030c936bab689146cf93a8cc69aecde6b66bad100d9c8ab1d403b8f78ba1cc3d0dd16a50e559fb8e4127f0e9a90688e7e70f917b51c1db0a8b7d1a34697395b32cf8fa1ab50d", 0x78}, {&(0x7f0000001100)="526d0c6df0fe82db8771c8a50efabdd49c30406bbc5b79ce8b5fe97537a4cfebf5f887ba74b79936c12895cdc256407196074282f0853eaaf828e2106b2a307c41f3e6a1f4721e59f025476c8684b5d851d408442ce66791471a80dfd0d32459e3cd3b8873381f98435f3c91ed8d3271558c90113a275dc2415edcfce5af8ca9a330539368d8bfd6c82e237b87f88bdc33f1f62a99513d31a842691b6fa660e4d80ee0c52c5d12e590f9496bbc7d813399f72924a39e36a9fe9a65b22da12dbf2e", 0xc1}], 0x5, &(0x7f0000001280)=[@rights={{0x20, 0x1, 0x1, [r6, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40, 0x8000}}, {{&(0x7f00000012c0)=@file={0x1, 'functionfs\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001340)="eba0bebc81ad0015579a4fda8e6959e5c467837326c937de6955320c9f5412fe9276c08f9796eb5c434713a6fa299794e85407316b109575f43dbb3a215669ea27a92dfb51f65bdffb1d4b690bba87f8b50f1d326b502a2566a73893862f99af0f69ba9cf74896541977751b1db49a050658a42e6e980b1464ea91", 0x7b}, {&(0x7f00000013c0)="4d4187d33fe201b67da16c2783f5297a", 0x10}, {&(0x7f0000001400)="463d0cdfe84be9b7c9397befbdc73e339bd26c2156190bf4e0072919b2dbd54bafa445b5f132f88bc553fa86efdd35ba57af4476125dbc2e497708454f420506606fef08ba8b4b0d1e04a611a3d8348a9d3e436e585bfbf7dbeca15de370659a5415612df720a708d26a7a7c10140ca53e3da29625f969874c4792b6e47dc5ccac7cc948ffc8347ecb2f02078764739ad2ebc8347937434c5954b4e727c6dba3a1707d6333c62cc7ffa38c758689810a20f8d71c61091c2f69f45571e27effb7ea", 0xc1}, {&(0x7f0000001500)="e8fe9d62eba38a1404e36a0920394eafac4410c75a1a57ec7754e01c96ed6f75491c9e99455dddad64ce1ae4d62cc9885166479cd822b13646708ad27461725357420eb3a74fe0b76ad90928a7f6c9b582199e7c20a1f952b8ebebb9bb945d4854470f358d31455bc1f545f1", 0x6c}, {&(0x7f0000001580)="298d0012", 0x4}, {&(0x7f00000015c0)="65e017e927a176d43177100a86e1d2e7adb144eaa7b734019dae37b9ada3e589aa7efb", 0x23}, {&(0x7f0000001600)="c6968ca65751c38d77d9198d3909ea03525c964fab83b8d0f5b829b575b20e7b9ca56ca85479a7db7b701f4a247def", 0x2f}, {&(0x7f0000001640)="721a2d86aeae53d9c648d06699209671af7b640663630600cc783cb47e6554fa65e513b0f8ca056ee13631466ec41e74f6e09c3f4fdbdb38c941bb5e699f76a6811c6dfd5637b2c632f36de9a8d18c936017e68bad66fa67baabff75e656dc25840560a55fe6acec580745f9b76eeb0898da1dc65a84581244079f3098340070b369af363e2cfe105a9b3f628e1946da6219e0a87f46b5b42828ec68fb5474588ca6dea96187aba94ff9f5c6fb9d95eac39d35a164fc4f5626762e5870fae159d6e8f5b177ae64c81128df70ac", 0xcd}, {&(0x7f0000001740)="e185fa207177dd61796746398be00132b7e2bf6245a495a0f2cc690e5499a898128881a40f7e24f03e1892ab6d652ae01c7e0510a8f05283b56e8d298450963c", 0x40}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}], 0x20, 0x2400c801}}, {{&(0x7f0000001880)=@file={0x0, './ffs\x00'}, 0x6e, &(0x7f0000006200)=[{&(0x7f0000001900)="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", 0xfa}, {&(0x7f0000001a00)="2c3f9d69c45672ce6b6f9225ff8b214c5da3c1393216d1fc42ee3f85f03e5e29b68b4b99bd854bf0027c9248267bf842b2ab6f9a0b586a401bb8a015632261b6c6e92e7a2264ef923d8f9cad7f7f97da623890dc5e01964f63092c9d7eec2b560ebc5d64692f632f58e0bfdf9002df2d46d8d70d1ddf524641ffa09b4e86669f0105", 0x82}, {&(0x7f0000001ac0)="56437c25d3f17abd4c95fab249f741ed91b21dc800feae73b32d3d10454cde003b5643e929146a0422d7f933b9e52d58caf9dbcfc4bf1f4d4636eb84ce3f9b9e3e82160a359fa60d6d4d3a419a8777ef3db09fc176c70c12bee3686fed6f703d7034c6c1b1453db1fe3db3b9bcff959c5e03c9e6971fa3122860f4cc74a68bdef1dd866638112de4c2bb24", 0x8b}, {&(0x7f0000001b80)="58228f8bf2b95dbad011ac8de357787dc700cd393feaf1adc0b0075a9e183770ed16deec00bebcd473cba1384c0a8bfa9a721313198ffc2a7a2eebe9bb407fb5bae782ed29", 0x45}, {&(0x7f0000001c00)="63b056e65aff5c1bcad3227944d38b90cb8500209a33aa24aafd93feec53b75f", 0x20}, {&(0x7f0000001c40)="5574b65536c87df7405ee7e17b6d1fdfc84a6cd6c8d8f8323bccd3d99b01259016f36dc74c747f2ab0b3aa34e6b7da580f81eb3d704f431e389cc3652bfd", 0x3e}, {&(0x7f0000001c80)="f098587ecaeae3d0900217f11295bb956690f80f3372145c12bef74da61e5bfafce1221bd9b6df3a7016798158f6f940bf9c76fb62b84934fbbb0a791f6a51719ec6a352b215b45f42cd5a85d7caf54b7404cd4078540947bdfef1e5d286f2cd2a7c6904e5d112e8271a02138999fffc4cb60dfda842d97cf7fd1d5c6727ebe9f9343e033ee5da1afd5cddc575e58da51c366cac28", 0x95}, {&(0x7f0000001e40)="411b921abb9c6d16fbdde97a115a50599987421fefd2a343fdc1964ee0a41ebc331310800ae429d6267e43e12f48840168e5ff85e44382082026f04221e8385c1788f6df8f80968f339b51eb3ce8c5795c70861a80bc6a792cfda4aa75167a14bdd6d265a306ae1d3d48a1d97fa74d917c8245bcffe4854d6ec7a5765e1c3024d0309d65787934bc9bc146846577ee39300339b59a3b180e43f422", 0x9b}, {&(0x7f0000001f00)="d4a73b6fc5ec3586340a850c7b7637b9fb325e0f260f9cf663852b83f4fb1cabf1842302eda8cb0db57919b49f6c7efb6a137d5ca4ff5320c03467b1f358429671d35fef2715d26c016fe9bb274b6edc089a2e3c3bcf5ba5dba5a5f8cada6242afc0b21c00f0edd5da", 0x69}, {&(0x7f0000001fc0)="1c19e409ade0d3c0886583410e966c5ac01c4843be3c59cb271d8f8d941ac162553401c858420225cb793cd70ee955396d2a11ba967cd3367167176ad548c777cdef5a4e9f4da25765c4a0e2c762f29e6d7e93a148dbeb90fc55583ca3a490236d9f7b17064b9dbd4540c4a193649a3eb7a143c213cb055f45b02f85d59068a23a5c3f7edc21279f4444071f48f55cbf957055bf9889", 0x96}], 0xa, &(0x7f0000006300)=[@rights={{0x28, 0x1, 0x1, [r3, r3, 0xffffffffffffffff, r9, 0xffffffffffffffff, r6]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x810}}], 0x6, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = userfaultfd(0x1) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) 2m26.65273448s ago: executing program 6 (id=1464): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x6, 0x222802) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) msync(&(0x7f0000bc9000/0x2000)=nil, 0x2000, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) listen(0xffffffffffffffff, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x5800) 2m11.493342359s ago: executing program 34 (id=1464): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x6, 0x222802) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) msync(&(0x7f0000bc9000/0x2000)=nil, 0x2000, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) listen(0xffffffffffffffff, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x5800) 16.480896079s ago: executing program 0 (id=1768): unshare(0x400) memfd_create(0x0, 0x3) open(0x0, 0x4400, 0x100) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82f41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000005c0)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x2c9, 0x3a, 0xff, @remote, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0xf, '\x00', {0x5, 0x6, "bd8d33", 0x1, 0x6c, 0x1, @local, @local, [@routing={0x0, 0x14, 0x0, 0x9, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x28}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @loopback, @dev={0xfe, 0x80, '\x00', 0x32}, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x2c, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x1, [0x0]}]}, @hopopts={0xc, 0xe, '\x00', [@generic={0x6, 0x51, "c139ac08408e01fc4d58a5f8fe3a1f3259e7afc84929a78977034020a93326caf74e5ad59bb64d4b34a8c84df86e5e7c2eb1e1c7c8e6777dcb1affcf73852e341c7a602832d37acaefbcdf923b8f76915d"}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @mcast1}]}, @routing={0x1c, 0xc, 0x1, 0x2, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x2f}, @hopopts={0x4, 0x5, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x0, 0xf5db, [0x800, 0x80000000, 0x9]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}], "d764fca6dc595e97287260695e7483c1148d784556d2f44145baefa16941ebe3da20b372b0c5ddc4422efb1cfe9f02da19af35d47f9a17698071af413adb676d92ec6a180499a31fb9ce09ca011092c60385ba6a729d3931b207edd09924546a6dc74044be8e76562d649cbe53bfad0f48e10049db461ec5dabddd6a4f36b94ffde7f081a7614f6ea0f0676fbea361de533155356fc100f65338874b1474a6ebc367b8d0396232cb8bb529d488eacbeadd"}}}}}}}}, 0x303) 14.728876528s ago: executing program 2 (id=1770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) syz_emit_ethernet(0xfb8, &(0x7f00000002c0)=ANY=[], 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0xd00, 0xd7b, 0x8, 0x1, 0x3, 0x3a, 0x4, 0x3ff, 0x54c6cfef, 0x4, 0x2082, 0x1, 0x0, 0x1, 0x9, 0x6b, 0x3, 0x6, 0x1, 0x40000003, 0xe25, 0xeaa8, 0x10000, 0x20001e57, 0x71, 0x2000e66, 0x4, 0x1, 0x10004086, 0x0, 0xfffffff8]}) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000040)=0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x605, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x1, {0xf}, {0xffff, 0xffff}, {0x0, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x6, 0x5, {0x2, 0xf}}]}, 0x34}}, 0x4000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeff, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000b00000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040fffd0000000005000500000000000a"], 0x80}}, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x60, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x28008050) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090) 14.367197101s ago: executing program 2 (id=1774): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f0000000440)=""/35, 0x23}], 0x4, 0x91, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@gid}, {@mode={'mode', 0x3d, 0xd}}, {@uid={'uid', 0x3d, 0xee01}}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bpf(0x200000002000, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00210729bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="400000f2090002ffaaaaaa722cafa7d9"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x4, 0x0, 0xfd, 0x6}]}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 13.536672116s ago: executing program 0 (id=1778): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(0xffffffffffffffff, 0x5) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_tables_matches\x00') pread64(r1, &(0x7f0000000000)=""/83, 0x53, 0x3) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0xffff, @none}, 0x60) 12.57853025s ago: executing program 3 (id=1780): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x0, 0x15, 0x9, "515c79787fd17fb62e"}, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x1, 0x5}}, &(0x7f0000000780)={0x20, 0x0, 0x8, {0x4, 0x20, [0xff0]}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000000840)={0x40, 0xb, 0x2, "974c"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000008c0)={0x40, 0x13, 0x6}, &(0x7f0000000900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, &(0x7f0000000940)={0x40, 0x19, 0x2, "bde8"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x28}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x2}}) 12.520513682s ago: executing program 2 (id=1781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2$9p(0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r5, 0x0, 0x0, 0x0, 0x20, 0x1}) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x2000000, 0x30, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r7, &(0x7f00000047c0)={0x2020}, 0x2020) syz_io_uring_submit$UBLK(r2, r6, 0x0, &(0x7f0000002880)=@ublk_io_need_get_data_sqe={0x2e, 0x0, 0x0, r7, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {0x8001}, 0x0, 0x0, '\x00', {0x2, 0x412, 0x100, &(0x7f0000001880)=@buf_512="0b33251b337cbb8b0adeb5e355a3c736303f1d98b5348bd23146d67aa76a6fc422c403595572219c45966ba072f98cfc9ef941834e330725be1b55ab1faa0146e660b23e90c353fa37ee8a8a5ec431691d9378246dc8db6f3f8df3a588768c655b39c9c9c21d62a535101c4301fc2b3e111ba440402e227d52d849d819882fbabc2561ed1ba71ed38a0e522791d9ebe2e1c4d67568bc9eeab50672adfc11bc8507057e2ad58ed64524475a87896e33d47dd3d52eb4b1b3a64aa98485dfe70ed9d41e67c896597389584218563a8382bffe2cbf16977b3324c604d7b55fd511ec1147e779ed22985b1e1bb86675aaa15aa61999c9659c86a6c289e01e5836a53aa2d09b2719ebf859aa58940f6f1ce990f44383003b3d60e361eee1afc84620b3f73d6a2755bf8099ccdf461004f18cf6f700e344c89447084e3682b86694f0a00795662dab7b342dcec806452bae8a2e9c0c5c453129c1f327dceedb9846520853b42fca29ba6d9ff1f6e3c82a0a0cbc21403bfc32e202a53cfe9c813b2c9e050438c8e9d551861b56344fc7dad0de93cce7b107914d54bc86dfdeaab49495531331aee6dc6a679dff20702e55a615044b6366d4e0016e57ec1447eeafc4d5902a727d9b9a9b3ddc3a6ed04f0022aea45dd99f9f35d8fa3ef05cf09cede38b323edaa42db323ea65d88cbc466e7b883db950b06cc0e787deeab62c016d672e77"}}) io_setup(0x9, 0x0) eventfd2(0x47, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) process_vm_readv(0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x2, &(0x7f0000008640), 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r8, 0x47, &(0x7f0000000200)=0x7) r10 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x559, r10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 11.35369568s ago: executing program 2 (id=1782): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {0x0, 0xfff3}, {0x3, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041080}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x1, 0x7fff, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x0, 0x0, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="ffff", @ANYRES16=r4, @ANYBLOB="100027bd7000ffdbdf25130000002c000180140002006d6163766c616e31000000000000000014000200626f6e6430000000000000000000000058000180140002006e65747063693000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="140002006970366772657461703000000000000008000100", @ANYRES32=r7, @ANYBLOB="140002006261746164765f736c6176655f300000080003000300000048000180140002006d6163766c616e30000000000000000014000200767863616e310000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="140002006d6163766c616e300000000000000000580001801400020070696d36726567300000000000000000080003000200000014000200626f6e6430000000000000000000000008000300020000000800030002000000140002006261746164765f736c6176655f310000"], 0x138}}, 0x8004) 10.948714387s ago: executing program 0 (id=1784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r3, 0x5501) syz_open_dev$evdev(&(0x7f0000000440), 0x72, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8.804563854s ago: executing program 0 (id=1786): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0xa}, 0x1, 0x0, 0x0, 0x20804}, 0x44800) r1 = memfd_create(&(0x7f00000013c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, 0xfffffffffffffc22) r4 = syz_open_procfs(r3, &(0x7f0000000040)='sessionid\x00') bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x800) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000180)) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@dstopts={0x32}]}}}}}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_pidfd_open(0x0, 0x0) flistxattr(r8, 0x0, 0x28) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="580000006800000025bd7000ffdbdf25000004000200000014000600000000000000000000000000000000012c000200010000000800000000000000800000000200000005000000010000f0070000000000000005000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400401702020000052406000005240000000d240f010000000006000000200624070407000905810340000000000905820210000000000905030240"], 0x0) renameat2(r4, &(0x7f00000000c0)='./cgroup\x00', r4, &(0x7f0000000080)='./cgroup/../file0\x00', 0x2) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f0000000040)=0x1) r11 = dup2(r10, r10) ioctl$VHOST_VSOCK_SET_RUNNING(r11, 0x4004af61, &(0x7f0000000000)=0x5) 8.178861608s ago: executing program 3 (id=1787): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000440)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x2, r1, 0x0, 0x300}]) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) 7.27657726s ago: executing program 7 (id=1788): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x2c, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) 7.220110034s ago: executing program 5 (id=1789): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='3\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x38, r5, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x7a, 0x6, 0x81, 0xffff, 0x4, 0x8005, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCGICOUNT(r7, 0x545d, 0x0) dup3(0xffffffffffffffff, r7, 0x80000) write$sndseq(0xffffffffffffffff, &(0x7f00000006c0)=[{0xe, 0x7a, 0xe, 0xfd, @time={0x10000022, 0x100001}, {0x2}, {0xe1, 0x7d}, @raw8={"957754f9f4bf8f261abee2ed"}}], 0x1c) r8 = fanotify_init(0x8, 0x80000) write$binfmt_elf64(r8, &(0x7f00000006c0)=ANY=[], 0x18) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 6.783776909s ago: executing program 7 (id=1790): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="05930200600000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r3, @ANYBLOB="86b09b912e119ff637f81655af0b68ab84f84054510f6dc39a4645b924161c8a17318a37ac4044fe3b3ab94dad58bf8faccb1cfb08512c3dc1ee5fc3f0406d5431d0b21f3b2b2bf6098c4d1d59e6cc10b31b0044816612e058a80df9dd3d9901a8fe2014ab27c1df18b77c37586f02c57df301b3964926f074d3fbf6582aaefea5712c3d5ee256a54519cfe2af04db6516ade934f3360efeb8b8750b49fbbb8fe11ac72a29aa9ea1d46301aacf294aa33ec2598eab96393645678cf35bc408420d92a310c299e1ce1665b932b1d345fb82b1dc19249f3570f5fa37a9f05287c4bfbab3a7ead84b31ca55a36bc7c5864ac59636fdc38d"], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 6.72729777s ago: executing program 3 (id=1791): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000000020000000000000000"], 0x50) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) socket(0xa, 0x2, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) poll(&(0x7f0000000240), 0x0, 0xfbe) r2 = add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0x5, 0xffffffffffffffff) keyctl$read(0xb, r2, &(0x7f0000000480)=""/138, 0x1001) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='-pids0'], 0x6) r6 = syz_open_dev$media(&(0x7f0000000100), 0x37, 0x401) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) acct(&(0x7f0000000040)='./file0\x00') pwritev(r6, &(0x7f00000003c0)=[{&(0x7f0000000140)="eecbb7f9b1e5bbf857ef0b7d6de5702da6265c2d8a58863d4d168af1c7a19c3788bf0af5fd418140b8dd718c5aedd970bcb747e50cb5a034b4a0c042bb957109ef933af929bd52aac34d6a21201be35f903df663599c7e73301d8e06f68de5830d399a00000033f0d1ad22fef662d052b6eaf6e362f1946bc825823269f760004ec73bc93fd8f4bd3eb5ac39506b731d2e739869e13afa4e9a0b395979bdcf9a08768c9d9238da8364c9eacdc0d16a750097678dda780ce8ca", 0xfffffffffffffed7}, {&(0x7f0000000000)="07f4", 0x2}, {&(0x7f0000000040)="67ba0b9eda178fa091a74d7753237de9789388411ac450f3261db98007a0827324013c64ffc6fec38eae8b07dc", 0x2d}, {&(0x7f0000000200)="a2cc8e6709131d3ceca4b62ade7f12feeed6c5da80326701a477fc8900f87d6b6dd65476dfe682b9da5d283a00ea0f40e3edeac5110e866571f4131f03674944666aed44a3df7618bbd5c72bcb0676eb1da83bc21055764591649bac6831a7ba44f63b70214b50091586a811dd6b4adf5c375c7ccbd745589638a20fb3f2fe4aeb80fad271e54c89552e1446151d9c495d7d4589726ab5fba755400a60414a862eb3dcf1e8cb49cd2fb97122a377a521f3806616ac0db1daa93f2347ba4189760f04e7a6d48f3336ea6793ca6be57d36e8c67009486f6d363854c724d035b5aa69d8d21f3b665a1d60c17ae15faf176d468db2d894387b", 0xf7}, {&(0x7f0000000300)="7e657365bca80003b56f914323808e1e044dc75469735e8d6bad86d1061f40d750f85f31d06c8e8a1d3077be051f775bf95eae422c5bc1c64fc93f59f7a535934bf4f2f99bf4fbdc45d9d18e7b6cd69e9a3a7b31f2a2cba3b803ce94a718b5f25e8736c004b76d5d6119349daf641f022153f34e3d5c5b79aadb306407e67b1e763c4bd795073207faaae7ecf861", 0x8e}], 0x5, 0xffffff2e, 0x451d) 6.305327757s ago: executing program 5 (id=1792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) syz_emit_ethernet(0xfb8, &(0x7f00000002c0)=ANY=[], 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0xd00, 0xd7b, 0x8, 0x1, 0x3, 0x3a, 0x4, 0x3ff, 0x54c6cfef, 0x4, 0x2082, 0x1, 0x0, 0x1, 0x9, 0x6b, 0x3, 0x6, 0x1, 0x40000003, 0xe25, 0xeaa8, 0x10000, 0x20001e57, 0x71, 0x2000e66, 0x4, 0x1, 0x10004086, 0x0, 0xfffffff8]}) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000040)=0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x605, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x1, {0xf}, {0xffff, 0xffff}, {0x0, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x6, 0x5, {0x2, 0xf}}]}, 0x34}}, 0x4000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000b00000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040fffd0000000005000500000000000a"], 0x80}}, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x60, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x28008050) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090) 6.265803723s ago: executing program 7 (id=1793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe2$9p(0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r5, 0x0, 0x0, 0x0, 0x20, 0x1}) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x2000000, 0x30, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r7, &(0x7f00000047c0)={0x2020}, 0x2020) syz_io_uring_submit$UBLK(r2, r6, 0x0, &(0x7f0000002880)=@ublk_io_need_get_data_sqe={0x2e, 0x0, 0x0, r7, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {0x8001}, 0x0, 0x0, '\x00', {0x2, 0x412, 0x100, &(0x7f0000001880)=@buf_512="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"}}) io_setup(0x9, 0x0) eventfd2(0x47, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) process_vm_readv(0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x2, &(0x7f0000008640), 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r8, 0x47, &(0x7f0000000200)=0x7) r10 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x559, r10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 5.35859629s ago: executing program 7 (id=1794): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@gid}, {@mode={'mode', 0x3d, 0xd}}, {@uid={'uid', 0x3d, 0xee01}}]}) 5.226447377s ago: executing program 5 (id=1795): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x2800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv4_delroute={0x28, 0x19, 0x1, 0x70bd2f, 0x25dfdbf9, {0x2, 0x20, 0x14, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_DST={0x8, 0x1, @local}, @RTA_METRICS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.077536071s ago: executing program 3 (id=1796): r0 = inotify_init() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="040000000000", 0x6) write(r4, &(0x7f0000000080)="09000000010001", 0x7) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="041817aaaaaaaaaa10112233445566778899aabbccddeeff0005"], 0x1a) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04080400c80002"], 0x7) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e0701081400c80010"], 0xa) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c8000b000700070001030029100101"], 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f0000000180)={0x7, 0x0, [{0x1, 0x4, 0x0, 0xb7, 0x1, 0x7, 0xffff}, {0x6, 0x8, 0x1, 0x3, 0x2, 0x3, 0x3}, {0x80000007, 0xfff, 0x5, 0xab0, 0xffffffff, 0xfffffff1, 0x5}, {0x80000000, 0x400, 0xd7d78262ceb16a67, 0x0, 0xcd90, 0x5ecf, 0xff}, {0x80000000, 0x40b, 0x1, 0xef1, 0x6, 0x0, 0x2}, {0x7, 0x6, 0x1, 0xe, 0x5, 0x80, 0xc56}, {0x0, 0xd3d, 0x6, 0x8, 0x7fffffff, 0x4, 0x81}]}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000002540)={0x0, &(0x7f00000024c0)="e3c2910310e6607f0046f3136266d41388ed16fad4a49cbb754d7da02fa1502a102232f933187b85dd44bf6c1965b5bce98db70d70854b6ad08bf7d3c4a19e3f7e2cda2a4e7df3c4e1fe5de34f2bd02c3639830579a0a3317bf861f9f2e70adc6647db65e517a971b8", 0x69}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r5, 0xfffffffffffffff5, 0x1) recvmsg$can_raw(r5, &(0x7f0000001640)={&(0x7f0000000080)=@tipc=@id, 0x80, &(0x7f0000001540)=[{&(0x7f0000000380)=""/233, 0xe9}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/72, 0x48}, {&(0x7f0000001500)=""/12, 0xc}], 0x4, &(0x7f0000001580)=""/186, 0xba}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.638763332s ago: executing program 0 (id=1797): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0xa}, 0x1, 0x0, 0x0, 0x20804}, 0x44800) r1 = memfd_create(&(0x7f00000013c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+\xa0\x1c\x14\x01\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10\x95y\x8e\xa6\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, 0xfffffffffffffc22) r4 = syz_open_procfs(r3, &(0x7f0000000040)='sessionid\x00') bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x800) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000180)) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@dstopts={0x32}]}}}}}, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_pidfd_open(0x0, 0x0) flistxattr(r8, 0x0, 0x28) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="580000006800000025bd7000ffdbdf25000004000200000014000600000000000000000000000000000000012c000200010000000800000000000000800000000200000005000000010000f0070000000000000005000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180), 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400401702020000052406000005240000000d240f010000000006000000200624070407000905810340000000000905820210000000000905030240"], 0x0) renameat2(r4, &(0x7f00000000c0)='./cgroup\x00', r4, &(0x7f0000000080)='./cgroup/../file0\x00', 0x2) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f0000000040)=0x1) r11 = dup2(r10, r10) ioctl$VHOST_VSOCK_SET_RUNNING(r11, 0x4004af61, &(0x7f0000000000)=0x5) 4.29030848s ago: executing program 2 (id=1798): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/15, 0xf}, {&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/241, 0xf1}, {&(0x7f0000000440)=""/35, 0x23}], 0x4, 0x91, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@gid}, {@mode={'mode', 0x3d, 0xd}}, {@uid={'uid', 0x3d, 0xee01}}]}) 4.230820255s ago: executing program 5 (id=1799): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mount$9p_unix(&(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000180), 0x208002, &(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='10000', 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$pppoe(0x18, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) ioctl(r3, 0x3b8f, &(0x7f00000000c0)="2800000006000000010000000400000002000000000000000010") unshare(0x60000000) unshare(0x10480) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup(0x671d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$vim2m(0x0, 0x7, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = accept$unix(r4, &(0x7f0000000580)=@abs, &(0x7f0000000600)=0x6e) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={0x0, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)='dummy0\x00', 0xc, 0x80000000, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, 0x0) 4.17806157s ago: executing program 3 (id=1800): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x5, 0xd, 0x8, 0xd, 0x9d32, 0x7ee, 0x7f8f5b73, 0x20000000000000, 0x4, 0x1, 0x6e0, 0x1, 0x10000, 0xc6d, 0x5, 0xfe2], 0x228079426efa193d}) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd5, 0x10000, 0x0, 0x235}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, 0x0, 0x40000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0x1d, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xd}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e20}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x891}, 0x20040014) write(r6, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0x22) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) recvmmsg(r6, &(0x7f00000021c0), 0x5b, 0x40, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') 1.709354408s ago: executing program 5 (id=1801): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4008) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000440)='5', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x2, r1, 0x0, 0x300}]) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) 1.643989116s ago: executing program 2 (id=1802): syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000ddff0014010067727700080002800409100008000a000000000000", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r5, 0x0, 0x0, 0x0, 0x20, 0x1}) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x2000000, 0x30, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r7, &(0x7f00000047c0)={0x2020}, 0x2020) syz_io_uring_submit$UBLK(r2, r6, 0x0, &(0x7f0000002880)=@ublk_io_need_get_data_sqe={0x2e, 0x0, 0x0, r7, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {0x8001}, 0x0, 0x0, '\x00', {0x2, 0x412, 0x100, &(0x7f0000001880)=@buf_512="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"}}) io_setup(0x9, 0x0) eventfd2(0x47, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) process_vm_readv(0x0, &(0x7f0000001840)=[{0x0}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x2, &(0x7f0000008640), 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r8, 0x47, &(0x7f0000000200)=0x7) r10 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 81.229928ms ago: executing program 7 (id=1806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30000, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x24000840) poll(0x0, 0x0, 0x1d) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8200, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = syz_socket_connect_nvme_tcp() ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000000080)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x12) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usb_storage/parameters/delay_use\x00', 0x236000, 0xd) write(r7, &(0x7f0000000200)='0\n', 0x2) syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202"], 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r8, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 0 (id=1807): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000201c1b001d000000020001090224000100000000090400000103000000092100000001221800090581032000000000"], 0x0) syz_usb_connect(0x1, 0x11d5, &(0x7f00000005c0)={{0x12, 0x1, 0x712, 0x36, 0x50, 0xd8, 0x10, 0x3eb, 0x7614, 0x892f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11c3, 0x4, 0x8, 0x6, 0xe0, 0x9, "", [{{0x9, 0x4, 0xed, 0x60, 0xe, 0x57, 0x19, 0x42, 0x82, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '>'}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xbed, 0xfffd, 0x6}, [@ncm={0x6, 0x24, 0x1a, 0x6516}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x7, 0x64a}, @obex={0x5, 0x24, 0x15, 0x40}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x69, 0x5}, @mdlm_detail={0x3e, 0x24, 0x13, 0x9, "eb43d1fcd9221e3d0e326362aea70e22c5ba3c2d72eb0c0de94c52f1f3dd713b8df6be2ccc928493eae080f67cff1903e1359f0de5203d88e822"}, @acm={0x4, 0x24, 0x2, 0xb}]}, @uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0xe0, 0x4, 0x3}]}], [{{0x9, 0x5, 0xb, 0x3, 0x40, 0x1, 0x8, 0x1}}, {{0x9, 0x5, 0x0, 0x2, 0x1fb, 0xd, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfe, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x5}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x7f, 0x4, 0x6, [@generic={0xc3, 0xa, "38d495c856c8b8ad7bc21deec4b15e16fedf45ee35e0f132d1fb6b99f8745140d77ab7d3d25b4280cd2ae5b0450cec2ff849cbf80201c84c8fd4f37e0e1dfcc8c396ea0b9b98304fa96ba60319fce286577369d3f6483679d364f68836d42ae675eed7f220fabe96dad1df100f3c623f44c0c8f36b2364f678eb11e4c4a7193b3e623c0928b1cb126bcfa497e00df1c7e8b5d2c1d2bc8d410048b20af449266495da94fd0981804d0f8ba155fe9e22ce202e6fba1e0eb4c396dc31a9e645b916b9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x6, 0x6, 0x4}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0x0, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf2, 0xff24}, @generic={0xe4, 0x8, "4775830f36d8cd5cefc62f671377c680fc098ea42718f1ad25bfd8431bdc4fe0479ebc095779947440fa182fdff25de1ed4a9e4569ebf35e275b42c3287dd237872a1deb96c2e578eb24ea4c2b76ccd1698eeb164fafbafd1cbd22e20c15845d81cefb56ced20c059bb0cc21f21905474b4c885c19a4a883a75c9a550cda834b7ca0b341c9388d5a042ae7aa012e47a11ec2b7161313c5dc8083196cbb2487c84107d2d9c4c27e160a1b954b60a8aef67e7598e86fc28ef7613bf84db16e6bbecd297998f61bf14991b3a34ebf12da023c10dde404bd30d4a75cb9cfa090affd81e9"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0xfb, 0xcf, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x6}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0xe, 0x6, 0x7}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x7, 0x8, 0x2}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x13, 0x4, 0xf7, [@generic={0x1f, 0x31, "2ece3b0ece297ad1fc1f1a61e1f819bfe91dbadd9b3256e7218d694d14"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x7, 0xa, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x200}]}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x8, 0x1, 0x9, [@generic={0xcd, 0x4, "bc76fd5b57f26eb1de6c3c07e104eb2288155fd579134e5317508fc3155b4e6dd624d9efd6da54694bb5e690dccbe8fc758ee408d2f6719be8063b30ee2a4c94253d931ee6844ae36653feda68deb2ea8d40493c50f8c7f4586346b231ef95f2a7bc2fa0099ff10d55ce1af89d30b1d9057fe9860501bd7bc227008597d7ab2582a712ec30d664ec4a5017e1885e4a7ca2a5bb101e0b1d1b556ce5832975b48ea1db11489fdb7b9ccbe6d09c510c80c875706c6e9e130acab921d33c2dbd5ebbf6163bd98c32a1b90dc464"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0xff, 0xe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x6}, @generic={0xc2, 0x24, "922064e345aa1bbbc5c6774e502d72292e4c409069177c7937f2e53f15cca383012da4abaa3521c244d18ce87833d8ea46ce111c26a144461236742e7e86f7bd328d293133c8e5d074d7f8e41f35ab5b213c81f662be773448654f264e02f48a969f7c74a473eab23e43f1913c03d5d212ad1e71e729aec2d2f87ac9d95f9fab6101289d9a0c5c6a0ff010758d589a510d7615620bfe745574998d55947d6d89a8b450c058bedda7e7371862e6fe550d082cd410c8e80e05ac12818738996873"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x400, 0xf, 0x9, 0x6, [@generic={0x41, 0x8, "570d41da79218365e789ab5b292bb8efdadd2e8c3405168846dc71203c722f8030cc86bb12b87925583f490879a5e3adc59e1a92c0f13ed65bff25d760c0ea"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xc, 0x4, 0xc8, [@generic={0x6d, 0xd, "1ea8ec8d850b11124484877818983adc4e552d2812b5a1570752ee1713abfe51edb8c13ec98ed3b5a7975143a936860e48c27e180d87df0aa6a4489c20f0e63170917ef753162b4163b7a42f764b0a34488f4858bbc79868bd732f5817e8fe8d115185d2004b7eca93d694"}]}}]}}, {{0x9, 0x4, 0xe9, 0xf9, 0x4, 0xff, 0x5, 0x48, 0x9, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "1196624d57"}, {0x5, 0x24, 0x0, 0x831}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8c, 0x1, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7f}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0xff, 0x3, 0x21}]}], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0x0, 0x5, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xf254}]}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x1e, 0x4, 0x0, [@generic={0xfb, 0x23, "ce641af7f4b723abd5f044b856a9870f7a060f56774be87f829712bb52adaf8c08914f82b65e909d627a2a492219f95562f2cf4bfa4b760f12c66cf8426df3bfc491bd0aede76bb2fec5f7935ca200fc03c316f1dcbbcd69a9a6f4d436439ec92aac14d54506d9c413ac44a153c91ef3cd5c476259d50cb4fad391ea4abd64d8c6507e598fefa91c937333d0dc9ea553c0462de8f04fe7660c68179f17922087be563b80731ebf005c292c3d74fd7eab704dcdfa5c1e7b7b4fe863eaefb9ff4952a58f18dc4e7d8f3e2b09416bd7924ccbacee35bfdd5df627ca01a2e2fa5be2727fcbc2780fae015dfcea5c32e59c1016de59958127e03f4c"}, @generic={0x22, 0x2, "58588717176ea0a32b0edc06b08f2d41502a0aaa89c21a603c3eb958174f7d69"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7, 0xf9, 0x5, [@generic={0xaa, 0x23, "d591c221e7d6465f61f53a5ac91171f6e44a5ac23acd51e9a683531fac52dc7be27e061de13834f3dfebab2161349c2ad2c35a9deb207373a3bd8cb0e4701e9b1f924dad30811817c24d62d974aa5b325eeef02a26c091acb383257badc12d731432fafaa318d268fa98870a43d6df5b4e0b5fcb03c23114af76c7419623d01551522adb2e1ee0e9458b58490dbe474f28e1f0f1429b3a571ed0dcbde0f2d1cbda5bb2050a726bb2"}, @generic={0x39, 0xb, "4b01c52e96e2b8a6f606258903bbba516a73814559c80b9228e6b93d95828369f49d606872816681f3eb28a9f23dca378d927d330d5282"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0xc}}]}}, {{0x9, 0x4, 0x49, 0x4, 0xe, 0xbd, 0x95, 0xda, 0xfa, [], [{{0x9, 0x5, 0x80, 0x10, 0x40, 0x2, 0x8, 0x8, [@generic={0x15, 0x2d, "0d9c8b7ebe44cb18bc90bb6b6ebf1acc9f7750"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xfff}]}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x4, 0x81, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x9, 0xeb, 0x96, [@generic={0xf5, 0x10, "f3ded1a71155ca174c5483c9ac357b63dd15c57282747167a6a90b6abdd3ebe8e1e8e0a675f8699ec3ef4186e92c1461b7255f51e14f73f3e0ac31e974f0b3d915fbbf556428ff41befe768c4e9017012e19448d693a5ad1c9d9684ca4757b86613eb0cbb50dec53f1ae9626d00c20b3431f65212f2bd2656e06065ac4722545b3a573ac2c889e2f98f6a53a5b347ee346ae0554be3b6744df99ff05b1fba48e9ccaad8f1755cad6f63ef2cb343ae8854eedfc3888c87210632203302025c1402759f1bba09921fe1d78e3bdd0dc5cdaaacd031af5becf54b24af67e0ae94c9bbfc847766c0f3233c32dac21645b7245c33abd"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x400, 0x9, 0xb, 0xa, [@generic={0x4c, 0xc, "729a5fe395b0f8ac788c8b8cb41898417df7fc3546ebf2cbd2277338ef83b7b0eeebd031772bc74fb9d6f63c0ec24244bfbb08e4ee7f621e8bfd0cb8f64e37dfc80a003cbae473d0a825"}]}}, {{0x9, 0x5, 0xd, 0x8, 0xcadeb8ea2c17a629, 0xcf, 0x2, 0x3}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x4, 0xfb, 0x0, [@generic={0x3e, 0x10, "00f2d9f3b05d221efda2317a2b48328ae5e068a30dcaa34d5e41084e5bba3cb6c065729d48d3d63cd8048e5d05e86fe6095ce8f49056582e2e460aee"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x3, 0x44}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x6, 0x3, 0x10}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x2, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x38}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x1, 0x90, 0x3}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0xff, 0x1, 0x7, [@generic={0xc6, 0x1, "1f6ef9309a6272e9535ffd6c3523a3a446ac9488ecdd3e16494acee50e7441acd9a3b5af6c67aec6aa69371481af8a05fc304480432d0a2fecf766eed5efa6ce93c895ab1db1fa1d95fbf567d85b7c6d80d62587a2c81b384543df5e53cf2b2e238c7c09157d2f85f024d38165234a6353c6cb50fcc78ed729e812fcc70bdf294182b70dfa69e0ba56da8697743a1b2898ec48faf1850e79ecf7d3796c219426c17d29405734bda3a4b99ae12bf3da77e8444937b791c3bd8eeed31613475d59bae67ed9"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x400, 0x9, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x5}, @generic={0xff, 0xa, "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"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x10, 0x7, 0x9}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0x7, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xff}]}}]}}, {{0x9, 0x4, 0xe, 0x9, 0xf, 0x72, 0xa5, 0x62, 0xdb, [], [{{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x0, 0x6, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8f, 0x101}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x0, 0x2, 0x3d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd9, 0x3}]}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x81, 0x1, 0x8, [@generic={0x79, 0x13, "357e9ded2005fae281ccee31d72d981a46c2fbd0527df917688842c1dd65854c17ff3990c2ad8867fbed0423bebef8da7e91f786a73ccbda2c0254ccc1999a08c8bcd86b7ddccb1a853a3a9d7f126e98fcd9eecb1100f12e1753652510e8c07d4b3d34138f1b94dd71a999680cb6b794ec58e2c6549072"}, @generic={0xe8, 0x21, "cf48d23fb5d0fa42560af07351e86e51b11506af02eada539ae7a544bf4975937d156da57a492ad3fa07cadefb8c1d4b5308d77bb113b2805656fa79b08e0a452748d1bdc1f5eec66df25c40c6da1d0ee2565e93102adcf7e98c3cc3a9fac6ee20a381704c81bd1c71f9f6d619723eae89c1d6c8e018d2e26b953d00957ea8319b68df15039a79f7699861929e5a719b57c735d8889af5d1136fa8dc2c9be64e8474628708fe6a15dceb5bb6b994c662e5325bc395db149e0e987a43959eefdb5ef84f3f857379278e63dbac56befe7d1cde2705b37d4d62cffdd7e926b3e24b372bec7115e9"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x3, 0xe, 0x5, [@generic={0xeb, 0x2, "b2603c56577616f0918d93176969494a16ccda029176da5f1cab1f107e957d73fdd1dbcedaf07a6c3888db41dfcb311a5ddb31f9dc4523fea4e5a6c5a53c945e18cdddeb9dc0f5c438dee4b7c94e84d861ee3a1a38c8d6e27e1ad0095eb7389b3b80f696a93ca804a8c2e14b9503ee099096482276ef555267a45c1c7609576e6bd303f5825e9d8a4675159ef784433be0018beb196239b440615e3f318c02eb75bafdce8a1b8c80786aaa277814971bcb52b13cd4e7e8e1bac0366a46eee89924c74aa69b02da924f7203841e94b710d4baab7606b39b7c1426b97830e39ceb08c0544bfc92fa26bd"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0xff, 0x8, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x40, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x3}]}}, {{0x9, 0x5, 0xe, 0xc, 0x600, 0xb9, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0xfff8}, @generic={0x7e, 0x7, "e468f424a4455d7d5b85f68a14bea94e7ff2ecb5469dcecc051cb494757ec6d1037b56dd72cd03d11efadd481dcb305a4c3c64dc0ceae08301ba1e99ce6fc1cdc56b3d5629bec8c6957081ebef2e9dfdcdf928c798720a6e343d9160c596beb0c1d39318d6dc2be92ea2707c4204e2f095eaecfbedb7f549af2e2b46"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x0, 0x7, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x10}, @generic={0xf6, 0xc, "e3f808e67177f33e4738a2da5ccc2e30c68caa9a782a80c67bc1dd13d07c157553f2165722bf6a7df3b3a524ea4085de50b562662786dae47ffa7f9d8b51621f6857a58205ebc4d0d624c10d204290581e55c4044cef01a6adeb30047872ba22b95a4e3653d07b8f2ae2d65b33cc8078b82ba8361691d9997d6bb6aa41fb1a072b1b9efce57b08128f683931f32d2b90c241713bd55762a4523fe795759c0e625a04468c062b28983346c0ae45bdcb867c9b057d60074f1be826551eef09212e4a97bd3197f3dadf8e2966ab89e47f30f2d64a3a1a44a9088229d464ef4e178e8b0233157332be5cf26deddae3a7bb56c15f95e4"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x4, 0x0, 0x9}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x0, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xa, 0xab, 0x1}, @generic={0x95, 0x22, "ca9f59650cf7be32332b6b533234dc06eaa34ee77d516fd81adc15b709a406526808d29ef7a93eaaaa79cb521cf5443b953a1fa35a779f42632bc30309bf4b71cb324aa0619b460a71125802016a89ed8bcfc6a2a5322937a8dbba19e16cdfb6893c161ae9d2e7b338ad648c5a995381b8ba11d58616ececa1abfb62d625ff69929a79b5be0a3adb65ca8895ce60b4f39169d4"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x1, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x96d0}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x180}]}}, {{0x9, 0x5, 0xa, 0x1c, 0x8, 0x3, 0x46, 0xe, [@generic={0xd3, 0x7, "4fba1d076c7c1572ca3da6db773c164da3532f600d90f89a83f8c187a162ceceaef8134debea582a2d5c961ca98ac73d1cea5de4cf95ba51306caba6a2bcc0f988d9711fdfef7d26237117f1f3d11e0f7037c008179255e85a1fbf4df2d8bec848531e5a3b214e753c9bc62eecdc0d92aa14b4bd0e6b79e40513c4fbb7ce4beb6e0481a397e2a7156902409e65771582c74e73740c59f8b32691a1262e66c0378d06aabcdd0aadc97b67e49bac79e029fb93a21a6eacd26d029662ca73fd2f9430ffc71654f7ef72a9c9f4c91c7173fc8a"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xfc, 0x7ff}]}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x9, 0x0, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xfc00}]}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0x4, 0x2, 0xcc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x9}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x15, 0x6, 0xa2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xf}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0xfff7}]}}]}}]}}]}}, &(0x7f00000019c0)={0xa, &(0x7f00000017c0)={0xa, 0x6, 0x201, 0x1, 0x1, 0xd8, 0x10, 0x7}, 0x121, &(0x7f0000001800)={0x5, 0xf, 0x121, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x4, 0x3, 0xa0}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x2, 0x6}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x1, 0xf, 0xb5, [0xff3f3f, 0xff0000]}, @generic={0x16, 0x10, 0x3, "b2c26cf28f3edd3589fffa54de1fb909a23d4a"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x6, 0xf00, 0x4c8}, @generic={0xd2, 0x10, 0xb, "a37facd217044561cb7472c302eb6b92b2157ad1791ea799da7e369077842c1e6880debdc70cbf0f6e342c0617238e7b05b4af5f96bafefc98ef99cd8ef5f22aee0286f0f116f6d0fa7fd32d25d44c810922eca667dcf0bf88aede157176dc4db619dcfc7105b3bd52b987117974e60d602bfc88094be5563edeb0a0544641b73e40ca834b6a65c3c9d84798fe7a18ed80793904ff2f9f4065542d6838a7d777dcbac5eedc96a88d3dc25c842b0c74451c60890631d206550bfc9c5a43d2e07c1df6ad1487f2e753430e855b6dd4c1"}]}, 0x2, [{0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x2c01}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101090124c359"], 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r3, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setxattr$security_ima(&(0x7f00000000c0)='./config/usb_gadget/g1/UDC\x00', &(0x7f0000000100), &(0x7f0000000180)=@md5={0x1, "74f9f673b6cba2d4702d320e6d0ad55d"}, 0x11, 0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x7}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@mpls_delroute={0x2c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x9, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x2}}]}, 0x2c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r8 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_FILES(r8, 0x1e, &(0x7f0000000000)=[r8], 0x1) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000340), &(0x7f00000002c0)={'L+', 0x100000000000004}, 0x16, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) kernel console output (not intermixed with test programs): 9e159 code=0x7ffc0000 [ 767.564501][ T30] audit: type=1326 audit(1789439722.171:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.2.1601" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfff9e159 code=0x7ffc0000 [ 767.564526][ T30] audit: type=1326 audit(1789439722.171:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.2.1601" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbfff9e159 code=0x7ffc0000 [ 769.022996][ T9] usb 4-1: device descriptor read/8, error -110 [ 769.268678][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 769.284779][ T9] usb 4-1: device descriptor read/8, error -32 [ 769.409221][ T9] usb usb4-port1: unable to enumerate USB device [ 769.460935][ T1453] bridge_slave_1: left allmulticast mode [ 769.460956][ T1453] bridge_slave_1: left promiscuous mode [ 769.461123][ T1453] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.506577][ T1453] bridge_slave_0: left allmulticast mode [ 769.506599][ T1453] bridge_slave_0: left promiscuous mode [ 769.506733][ T1453] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.534941][T11958] serio: Serial port ttynull [ 770.597448][ T1453] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 771.801223][T11979] xt_hashlimit: max too large, truncated to 1048576 [ 771.801238][T11979] xt_hashlimit: overflow, try lower: 18446744073709551612/8 [ 771.983695][ T1453] bond2 (unregistering): (slave geneve2): Releasing active interface [ 772.174222][ T1453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.196389][ T1453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.197311][ T1453] bond0 (unregistering): Released all slaves [ 772.236176][ T1453] bond1 (unregistering): Released all slaves [ 772.298575][ T1453] bond2 (unregistering): Released all slaves [ 772.338602][ T1453] bond3 (unregistering): Released all slaves [ 772.369986][ T1453] bond4 (unregistering): Released all slaves [ 772.406165][ T1453] bond5 (unregistering): Released all slaves [ 772.440039][ T1453] bond6 (unregistering): Released all slaves [ 772.481217][T11993] IPVS: Error joining to the multicast group [ 772.561276][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 772.800311][ T1453] IPVS: stopping backup sync thread 10530 ... [ 773.111931][T12013] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1610'. [ 773.559519][ T52] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 773.585027][ T52] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 774.015164][ T5701] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 774.070902][ T1453] hsr_slave_0: left promiscuous mode [ 774.071283][ T1453] hsr_slave_1: left promiscuous mode [ 774.071700][ T1453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.071713][ T1453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.110361][ T1453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.110381][ T1453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.187298][ T5701] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 774.193117][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.193136][ T5701] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 774.225435][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.225455][ T5701] usb 4-1: Product: syz [ 774.225464][ T5701] usb 4-1: Manufacturer: syz [ 774.225473][ T5701] usb 4-1: SerialNumber: syz [ 775.140487][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 775.140516][ T30] audit: type=1400 audit(1789439729.721:2407): avc: denied { ioctl } for pid=12028 comm="syz.7.1613" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 775.140621][ T5614] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 775.267863][ T1453] veth1_macvtap: left promiscuous mode [ 775.267907][ T1453] veth0_macvtap: left promiscuous mode [ 775.267963][ T1453] veth1_vlan: left promiscuous mode [ 775.268012][ T1453] veth0_vlan: left promiscuous mode [ 775.291274][ T5614] usb 1-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 775.308517][ T5614] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 775.308537][ T5614] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 775.310625][ T5614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.310642][ T5614] usb 1-1: Product: syz [ 775.310651][ T5614] usb 1-1: Manufacturer: syz [ 775.310660][ T5614] usb 1-1: SerialNumber: syz [ 775.430404][T12032] ip_tables: iptables: counters copy to user failed while replacing table [ 775.574982][ T5614] kaweth 1-1:1.0: Firmware present in device. [ 775.577834][T12038] FAULT_INJECTION: forcing a failure. [ 775.577834][T12038] name failslab, interval 1, probability 0, space 0, times 0 [ 775.577860][T12038] CPU: 0 UID: 0 PID: 12038 Comm: syz.5.1615 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.577879][T12038] Tainted: [L]=SOFTLOCKUP [ 775.577884][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 775.577893][T12038] Call Trace: [ 775.577898][T12038] [ 775.577904][T12038] dump_stack_lvl+0x100/0x190 [ 775.577927][T12038] should_fail_ex.cold+0x5/0xa [ 775.577948][T12038] should_failslab+0xc2/0x120 [ 775.577965][T12038] __kmalloc_noprof+0xfc/0x840 [ 775.577978][T12038] ? lsm_blob_alloc+0x68/0x90 [ 775.577999][T12038] lsm_blob_alloc+0x68/0x90 [ 775.578015][T12038] security_sk_alloc+0x2d/0x290 [ 775.578027][T12038] sk_prot_alloc+0x1d1/0x2a0 [ 775.578044][T12038] sk_alloc+0x36/0xe80 [ 775.578058][T12038] unix_create1+0xa6/0x700 [ 775.578073][T12038] unix_stream_connect+0x36e/0x1a40 [ 775.578089][T12038] ? security_socket_post_create+0x85/0x270 [ 775.578113][T12038] p9_fd_create_unix+0x280/0x350 [ 775.578129][T12038] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 775.578151][T12038] ? lockdep_init_map_type+0x5c/0x250 [ 775.578167][T12038] p9_client_create+0x563/0xd40 [ 775.578186][T12038] ? __pfx_p9_client_create+0x10/0x10 [ 775.578207][T12038] ? lockdep_init_map_type+0x5c/0x250 [ 775.578220][T12038] ? __raw_spin_lock_init+0x3a/0x110 [ 775.578238][T12038] v9fs_session_init+0x3c/0xdd0 [ 775.578253][T12038] ? v9fs_get_tree+0x9c/0xb50 [ 775.578272][T12038] v9fs_get_tree+0xb8/0xb50 [ 775.578288][T12038] ? rcu_is_watching+0x13/0xc0 [ 775.578304][T12038] ? __pfx_v9fs_get_tree+0x10/0x10 [ 775.578322][T12038] ? bpf_lsm_capable+0x9/0x10 [ 775.578338][T12038] ? security_capable+0x80/0x260 [ 775.578356][T12038] vfs_get_tree+0x92/0x320 [ 775.578373][T12038] path_mount+0x7d0/0x24c0 [ 775.578393][T12038] ? __pfx_path_mount+0x10/0x10 [ 775.578409][T12038] ? lockdep_hardirqs_on+0x7d/0x110 [ 775.578426][T12038] ? putname+0xb1/0x110 [ 775.578440][T12038] ? kmem_cache_free+0x127/0x6c0 [ 775.578463][T12038] ? __x64_sys_mount+0x293/0x310 [ 775.578478][T12038] __x64_sys_mount+0x293/0x310 [ 775.578495][T12038] ? __pfx___x64_sys_mount+0x10/0x10 [ 775.578516][T12038] do_syscall_64+0x123/0x790 [ 775.578533][T12038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.578546][T12038] RIP: 0033:0x7f390a99e159 [ 775.578558][T12038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.578569][T12038] RSP: 002b:00007f390b88a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 775.578582][T12038] RAX: ffffffffffffffda RBX: 00007f390ac25fa0 RCX: 00007f390a99e159 [ 775.578591][T12038] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040 [ 775.578599][T12038] RBP: 00007f390aa3503b R08: 0000200000000440 R09: 0000000000000000 [ 775.578607][T12038] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000 [ 775.578615][T12038] R13: 00007f390ac26038 R14: 00007f390ac25fa0 R15: 00007ffd6345b0d8 [ 775.578632][T12038] [ 775.578669][T12038] 9pnet_fd: p9_fd_create_unix (12038): problem connecting socket: ./proc: -12 [ 775.776256][ T5731] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 775.951896][ T5614] kaweth 1-1:1.0: Statistics collection: 0 [ 775.951915][ T5614] kaweth 1-1:1.0: Multicast filter limit: 0 [ 775.951924][ T5614] kaweth 1-1:1.0: MTU: 0 [ 775.951932][ T5614] kaweth 1-1:1.0: Read MAC address 00:00:00:00:00:00 [ 776.008667][ T30] audit: type=1400 audit(1789439730.621:2408): avc: denied { write } for pid=12010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 776.078481][ T5731] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 776.095978][ T5731] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 776.096003][ T5731] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 320, setting to 64 [ 776.096020][ T5731] usb 3-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 776.096053][ T5731] usb 3-1: config 1 interface 0 has no altsetting 0 [ 776.161526][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 776.161548][ T5731] usb 3-1: SerialNumber: syz [ 776.180274][T12032] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 776.196253][ T5731] hub 3-1:1.0: bad descriptor, ignoring hub [ 776.196272][ T5731] hub 3-1:1.0: probe with driver hub failed with error -5 [ 776.196599][ T5731] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 776.330147][T12038] syz.5.1615 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=2, oom_score_adj=1000 [ 776.330179][T12038] CPU: 0 UID: 0 PID: 12038 Comm: syz.5.1615 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.330198][T12038] Tainted: [L]=SOFTLOCKUP [ 776.330203][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 776.330211][T12038] Call Trace: [ 776.330217][T12038] [ 776.330223][T12038] dump_stack_lvl+0x100/0x190 [ 776.330248][T12038] dump_header+0xfb/0x606 [ 776.330266][T12038] oom_kill_process.cold+0xd/0x380 [ 776.330281][T12038] out_of_memory+0x340/0x14f0 [ 776.330300][T12038] ? __pfx_out_of_memory+0x10/0x10 [ 776.330319][T12038] mem_cgroup_out_of_memory+0xc6/0x130 [ 776.330333][T12038] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 776.330345][T12038] ? find_held_lock+0x2b/0x80 [ 776.330365][T12038] ? do_raw_spin_unlock+0x145/0x1e0 [ 776.330381][T12038] ? _raw_spin_unlock+0x28/0x50 [ 776.330397][T12038] try_charge_memcg+0x783/0xf60 [ 776.330417][T12038] ? __pfx_try_charge_memcg+0x10/0x10 [ 776.330434][T12038] ? find_held_lock+0x2b/0x80 [ 776.330449][T12038] ? rcu_read_unlock+0x17/0x60 [ 776.330465][T12038] ? rcu_read_unlock+0x17/0x60 [ 776.330492][T12038] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 776.330515][T12038] ? kasan_save_track+0x14/0x30 [ 776.330530][T12038] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 776.330543][T12038] ? copy_net_ns+0xe8/0x7a0 [ 776.330563][T12038] copy_net_ns+0xe8/0x7a0 [ 776.330577][T12038] ? copy_cgroup_ns+0x71/0x970 [ 776.330595][T12038] create_new_namespaces+0x3ea/0xac0 [ 776.330614][T12038] unshare_nsproxy_namespaces+0xf2/0x220 [ 776.330630][T12038] ksys_unshare+0x4a2/0xa70 [ 776.330645][T12038] ? __pfx_ksys_unshare+0x10/0x10 [ 776.330666][T12038] __x64_sys_unshare+0x31/0x40 [ 776.330679][T12038] do_syscall_64+0x123/0x790 [ 776.330696][T12038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.330709][T12038] RIP: 0033:0x7f390a99e159 [ 776.330720][T12038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.330731][T12038] RSP: 002b:00007f390b88a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 776.330752][T12038] RAX: ffffffffffffffda RBX: 00007f390ac25fa0 RCX: 00007f390a99e159 [ 776.330761][T12038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000000 [ 776.330769][T12038] RBP: 00007f390aa3503b R08: 0000000000000000 R09: 0000000000000000 [ 776.330777][T12038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.330785][T12038] R13: 00007f390ac26038 R14: 00007f390ac25fa0 R15: 00007ffd6345b0d8 [ 776.330803][T12038] [ 776.330852][T12038] memory: usage 4kB, limit 8kB, failcnt 20 [ 776.330860][T12038] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 776.330868][T12038] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 776.330876][T12038] Memory cgroup stats for /syz5/test: [ 776.331019][T12038] cache 0 [ 776.331025][T12038] rss 0 [ 776.331029][T12038] rss_huge 0 [ 776.331034][T12038] shmem 0 [ 776.331038][T12038] mapped_file 0 [ 776.331043][T12038] dirty 0 [ 776.331048][T12038] writeback 0 [ 776.331052][T12038] workingset_refault_anon 0 [ 776.331058][T12038] workingset_refault_file 0 [ 776.331062][T12038] swap 0 [ 776.331066][T12038] swapcached 0 [ 776.331070][T12038] pgpgin 0 [ 776.331074][T12038] pgpgout 0 [ 776.331078][T12038] pgfault 0 [ 776.331082][T12038] pgmajfault 0 [ 776.331087][T12038] inactive_anon 0 [ 776.331091][T12038] active_anon 0 [ 776.331095][T12038] inactive_file 0 [ 776.331122][T12038] active_file 0 [ 776.331127][T12038] unevictable 0 [ 776.331132][T12038] hierarchical_memory_limit 8192 [ 776.466167][T12038] hierarchical_memsw_limit 9223372036854771712 [ 776.466180][T12038] total_cache 0 [ 776.466185][T12038] total_rss 0 [ 776.466190][T12038] total_rss_huge 0 [ 776.466195][T12038] total_shmem 0 [ 776.466199][T12038] total_mapped_file 0 [ 776.466204][T12038] total_dirty 0 [ 776.466209][T12038] total_writeback 0 [ 776.466213][T12038] total_workingset_refault_anon 0 [ 776.466219][T12038] total_workingset_refault_file 0 [ 776.466224][T12038] total_swap 0 [ 776.466229][T12038] total_swapcached 0 [ 776.466233][T12038] total_pgpgin 0 [ 776.466238][T12038] total_pgpgout 0 [ 776.466242][T12038] total_pgfault 0 [ 776.466247][T12038] total_pgmajfault 0 [ 776.466252][T12038] total_inactive_anon 0 [ 776.466256][T12038] total_active_anon 0 [ 776.466261][T12038] total_inactive_file 0 [ 776.466266][T12038] total_active_file 0 [ 776.466270][T12038] total_unevictable 0 [ 776.466294][T12038] anon_cost 0 [ 776.466298][T12038] file_cost 0 [ 776.466304][T12038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.1615,pid=12037,uid=0 [ 776.467378][T12038] Memory cgroup out of memory: Killed process 12037 (syz.5.1615) total-vm:104432kB, anon-rss:1444kB, file-rss:23168kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 776.710547][ T5614] kaweth 1-1:1.0: Error setting receive filter [ 776.710703][ T5614] kaweth 1-1:1.0: probe with driver kaweth failed with error -5 [ 776.863833][ T5614] usb 1-1: USB disconnect, device number 62 [ 777.925635][ T30] audit: type=1400 audit(1789439732.541:2409): avc: denied { write } for pid=12046 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 778.006973][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1612'. [ 778.077767][ T5731] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 778.228003][ T5731] usb 3-1: USB disconnect, device number 71 [ 778.503414][ T30] audit: type=1400 audit(1789439733.121:2410): avc: denied { read } for pid=12049 comm="syz.2.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 779.236200][ T1453] team0 (unregistering): Port device team_slave_1 removed [ 779.267414][ T5701] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 779.307873][ T1453] team0 (unregistering): Port device team_slave_0 removed [ 780.318028][ T5701] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 780.478101][ T8235] udevd[8235]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 780.559178][T12070] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1621'. [ 780.630834][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 780.631132][T12055] IPVS: Error joining to the multicast group [ 780.947075][T12077] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1624'. [ 781.104214][ T5701] usb 4-1: USB disconnect, device number 70 [ 781.636025][ T1453] IPVS: stop unused estimator thread 0... [ 782.371109][T12103] ip_tables: iptables: counters copy to user failed while replacing table [ 782.399911][ T30] audit: type=1400 audit(1789439737.011:2411): avc: denied { write } for pid=12081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.533587][T12110] FAULT_INJECTION: forcing a failure. [ 782.533587][T12110] name failslab, interval 1, probability 0, space 0, times 0 [ 782.533612][T12110] CPU: 0 UID: 0 PID: 12110 Comm: syz.0.1630 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.533630][T12110] Tainted: [L]=SOFTLOCKUP [ 782.533634][T12110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 782.533642][T12110] Call Trace: [ 782.533647][T12110] [ 782.533652][T12110] dump_stack_lvl+0x100/0x190 [ 782.533674][T12110] should_fail_ex.cold+0x5/0xa [ 782.533693][T12110] should_failslab+0xc2/0x120 [ 782.533709][T12110] __kmalloc_cache_noprof+0x91/0x6d0 [ 782.533727][T12110] ? snd_card_file_add+0x52/0x320 [ 782.533746][T12110] snd_card_file_add+0x52/0x320 [ 782.533763][T12110] snd_rawmidi_open+0x2b0/0xb90 [ 782.533785][T12110] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 782.533801][T12110] ? lock_acquire+0x1d1/0x380 [ 782.533818][T12110] ? soundcore_open+0x231/0x5a0 [ 782.533831][T12110] ? soundcore_open+0x231/0x5a0 [ 782.533847][T12110] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 782.533867][T12110] soundcore_open+0x2e3/0x5a0 [ 782.533883][T12110] ? __pfx_soundcore_open+0x10/0x10 [ 782.533898][T12110] chrdev_open+0x234/0x6a0 [ 782.533914][T12110] ? __pfx_chrdev_open+0x10/0x10 [ 782.533928][T12110] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 782.533948][T12110] do_dentry_open+0x6ab/0x14d0 [ 782.533960][T12110] ? __pfx_chrdev_open+0x10/0x10 [ 782.533978][T12110] vfs_open+0x82/0x3f0 [ 782.533995][T12110] path_openat+0x19fa/0x2440 [ 782.534012][T12110] ? __pfx_path_openat+0x10/0x10 [ 782.534031][T12110] do_file_open+0x20e/0x430 [ 782.534046][T12110] ? __pfx_do_file_open+0x10/0x10 [ 782.534072][T12110] ? _raw_spin_unlock+0x28/0x50 [ 782.534086][T12110] ? alloc_fd+0x471/0x7a0 [ 782.534105][T12110] do_sys_openat2+0x10f/0x1e0 [ 782.534120][T12110] ? __pfx_do_sys_openat2+0x10/0x10 [ 782.534134][T12110] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 782.534155][T12110] __x64_sys_openat+0x12d/0x210 [ 782.534172][T12110] ? __pfx___x64_sys_openat+0x10/0x10 [ 782.534194][T12110] do_syscall_64+0x123/0x790 [ 782.534211][T12110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.534223][T12110] RIP: 0033:0x7f64e6d5e98e [ 782.534234][T12110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 782.534244][T12110] RSP: 002b:00007f64e7c30b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 782.534257][T12110] RAX: ffffffffffffffda RBX: 00007f64e7c316c0 RCX: 00007f64e6d5e98e [ 782.534265][T12110] RDX: 0000000000000000 RSI: 00007f64e7c30c00 RDI: ffffffffffffff9c [ 782.534273][T12110] RBP: 00007f64e7c30c00 R08: 0000000000000000 R09: 0000000000000000 [ 782.534280][T12110] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 782.534287][T12110] R13: 00007f64e7026038 R14: 00007f64e7025fa0 R15: 00007ffc77b236d8 [ 782.534304][T12110] [ 782.687049][ T10] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 782.699466][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 782.885528][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 782.892625][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 782.895067][ T10] usb 6-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 782.895089][ T10] usb 6-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 320, setting to 64 [ 782.895105][ T10] usb 6-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 782.895121][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 782.895364][ T9] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d96, bcdDevice= 0.43 [ 782.896110][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 782.896123][ T10] usb 6-1: SerialNumber: syz [ 782.897990][ T9] usb 3-1: config 255 has an invalid interface number: 39 but max is 0 [ 782.898004][ T9] usb 3-1: config 255 has no interface number 0 [ 782.898020][ T9] usb 3-1: config 255 interface 39 has no altsetting 0 [ 782.924502][T12103] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 782.924649][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.924662][ T9] usb 3-1: Product: syz [ 782.924708][ T9] usb 3-1: Manufacturer: syz [ 782.924717][ T9] usb 3-1: SerialNumber: syz [ 782.926375][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 782.926390][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 782.926656][ T10] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 783.117143][ T30] audit: type=1400 audit(1789439737.731:2412): avc: denied { write } for pid=12111 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 783.182379][ T10] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 783.230712][ T10] usb 6-1: USB disconnect, device number 50 [ 783.354929][ T9] usb 3-1: USB disconnect, device number 72 [ 783.357086][ T5620] udevd[5620]: setting mode of /dev/bus/usb/003/072 to 020664 failed: No such file or directory [ 783.357145][ T5620] udevd[5620]: setting owner of /dev/bus/usb/003/072 to uid=0, gid=0 failed: No such file or directory [ 783.445442][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11 [ 785.182621][ T10] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 785.292582][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 785.660301][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 785.703090][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 785.704196][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.704213][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 785.905300][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.905321][ T10] usb 6-1: Product: syz [ 785.905330][ T10] usb 6-1: Manufacturer: syz [ 785.905338][ T10] usb 6-1: SerialNumber: syz [ 786.133229][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 786.133263][ T9] usb 1-1: New USB device found, idVendor=0921, idProduct=1000, bcdDevice=e7.cf [ 786.212904][ T9] usb 1-1: config 14 has an invalid interface number: 64 but max is 0 [ 786.212923][ T9] usb 1-1: config 14 has no interface number 0 [ 786.212939][ T9] usb 1-1: config 14 interface 64 has no altsetting 0 [ 787.657218][ T9] usb 1-1: string descriptor 0 read error: -71 [ 787.657289][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.693957][ T9] usb 1-1: can't set config #14, error -71 [ 787.710760][ T9] usb 1-1: USB disconnect, device number 63 [ 787.999087][T12154] FAULT_INJECTION: forcing a failure. [ 787.999087][T12154] name failslab, interval 1, probability 0, space 0, times 0 [ 787.999125][T12154] CPU: 0 UID: 0 PID: 12154 Comm: syz.3.1639 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.999144][T12154] Tainted: [L]=SOFTLOCKUP [ 787.999149][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 787.999156][T12154] Call Trace: [ 787.999161][T12154] [ 787.999167][T12154] dump_stack_lvl+0x100/0x190 [ 787.999190][T12154] should_fail_ex.cold+0x5/0xa [ 787.999208][T12154] should_failslab+0xc2/0x120 [ 787.999223][T12154] kmem_cache_alloc_noprof+0x92/0x6a0 [ 787.999236][T12154] ? sk_prot_alloc+0x60/0x2a0 [ 787.999258][T12154] sk_prot_alloc+0x60/0x2a0 [ 787.999275][T12154] sk_alloc+0x36/0xe80 [ 787.999289][T12154] unix_create1+0xa6/0x700 [ 787.999303][T12154] unix_stream_connect+0x36e/0x1a40 [ 787.999317][T12154] ? security_socket_post_create+0x85/0x270 [ 787.999342][T12154] p9_fd_create_unix+0x280/0x350 [ 787.999358][T12154] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 787.999380][T12154] ? lockdep_init_map_type+0x5c/0x250 [ 787.999396][T12154] p9_client_create+0x563/0xd40 [ 787.999414][T12154] ? __pfx_p9_client_create+0x10/0x10 [ 787.999435][T12154] ? lockdep_init_map_type+0x5c/0x250 [ 787.999448][T12154] ? __raw_spin_lock_init+0x3a/0x110 [ 787.999465][T12154] v9fs_session_init+0x3c/0xdd0 [ 787.999480][T12154] ? v9fs_get_tree+0x9c/0xb50 [ 787.999499][T12154] v9fs_get_tree+0xb8/0xb50 [ 787.999515][T12154] ? rcu_is_watching+0x13/0xc0 [ 787.999530][T12154] ? __pfx_v9fs_get_tree+0x10/0x10 [ 787.999549][T12154] ? bpf_lsm_capable+0x9/0x10 [ 787.999564][T12154] ? security_capable+0x80/0x260 [ 787.999582][T12154] vfs_get_tree+0x92/0x320 [ 787.999599][T12154] path_mount+0x7d0/0x24c0 [ 787.999618][T12154] ? __pfx_path_mount+0x10/0x10 [ 787.999634][T12154] ? lockdep_hardirqs_on+0x7d/0x110 [ 787.999651][T12154] ? putname+0xb1/0x110 [ 787.999664][T12154] ? kmem_cache_free+0x127/0x6c0 [ 787.999686][T12154] ? __x64_sys_mount+0x293/0x310 [ 787.999702][T12154] __x64_sys_mount+0x293/0x310 [ 787.999718][T12154] ? __pfx___x64_sys_mount+0x10/0x10 [ 787.999739][T12154] do_syscall_64+0x123/0x790 [ 787.999756][T12154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.999769][T12154] RIP: 0033:0x7f008cb9e159 [ 787.999779][T12154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.999790][T12154] RSP: 002b:00007f008adf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 787.999803][T12154] RAX: ffffffffffffffda RBX: 00007f008ce25fa0 RCX: 00007f008cb9e159 [ 787.999812][T12154] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040 [ 787.999820][T12154] RBP: 00007f008cc3503b R08: 0000200000000440 R09: 0000000000000000 [ 787.999827][T12154] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000 [ 787.999835][T12154] R13: 00007f008ce26038 R14: 00007f008ce25fa0 R15: 00007fff928f0118 [ 787.999851][T12154] [ 787.999873][T12154] 9pnet_fd: p9_fd_create_unix (12154): problem connecting socket: ./proc: -12 [ 788.705915][T12165] netlink: 896 bytes leftover after parsing attributes in process `syz.0.1641'. [ 788.734417][ T30] audit: type=1400 audit(1789439743.351:2413): avc: denied { write } for pid=12130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 788.857375][T12129] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1634'. [ 789.575610][ T30] audit: type=1400 audit(1789439744.191:2414): avc: denied { write } for pid=12175 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.859712][T12181] ip_tables: iptables: counters copy to user failed while replacing table [ 790.068731][ T5268] 8021q: adding VLAN 0 to HW filter on device eth12 [ 790.235812][ T5701] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 790.394418][ T5701] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 790.399672][ T5701] usb 8-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 790.399712][ T5701] usb 8-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 320, setting to 64 [ 790.399728][ T5701] usb 8-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 790.399744][ T5701] usb 8-1: config 1 interface 0 has no altsetting 0 [ 790.463268][ T5701] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 790.463293][ T5701] usb 8-1: SerialNumber: syz [ 790.497978][T12181] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 790.499322][ T5701] hub 8-1:1.0: bad descriptor, ignoring hub [ 790.499340][ T5701] hub 8-1:1.0: probe with driver hub failed with error -5 [ 790.499638][ T5701] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 790.751705][ T5701] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 790.797000][ T5701] usb 8-1: USB disconnect, device number 3 [ 791.089096][ T10] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 791.204592][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 791.233598][ T10] usb 6-1: USB disconnect, device number 51 [ 791.294234][ T5614] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 791.387222][ T8235] udevd[8235]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 791.443679][ T5614] usb 4-1: Using ep0 maxpacket: 8 [ 791.444333][ T5614] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 791.448359][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.448383][ T5614] usb 4-1: Product: syz [ 791.448393][ T5614] usb 4-1: Manufacturer: syz [ 791.448402][ T5614] usb 4-1: SerialNumber: syz [ 791.496369][ T5614] usb 4-1: config 0 descriptor?? [ 791.498287][ T5614] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 792.452431][ T5614] gspca_sonixj: reg_w1 err -110 [ 792.452752][ T5614] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 792.693177][ T30] audit: type=1400 audit(1789439747.301:2415): avc: denied { ioctl } for pid=12205 comm="syz.2.1652" path="cgroup:[4026532801]" dev="nsfs" ino=4026532801 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 792.801384][ T30] audit: type=1400 audit(1789439747.411:2416): avc: denied { setcurrent } for pid=12215 comm="syz.0.1654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 792.860544][ T30] audit: type=1401 audit(1789439747.471:2417): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 792.905504][T12220] FAULT_INJECTION: forcing a failure. [ 792.905504][T12220] name failslab, interval 1, probability 0, space 0, times 0 [ 792.905532][T12220] CPU: 0 UID: 0 PID: 12220 Comm: syz.7.1656 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.905552][T12220] Tainted: [L]=SOFTLOCKUP [ 792.905557][T12220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 792.905566][T12220] Call Trace: [ 792.905572][T12220] [ 792.905577][T12220] dump_stack_lvl+0x100/0x190 [ 792.905602][T12220] should_fail_ex.cold+0x5/0xa [ 792.905620][T12220] should_failslab+0xc2/0x120 [ 792.905636][T12220] kmem_cache_alloc_noprof+0x92/0x6a0 [ 792.905654][T12220] ? sk_prot_alloc+0x60/0x2a0 [ 792.905677][T12220] sk_prot_alloc+0x60/0x2a0 [ 792.905697][T12220] sk_alloc+0x36/0xe80 [ 792.905712][T12220] unix_create1+0xa6/0x700 [ 792.905726][T12220] unix_stream_connect+0x36e/0x1a40 [ 792.905741][T12220] ? security_socket_post_create+0x85/0x270 [ 792.905776][T12220] p9_fd_create_unix+0x280/0x350 [ 792.905793][T12220] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 792.905818][T12220] ? lockdep_init_map_type+0x5c/0x250 [ 792.905835][T12220] p9_client_create+0x563/0xd40 [ 792.905853][T12220] ? __pfx_p9_client_create+0x10/0x10 [ 792.905874][T12220] ? lockdep_init_map_type+0x5c/0x250 [ 792.905887][T12220] ? __raw_spin_lock_init+0x3a/0x110 [ 792.905904][T12220] v9fs_session_init+0x3c/0xdd0 [ 792.905919][T12220] ? v9fs_get_tree+0x9c/0xb50 [ 792.905939][T12220] v9fs_get_tree+0xb8/0xb50 [ 792.905955][T12220] ? rcu_is_watching+0x13/0xc0 [ 792.905971][T12220] ? __pfx_v9fs_get_tree+0x10/0x10 [ 792.905989][T12220] ? bpf_lsm_capable+0x9/0x10 [ 792.906005][T12220] ? security_capable+0x80/0x260 [ 792.906023][T12220] vfs_get_tree+0x92/0x320 [ 792.906041][T12220] path_mount+0x7d0/0x24c0 [ 792.906060][T12220] ? __pfx_path_mount+0x10/0x10 [ 792.906076][T12220] ? lockdep_hardirqs_on+0x7d/0x110 [ 792.906093][T12220] ? putname+0xb1/0x110 [ 792.906107][T12220] ? kmem_cache_free+0x127/0x6c0 [ 792.906129][T12220] ? __x64_sys_mount+0x293/0x310 [ 792.906145][T12220] __x64_sys_mount+0x293/0x310 [ 792.906162][T12220] ? __pfx___x64_sys_mount+0x10/0x10 [ 792.906183][T12220] do_syscall_64+0x123/0x790 [ 792.906199][T12220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.906213][T12220] RIP: 0033:0x7fe40219e159 [ 792.906224][T12220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.906235][T12220] RSP: 002b:00007fe403083028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 792.906249][T12220] RAX: ffffffffffffffda RBX: 00007fe402425fa0 RCX: 00007fe40219e159 [ 792.906259][T12220] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040 [ 792.906267][T12220] RBP: 00007fe40223503b R08: 0000200000000440 R09: 0000000000000000 [ 792.906274][T12220] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000 [ 792.906282][T12220] R13: 00007fe402426038 R14: 00007fe402425fa0 R15: 00007ffdad46ae08 [ 792.906299][T12220] [ 792.911890][T12220] 9pnet_fd: p9_fd_create_unix (12220): problem connecting socket: ./proc: -12 [ 793.319217][T12225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 793.499100][T12219] syz.7.1656 invoked oom-killer: gfp_mask=0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), order=0, oom_score_adj=1000 [ 793.499129][T12219] CPU: 0 UID: 0 PID: 12219 Comm: syz.7.1656 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.499145][T12219] Tainted: [L]=SOFTLOCKUP [ 793.499150][T12219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 793.499157][T12219] Call Trace: [ 793.499162][T12219] [ 793.499167][T12219] dump_stack_lvl+0x100/0x190 [ 793.499189][T12219] dump_header+0xfb/0x606 [ 793.499203][T12219] oom_kill_process.cold+0xd/0x380 [ 793.499218][T12219] out_of_memory+0x340/0x14f0 [ 793.499237][T12219] ? __pfx_out_of_memory+0x10/0x10 [ 793.499257][T12219] mem_cgroup_out_of_memory+0xc6/0x130 [ 793.499270][T12219] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 793.499282][T12219] ? find_held_lock+0x2b/0x80 [ 793.499302][T12219] ? do_raw_spin_unlock+0x145/0x1e0 [ 793.499317][T12219] ? _raw_spin_unlock+0x28/0x50 [ 793.499333][T12219] try_charge_memcg+0x783/0xf60 [ 793.499353][T12219] ? __pfx_try_charge_memcg+0x10/0x10 [ 793.499369][T12219] ? find_held_lock+0x2b/0x80 [ 793.499384][T12219] ? rcu_read_unlock+0x17/0x60 [ 793.499401][T12219] ? rcu_read_unlock+0x17/0x60 [ 793.499423][T12219] obj_cgroup_charge_pages+0x22/0x1d0 [ 793.499441][T12219] __memcg_kmem_charge_page+0x1c4/0x4d0 [ 793.499462][T12219] __alloc_frozen_pages_noprof+0x534/0x3300 [ 793.499492][T12219] ? lock_acquire+0x1d1/0x380 [ 793.499504][T12219] ? page_table_check_set+0x11d/0x580 [ 793.499520][T12219] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 793.499542][T12219] ? page_table_check_set+0x31e/0x580 [ 793.499559][T12219] ? __page_table_check_ptes_set+0x1d5/0x530 [ 793.499579][T12219] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 793.499604][T12219] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 793.499619][T12219] ? policy_nodemask+0xed/0x4f0 [ 793.499636][T12219] alloc_pages_mpol+0x201/0x550 [ 793.499652][T12219] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 793.499666][T12219] ? vma_is_special_huge+0x23f/0x2d0 [ 793.499681][T12219] ? __pfx_vma_is_special_huge+0x10/0x10 [ 793.499696][T12219] ? find_held_lock+0x2b/0x80 [ 793.499714][T12219] alloc_pages_noprof+0x1a/0x160 [ 793.499731][T12219] pte_alloc_one+0x1c/0x3d0 [ 793.499748][T12219] __do_fault+0x26c/0x440 [ 793.499762][T12219] do_fault+0x585/0x1830 [ 793.499775][T12219] ? __pfx_filemap_map_pages+0x10/0x10 [ 793.499791][T12219] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 793.499809][T12219] ? __pfx_do_fault+0x10/0x10 [ 793.499821][T12219] ? pgd_none+0x9f/0xe0 [ 793.499837][T12219] ? __pfx_pgd_none+0x10/0x10 [ 793.499852][T12219] ? lock_acquire+0x1d1/0x380 [ 793.499866][T12219] __handle_mm_fault+0x150b/0x2f60 [ 793.499885][T12219] ? lock_vma_under_rcu+0x11d/0x590 [ 793.499901][T12219] ? __pfx___handle_mm_fault+0x10/0x10 [ 793.499920][T12219] ? lock_vma_under_rcu+0x17c/0x590 [ 793.499948][T12219] handle_mm_fault+0x363/0xa20 [ 793.499967][T12219] do_user_addr_fault+0x59c/0x12f0 [ 793.499987][T12219] exc_page_fault+0x6f/0xd0 [ 793.500002][T12219] asm_exc_page_fault+0x26/0x30 [ 793.500014][T12219] RIP: 0033:0x7fe402072f32 [ 793.500026][T12219] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 f3 8a fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 793.500037][T12219] RSP: 002b:00007ffdad46ae60 EFLAGS: 00010202 [ 793.500048][T12219] RAX: 0000000000024008 RBX: 00007fe402f55720 RCX: 0000000000000000 [ 793.500055][T12219] RDX: 0000001b33600000 RSI: 0000000000000008 RDI: 00007fe402f55720 [ 793.500063][T12219] RBP: 00000000000003b8 R08: 00007fe402410000 R09: 00007fe402426038 [ 793.500071][T12219] R10: 0000000000000003 R11: 000000000000000d R12: ffffffff82616f27 [ 793.500078][T12219] R13: 00007fe402426038 R14: 000000000000037b R15: fffffffffffdc000 [ 793.500087][T12219] ? __might_fault+0xb7/0x140 [ 793.500110][T12219] [ 793.889925][T12219] memory: usage 8kB, limit 8kB, failcnt 21 [ 793.889941][T12219] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 793.889948][T12219] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 793.889955][T12219] Memory cgroup stats for /syz7/test: [ 793.890084][T12219] cache 0 [ 793.890090][T12219] rss 0 [ 793.890094][T12219] rss_huge 0 [ 793.890098][T12219] shmem 0 [ 793.890102][T12219] mapped_file 0 [ 793.890106][T12219] dirty 0 [ 793.890110][T12219] writeback 0 [ 793.890114][T12219] workingset_refault_anon 0 [ 793.890119][T12219] workingset_refault_file 0 [ 793.890123][T12219] swap 0 [ 793.890127][T12219] swapcached 0 [ 793.890131][T12219] pgpgin 0 [ 793.890135][T12219] pgpgout 0 [ 793.890140][T12219] pgfault 0 [ 793.890143][T12219] pgmajfault 0 [ 793.890148][T12219] inactive_anon 0 [ 793.890152][T12219] active_anon 0 [ 793.890156][T12219] inactive_file 0 [ 793.890161][T12219] active_file 0 [ 793.890165][T12219] unevictable 0 [ 793.890169][T12219] hierarchical_memory_limit 8192 [ 793.890174][T12219] hierarchical_memsw_limit 9223372036854771712 [ 793.890179][T12219] total_cache 0 [ 793.890183][T12219] total_rss 0 [ 793.890187][T12219] total_rss_huge 0 [ 793.890191][T12219] total_shmem 0 [ 793.890195][T12219] total_mapped_file 0 [ 793.890200][T12219] total_dirty 0 [ 793.890204][T12219] total_writeback 0 [ 793.890208][T12219] total_workingset_refault_anon 0 [ 793.890213][T12219] total_workingset_refault_file 0 [ 793.890217][T12219] total_swap 0 [ 793.890222][T12219] total_swapcached 0 [ 793.890226][T12219] total_pgpgin 0 [ 793.890230][T12219] total_pgpgout 0 [ 793.890234][T12219] total_pgfault 0 [ 793.890238][T12219] total_pgmajfault 0 [ 793.890243][T12219] total_inactive_anon 0 [ 793.890247][T12219] total_active_anon 0 [ 793.890251][T12219] total_inactive_file 0 [ 793.890256][T12219] total_active_file 0 [ 793.890260][T12219] total_unevictable 0 [ 793.890264][T12219] anon_cost 0 [ 793.890268][T12219] file_cost 0 [ 793.890273][T12219] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7/test,task_memcg=/syz7/test,task=syz.7.1656,pid=12219,uid=0 [ 793.893948][T12219] Memory cgroup out of memory: Killed process 12219 (syz.7.1656) total-vm:104300kB, anon-rss:1428kB, file-rss:23324kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 794.248056][T12230] FAULT_INJECTION: forcing a failure. [ 794.248056][T12230] name failslab, interval 1, probability 0, space 0, times 0 [ 794.248083][T12230] CPU: 0 UID: 0 PID: 12230 Comm: syz.5.1659 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.248102][T12230] Tainted: [L]=SOFTLOCKUP [ 794.248106][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 794.248115][T12230] Call Trace: [ 794.248120][T12230] [ 794.248126][T12230] dump_stack_lvl+0x100/0x190 [ 794.248150][T12230] should_fail_ex.cold+0x5/0xa [ 794.248169][T12230] should_failslab+0xc2/0x120 [ 794.248184][T12230] kmem_cache_alloc_noprof+0x92/0x6a0 [ 794.248198][T12230] ? sk_prot_alloc+0x60/0x2a0 [ 794.248218][T12230] sk_prot_alloc+0x60/0x2a0 [ 794.248235][T12230] sk_alloc+0x36/0xe80 [ 794.248249][T12230] unix_create1+0xa6/0x700 [ 794.248263][T12230] unix_stream_connect+0x36e/0x1a40 [ 794.248277][T12230] ? security_socket_post_create+0x85/0x270 [ 794.248301][T12230] p9_fd_create_unix+0x280/0x350 [ 794.248318][T12230] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 794.248340][T12230] ? lockdep_init_map_type+0x5c/0x250 [ 794.248356][T12230] p9_client_create+0x563/0xd40 [ 794.248374][T12230] ? __pfx_p9_client_create+0x10/0x10 [ 794.248395][T12230] ? lockdep_init_map_type+0x5c/0x250 [ 794.248409][T12230] ? __raw_spin_lock_init+0x3a/0x110 [ 794.248426][T12230] v9fs_session_init+0x3c/0xdd0 [ 794.248441][T12230] ? v9fs_get_tree+0x9c/0xb50 [ 794.248460][T12230] v9fs_get_tree+0xb8/0xb50 [ 794.248476][T12230] ? rcu_is_watching+0x13/0xc0 [ 794.248492][T12230] ? __pfx_v9fs_get_tree+0x10/0x10 [ 794.248511][T12230] ? bpf_lsm_capable+0x9/0x10 [ 794.248527][T12230] ? security_capable+0x80/0x260 [ 794.248545][T12230] vfs_get_tree+0x92/0x320 [ 794.248562][T12230] path_mount+0x7d0/0x24c0 [ 794.248588][T12230] ? __pfx_path_mount+0x10/0x10 [ 794.248607][T12230] ? lockdep_hardirqs_on+0x7d/0x110 [ 794.248625][T12230] ? putname+0xb1/0x110 [ 794.248639][T12230] ? kmem_cache_free+0x127/0x6c0 [ 794.248661][T12230] ? __x64_sys_mount+0x293/0x310 [ 794.248686][T12230] __x64_sys_mount+0x293/0x310 [ 794.248705][T12230] ? __pfx___x64_sys_mount+0x10/0x10 [ 794.248727][T12230] do_syscall_64+0x123/0x790 [ 794.248746][T12230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.248758][T12230] RIP: 0033:0x7f390a99e159 [ 794.248770][T12230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.248781][T12230] RSP: 002b:00007f390b88a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 794.248794][T12230] RAX: ffffffffffffffda RBX: 00007f390ac25fa0 RCX: 00007f390a99e159 [ 794.248802][T12230] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040 [ 794.248810][T12230] RBP: 00007f390aa3503b R08: 0000200000000440 R09: 0000000000000000 [ 794.248818][T12230] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000 [ 794.248825][T12230] R13: 00007f390ac26038 R14: 00007f390ac25fa0 R15: 00007ffd6345b0d8 [ 794.248842][T12230] [ 794.251722][T12230] 9pnet_fd: p9_fd_create_unix (12230): problem connecting socket: ./proc: -12 [ 794.637790][ T9] usb 4-1: USB disconnect, device number 71 [ 795.491530][T12230] syz.5.1659 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=2, oom_score_adj=1000 [ 795.491566][T12230] CPU: 0 UID: 0 PID: 12230 Comm: syz.5.1659 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.491585][T12230] Tainted: [L]=SOFTLOCKUP [ 795.491590][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 795.491599][T12230] Call Trace: [ 795.491605][T12230] [ 795.491611][T12230] dump_stack_lvl+0x100/0x190 [ 795.491638][T12230] dump_header+0xfb/0x606 [ 795.491654][T12230] oom_kill_process.cold+0xd/0x380 [ 795.491669][T12230] out_of_memory+0x340/0x14f0 [ 795.491690][T12230] ? __pfx_out_of_memory+0x10/0x10 [ 795.491709][T12230] mem_cgroup_out_of_memory+0xc6/0x130 [ 795.491723][T12230] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 795.491735][T12230] ? find_held_lock+0x2b/0x80 [ 795.491754][T12230] ? do_raw_spin_unlock+0x145/0x1e0 [ 795.491769][T12230] ? _raw_spin_unlock+0x28/0x50 [ 795.491784][T12230] try_charge_memcg+0x783/0xf60 [ 795.491805][T12230] ? __pfx_try_charge_memcg+0x10/0x10 [ 795.491821][T12230] ? find_held_lock+0x2b/0x80 [ 795.491836][T12230] ? rcu_read_unlock+0x17/0x60 [ 795.491852][T12230] ? rcu_read_unlock+0x17/0x60 [ 795.491874][T12230] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 795.491897][T12230] ? kasan_save_track+0x14/0x30 [ 795.491912][T12230] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 795.491925][T12230] ? copy_net_ns+0xe8/0x7a0 [ 795.491944][T12230] copy_net_ns+0xe8/0x7a0 [ 795.491959][T12230] ? copy_cgroup_ns+0x71/0x970 [ 795.491977][T12230] create_new_namespaces+0x3ea/0xac0 [ 795.491995][T12230] unshare_nsproxy_namespaces+0xf2/0x220 [ 795.492010][T12230] ksys_unshare+0x4a2/0xa70 [ 795.492025][T12230] ? __pfx_ksys_unshare+0x10/0x10 [ 795.492045][T12230] __x64_sys_unshare+0x31/0x40 [ 795.492059][T12230] do_syscall_64+0x123/0x790 [ 795.492076][T12230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.492088][T12230] RIP: 0033:0x7f390a99e159 [ 795.492100][T12230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.492111][T12230] RSP: 002b:00007f390b88a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 795.492124][T12230] RAX: ffffffffffffffda RBX: 00007f390ac25fa0 RCX: 00007f390a99e159 [ 795.492133][T12230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000000 [ 795.492141][T12230] RBP: 00007f390aa3503b R08: 0000000000000000 R09: 0000000000000000 [ 795.492148][T12230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.492156][T12230] R13: 00007f390ac26038 R14: 00007f390ac25fa0 R15: 00007ffd6345b0d8 [ 795.492174][T12230] [ 795.832809][T12230] memory: usage 8kB, limit 8kB, failcnt 79 [ 795.832824][T12230] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 795.832833][T12230] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 795.832840][T12230] Memory cgroup stats for /syz5/test: [ 795.832916][T12230] cache 0 [ 795.832921][T12230] rss 0 [ 795.832925][T12230] rss_huge 0 [ 795.832929][T12230] shmem 0 [ 795.832933][T12230] mapped_file 0 [ 795.832937][T12230] dirty 0 [ 795.832941][T12230] writeback 0 [ 795.832945][T12230] workingset_refault_anon 0 [ 795.832950][T12230] workingset_refault_file 0 [ 795.832955][T12230] swap 0 [ 795.832959][T12230] swapcached 4096 [ 795.832963][T12230] pgpgin 1 [ 795.832967][T12230] pgpgout 1 [ 795.832971][T12230] pgfault 9 [ 795.832975][T12230] pgmajfault 0 [ 795.832980][T12230] inactive_anon 0 [ 795.832984][T12230] active_anon 0 [ 795.832989][T12230] inactive_file 0 [ 795.832994][T12230] active_file 0 [ 795.832998][T12230] unevictable 0 [ 795.833003][T12230] hierarchical_memory_limit 8192 [ 795.833008][T12230] hierarchical_memsw_limit 9223372036854771712 [ 795.833014][T12230] total_cache 0 [ 795.833020][T12230] total_rss 0 [ 795.833024][T12230] total_rss_huge 0 [ 795.833029][T12230] total_shmem 0 [ 795.833033][T12230] total_mapped_file 0 [ 795.833037][T12230] total_dirty 0 [ 795.833042][T12230] total_writeback 0 [ 795.833046][T12230] total_workingset_refault_anon 0 [ 795.833051][T12230] total_workingset_refault_file 0 [ 795.833056][T12230] total_swap 0 [ 795.833060][T12230] total_swapcached 4096 [ 795.833064][T12230] total_pgpgin 1 [ 795.833069][T12230] total_pgpgout 1 [ 795.833073][T12230] total_pgfault 9 [ 795.833077][T12230] total_pgmajfault 0 [ 795.833082][T12230] total_inactive_anon 0 [ 795.833086][T12230] total_active_anon 0 [ 795.833091][T12230] total_inactive_file 0 [ 795.833095][T12230] total_active_file 0 [ 795.833099][T12230] total_unevictable 0 [ 795.833104][T12230] anon_cost 0 [ 795.833108][T12230] file_cost 0 [ 795.833113][T12230] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.1659,pid=12229,uid=0 [ 795.833174][T12230] Memory cgroup out of memory: Killed process 12229 (syz.5.1659) total-vm:104432kB, anon-rss:1432kB, file-rss:23312kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 796.329365][T12238] loop8: detected capacity change from 0 to 7 [ 796.343344][T12238] Dev loop8: unable to read RDB block 7 [ 796.343373][T12238] loop8: unable to read partition table [ 796.343488][T12238] loop8: partition table beyond EOD, truncated [ 796.343499][T12238] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 798.362691][ T30] audit: type=1400 audit(1789439752.971:2418): avc: denied { name_bind } for pid=12262 comm="syz.5.1668" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 798.530332][ T30] audit: type=1400 audit(1789439753.141:2419): avc: denied { unmount } for pid=7432 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 798.603269][T12268] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 799.703099][T12277] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1672'. [ 799.703132][T12277] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1672'. [ 802.592061][T12293] xt_hashlimit: max too large, truncated to 1048576 [ 802.592077][T12293] xt_hashlimit: overflow, try lower: 18446744073709551612/8 [ 803.269333][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.368666][ T30] audit: type=1400 audit(1789439757.981:2420): avc: denied { write } for pid=12294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.508917][ T30] audit: type=1400 audit(1789439758.121:2421): avc: denied { write } for pid=12326 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.544093][ T9] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 803.593308][ T5701] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 803.702699][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 803.705866][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 803.712158][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.712173][ T9] usb 6-1: Product: syz [ 803.712182][ T9] usb 6-1: Manufacturer: syz [ 803.712191][ T9] usb 6-1: SerialNumber: syz [ 803.767533][ T5701] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 803.786124][ T5701] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 803.786142][ T5701] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 803.787762][ T5701] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.787777][ T5701] usb 8-1: Product: syz [ 803.787785][ T5701] usb 8-1: Manufacturer: syz [ 803.787794][ T5701] usb 8-1: SerialNumber: syz [ 803.789001][ T9] usb 6-1: config 0 descriptor?? [ 803.838316][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 803.920874][T12334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 804.515826][ T9] gspca_sonixj: reg_r err -110 [ 804.515897][ T9] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 804.647263][T12342] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1682'. [ 806.114908][ T30] audit: type=1400 audit(1789439760.731:2422): avc: denied { write } for pid=12332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.569551][T12366] netlink: 896 bytes leftover after parsing attributes in process `syz.3.1691'. [ 806.607239][ T30] audit: type=1400 audit(1789439761.221:2423): avc: denied { write } for pid=12367 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.867783][ T30] audit: type=1400 audit(1789439761.481:2424): avc: denied { connect } for pid=12370 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 807.021334][T12375] file system registered [ 807.021485][ T30] audit: type=1400 audit(1789439761.631:2425): avc: denied { write } for pid=12374 comm="syz.0.1693" name="functions" dev="configfs" ino=18194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 807.136732][ T30] audit: type=1400 audit(1789439761.751:2426): avc: denied { mount } for pid=12374 comm="syz.0.1693" name="/" dev="functionfs" ino=38498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 808.217463][ T30] audit: type=1400 audit(1789439762.831:2427): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 808.246706][ T5603] ffs_data_put(): freeing [ 808.686714][ T5701] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 809.651604][ T5701] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 809.683993][ T5701] usb 8-1: USB disconnect, device number 4 [ 809.848465][ T8235] udevd[8235]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 809.919951][ T30] audit: type=1400 audit(1789439764.531:2428): avc: denied { write } for pid=12376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.006371][ T62] IPVS: starting estimator thread 0... [ 810.031856][ T5701] usb 6-1: USB disconnect, device number 52 [ 810.045398][T12404] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 810.103069][T12403] IPVS: using max 65 ests per chain, 156000 per kthread [ 810.264751][ T30] audit: type=1400 audit(1789439764.881:2429): avc: denied { write } for pid=12407 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.437934][T12418] FAULT_INJECTION: forcing a failure. [ 810.437934][T12418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.437956][T12418] CPU: 0 UID: 0 PID: 12418 Comm: syz.5.1704 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.437972][T12418] Tainted: [L]=SOFTLOCKUP [ 810.437978][T12418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 810.437984][T12418] Call Trace: [ 810.437989][T12418] [ 810.437994][T12418] dump_stack_lvl+0x100/0x190 [ 810.438016][T12418] should_fail_ex.cold+0x5/0xa [ 810.438033][T12418] _copy_from_user+0x2e/0xd0 [ 810.438047][T12418] ucma_write+0x128/0x330 [ 810.438061][T12418] ? __pfx_ucma_write+0x10/0x10 [ 810.438073][T12418] ? bpf_lsm_file_permission+0x9/0x10 [ 810.438089][T12418] ? security_file_permission+0x76/0x210 [ 810.438103][T12418] ? rw_verify_area+0xce/0x6d0 [ 810.438122][T12418] vfs_write+0x2aa/0x1050 [ 810.438134][T12418] ? __pfx_ucma_write+0x10/0x10 [ 810.438146][T12418] ? lock_acquire+0x1d1/0x380 [ 810.438158][T12418] ? __fget_files+0x34/0x3d0 [ 810.438173][T12418] ? __pfx_vfs_write+0x10/0x10 [ 810.438186][T12418] ? find_held_lock+0x2b/0x80 [ 810.438201][T12418] ? __fget_files+0x215/0x3d0 [ 810.438215][T12418] ? __fget_files+0x215/0x3d0 [ 810.438231][T12418] ? __fget_files+0x21f/0x3d0 [ 810.438249][T12418] ksys_write+0x1f8/0x250 [ 810.438260][T12418] ? __pfx_ksys_write+0x10/0x10 [ 810.438277][T12418] do_syscall_64+0x123/0x790 [ 810.438294][T12418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.438306][T12418] RIP: 0033:0x7f390a99e159 [ 810.438317][T12418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.438328][T12418] RSP: 002b:00007f390b88a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 810.438340][T12418] RAX: ffffffffffffffda RBX: 00007f390ac25fa0 RCX: 00007f390a99e159 [ 810.438348][T12418] RDX: 0000000000000018 RSI: 0000200000000240 RDI: 0000000000000004 [ 810.438356][T12418] RBP: 00007f390b88a090 R08: 0000000000000000 R09: 0000000000000000 [ 810.438363][T12418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.438370][T12418] R13: 00007f390ac26038 R14: 00007f390ac25fa0 R15: 00007ffd6345b0d8 [ 810.438386][T12418] [ 811.713205][T12417] xt_hashlimit: max too large, truncated to 1048576 [ 811.713220][T12417] xt_hashlimit: overflow, try lower: 18446744073709551612/8 [ 813.518199][ T5614] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 813.548158][T12455] xt_hashlimit: max too large, truncated to 1048576 [ 813.548186][T12455] xt_hashlimit: overflow, try lower: 18446744073709551612/8 [ 813.586010][ T30] audit: type=1400 audit(1789439768.201:2430): avc: denied { write } for pid=12425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.665488][ T5614] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 813.668663][ T5614] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.668680][ T5614] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 813.671476][ T5614] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.671506][ T5614] usb 8-1: Product: syz [ 813.671515][ T5614] usb 8-1: Manufacturer: syz [ 813.671524][ T5614] usb 8-1: SerialNumber: syz [ 814.024818][T12466] netlink: 896 bytes leftover after parsing attributes in process `syz.2.1715'. [ 814.130482][ T30] audit: type=1400 audit(1789439768.741:2431): avc: denied { write } for pid=12465 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.249580][T12468] SELinux: policydb version 1633771795 does not match my version range 15-35 [ 814.249616][T12468] SELinux: failed to load policy [ 815.669263][T12485] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1718'. [ 815.670670][T12474] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1710'. [ 815.716296][ T30] audit: type=1400 audit(1789439770.331:2432): avc: denied { write } for pid=12481 comm="syz.2.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 817.162004][T12499] FAULT_INJECTION: forcing a failure. [ 817.162004][T12499] name failslab, interval 1, probability 0, space 0, times 0 [ 817.162036][T12499] CPU: 0 UID: 0 PID: 12499 Comm: syz.2.1724 Tainted: G L syzkaller #0 PREEMPT(full) [ 817.162054][T12499] Tainted: [L]=SOFTLOCKUP [ 817.162060][T12499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 817.162068][T12499] Call Trace: [ 817.162073][T12499] [ 817.162079][T12499] dump_stack_lvl+0x100/0x190 [ 817.162101][T12499] should_fail_ex.cold+0x5/0xa [ 817.162119][T12499] should_failslab+0xc2/0x120 [ 817.162135][T12499] __kmalloc_noprof+0xfc/0x840 [ 817.162147][T12499] ? lsm_blob_alloc+0x68/0x90 [ 817.162167][T12499] lsm_blob_alloc+0x68/0x90 [ 817.162182][T12499] security_sk_alloc+0x2d/0x290 [ 817.162194][T12499] sk_prot_alloc+0x1d1/0x2a0 [ 817.162212][T12499] sk_alloc+0x36/0xe80 [ 817.162226][T12499] unix_create1+0xa6/0x700 [ 817.162240][T12499] unix_stream_connect+0x36e/0x1a40 [ 817.162255][T12499] ? security_socket_post_create+0x85/0x270 [ 817.162280][T12499] p9_fd_create_unix+0x280/0x350 [ 817.162296][T12499] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 817.162319][T12499] ? lockdep_init_map_type+0x5c/0x250 [ 817.162335][T12499] p9_client_create+0x563/0xd40 [ 817.162353][T12499] ? __pfx_p9_client_create+0x10/0x10 [ 817.162374][T12499] ? lockdep_init_map_type+0x5c/0x250 [ 817.162387][T12499] ? __raw_spin_lock_init+0x3a/0x110 [ 817.162404][T12499] v9fs_session_init+0x3c/0xdd0 [ 817.162419][T12499] ? v9fs_get_tree+0x9c/0xb50 [ 817.162438][T12499] v9fs_get_tree+0xb8/0xb50 [ 817.162454][T12499] ? rcu_is_watching+0x13/0xc0 [ 817.162469][T12499] ? __pfx_v9fs_get_tree+0x10/0x10 [ 817.162488][T12499] ? bpf_lsm_capable+0x9/0x10 [ 817.162504][T12499] ? security_capable+0x80/0x260 [ 817.162521][T12499] vfs_get_tree+0x92/0x320 [ 817.162538][T12499] path_mount+0x7d0/0x24c0 [ 817.162557][T12499] ? __pfx_path_mount+0x10/0x10 [ 817.162572][T12499] ? lockdep_hardirqs_on+0x7d/0x110 [ 817.162589][T12499] ? putname+0xb1/0x110 [ 817.162603][T12499] ? kmem_cache_free+0x127/0x6c0 [ 817.162624][T12499] ? __x64_sys_mount+0x293/0x310 [ 817.162640][T12499] __x64_sys_mount+0x293/0x310 [ 817.162656][T12499] ? __pfx___x64_sys_mount+0x10/0x10 [ 817.162677][T12499] do_syscall_64+0x123/0x790 [ 817.162694][T12499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.162706][T12499] RIP: 0033:0x7fdbfff9e159 [ 817.162717][T12499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.162728][T12499] RSP: 002b:00007fdc00f4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 817.162740][T12499] RAX: ffffffffffffffda RBX: 00007fdc00225fa0 RCX: 00007fdbfff9e159 [ 817.162748][T12499] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040 [ 817.162755][T12499] RBP: 00007fdc0003503b R08: 0000200000000440 R09: 0000000000000000 [ 817.162763][T12499] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000 [ 817.162770][T12499] R13: 00007fdc00226038 R14: 00007fdc00225fa0 R15: 00007ffcccdc1ac8 [ 817.162787][T12499] [ 817.176125][T12499] 9pnet_fd: p9_fd_create_unix (12499): problem connecting socket: ./proc: -12 [ 817.296366][ T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 817.520922][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 817.521356][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 817.542579][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.542596][ T9] usb 6-1: Product: syz [ 817.542605][ T9] usb 6-1: Manufacturer: syz [ 817.542614][ T9] usb 6-1: SerialNumber: syz [ 817.548467][ T9] usb 6-1: config 0 descriptor?? [ 817.592107][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 817.620002][T12497] syz.2.1724 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 817.620029][T12497] CPU: 0 UID: 0 PID: 12497 Comm: syz.2.1724 Tainted: G L syzkaller #0 PREEMPT(full) [ 817.620046][T12497] Tainted: [L]=SOFTLOCKUP [ 817.620050][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 817.620058][T12497] Call Trace: [ 817.620064][T12497] [ 817.620070][T12497] dump_stack_lvl+0x100/0x190 [ 817.620092][T12497] dump_header+0xfb/0x606 [ 817.620107][T12497] oom_kill_process.cold+0xd/0x380 [ 817.620122][T12497] out_of_memory+0x340/0x14f0 [ 817.620141][T12497] ? __pfx_out_of_memory+0x10/0x10 [ 817.620170][T12497] mem_cgroup_out_of_memory+0xc6/0x130 [ 817.620184][T12497] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 817.620196][T12497] ? find_held_lock+0x2b/0x80 [ 817.620216][T12497] ? do_raw_spin_unlock+0x145/0x1e0 [ 817.620232][T12497] ? _raw_spin_unlock+0x28/0x50 [ 817.620248][T12497] try_charge_memcg+0x783/0xf60 [ 817.620269][T12497] ? __pfx_try_charge_memcg+0x10/0x10 [ 817.620285][T12497] ? find_held_lock+0x2b/0x80 [ 817.620300][T12497] ? rcu_read_unlock+0x17/0x60 [ 817.620317][T12497] ? rcu_read_unlock+0x17/0x60 [ 817.620338][T12497] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 817.620361][T12497] ? kasan_save_track+0x14/0x30 [ 817.620376][T12497] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 817.620389][T12497] ? vm_area_dup+0x27/0x9d0 [ 817.620408][T12497] vm_area_dup+0x27/0x9d0 [ 817.620424][T12497] __split_vma+0x19c/0x1de0 [ 817.620445][T12497] ? __pfx___split_vma+0x10/0x10 [ 817.620470][T12497] vma_modify+0x1ef4/0x29b0 [ 817.620491][T12497] ? validate_mm+0x1b0/0x4e0 [ 817.620512][T12497] ? __pfx_vma_modify+0x10/0x10 [ 817.620539][T12497] vma_modify_flags+0x2c3/0x460 [ 817.620557][T12497] ? __pfx_vma_modify_flags+0x10/0x10 [ 817.620582][T12497] ? rcu_is_watching+0x13/0xc0 [ 817.620596][T12497] ? percpu_counter_add_batch+0xb9/0x230 [ 817.620616][T12497] mprotect_fixup+0x27a/0xe00 [ 817.620636][T12497] ? __pfx_mprotect_fixup+0x10/0x10 [ 817.620668][T12497] do_mprotect_pkey+0xa51/0xdd0 [ 817.620690][T12497] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 817.620706][T12497] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 817.620724][T12497] ? ktime_get+0x22c/0x320 [ 817.620751][T12497] __x64_sys_mprotect+0x78/0xc0 [ 817.620766][T12497] ? lockdep_hardirqs_on+0x7d/0x110 [ 817.620782][T12497] do_syscall_64+0x123/0x790 [ 817.620799][T12497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.620812][T12497] RIP: 0033:0x7fdbfff9df57 [ 817.620823][T12497] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.620834][T12497] RSP: 002b:00007ffcccdc1a68 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 817.620846][T12497] RAX: ffffffffffffffda RBX: 00007fdc00f2e6c0 RCX: 00007fdbfff9df57 [ 817.620854][T12497] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fdc00f0f000 [ 817.620862][T12497] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 817.620869][T12497] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffcccdc1bc0 [ 817.620876][T12497] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 817.620893][T12497] [ 818.007129][T12497] memory: usage 8kB, limit 8kB, failcnt 114 [ 818.007144][T12497] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 818.007152][T12497] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 818.007159][T12497] Memory cgroup stats for /syz2/test: [ 818.007269][T12497] cache 0 [ 818.007274][T12497] rss 0 [ 818.007278][T12497] rss_huge 0 [ 818.007283][T12497] shmem 0 [ 818.007287][T12497] mapped_file 0 [ 818.007291][T12497] dirty 0 [ 818.007295][T12497] writeback 0 [ 818.007299][T12497] workingset_refault_anon 0 [ 818.007304][T12497] workingset_refault_file 0 [ 818.007309][T12497] swap 0 [ 818.007312][T12497] swapcached 0 [ 818.007317][T12497] pgpgin 0 [ 818.007321][T12497] pgpgout 0 [ 818.007325][T12497] pgfault 1 [ 818.007329][T12497] pgmajfault 0 [ 818.007348][T12497] inactive_anon 0 [ 818.007353][T12497] active_anon 0 [ 818.007357][T12497] inactive_file 0 [ 818.007361][T12497] active_file 0 [ 818.007366][T12497] unevictable 0 [ 818.007370][T12497] hierarchical_memory_limit 8192 [ 818.007375][T12497] hierarchical_memsw_limit 9223372036854771712 [ 818.007380][T12497] total_cache 0 [ 818.007384][T12497] total_rss 0 [ 818.007388][T12497] total_rss_huge 0 [ 818.007393][T12497] total_shmem 0 [ 818.007397][T12497] total_mapped_file 0 [ 818.007401][T12497] total_dirty 0 [ 818.007405][T12497] total_writeback 0 [ 818.007410][T12497] total_workingset_refault_anon 0 [ 818.007415][T12497] total_workingset_refault_file 0 [ 818.007420][T12497] total_swap 0 [ 818.007424][T12497] total_swapcached 0 [ 818.007428][T12497] total_pgpgin 0 [ 818.007432][T12497] total_pgpgout 0 [ 818.007437][T12497] total_pgfault 1 [ 818.007441][T12497] total_pgmajfault 0 [ 818.007445][T12497] total_inactive_anon 0 [ 818.007450][T12497] total_active_anon 0 [ 818.007454][T12497] total_inactive_file 0 [ 818.007458][T12497] total_active_file 0 [ 818.007463][T12497] total_unevictable 0 [ 818.007481][T12497] anon_cost 0 [ 818.007486][T12497] file_cost 0 [ 818.007491][T12497] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1724,pid=12497,uid=0 [ 818.008548][T12497] Memory cgroup out of memory: Killed process 12497 (syz.2.1724) total-vm:102384kB, anon-rss:1424kB, file-rss:22820kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 818.513098][ T9] gspca_sonixj: reg_r err -110 [ 818.513150][ T9] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 819.418737][ T5614] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 819.569727][T12502] xt_hashlimit: max too large, truncated to 1048576 [ 819.569741][T12502] xt_hashlimit: overflow, try lower: 18446744073709551612/8 [ 819.749938][ T5614] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 820.044520][ T8235] udevd[8235]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 820.370419][ T5731] usb 8-1: USB disconnect, device number 5 [ 820.452637][ T10] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 820.602869][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 820.603291][ T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 820.604084][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.607710][ T10] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 820.607724][ T10] usb 3-1: Product: syz [ 820.612271][ T10] usb 3-1: config 0 descriptor?? [ 821.834027][T12522] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1729'. [ 821.842059][T12513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.842303][T12513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.954046][ T5731] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 822.105887][ T5731] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 822.137839][ T5731] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 822.137871][ T5731] usb 1-1: config 1 has no interface number 0 [ 822.685717][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.685737][ T5731] usb 1-1: Product: syz [ 822.685747][ T5731] usb 1-1: Manufacturer: syz [ 822.685755][ T5731] usb 1-1: SerialNumber: syz [ 823.218620][ T5731] usb 1-1: 3:1 : does not exist [ 823.218637][ T5731] usb 1-1: 3:2 : does not exist [ 823.220587][ T10] hid_parser_main: 14 callbacks suppressed [ 823.220600][ T10] corsair-cpro 0003:1B1C:1D00.0014: unknown main item tag 0x0 [ 823.220617][ T10] corsair-cpro 0003:1B1C:1D00.0014: unknown main item tag 0x0 [ 823.220632][ T10] corsair-cpro 0003:1B1C:1D00.0014: unknown main item tag 0x0 [ 823.220647][ T10] corsair-cpro 0003:1B1C:1D00.0014: unknown main item tag 0x0 [ 823.220663][ T10] corsair-cpro 0003:1B1C:1D00.0014: unknown main item tag 0x0 [ 823.220678][ T10] corsair-cpro 0003:1B1C:1D00.0014: unknown main item tag 0x0 [ 823.307371][ T10] corsair-cpro 0003:1B1C:1D00.0014: hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input0 [ 823.406983][T12529] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1728'. [ 823.407008][T12529] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1728'. [ 823.435687][ T10] corsair-cpro 0003:1B1C:1D00.0014: probe with driver corsair-cpro failed with error -38 [ 823.708907][T12533] FAULT_INJECTION: forcing a failure. [ 823.708907][T12533] name failslab, interval 1, probability 0, space 0, times 0 [ 823.708932][T12533] CPU: 0 UID: 0 PID: 12533 Comm: syz.3.1732 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.708949][T12533] Tainted: [L]=SOFTLOCKUP [ 823.708953][T12533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 823.708961][T12533] Call Trace: [ 823.708966][T12533] [ 823.708971][T12533] dump_stack_lvl+0x100/0x190 [ 823.708993][T12533] should_fail_ex.cold+0x5/0xa [ 823.709010][T12533] should_failslab+0xc2/0x120 [ 823.709025][T12533] __kmalloc_noprof+0xfc/0x840 [ 823.709037][T12533] ? __lock_acquire+0x5c0/0x1f40 [ 823.709049][T12533] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 823.709067][T12533] vb2_core_allocated_buffers_storage+0x184/0x220 [ 823.709081][T12533] vb2_core_create_bufs+0x317/0xa30 [ 823.709095][T12533] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 823.709112][T12533] ? __mutex_lock+0x26c/0x1bd0 [ 823.709131][T12533] vb2_create_bufs+0x40c/0x830 [ 823.709152][T12533] ? __pfx_vb2_create_bufs+0x10/0x10 [ 823.709170][T12533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 823.709184][T12533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 823.709199][T12533] v4l_create_bufs+0x17d/0x270 [ 823.709216][T12533] __video_do_ioctl+0xb2a/0xdf0 [ 823.709234][T12533] ? __might_fault+0xc5/0x140 [ 823.709251][T12533] ? __pfx___video_do_ioctl+0x10/0x10 [ 823.709273][T12533] video_usercopy+0x47a/0x1730 [ 823.709289][T12533] ? __pfx___video_do_ioctl+0x10/0x10 [ 823.709307][T12533] ? __pfx_video_usercopy+0x10/0x10 [ 823.709333][T12533] v4l2_ioctl+0x1bd/0x250 [ 823.709349][T12533] ? __pfx_v4l2_ioctl+0x10/0x10 [ 823.709367][T12533] __x64_sys_ioctl+0x18e/0x210 [ 823.709381][T12533] do_syscall_64+0x123/0x790 [ 823.709398][T12533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.709411][T12533] RIP: 0033:0x7f008cb9e159 [ 823.709421][T12533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.709431][T12533] RSP: 002b:00007f008adf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 823.709443][T12533] RAX: ffffffffffffffda RBX: 00007f008ce25fa0 RCX: 00007f008cb9e159 [ 823.709451][T12533] RDX: 0000200000000480 RSI: 00000000c100565c RDI: 0000000000000003 [ 823.709459][T12533] RBP: 00007f008adf6090 R08: 0000000000000000 R09: 0000000000000000 [ 823.709466][T12533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.709473][T12533] R13: 00007f008ce26038 R14: 00007f008ce25fa0 R15: 00007fff928f0118 [ 823.709489][T12533] [ 824.033546][ T30] audit: type=1400 audit(1789439778.641:2433): avc: denied { setattr } for pid=12510 comm="syz.2.1728" name="NETLINK" dev="sockfs" ino=38898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 824.125266][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1728'. [ 825.037973][ T10] usb 6-1: USB disconnect, device number 53 [ 825.110350][ T5731] usb 3-1: USB disconnect, device number 73 [ 825.642914][T12549] FAULT_INJECTION: forcing a failure. [ 825.642914][T12549] name failslab, interval 1, probability 0, space 0, times 0 [ 825.642940][T12549] CPU: 0 UID: 0 PID: 12549 Comm: syz.7.1737 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.642958][T12549] Tainted: [L]=SOFTLOCKUP [ 825.642963][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 825.642971][T12549] Call Trace: [ 825.642976][T12549] [ 825.642984][T12549] dump_stack_lvl+0x100/0x190 [ 825.643007][T12549] should_fail_ex.cold+0x5/0xa [ 825.643026][T12549] should_failslab+0xc2/0x120 [ 825.643040][T12549] __kmalloc_noprof+0xfc/0x840 [ 825.643053][T12549] ? lsm_blob_alloc+0x68/0x90 [ 825.643071][T12549] lsm_blob_alloc+0x68/0x90 [ 825.643086][T12549] security_sk_alloc+0x2d/0x290 [ 825.643098][T12549] sk_prot_alloc+0x1d1/0x2a0 [ 825.643116][T12549] sk_alloc+0x36/0xe80 [ 825.643129][T12549] unix_create1+0xa6/0x700 [ 825.643143][T12549] unix_stream_connect+0x36e/0x1a40 [ 825.643158][T12549] ? security_socket_post_create+0x85/0x270 [ 825.643183][T12549] p9_fd_create_unix+0x280/0x350 [ 825.643198][T12549] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 825.643220][T12549] ? lockdep_init_map_type+0x5c/0x250 [ 825.643236][T12549] p9_client_create+0x563/0xd40 [ 825.643254][T12549] ? __pfx_p9_client_create+0x10/0x10 [ 825.643275][T12549] ? lockdep_init_map_type+0x5c/0x250 [ 825.643288][T12549] ? __raw_spin_lock_init+0x3a/0x110 [ 825.643305][T12549] v9fs_session_init+0x3c/0xdd0 [ 825.643321][T12549] ? v9fs_get_tree+0x9c/0xb50 [ 825.643340][T12549] v9fs_get_tree+0xb8/0xb50 [ 825.643356][T12549] ? rcu_is_watching+0x13/0xc0 [ 825.643371][T12549] ? __pfx_v9fs_get_tree+0x10/0x10 [ 825.643389][T12549] ? bpf_lsm_capable+0x9/0x10 [ 825.643405][T12549] ? security_capable+0x80/0x260 [ 825.643423][T12549] vfs_get_tree+0x92/0x320 [ 825.643440][T12549] path_mount+0x7d0/0x24c0 [ 825.643467][T12549] ? __pfx_path_mount+0x10/0x10 [ 825.643489][T12549] ? lockdep_hardirqs_on+0x7d/0x110 [ 825.643508][T12549] ? putname+0xb1/0x110 [ 825.643523][T12549] ? kmem_cache_free+0x127/0x6c0 [ 825.643545][T12549] ? __x64_sys_mount+0x293/0x310 [ 825.643561][T12549] __x64_sys_mount+0x293/0x310 [ 825.643577][T12549] ? __pfx___x64_sys_mount+0x10/0x10 [ 825.643598][T12549] do_syscall_64+0x123/0x790 [ 825.643615][T12549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.643627][T12549] RIP: 0033:0x7fe40219e159 [ 825.643639][T12549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.643650][T12549] RSP: 002b:00007fe403083028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 825.643663][T12549] RAX: ffffffffffffffda RBX: 00007fe402425fa0 RCX: 00007fe40219e159 [ 825.643673][T12549] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040 [ 825.643681][T12549] RBP: 00007fe40223503b R08: 0000200000000440 R09: 0000000000000000 [ 825.643688][T12549] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000 [ 825.643695][T12549] R13: 00007fe402426038 R14: 00007fe402425fa0 R15: 00007ffdad46ae08 [ 825.643711][T12549] [ 825.643791][T12549] 9pnet_fd: p9_fd_create_unix (12549): problem connecting socket: ./proc: -12 [ 826.104711][T12549] syz.7.1737 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 826.104739][T12549] CPU: 0 UID: 0 PID: 12549 Comm: syz.7.1737 Tainted: G L syzkaller #0 PREEMPT(full) [ 826.104757][T12549] Tainted: [L]=SOFTLOCKUP [ 826.104762][T12549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 826.104771][T12549] Call Trace: [ 826.104776][T12549] [ 826.104781][T12549] dump_stack_lvl+0x100/0x190 [ 826.104804][T12549] dump_header+0xfb/0x606 [ 826.104820][T12549] oom_kill_process.cold+0xd/0x380 [ 826.104835][T12549] out_of_memory+0x340/0x14f0 [ 826.104854][T12549] ? __pfx_out_of_memory+0x10/0x10 [ 826.104874][T12549] mem_cgroup_out_of_memory+0xc6/0x130 [ 826.104887][T12549] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 826.104900][T12549] ? find_held_lock+0x2b/0x80 [ 826.104919][T12549] ? do_raw_spin_unlock+0x145/0x1e0 [ 826.104934][T12549] ? _raw_spin_unlock+0x28/0x50 [ 826.104949][T12549] try_charge_memcg+0x783/0xf60 [ 826.104970][T12549] ? __pfx_try_charge_memcg+0x10/0x10 [ 826.104986][T12549] ? find_held_lock+0x2b/0x80 [ 826.105001][T12549] ? rcu_read_unlock+0x17/0x60 [ 826.105018][T12549] ? rcu_read_unlock+0x17/0x60 [ 826.105041][T12549] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 826.105064][T12549] ? kasan_unpoison+0x27/0x60 [ 826.105078][T12549] __kmalloc_cache_noprof+0x52a/0x6d0 [ 826.105095][T12549] ? iommufd_fops_open+0x45/0x330 [ 826.105113][T12549] iommufd_fops_open+0x45/0x330 [ 826.105126][T12549] ? __pfx_iommufd_fops_open+0x10/0x10 [ 826.105140][T12549] misc_open+0x26d/0x450 [ 826.105152][T12549] ? __pfx_misc_open+0x10/0x10 [ 826.105164][T12549] chrdev_open+0x234/0x6a0 [ 826.105180][T12549] ? __pfx_chrdev_open+0x10/0x10 [ 826.105194][T12549] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 826.105215][T12549] do_dentry_open+0x6ab/0x14d0 [ 826.105227][T12549] ? __pfx_chrdev_open+0x10/0x10 [ 826.105245][T12549] vfs_open+0x82/0x3f0 [ 826.105262][T12549] path_openat+0x19fa/0x2440 [ 826.105280][T12549] ? __pfx_path_openat+0x10/0x10 [ 826.105299][T12549] do_file_open+0x20e/0x430 [ 826.105314][T12549] ? __pfx_do_file_open+0x10/0x10 [ 826.105341][T12549] ? _raw_spin_unlock+0x28/0x50 [ 826.105354][T12549] ? alloc_fd+0x471/0x7a0 [ 826.105373][T12549] do_sys_openat2+0x10f/0x1e0 [ 826.105389][T12549] ? __pfx_do_sys_openat2+0x10/0x10 [ 826.105412][T12549] __x64_sys_openat+0x12d/0x210 [ 826.105428][T12549] ? __pfx___x64_sys_openat+0x10/0x10 [ 826.105450][T12549] do_syscall_64+0x123/0x790 [ 826.105467][T12549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.105480][T12549] RIP: 0033:0x7fe40219e159 [ 826.105499][T12549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.105512][T12549] RSP: 002b:00007fe403083028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 826.105525][T12549] RAX: ffffffffffffffda RBX: 00007fe402425fa0 RCX: 00007fe40219e159 [ 826.105537][T12549] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 826.105545][T12549] RBP: 00007fe40223503b R08: 0000000000000000 R09: 0000000000000000 [ 826.105552][T12549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.105559][T12549] R13: 00007fe402426038 R14: 00007fe402425fa0 R15: 00007ffdad46ae08 [ 826.105575][T12549] [ 826.105581][T12549] memory: usage 8kB, limit 8kB, failcnt 59 [ 826.105588][T12549] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 826.105596][T12549] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 826.105604][T12549] Memory cgroup stats for /syz7/test: [ 826.105676][T12549] cache 0 [ 826.105682][T12549] rss 0 [ 826.202332][T12549] rss_huge 0 [ 826.202341][T12549] shmem 0 [ 826.202346][T12549] mapped_file 0 [ 826.202350][T12549] dirty 0 [ 826.202354][T12549] writeback 0 [ 826.202359][T12549] workingset_refault_anon 0 [ 826.202364][T12549] workingset_refault_file 0 [ 826.202369][T12549] swap 0 [ 826.202373][T12549] swapcached 0 [ 826.202377][T12549] pgpgin 0 [ 826.202382][T12549] pgpgout 0 [ 826.202386][T12549] pgfault 8 [ 826.202390][T12549] pgmajfault 0 [ 826.202395][T12549] inactive_anon 0 [ 826.202399][T12549] active_anon 0 [ 826.202415][T12549] inactive_file 0 [ 826.202420][T12549] active_file 0 [ 826.202497][T12549] unevictable 0 [ 826.202502][T12549] hierarchical_memory_limit 8192 [ 826.202508][T12549] hierarchical_memsw_limit 9223372036854771712 [ 826.202513][T12549] total_cache 0 [ 826.202518][T12549] total_rss 0 [ 826.202522][T12549] total_rss_huge 0 [ 826.202527][T12549] total_shmem 0 [ 826.202531][T12549] total_mapped_file 0 [ 826.202536][T12549] total_dirty 0 [ 826.202541][T12549] total_writeback 0 [ 826.202546][T12549] total_workingset_refault_anon 0 [ 826.202551][T12549] total_workingset_refault_file 0 [ 826.202556][T12549] total_swap 0 [ 826.202561][T12549] total_swapcached 0 [ 826.202565][T12549] total_pgpgin 0 [ 826.202570][T12549] total_pgpgout 0 [ 826.202574][T12549] total_pgfault 8 [ 826.202579][T12549] total_pgmajfault 0 [ 826.202584][T12549] total_inactive_anon 0 [ 826.202588][T12549] total_active_anon 0 [ 826.202594][T12549] total_inactive_file 0 [ 826.202599][T12549] total_active_file 0 [ 826.202604][T12549] total_unevictable 0 [ 826.202608][T12549] anon_cost 0 [ 826.202612][T12549] file_cost 0 [ 826.202618][T12549] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7/test,task_memcg=/syz7/test,task=syz.7.1737,pid=12547,uid=0 [ 826.205107][T12549] Memory cgroup out of memory: Killed process 12547 (syz.7.1737) total-vm:102384kB, anon-rss:1428kB, file-rss:22820kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 826.796371][ T5731] usb 1-1: USB disconnect, device number 64 [ 827.215789][ T10] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 827.926972][ T10] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 828.123975][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.123994][ T10] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 828.252871][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.252890][ T10] usb 8-1: Product: syz [ 828.252900][ T10] usb 8-1: Manufacturer: syz [ 828.252909][ T10] usb 8-1: SerialNumber: syz [ 828.789126][T12577] fuse: Bad value for 'rootmode' [ 828.825246][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 828.825267][T12577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1746'. [ 829.989084][T12569] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1740'. [ 831.685902][ T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 832.256313][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 832.293558][ T9] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=fc.21 [ 832.452285][ T9] usb 1-1: config 3 has an invalid interface number: 79 but max is 0 [ 832.452305][ T9] usb 1-1: config 3 has no interface number 0 [ 832.452339][ T9] usb 1-1: config 3 interface 79 altsetting 5 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 832.452355][ T9] usb 1-1: config 3 interface 79 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 832.452367][ T9] usb 1-1: config 3 interface 79 has no altsetting 0 [ 832.493117][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.493134][ T9] usb 1-1: Product: syz [ 832.493142][ T9] usb 1-1: Manufacturer: syz [ 832.493151][ T9] usb 1-1: SerialNumber: syz [ 832.562204][T12590] xt_hashlimit: max too large, truncated to 1048576 [ 832.562218][T12590] xt_hashlimit: overflow, try lower: 18446744073709551612/8 [ 832.618395][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'. [ 832.708332][ T30] audit: type=1400 audit(1789439787.321:2434): avc: denied { cmd } for pid=12592 comm="iou-wrk-12594" path="socket:[39195]" dev="sockfs" ino=39195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 832.787365][ T9] kobil_sct 1-1:3.79: KOBIL USB smart card terminal converter detected [ 832.812814][ T9] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 832.840769][ T9] usb 1-1: USB disconnect, device number 65 [ 832.867104][ T9] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 832.867421][ T9] kobil_sct 1-1:3.79: device disconnected [ 832.924045][T12596] SELinux: syz.2.1750 (12596) wrote to checkreqprot. This is no longer supported. [ 833.852673][ T10] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 834.568144][ T10] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 834.690230][T12609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1754'. [ 834.690254][T12609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1754'. [ 834.731353][ T8235] udevd[8235]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 834.855690][ T10] usb 8-1: USB disconnect, device number 6 [ 835.450090][T12624] FAULT_INJECTION: forcing a failure. [ 835.450090][T12624] name failslab, interval 1, probability 0, space 0, times 0 [ 835.450115][T12624] CPU: 0 UID: 0 PID: 12624 Comm: syz.5.1751 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.450134][T12624] Tainted: [L]=SOFTLOCKUP [ 835.450139][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 835.450146][T12624] Call Trace: [ 835.450151][T12624] [ 835.450157][T12624] dump_stack_lvl+0x100/0x190 [ 835.450180][T12624] should_fail_ex.cold+0x5/0xa [ 835.450198][T12624] should_failslab+0xc2/0x120 [ 835.450214][T12624] __kmalloc_noprof+0xfc/0x840 [ 835.450228][T12624] ? lsm_blob_alloc+0x68/0x90 [ 835.450247][T12624] lsm_blob_alloc+0x68/0x90 [ 835.450263][T12624] security_sk_alloc+0x2d/0x290 [ 835.450274][T12624] sk_prot_alloc+0x1d1/0x2a0 [ 835.450292][T12624] sk_alloc+0x36/0xe80 [ 835.450305][T12624] unix_create1+0xa6/0x700 [ 835.450319][T12624] unix_stream_connect+0x36e/0x1a40 [ 835.450333][T12624] ? security_socket_post_create+0x85/0x270 [ 835.450355][T12624] p9_fd_create_unix+0x280/0x350 [ 835.450371][T12624] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 835.450395][T12624] ? lockdep_init_map_type+0x5c/0x250 [ 835.450411][T12624] p9_client_create+0x563/0xd40 [ 835.450430][T12624] ? __pfx_p9_client_create+0x10/0x10 [ 835.450451][T12624] ? lockdep_init_map_type+0x5c/0x250 [ 835.450464][T12624] ? __raw_spin_lock_init+0x3a/0x110 [ 835.450481][T12624] v9fs_session_init+0x3c/0xdd0 [ 835.450496][T12624] ? v9fs_get_tree+0x9c/0xb50 [ 835.450516][T12624] v9fs_get_tree+0xb8/0xb50 [ 835.450532][T12624] ? rcu_is_watching+0x13/0xc0 [ 835.450547][T12624] ? __pfx_v9fs_get_tree+0x10/0x10 [ 835.450565][T12624] ? bpf_lsm_capable+0x9/0x10 [ 835.450581][T12624] ? security_capable+0x80/0x260 [ 835.450598][T12624] vfs_get_tree+0x92/0x320 [ 835.450615][T12624] path_mount+0x7d0/0x24c0 [ 835.450634][T12624] ? __pfx_path_mount+0x10/0x10 [ 835.450650][T12624] ? lockdep_hardirqs_on+0x7d/0x110 [ 835.450666][T12624] ? putname+0xb1/0x110 [ 835.450680][T12624] ? kmem_cache_free+0x127/0x6c0 [ 835.450703][T12624] ? __x64_sys_mount+0x293/0x310 [ 835.450720][T12624] __x64_sys_mount+0x293/0x310 [ 835.450738][T12624] ? __pfx___x64_sys_mount+0x10/0x10 [ 835.450758][T12624] do_syscall_64+0x123/0x790 [ 835.450775][T12624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.450791][T12624] RIP: 0033:0x7f390a99e159 [ 835.450802][T12624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.450815][T12624] RSP: 002b:00007f390b88a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 835.450828][T12624] RAX: ffffffffffffffda RBX: 00007f390ac25fa0 RCX: 00007f390a99e159 [ 835.450837][T12624] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040 [ 835.450851][T12624] RBP: 00007f390aa3503b R08: 0000200000000440 R09: 0000000000000000 [ 835.450860][T12624] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000 [ 835.450868][T12624] R13: 00007f390ac26038 R14: 00007f390ac25fa0 R15: 00007ffd6345b0d8 [ 835.450884][T12624] [ 835.534828][T12624] 9pnet_fd: p9_fd_create_unix (12624): problem connecting socket: ./proc: -12 [ 835.858844][T12624] syz.5.1751 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 835.858873][T12624] CPU: 0 UID: 0 PID: 12624 Comm: syz.5.1751 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.858891][T12624] Tainted: [L]=SOFTLOCKUP [ 835.858896][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 835.858905][T12624] Call Trace: [ 835.858911][T12624] [ 835.858916][T12624] dump_stack_lvl+0x100/0x190 [ 835.858938][T12624] dump_header+0xfb/0x606 [ 835.858954][T12624] oom_kill_process.cold+0xd/0x380 [ 835.858969][T12624] out_of_memory+0x340/0x14f0 [ 835.858989][T12624] ? __pfx_out_of_memory+0x10/0x10 [ 835.859008][T12624] mem_cgroup_out_of_memory+0xc6/0x130 [ 835.859022][T12624] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 835.859034][T12624] ? find_held_lock+0x2b/0x80 [ 835.859055][T12624] ? do_raw_spin_unlock+0x145/0x1e0 [ 835.859070][T12624] ? _raw_spin_unlock+0x28/0x50 [ 835.859086][T12624] try_charge_memcg+0x783/0xf60 [ 835.859106][T12624] ? __pfx_try_charge_memcg+0x10/0x10 [ 835.859122][T12624] ? find_held_lock+0x2b/0x80 [ 835.859137][T12624] ? rcu_read_unlock+0x17/0x60 [ 835.859153][T12624] ? rcu_read_unlock+0x17/0x60 [ 835.859175][T12624] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 835.859197][T12624] ? kasan_unpoison+0x27/0x60 [ 835.859211][T12624] __kmalloc_cache_noprof+0x52a/0x6d0 [ 835.859229][T12624] ? iommufd_fops_open+0x45/0x330 [ 835.859247][T12624] iommufd_fops_open+0x45/0x330 [ 835.859261][T12624] ? __pfx_iommufd_fops_open+0x10/0x10 [ 835.859274][T12624] misc_open+0x26d/0x450 [ 835.859286][T12624] ? __pfx_misc_open+0x10/0x10 [ 835.859298][T12624] chrdev_open+0x234/0x6a0 [ 835.859313][T12624] ? __pfx_chrdev_open+0x10/0x10 [ 835.859327][T12624] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 835.859348][T12624] do_dentry_open+0x6ab/0x14d0 [ 835.859360][T12624] ? __pfx_chrdev_open+0x10/0x10 [ 835.859377][T12624] vfs_open+0x82/0x3f0 [ 835.859394][T12624] path_openat+0x19fa/0x2440 [ 835.859411][T12624] ? __pfx_path_openat+0x10/0x10 [ 835.859431][T12624] do_file_open+0x20e/0x430 [ 835.859446][T12624] ? __pfx_do_file_open+0x10/0x10 [ 835.859472][T12624] ? _raw_spin_unlock+0x28/0x50 [ 835.859485][T12624] ? alloc_fd+0x471/0x7a0 [ 835.859505][T12624] do_sys_openat2+0x10f/0x1e0 [ 835.859520][T12624] ? __pfx_do_sys_openat2+0x10/0x10 [ 835.859542][T12624] __x64_sys_openat+0x12d/0x210 [ 835.859558][T12624] ? __pfx___x64_sys_openat+0x10/0x10 [ 835.859580][T12624] do_syscall_64+0x123/0x790 [ 835.859597][T12624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.859610][T12624] RIP: 0033:0x7f390a99e159 [ 835.859621][T12624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.859632][T12624] RSP: 002b:00007f390b88a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 835.859645][T12624] RAX: ffffffffffffffda RBX: 00007f390ac25fa0 RCX: 00007f390a99e159 [ 835.859654][T12624] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 835.859662][T12624] RBP: 00007f390aa3503b R08: 0000000000000000 R09: 0000000000000000 [ 835.859670][T12624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.859677][T12624] R13: 00007f390ac26038 R14: 00007f390ac25fa0 R15: 00007ffd6345b0d8 [ 835.859695][T12624] [ 835.939875][T12624] memory: usage 8kB, limit 8kB, failcnt 133 [ 835.939888][T12624] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 835.939897][T12624] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 835.939905][T12624] Memory cgroup stats for /syz5/test: [ 835.939980][T12624] cache 0 [ 835.939986][T12624] rss 0 [ 835.939990][T12624] rss_huge 0 [ 835.939994][T12624] shmem 0 [ 835.939999][T12624] mapped_file 0 [ 835.940003][T12624] dirty 0 [ 835.940007][T12624] writeback 0 [ 835.940011][T12624] workingset_refault_anon 0 [ 835.940015][T12624] workingset_refault_file 0 [ 835.940020][T12624] swap 0 [ 835.940024][T12624] swapcached 4096 [ 835.940028][T12624] pgpgin 1 [ 835.940032][T12624] pgpgout 1 [ 835.940036][T12624] pgfault 16 [ 835.940040][T12624] pgmajfault 0 [ 835.940045][T12624] inactive_anon 0 [ 835.940049][T12624] active_anon 0 [ 835.940054][T12624] inactive_file 0 [ 835.940059][T12624] active_file 0 [ 835.940063][T12624] unevictable 0 [ 835.940068][T12624] hierarchical_memory_limit 8192 [ 835.940073][T12624] hierarchical_memsw_limit 9223372036854771712 [ 835.940078][T12624] total_cache 0 [ 835.940083][T12624] total_rss 0 [ 835.940087][T12624] total_rss_huge 0 [ 835.940092][T12624] total_shmem 0 [ 835.940096][T12624] total_mapped_file 0 [ 835.940100][T12624] total_dirty 0 [ 835.940104][T12624] total_writeback 0 [ 835.940109][T12624] total_workingset_refault_anon 0 [ 835.940113][T12624] total_workingset_refault_file 0 [ 835.940118][T12624] total_swap 0 [ 835.940122][T12624] total_swapcached 4096 [ 835.940127][T12624] total_pgpgin 1 [ 835.940131][T12624] total_pgpgout 1 [ 835.940135][T12624] total_pgfault 16 [ 835.940140][T12624] total_pgmajfault 0 [ 835.940144][T12624] total_inactive_anon 0 [ 835.940149][T12624] total_active_anon 0 [ 835.940153][T12624] total_inactive_file 0 [ 835.940157][T12624] total_active_file 0 [ 835.940162][T12624] total_unevictable 0 [ 835.940166][T12624] anon_cost 0 [ 835.940170][T12624] file_cost 0 [ 835.940175][T12624] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.1751,pid=12623,uid=0 [ 835.940238][T12624] Memory cgroup out of memory: Killed process 12623 (syz.5.1751) total-vm:102252kB, anon-rss:1432kB, file-rss:22820kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 836.745081][T12636] syz_tun: tun_net_xmit 42 [ 837.822648][ C0] syz_tun: tun_net_xmit 42 [ 838.081829][T12644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 838.862528][ C0] syz_tun: tun_net_xmit 42 [ 839.060015][T12652] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 839.902732][ C0] syz_tun: tun_net_xmit 42 [ 840.051181][T12665] syzkaller1: entered promiscuous mode [ 840.051196][T12665] syzkaller1: entered allmulticast mode [ 840.320012][ T30] audit: type=1400 audit(1789439794.931:2435): avc: denied { setopt } for pid=12671 comm="syz.5.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 840.550038][ T30] audit: type=1400 audit(1789439795.161:2436): avc: denied { write } for pid=12651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.942524][ C0] syz_tun: tun_net_xmit 42 [ 841.292282][ T30] audit: type=1400 audit(1789439795.901:2437): avc: denied { write } for pid=12693 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.881180][T12695] xt_hashlimit: max too large, truncated to 1048576 [ 841.881194][T12695] xt_hashlimit: overflow, try lower: 18446744073709551612/8 [ 841.982609][ C0] syz_tun: tun_net_xmit 42 [ 842.146880][ T5268] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 842.210453][ T30] audit: type=1326 audit(1789439796.821:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12698 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6d9e159 code=0x7ffc0000 [ 842.210490][ T30] audit: type=1326 audit(1789439796.821:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12698 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6d9e159 code=0x7ffc0000 [ 842.285174][ T30] audit: type=1326 audit(1789439796.901:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12698 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6d9e159 code=0x7ffc0000 [ 842.285207][ T30] audit: type=1326 audit(1789439796.901:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12698 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6d9e159 code=0x7ffc0000 [ 842.326842][ T30] audit: type=1326 audit(1789439796.941:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12698 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f64e6d9e159 code=0x7ffc0000 [ 842.326875][ T30] audit: type=1326 audit(1789439796.941:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12698 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6d9e159 code=0x7ffc0000 [ 842.326900][ T30] audit: type=1326 audit(1789439796.941:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12698 comm="syz.0.1778" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e6d9e159 code=0x7ffc0000 [ 842.474221][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 843.315658][ T9] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 843.319472][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.319491][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 843.319514][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.398295][ T9] usb 4-1: config 0 descriptor?? [ 843.783750][T12719] FAULT_INJECTION: forcing a failure. [ 843.783750][T12719] name failslab, interval 1, probability 0, space 0, times 0 [ 843.783775][T12719] CPU: 0 UID: 0 PID: 12719 Comm: syz.7.1771 Tainted: G L syzkaller #0 PREEMPT(full) [ 843.783793][T12719] Tainted: [L]=SOFTLOCKUP [ 843.783798][T12719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 843.783806][T12719] Call Trace: [ 843.783811][T12719] [ 843.783818][T12719] dump_stack_lvl+0x100/0x190 [ 843.783841][T12719] should_fail_ex.cold+0x5/0xa [ 843.783859][T12719] should_failslab+0xc2/0x120 [ 843.783874][T12719] __kmalloc_noprof+0xfc/0x840 [ 843.783888][T12719] ? lsm_blob_alloc+0x68/0x90 [ 843.783906][T12719] lsm_blob_alloc+0x68/0x90 [ 843.783922][T12719] security_sk_alloc+0x2d/0x290 [ 843.783934][T12719] sk_prot_alloc+0x1d1/0x2a0 [ 843.783952][T12719] sk_alloc+0x36/0xe80 [ 843.783966][T12719] unix_create1+0xa6/0x700 [ 843.783980][T12719] unix_stream_connect+0x36e/0x1a40 [ 843.783994][T12719] ? security_socket_post_create+0x85/0x270 [ 843.784018][T12719] p9_fd_create_unix+0x280/0x350 [ 843.784033][T12719] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 843.784055][T12719] ? lockdep_init_map_type+0x5c/0x250 [ 843.784071][T12719] p9_client_create+0x563/0xd40 [ 843.784089][T12719] ? __pfx_p9_client_create+0x10/0x10 [ 843.784110][T12719] ? lockdep_init_map_type+0x5c/0x250 [ 843.784123][T12719] ? __raw_spin_lock_init+0x3a/0x110 [ 843.784140][T12719] v9fs_session_init+0x3c/0xdd0 [ 843.784155][T12719] ? v9fs_get_tree+0x9c/0xb50 [ 843.784174][T12719] v9fs_get_tree+0xb8/0xb50 [ 843.784190][T12719] ? rcu_is_watching+0x13/0xc0 [ 843.784205][T12719] ? __pfx_v9fs_get_tree+0x10/0x10 [ 843.784224][T12719] ? bpf_lsm_capable+0x9/0x10 [ 843.784239][T12719] ? security_capable+0x80/0x260 [ 843.784257][T12719] vfs_get_tree+0x92/0x320 [ 843.784274][T12719] path_mount+0x7d0/0x24c0 [ 843.784294][T12719] ? __pfx_path_mount+0x10/0x10 [ 843.784310][T12719] ? lockdep_hardirqs_on+0x7d/0x110 [ 843.784327][T12719] ? putname+0xb1/0x110 [ 843.784340][T12719] ? kmem_cache_free+0x127/0x6c0 [ 843.784363][T12719] ? __x64_sys_mount+0x293/0x310 [ 843.784378][T12719] __x64_sys_mount+0x293/0x310 [ 843.784404][T12719] ? __pfx___x64_sys_mount+0x10/0x10 [ 843.784427][T12719] do_syscall_64+0x123/0x790 [ 843.784445][T12719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.784458][T12719] RIP: 0033:0x7fe40219e159 [ 843.784469][T12719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.784481][T12719] RSP: 002b:00007fe403083028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 843.784493][T12719] RAX: ffffffffffffffda RBX: 00007fe402425fa0 RCX: 00007fe40219e159 [ 843.784502][T12719] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040 [ 843.784510][T12719] RBP: 00007fe40223503b R08: 0000200000000440 R09: 0000000000000000 [ 843.784518][T12719] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000 [ 843.784526][T12719] R13: 00007fe402426038 R14: 00007fe402425fa0 R15: 00007ffdad46ae08 [ 843.784543][T12719] [ 843.786487][T12719] 9pnet_fd: p9_fd_create_unix (12719): problem connecting socket: ./proc: -12 [ 844.114060][ T9] ntrig 0003:1B96:0004.0015: unknown main item tag 0x0 [ 844.114084][ T9] ntrig 0003:1B96:0004.0015: unknown main item tag 0x0 [ 844.114100][ T9] ntrig 0003:1B96:0004.0015: unknown main item tag 0x0 [ 844.114116][ T9] ntrig 0003:1B96:0004.0015: unknown main item tag 0x0 [ 844.114131][ T9] ntrig 0003:1B96:0004.0015: unknown main item tag 0x0 [ 844.114145][ T9] ntrig 0003:1B96:0004.0015: unknown main item tag 0x0 [ 844.114160][ T9] ntrig 0003:1B96:0004.0015: unknown main item tag 0x0 [ 844.114174][ T9] ntrig 0003:1B96:0004.0015: unknown main item tag 0x0 [ 844.114188][ T9] ntrig 0003:1B96:0004.0015: unknown main item tag 0x0 [ 844.114203][ T9] ntrig 0003:1B96:0004.0015: unknown main item tag 0x0 [ 844.272107][ T9] ntrig 0003:1B96:0004.0015: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.3-1/input0 [ 844.294988][ T9] ntrig 0003:1B96:0004.0015: Firmware version: 4.14.14.11.7 (7978 7fd1) [ 845.291634][T12728] input: syz0 as /devices/virtual/input/input42 [ 845.329050][ T5731] usb 4-1: USB disconnect, device number 72 [ 845.403253][T12718] syz.7.1771 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 845.403279][T12718] CPU: 0 UID: 0 PID: 12718 Comm: syz.7.1771 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.403295][T12718] Tainted: [L]=SOFTLOCKUP [ 845.403299][T12718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 845.403306][T12718] Call Trace: [ 845.403311][T12718] [ 845.403316][T12718] dump_stack_lvl+0x100/0x190 [ 845.403339][T12718] dump_header+0xfb/0x606 [ 845.403354][T12718] oom_kill_process.cold+0xd/0x380 [ 845.403368][T12718] out_of_memory+0x340/0x14f0 [ 845.403389][T12718] ? __pfx_out_of_memory+0x10/0x10 [ 845.403409][T12718] mem_cgroup_out_of_memory+0xc6/0x130 [ 845.403422][T12718] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 845.403434][T12718] ? find_held_lock+0x2b/0x80 [ 845.403454][T12718] ? do_raw_spin_unlock+0x145/0x1e0 [ 845.403469][T12718] ? _raw_spin_unlock+0x28/0x50 [ 845.403485][T12718] try_charge_memcg+0x783/0xf60 [ 845.403506][T12718] ? __pfx_try_charge_memcg+0x10/0x10 [ 845.403522][T12718] ? find_held_lock+0x2b/0x80 [ 845.403537][T12718] ? rcu_read_unlock+0x17/0x60 [ 845.403554][T12718] ? rcu_read_unlock+0x17/0x60 [ 845.403576][T12718] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 845.403599][T12718] ? kasan_save_track+0x14/0x30 [ 845.403614][T12718] kmem_cache_alloc_noprof+0x4fa/0x6a0 [ 845.403627][T12718] ? vm_area_dup+0x27/0x9d0 [ 845.403645][T12718] vm_area_dup+0x27/0x9d0 [ 845.403662][T12718] __split_vma+0x19c/0x1de0 [ 845.403682][T12718] ? __pfx___split_vma+0x10/0x10 [ 845.403708][T12718] vma_modify+0x1ef4/0x29b0 [ 845.403725][T12718] ? validate_mm+0x1b0/0x4e0 [ 845.403746][T12718] ? __pfx_vma_modify+0x10/0x10 [ 845.403773][T12718] vma_modify_flags+0x2c3/0x460 [ 845.403791][T12718] ? __pfx_vma_modify_flags+0x10/0x10 [ 845.403816][T12718] ? rcu_is_watching+0x13/0xc0 [ 845.403830][T12718] ? percpu_counter_add_batch+0xb9/0x230 [ 845.403850][T12718] mprotect_fixup+0x27a/0xe00 [ 845.403871][T12718] ? __pfx_mprotect_fixup+0x10/0x10 [ 845.403902][T12718] do_mprotect_pkey+0xa51/0xdd0 [ 845.403923][T12718] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 845.403940][T12718] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 845.403957][T12718] ? ktime_get+0x22c/0x320 [ 845.403984][T12718] __x64_sys_mprotect+0x78/0xc0 [ 845.403999][T12718] ? lockdep_hardirqs_on+0x7d/0x110 [ 845.404015][T12718] do_syscall_64+0x123/0x790 [ 845.404032][T12718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.404044][T12718] RIP: 0033:0x7fe40219df57 [ 845.404055][T12718] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.404066][T12718] RSP: 002b:00007ffdad46ada8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 845.404077][T12718] RAX: ffffffffffffffda RBX: 00007fe4030416c0 RCX: 00007fe40219df57 [ 845.404085][T12718] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe403022000 [ 845.404093][T12718] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 845.404099][T12718] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffdad46af00 [ 845.404107][T12718] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 845.404123][T12718] [ 845.860429][T12718] memory: usage 8kB, limit 8kB, failcnt 116 [ 845.860442][T12718] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 845.860450][T12718] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 845.860457][T12718] Memory cgroup stats for /syz7/test: [ 845.860524][T12718] cache 0 [ 845.860529][T12718] rss 0 [ 845.860533][T12718] rss_huge 0 [ 845.860537][T12718] shmem 0 [ 845.860541][T12718] mapped_file 0 [ 845.860545][T12718] dirty 0 [ 845.860549][T12718] writeback 0 [ 845.860553][T12718] workingset_refault_anon 0 [ 845.860558][T12718] workingset_refault_file 0 [ 845.860562][T12718] swap 0 [ 845.860566][T12718] swapcached 0 [ 845.860570][T12718] pgpgin 0 [ 845.860574][T12718] pgpgout 0 [ 845.860579][T12718] pgfault 10 [ 845.860583][T12718] pgmajfault 0 [ 845.860587][T12718] inactive_anon 0 [ 845.860591][T12718] active_anon 0 [ 845.860595][T12718] inactive_file 0 [ 845.860599][T12718] active_file 0 [ 845.860604][T12718] unevictable 0 [ 845.860608][T12718] hierarchical_memory_limit 8192 [ 845.860613][T12718] hierarchical_memsw_limit 9223372036854771712 [ 845.860618][T12718] total_cache 0 [ 845.860622][T12718] total_rss 0 [ 845.860626][T12718] total_rss_huge 0 [ 845.860631][T12718] total_shmem 0 [ 845.860635][T12718] total_mapped_file 0 [ 845.860639][T12718] total_dirty 0 [ 845.860643][T12718] total_writeback 0 [ 845.860648][T12718] total_workingset_refault_anon 0 [ 845.860653][T12718] total_workingset_refault_file 0 [ 845.860657][T12718] total_swap 0 [ 845.860661][T12718] total_swapcached 0 [ 845.860666][T12718] total_pgpgin 0 [ 845.860670][T12718] total_pgpgout 0 [ 845.860674][T12718] total_pgfault 10 [ 845.860678][T12718] total_pgmajfault 0 [ 845.860683][T12718] total_inactive_anon 0 [ 845.860687][T12718] total_active_anon 0 [ 845.860691][T12718] total_inactive_file 0 [ 845.860696][T12718] total_active_file 0 [ 845.860700][T12718] total_unevictable 0 [ 845.860704][T12718] anon_cost 0 [ 845.860708][T12718] file_cost 0 [ 845.860713][T12718] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7/test,task_memcg=/syz7/test,task=syz.7.1771,pid=12718,uid=0 [ 845.860783][T12718] Memory cgroup out of memory: Killed process 12718 (syz.7.1771) total-vm:102516kB, anon-rss:1436kB, file-rss:22824kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 846.127898][T12726] fido_id[12726]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 847.457978][T12737] ip_tables: iptables: counters copy to user failed while replacing table [ 847.766224][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 847.766237][ T30] audit: type=1400 audit(1789439802.371:2486): avc: denied { write } for pid=12712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.873968][ T9] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 848.025327][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 848.026325][ T9] usb 1-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 848.026345][ T9] usb 1-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 320, setting to 64 [ 848.026360][ T9] usb 1-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 848.026375][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 848.028133][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 848.028148][ T9] usb 1-1: SerialNumber: syz [ 848.030137][T12737] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 848.030943][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 848.030958][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 848.031236][ T9] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 848.181464][ T30] audit: type=1400 audit(1789439802.791:2487): avc: denied { write } for pid=12752 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.422745][ T9] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 848.445001][ T9] usb 1-1: USB disconnect, device number 66 [ 849.327118][ T5268] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 849.445946][T12763] veth0: left allmulticast mode [ 849.445972][T12763] veth0: left promiscuous mode [ 849.446090][T12763] bridge0: port 3(veth0) entered disabled state [ 849.537599][T12763] bridge_slave_0: left allmulticast mode [ 849.537618][T12763] bridge_slave_0: left promiscuous mode [ 849.537728][T12763] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.682074][T12763] bridge_slave_1: left allmulticast mode [ 849.682093][T12763] bridge_slave_1: left promiscuous mode [ 849.682188][T12763] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.908884][T12763] bond0: (slave bond_slave_0): Releasing backup interface [ 849.955345][T12763] bond0: (slave bond_slave_1): Releasing backup interface [ 850.018045][T12763] team0: Port device team_slave_0 removed [ 850.068306][T12763] team0: Port device team_slave_1 removed [ 850.069913][T12763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.069927][T12763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.105292][T12763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.105310][T12763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.128338][T12763] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 850.290530][ T9] syz5: Port: 1 Link DOWN [ 850.486278][T12775] ip_tables: iptables: counters copy to user failed while replacing table [ 850.560140][T12781] FAULT_INJECTION: forcing a failure. [ 850.560140][T12781] name failslab, interval 1, probability 0, space 0, times 0 [ 850.560164][T12781] CPU: 0 UID: 0 PID: 12781 Comm: syz.5.1799 Tainted: G L syzkaller #0 PREEMPT(full) [ 850.560182][T12781] Tainted: [L]=SOFTLOCKUP [ 850.560187][T12781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 850.560195][T12781] Call Trace: [ 850.560200][T12781] [ 850.560205][T12781] dump_stack_lvl+0x100/0x190 [ 850.560227][T12781] should_fail_ex.cold+0x5/0xa [ 850.560244][T12781] should_failslab+0xc2/0x120 [ 850.560260][T12781] __kmalloc_noprof+0xfc/0x840 [ 850.560272][T12781] ? lsm_blob_alloc+0x68/0x90 [ 850.560291][T12781] lsm_blob_alloc+0x68/0x90 [ 850.560307][T12781] security_sk_alloc+0x2d/0x290 [ 850.560318][T12781] sk_prot_alloc+0x1d1/0x2a0 [ 850.560336][T12781] sk_alloc+0x36/0xe80 [ 850.560350][T12781] unix_create1+0xa6/0x700 [ 850.560364][T12781] unix_stream_connect+0x36e/0x1a40 [ 850.560379][T12781] ? security_socket_post_create+0x85/0x270 [ 850.560402][T12781] p9_fd_create_unix+0x280/0x350 [ 850.560417][T12781] ? __pfx_p9_fd_create_unix+0x10/0x10 [ 850.560447][T12781] ? lockdep_init_map_type+0x5c/0x250 [ 850.560465][T12781] p9_client_create+0x563/0xd40 [ 850.560486][T12781] ? __pfx_p9_client_create+0x10/0x10 [ 850.560508][T12781] ? lockdep_init_map_type+0x5c/0x250 [ 850.560521][T12781] ? __raw_spin_lock_init+0x3a/0x110 [ 850.560538][T12781] v9fs_session_init+0x3c/0xdd0 [ 850.560553][T12781] ? v9fs_get_tree+0x9c/0xb50 [ 850.560572][T12781] v9fs_get_tree+0xb8/0xb50 [ 850.560587][T12781] ? rcu_is_watching+0x13/0xc0 [ 850.560603][T12781] ? __pfx_v9fs_get_tree+0x10/0x10 [ 850.560621][T12781] ? bpf_lsm_capable+0x9/0x10 [ 850.560637][T12781] ? security_capable+0x80/0x260 [ 850.560655][T12781] vfs_get_tree+0x92/0x320 [ 850.560672][T12781] path_mount+0x7d0/0x24c0 [ 850.560691][T12781] ? __pfx_path_mount+0x10/0x10 [ 850.560706][T12781] ? lockdep_hardirqs_on+0x7d/0x110 [ 850.560724][T12781] ? putname+0xb1/0x110 [ 850.560737][T12781] ? kmem_cache_free+0x127/0x6c0 [ 850.560759][T12781] ? __x64_sys_mount+0x293/0x310 [ 850.560774][T12781] __x64_sys_mount+0x293/0x310 [ 850.560791][T12781] ? __pfx___x64_sys_mount+0x10/0x10 [ 850.560812][T12781] do_syscall_64+0x123/0x790 [ 850.560848][T12781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.560862][T12781] RIP: 0033:0x7f390a99e159 [ 850.560873][T12781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.560885][T12781] RSP: 002b:00007f390b88a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 850.560898][T12781] RAX: ffffffffffffffda RBX: 00007f390ac25fa0 RCX: 00007f390a99e159 [ 850.560906][T12781] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000200000000040 [ 850.560914][T12781] RBP: 00007f390aa3503b R08: 0000200000000440 R09: 0000000000000000 [ 850.560922][T12781] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000000 [ 850.560930][T12781] R13: 00007f390ac26038 R14: 00007f390ac25fa0 R15: 00007ffd6345b0d8 [ 850.560947][T12781] [ 850.560966][T12781] 9pnet_fd: p9_fd_create_unix (12781): problem connecting socket: ./proc: -12 [ 850.848373][ T9] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 851.004847][T12781] syz.5.1799 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 851.004876][T12781] CPU: 0 UID: 0 PID: 12781 Comm: syz.5.1799 Tainted: G L syzkaller #0 PREEMPT(full) [ 851.004894][T12781] Tainted: [L]=SOFTLOCKUP [ 851.004899][T12781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 851.004907][T12781] Call Trace: [ 851.004912][T12781] [ 851.004917][T12781] dump_stack_lvl+0x100/0x190 [ 851.004940][T12781] dump_header+0xfb/0x606 [ 851.004956][T12781] oom_kill_process.cold+0xd/0x380 [ 851.004971][T12781] out_of_memory+0x340/0x14f0 [ 851.004991][T12781] ? __pfx_out_of_memory+0x10/0x10 [ 851.005010][T12781] mem_cgroup_out_of_memory+0xc6/0x130 [ 851.005024][T12781] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 851.005036][T12781] ? find_held_lock+0x2b/0x80 [ 851.005055][T12781] ? do_raw_spin_unlock+0x145/0x1e0 [ 851.005070][T12781] ? _raw_spin_unlock+0x28/0x50 [ 851.005085][T12781] try_charge_memcg+0x783/0xf60 [ 851.005105][T12781] ? __pfx_try_charge_memcg+0x10/0x10 [ 851.005124][T12781] ? find_held_lock+0x2b/0x80 [ 851.005139][T12781] ? rcu_read_unlock+0x17/0x60 [ 851.005155][T12781] ? rcu_read_unlock+0x17/0x60 [ 851.005177][T12781] __memcg_slab_post_alloc_hook+0x4a1/0x1270 [ 851.005199][T12781] ? kasan_unpoison+0x27/0x60 [ 851.005213][T12781] __kmalloc_cache_noprof+0x52a/0x6d0 [ 851.005231][T12781] ? iommufd_fops_open+0x45/0x330 [ 851.005248][T12781] iommufd_fops_open+0x45/0x330 [ 851.005261][T12781] ? __pfx_iommufd_fops_open+0x10/0x10 [ 851.005275][T12781] misc_open+0x26d/0x450 [ 851.005287][T12781] ? __pfx_misc_open+0x10/0x10 [ 851.005298][T12781] chrdev_open+0x234/0x6a0 [ 851.005313][T12781] ? __pfx_chrdev_open+0x10/0x10 [ 851.005327][T12781] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 851.005348][T12781] do_dentry_open+0x6ab/0x14d0 [ 851.005360][T12781] ? __pfx_chrdev_open+0x10/0x10 [ 851.005378][T12781] vfs_open+0x82/0x3f0 [ 851.005395][T12781] path_openat+0x19fa/0x2440 [ 851.005412][T12781] ? __pfx_path_openat+0x10/0x10 [ 851.005431][T12781] do_file_open+0x20e/0x430 [ 851.005447][T12781] ? __pfx_do_file_open+0x10/0x10 [ 851.005472][T12781] ? _raw_spin_unlock+0x28/0x50 [ 851.005485][T12781] ? alloc_fd+0x471/0x7a0 [ 851.005504][T12781] do_sys_openat2+0x10f/0x1e0 [ 851.005520][T12781] ? __pfx_do_sys_openat2+0x10/0x10 [ 851.005542][T12781] __x64_sys_openat+0x12d/0x210 [ 851.005558][T12781] ? __pfx___x64_sys_openat+0x10/0x10 [ 851.005581][T12781] do_syscall_64+0x123/0x790 [ 851.005598][T12781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.005610][T12781] RIP: 0033:0x7f390a99e159 [ 851.005621][T12781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.005633][T12781] RSP: 002b:00007f390b88a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 851.005646][T12781] RAX: ffffffffffffffda RBX: 00007f390ac25fa0 RCX: 00007f390a99e159 [ 851.005655][T12781] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 851.005663][T12781] RBP: 00007f390aa3503b R08: 0000000000000000 R09: 0000000000000000 [ 851.005671][T12781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.005678][T12781] R13: 00007f390ac26038 R14: 00007f390ac25fa0 R15: 00007ffd6345b0d8 [ 851.005697][T12781] [ 851.005719][T12781] memory: usage 8kB, limit 8kB, failcnt 171 [ 851.005727][T12781] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 851.005736][T12781] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 851.005743][T12781] Memory cgroup stats for /syz5/test: [ 851.005815][T12781] cache 0 [ 851.005827][T12781] rss 0 [ 851.005832][T12781] rss_huge 0 [ 851.005837][T12781] shmem 0 [ 851.005841][T12781] mapped_file 0 [ 851.005846][T12781] dirty 0 [ 851.005850][T12781] writeback 0 [ 851.005855][T12781] workingset_refault_anon 0 [ 851.005860][T12781] workingset_refault_file 0 [ 851.005865][T12781] swap 0 [ 851.005869][T12781] swapcached 4096 [ 851.005873][T12781] pgpgin 1 [ 851.005878][T12781] pgpgout 1 [ 851.005882][T12781] pgfault 17 [ 851.005887][T12781] pgmajfault 0 [ 851.005891][T12781] inactive_anon 0 [ 851.005895][T12781] active_anon 0 [ 851.005901][T12781] inactive_file 0 [ 851.005906][T12781] active_file 0 [ 851.005910][T12781] unevictable 0 [ 851.005915][T12781] hierarchical_memory_limit 8192 [ 851.117455][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 851.166632][ T9] usb 1-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 851.166656][ T9] usb 1-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 320, setting to 64 [ 851.166671][ T9] usb 1-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 851.166688][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 851.347912][T12781] hierarchical_memsw_limit 9223372036854771712 [ 851.347925][T12781] total_cache 0 [ 851.347930][T12781] total_rss 0 [ 851.347934][T12781] total_rss_huge 0 [ 851.347952][T12781] total_shmem 0 [ 851.347957][T12781] total_mapped_file 0 [ 851.347962][T12781] total_dirty 0 [ 851.347967][T12781] total_writeback 0 [ 851.347972][T12781] total_workingset_refault_anon 0 [ 851.347977][T12781] total_workingset_refault_file 0 [ 851.347982][T12781] total_swap 0 [ 851.347987][T12781] total_swapcached 4096 [ 851.347991][T12781] total_pgpgin 1 [ 851.347996][T12781] total_pgpgout 1 [ 851.348001][T12781] total_pgfault 17 [ 851.348005][T12781] total_pgmajfault 0 [ 851.348010][T12781] total_inactive_anon 0 [ 851.348015][T12781] total_active_anon 0 [ 851.348019][T12781] total_inactive_file 0 [ 851.348024][T12781] total_active_file 0 [ 851.348029][T12781] total_unevictable 0 [ 851.348034][T12781] anon_cost 0 [ 851.348038][T12781] file_cost 0 [ 851.348044][T12781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.1799,pid=12777,uid=0 [ 851.348136][T12781] Memory cgroup out of memory: Killed process 12777 (syz.5.1799) total-vm:102252kB, anon-rss:1432kB, file-rss:22820kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 851.426740][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 852.203365][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 852.203384][ T9] usb 1-1: SerialNumber: syz [ 852.670634][T12775] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 852.675376][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 852.675391][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 852.675667][ T9] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 853.108460][ T9] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 853.166291][ T9] usb 1-1: USB disconnect, device number 67 [ 853.196987][T12801] netlink: 'syz.2.1802': attribute type 1 has an invalid length. [ 853.254359][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1802'. [ 853.315417][T12801] 8021q: adding VLAN 0 to HW filter on device bond8 [ 853.626486][ T30] audit: type=1400 audit(1789439808.241:2488): avc: denied { write } for pid=12779 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.494536][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 854.556384][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 854.583761][ T30] audit: type=1400 audit(1789439809.201:2489): avc: denied { write } for pid=12820 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.653761][ T9] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 854.654961][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.654990][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.705768][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 854.721844][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.735225][ T10] usb 3-1: config 0 descriptor?? [ 854.750289][ T9] as10x_usb: device has been detected [ 854.763110][ T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 854.819627][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 854.880176][T12809] ------------[ cut here ]------------ [ 854.880187][T12809] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 854.880196][T12809] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bd0, CPU#0: syz.3.1803/12809 [ 854.902010][T12809] Modules linked in: [ 854.906032][T12809] CPU: 0 UID: 0 PID: 12809 Comm: syz.3.1803 Tainted: G L syzkaller #0 PREEMPT(full) [ 854.917283][T12809] Tainted: [L]=SOFTLOCKUP [ 854.921708][T12809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 854.931820][T12809] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 854.937564][T12809] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 88 b6 72 05 45 85 c0 75 13 48 8d 3d ec c1 75 05 48 c7 c6 e0 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 854.957871][T12809] RSP: 0018:ffffc90004f3f6a0 EFLAGS: 00010246 [ 854.964327][T12809] RAX: 0000000000000003 RBX: ffff88802bf84010 RCX: 1ffffffff228ab80 [ 854.972282][T12809] RDX: 0000000000000000 RSI: ffffffff8beff6e0 RDI: ffffffff91486770 [ 854.980594][T12809] RBP: ffffc90004f3f810 R08: 0000000000000000 R09: 0000000000000000 [ 854.989023][T12809] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 854.997069][T12809] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88802a2a7320 [ 855.005065][T12809] FS: 00007f008adf66c0(0000) GS:ffff888123b59000(0000) knlGS:0000000000000000 [ 855.014324][T12809] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 855.020912][T12809] CR2: 000055a151780b30 CR3: 00000000393d8000 CR4: 00000000003526f0 [ 855.028920][T12809] Call Trace: [ 855.032188][T12809] [ 855.035140][T12809] ? lock_acquire+0x1d1/0x380 [ 855.039810][T12809] ? as102_stream_ctrl+0x28/0xd0 [ 855.045036][T12809] ? __pfx___mutex_lock+0x10/0x10 [ 855.050049][T12809] ? irqentry_exit+0x24d/0xa10 [ 855.054830][T12809] ? lockdep_hardirqs_on+0x7d/0x110 [ 855.060025][T12809] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 855.066111][T12809] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 855.071819][T12809] ? as102_stream_ctrl+0x28/0xd0 [ 855.077274][T12809] as102_stream_ctrl+0x28/0xd0 [ 855.082030][T12809] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 855.087798][T12809] __dvb_frontend_open+0x122/0xf20 [ 855.092919][T12809] dvb_frontend_open+0x77c/0x910 [ 855.097851][T12809] ? find_held_lock+0x2b/0x80 [ 855.102886][T12809] ? __pfx_dvb_frontend_open+0x10/0x10 [ 855.108333][T12809] dvb_device_open+0x270/0x3b0 [ 855.113129][T12809] ? __pfx_dvb_device_open+0x10/0x10 [ 855.118403][T12809] chrdev_open+0x234/0x6a0 [ 855.122825][T12809] ? __pfx_chrdev_open+0x10/0x10 [ 855.127752][T12809] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 855.134366][T12809] do_dentry_open+0x6ab/0x14d0 [ 855.139128][T12809] ? __pfx_chrdev_open+0x10/0x10 [ 855.144092][T12809] vfs_open+0x82/0x3f0 [ 855.148167][T12809] path_openat+0x19fa/0x2440 [ 855.152806][T12809] ? __pfx_path_openat+0x10/0x10 [ 855.157745][T12809] do_file_open+0x20e/0x430 [ 855.162235][T12809] ? __pfx_do_file_open+0x10/0x10 [ 855.167891][T12809] ? _raw_spin_unlock+0x28/0x50 [ 855.172994][T12809] ? alloc_fd+0x471/0x7a0 [ 855.177319][T12809] do_sys_openat2+0x10f/0x1e0 [ 855.181986][T12809] ? __pfx_do_sys_openat2+0x10/0x10 [ 855.187204][T12809] ? handle_softirqs+0x1e6/0x9d0 [ 855.192130][T12809] __x64_sys_openat+0x12d/0x210 [ 855.197253][T12809] ? __pfx___x64_sys_openat+0x10/0x10 [ 855.202637][T12809] do_syscall_64+0x123/0x790 [ 855.207216][T12809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.213120][T12809] RIP: 0033:0x7f008cb5e98e [ 855.217520][T12809] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 855.237419][T12809] RSP: 002b:00007f008adf5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 855.245839][T12809] RAX: ffffffffffffffda RBX: 00007f008adf66c0 RCX: 00007f008cb5e98e [ 855.253817][T12809] RDX: 0000000000000802 RSI: 00007f008adf5c00 RDI: ffffffffffffff9c [ 855.261786][T12809] RBP: 00007f008adf5c00 R08: 0000000000000000 R09: 0000000000000000 [ 855.270396][T12809] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 855.278620][T12809] R13: 00007f008ce26038 R14: 00007f008ce25fa0 R15: 00007fff928f0118 [ 855.286621][T12809] [ 855.289630][T12809] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 855.296887][T12809] CPU: 0 UID: 0 PID: 12809 Comm: syz.3.1803 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.307806][T12809] Tainted: [L]=SOFTLOCKUP [ 855.312100][T12809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 855.322125][T12809] Call Trace: [ 855.325380][T12809] [ 855.328303][T12809] dump_stack_lvl+0x100/0x190 [ 855.332961][T12809] vpanic+0x553/0x970 [ 855.336918][T12809] ? __pfx_vpanic+0x10/0x10 [ 855.341394][T12809] ? lock_release+0x24d/0x310 [ 855.346046][T12809] panic+0xd1/0xe0 [ 855.349751][T12809] ? __pfx_panic+0x10/0x10 [ 855.354154][T12809] check_panic_on_warn.cold+0x19/0x34 [ 855.359510][T12809] ? __mutex_lock+0x944/0x1bd0 [ 855.364284][T12809] __warn.cold+0x191/0x318 [ 855.368683][T12809] __report_bug+0x30f/0x440 [ 855.373163][T12809] ? __mutex_lock+0x944/0x1bd0 [ 855.377909][T12809] ? __pfx___report_bug+0x10/0x10 [ 855.382911][T12809] ? stack_depot_save_flags+0x27/0x9f0 [ 855.388363][T12809] ? kasan_save_stack+0x3f/0x50 [ 855.393185][T12809] ? kasan_save_stack+0x30/0x50 [ 855.398007][T12809] ? kasan_save_track+0x14/0x30 [ 855.402829][T12809] ? kasan_save_free_info+0x3b/0x70 [ 855.408000][T12809] ? __kasan_slab_free+0x5f/0x80 [ 855.412908][T12809] ? kfree+0x22b/0x6d0 [ 855.416951][T12809] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 855.422994][T12809] report_bug_entry+0xe2/0x290 [ 855.427739][T12809] ? __mutex_lock+0x94b/0x1bd0 [ 855.432482][T12809] handle_bug+0x1cd/0x2a0 [ 855.436789][T12809] exc_invalid_op+0x17/0x50 [ 855.441269][T12809] asm_exc_invalid_op+0x1a/0x20 [ 855.446091][T12809] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 855.451437][T12809] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 88 b6 72 05 45 85 c0 75 13 48 8d 3d ec c1 75 05 48 c7 c6 e0 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 855.471022][T12809] RSP: 0018:ffffc90004f3f6a0 EFLAGS: 00010246 [ 855.477072][T12809] RAX: 0000000000000003 RBX: ffff88802bf84010 RCX: 1ffffffff228ab80 [ 855.485018][T12809] RDX: 0000000000000000 RSI: ffffffff8beff6e0 RDI: ffffffff91486770 [ 855.492980][T12809] RBP: ffffc90004f3f810 R08: 0000000000000000 R09: 0000000000000000 [ 855.500930][T12809] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 855.508875][T12809] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88802a2a7320 [ 855.516841][T12809] ? lock_acquire+0x1d1/0x380 [ 855.521495][T12809] ? as102_stream_ctrl+0x28/0xd0 [ 855.526404][T12809] ? __pfx___mutex_lock+0x10/0x10 [ 855.531406][T12809] ? irqentry_exit+0x24d/0xa10 [ 855.536144][T12809] ? lockdep_hardirqs_on+0x7d/0x110 [ 855.541318][T12809] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 855.547021][T12809] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 855.552712][T12809] ? as102_stream_ctrl+0x28/0xd0 [ 855.557636][T12809] as102_stream_ctrl+0x28/0xd0 [ 855.562371][T12809] ? __pfx_as102_fe_ts_bus_ctrl+0x10/0x10 [ 855.568062][T12809] __dvb_frontend_open+0x122/0xf20 [ 855.573151][T12809] dvb_frontend_open+0x77c/0x910 [ 855.578065][T12809] ? find_held_lock+0x2b/0x80 [ 855.582742][T12809] ? __pfx_dvb_frontend_open+0x10/0x10 [ 855.588175][T12809] dvb_device_open+0x270/0x3b0 [ 855.592930][T12809] ? __pfx_dvb_device_open+0x10/0x10 [ 855.598190][T12809] chrdev_open+0x234/0x6a0 [ 855.602581][T12809] ? __pfx_chrdev_open+0x10/0x10 [ 855.607492][T12809] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 855.613794][T12809] do_dentry_open+0x6ab/0x14d0 [ 855.618529][T12809] ? __pfx_chrdev_open+0x10/0x10 [ 855.623453][T12809] vfs_open+0x82/0x3f0 [ 855.627496][T12809] path_openat+0x19fa/0x2440 [ 855.632063][T12809] ? __pfx_path_openat+0x10/0x10 [ 855.636974][T12809] do_file_open+0x20e/0x430 [ 855.641453][T12809] ? __pfx_do_file_open+0x10/0x10 [ 855.646454][T12809] ? _raw_spin_unlock+0x28/0x50 [ 855.651275][T12809] ? alloc_fd+0x471/0x7a0 [ 855.655599][T12809] do_sys_openat2+0x10f/0x1e0 [ 855.660253][T12809] ? __pfx_do_sys_openat2+0x10/0x10 [ 855.665425][T12809] ? handle_softirqs+0x1e6/0x9d0 [ 855.670337][T12809] __x64_sys_openat+0x12d/0x210 [ 855.675160][T12809] ? __pfx___x64_sys_openat+0x10/0x10 [ 855.680518][T12809] do_syscall_64+0x123/0x790 [ 855.685105][T12809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.690971][T12809] RIP: 0033:0x7f008cb5e98e [ 855.695360][T12809] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 855.714956][T12809] RSP: 002b:00007f008adf5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 855.723355][T12809] RAX: ffffffffffffffda RBX: 00007f008adf66c0 RCX: 00007f008cb5e98e [ 855.731299][T12809] RDX: 0000000000000802 RSI: 00007f008adf5c00 RDI: ffffffffffffff9c [ 855.739241][T12809] RBP: 00007f008adf5c00 R08: 0000000000000000 R09: 0000000000000000 [ 855.747184][T12809] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 855.755124][T12809] R13: 00007f008ce26038 R14: 00007f008ce25fa0 R15: 00007fff928f0118 [ 855.763075][T12809] [ 855.766120][T12809] Kernel Offset: disabled [ 855.770420][T12809] Rebooting in 86400 seconds..