last executing test programs: 17m8.49327834s ago: executing program 32 (id=86): syz_emit_vhci(0x0, 0xa) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x1, 0x0, 0xff, 0x2, 0x800, 0xa4}, &(0x7f0000000100)=0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019300)=0x7) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000019340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x21) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000019380)={0x1, &(0x7f00000193c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 12m13.017484677s ago: executing program 1 (id=626): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0xe000000000000000) pread64(r2, &(0x7f0000000380)=""/230, 0xe6, 0x4) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000480)='8') move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x9, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005200010000000000040000000200f2ff070001"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r5, 0x1, r0, 0x6, 0x80000}) 12m8.053012683s ago: executing program 1 (id=637): syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000440)=0x0) waitid(0x2, r0, &(0x7f0000000540), 0x1, &(0x7f00000005c0)={{}, {0x0, 0x0}}) io_setup(0x2, &(0x7f0000000000)=0x0) socket$kcm(0x21, 0x2, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x40241, 0x0) io_setup(0x8, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x401, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000740)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f00001c0000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1197, &(0x7f0000000800)={0x0, 0x2150, 0xc000, 0x3, 0x1cb}) writev(r3, &(0x7f0000000180)=[{&(0x7f00000008c0)}], 0x0) io_uring_enter(r3, 0x202219, 0xcf74, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x12, 0x0, 0x0, &(0x7f00000009c0)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="16"], 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$inet6(0xffffffffffffffff, &(0x7f0000000a80)={0xa, 0x4e24, 0x6, @mcast2}, 0x1c) r4 = eventfd(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c0f54fd80ca498028a0e9d59ab1e010000001932bcbc57660cf8f07d3ac00fa5d494a1daa5437a85bbd16d5fa911b3bd52846db5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r5, 0x58, &(0x7f0000000240)}, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x6, 0x4, 0x1, 0x102000000000002, 0x80000009, 0x400002004c8, 0x10001, 0x100000000003, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0xffffffffffffff51, 0x50fd24f7], 0x0, 0xc42d4}) r6 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000440), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000480)={r6, r6, r6}, 0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={'sha224\x00'}}) io_submit(r2, 0x4, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc2, r4, &(0x7f0000000100)="0100fd6400000000", 0x8, 0x36, 0x0, 0x0, r4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r4, 0x0, 0x48, 0x0, 0x0, 0x1, r4}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_usb_connect$midi(0x2, 0x30, &(0x7f0000000b40)=ANY=[@ANYBLOB="120100020000004030144b4740000102000109021e00010104200709040000000103207b062402023ad3689b795caf647dc3e9b023248f85e5c690933ec52e578a8e0422276adee6c6f07e2cf971a3b504e3b65ec450cd147c1f7c6c1d1439ad7b46236fc2a505a7893c3df7b808ed91b464cf7870f45453a2"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 12m3.337396412s ago: executing program 1 (id=645): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f00000005c0)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12m1.276091389s ago: executing program 1 (id=650): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) utimes(0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) setfsuid(r1) setreuid(0x0, r1) 12m1.003108945s ago: executing program 1 (id=653): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040a00000000000000deffff7f00fe0fe57813b63d849d7d6c8ef3d708483526f49fb4f26fc7995e385fd2c6580701ef51a2720754cae990b52bab2a11e31edd5a253f989aa5050fd153b0ef2339d305fc4e849e8bf0172ae6c3b0e8de894a335359bf32b28e11e6ff0a89133c04d71441cfa1465b5375bbf8ec6a8ea6bb38f92f77f4df2260d62dfd799da9e7745f19dd", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000064d1921eaaf794959e3c000000bc3baad485eefc07a900000000ecffffff000000"], 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000b26de64efb02a48260458f8645d5b87584ae4dae83651cc8c90be74365e0f4d5388a93d48f56764eb2ca433e23fd32c898c40aeb18dab57ba86bbcc96b3810ea690fc9c980bd625486cfcc905a6b4c2f32f1c464aefb1408ac41273c867802000000f0f664282614a8612436ea87c8d0761ca9ac1001f7e348a5c4aaf5bcffbac1c4e63cdeb56ff4aa706f2000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="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"], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x24}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x2c91, 0x4) sendmsg$sock(r1, &(0x7f0000000300)={&(0x7f0000000340)=@in6={0xa, 0x4ea7, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x44040) r2 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000740)='7', 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4a, 0x7) fanotify_init(0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[], [], 0x2f}) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000600)) 11m59.454517594s ago: executing program 1 (id=656): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080), 0x20000328) 11m43.524708507s ago: executing program 33 (id=656): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080), 0x20000328) 5m56.829718823s ago: executing program 4 (id=1879): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000010) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa101, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) close_range(r6, 0xffffffffffffffff, 0x400000000000000) 5m54.95491067s ago: executing program 4 (id=1880): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, 0x0, r5, r6, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r7, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa101, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) syz_open_pts(r8, 0x8182) 5m49.292899659s ago: executing program 4 (id=1894): mq_notify(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0xcd79, 0x141000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000001c0)={0xd, 0x0, 0x6, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000140)={0x2, 0x0, 0x1, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000180)={0x2, 0x1, 0x3, 0x4, 0x4}) 5m44.974840882s ago: executing program 2 (id=1900): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001400010028bd7000fbdbdf250a010100000000000000000000000000ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a0010000d"], 0x5c}, 0x1, 0x0, 0x0, 0x20008050}, 0x40000) 5m41.174165322s ago: executing program 2 (id=1904): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000010) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000140)) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r5, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00') close_range(r6, 0xffffffffffffffff, 0x400000000000000) 5m41.144580632s ago: executing program 4 (id=1905): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000200)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019200)=0x7) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000003011102000000000000"], 0x1c}}, 0x40040) 5m40.183019739s ago: executing program 4 (id=1906): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ftruncate(r1, 0x7) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000180)={[{@redirect_dir_off}, {@userxattr}]}) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/lo/dev_id\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000440)='./sys/class/net/lo/dev_id\x00', r2, 0x4000, r2}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x8302) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x1000000000000244) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000000000ffffac1414bbfe80f2ffffff000000000000000000aa3a000200"], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./gadget\x00', &(0x7f0000000800)='gadgetfs\x00', 0x0, 0x0) listxattr(&(0x7f0000000840)='./sys\x00', &(0x7f0000000880)=""/106, 0x6a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r5, &(0x7f0000000940)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(r5, &(0x7f0000000980)='./bus\x00', 0x84042, 0x0) 5m39.285971595s ago: executing program 2 (id=1907): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, 0x0, r6, r7, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r8, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa101, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) syz_open_pts(r10, 0x8182) close_range(r9, 0xffffffffffffffff, 0x400000000000000) 5m34.95207474s ago: executing program 2 (id=1914): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001400010028bd7000fbdbdf250a010100000000000000000000000000ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a0010000d"], 0x5c}, 0x1, 0x0, 0x0, 0x20008050}, 0x40000) 5m32.684730608s ago: executing program 4 (id=1918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x8, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x4000009, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x3, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7ffffffc, 0x100, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x80485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x5, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x0, 0x8, 0xc9cd, 0x7f, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x1000000, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x1, 0x2, 0x1, 0x0, 0x3, 0x81, 0x3, 0x3, 0xfffffff5, 0xc9, 0x5, 0x1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x400, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x100007, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0x1417, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x300, 0x3f0a, 0x4, 0x9, 0x6, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0xf, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0xe, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0xffffffff, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x440, 0x1b8c, 0x14, 0x62, 0xc00, 0xa, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x3, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x270, 0x2, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x80000000, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffc, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000d00)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f0000000d80)={&(0x7f0000000dc0)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e80)="80", 0x1}], 0x1}, 0x4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000ec0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 5m29.343650942s ago: executing program 2 (id=1922): bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x47) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000007c0)={0x1f, 0x1, 0x3}, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)='^', 0x1, 0x40000, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x74}}, 0x8040800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000400)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000004c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000480)='<', 0x381, 0x805, 0x0, 0x0) 5m29.17084779s ago: executing program 2 (id=1923): prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000c40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000c80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000cc0), 0x0, 0x0) read$msr(r3, &(0x7f0000000d00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019d00)=0x7) futex(0x0, 0xd, 0x20000002, 0x0, 0x0, 0x400000) bind$inet(0xffffffffffffffff, &(0x7f0000019d40)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000019ec0)={0x0, 0x0, &(0x7f0000019f00)={&(0x7f0000019f40)=ANY=[@ANYBLOB="c40000001900010000000000fcffffffe00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) listen(0xffffffffffffffff, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000001a100)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x8a, 0x4e20, 0x5, 0x2, 0xa0, 0x80, 0x62}, {0x7fffffffffffffff, 0x36, 0xffff, 0x8, 0x5, 0xb1a, 0xffffffffffffeffd, 0x3}, {0x0, 0x0, 0x7, 0xfffffffffffffff9}, 0x1, 0x6e6bb0, 0x3, 0x1, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0x3c}, 0xa, @in=@loopback, 0x3501, 0x0, 0x2, 0xa, 0x34c, 0x9, 0x81}}, 0xe8) connect$can_bcm(0xffffffffffffffff, &(0x7f000001a200), 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048800) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x439, 0x3, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) io_setup(0x8, &(0x7f0000000400)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x2) 5m17.567960685s ago: executing program 34 (id=1918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x8, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x6, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x4000009, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x3, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7ffffffc, 0x100, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x80485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x5, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x0, 0x8, 0xc9cd, 0x7f, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x1000000, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x1, 0x2, 0x1, 0x0, 0x3, 0x81, 0x3, 0x3, 0xfffffff5, 0xc9, 0x5, 0x1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x400, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x100007, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0x1417, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x300, 0x3f0a, 0x4, 0x9, 0x6, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0xf, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0xe, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0xffffffff, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x440, 0x1b8c, 0x14, 0x62, 0xc00, 0xa, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x3, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x270, 0x2, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x80000000, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffc, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x40000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000d00)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f0000000d80)={&(0x7f0000000dc0)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e80)="80", 0x1}], 0x1}, 0x4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000ec0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 5m14.172124691s ago: executing program 35 (id=1923): prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000c40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000c80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000cc0), 0x0, 0x0) read$msr(r3, &(0x7f0000000d00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019d00)=0x7) futex(0x0, 0xd, 0x20000002, 0x0, 0x0, 0x400000) bind$inet(0xffffffffffffffff, &(0x7f0000019d40)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000019ec0)={0x0, 0x0, &(0x7f0000019f00)={&(0x7f0000019f40)=ANY=[@ANYBLOB="c40000001900010000000000fcffffffe00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) listen(0xffffffffffffffff, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000001a100)={{{@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x8a, 0x4e20, 0x5, 0x2, 0xa0, 0x80, 0x62}, {0x7fffffffffffffff, 0x36, 0xffff, 0x8, 0x5, 0xb1a, 0xffffffffffffeffd, 0x3}, {0x0, 0x0, 0x7, 0xfffffffffffffff9}, 0x1, 0x6e6bb0, 0x3, 0x1, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0x3c}, 0xa, @in=@loopback, 0x3501, 0x0, 0x2, 0xa, 0x34c, 0x9, 0x81}}, 0xe8) connect$can_bcm(0xffffffffffffffff, &(0x7f000001a200), 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048800) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x439, 0x3, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) io_setup(0x8, &(0x7f0000000400)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x2) 3m0.721847846s ago: executing program 8 (id=2184): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa101, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) syz_open_pts(r5, 0x8182) 2m59.774627544s ago: executing program 8 (id=2185): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) 2m53.892464439s ago: executing program 8 (id=2195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = msgget$private(0x0, 0x722) msgsnd(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="0100"], 0xbf, 0x800) msgrcv(r5, 0x0, 0x0, 0xffffff7f00000000, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x40003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) listns(0x0, &(0x7f0000000100)=[0x0], 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1b6) fanotify_mark(0xffffffffffffffff, 0x441, 0x800003a, r7, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 2m53.119787656s ago: executing program 8 (id=2197): prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000c40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000c80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000cc0), 0x0, 0x0) read$msr(r3, &(0x7f0000000d00)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019d00)=0x7) futex(0x0, 0xd, 0x20000002, 0x0, 0x0, 0x400000) bind$inet(0xffffffffffffffff, &(0x7f0000019d40)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000019d80)={0x0, 0x0, &(0x7f0000019dc0)={&(0x7f0000019e00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x40000}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000019ec0)={0x0, 0x0, &(0x7f0000019f00)={&(0x7f0000019f40)=ANY=[@ANYBLOB="c40000001900010000000000fcffffffe00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000019fc0)={0x0, 0x0, &(0x7f000001a000)={&(0x7f000001a040)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x4, {{@in6=@private2={0xfc, 0x2, '\x00', 0xfa}, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) listen(0xffffffffffffffff, 0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) get_robust_list(r1, &(0x7f000001a240)=&(0x7f000001a280)={0x0, 0x0, &(0x7f000001a2c0)={&(0x7f000001a300)={&(0x7f000001a340)}}}, &(0x7f000001a380)=0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x10, 0x14, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e22}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048800) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x439, 0x3, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 2m50.732556629s ago: executing program 8 (id=2203): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000000c80)=0x10000000) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0x80000001, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d00)=0x7) getpgrp(0x0) getegid() prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) getpgid(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r3, &(0x7f0000000d40)=""/102392, 0x18ff8) recvmsg(r0, &(0x7f0000019d40)={0x0, 0x0, 0x0}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000019d80)={0x0, 0x0, &(0x7f0000019dc0)={&(0x7f0000019e00)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) syz_io_uring_setup(0x3bd4, &(0x7f0000000380)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) 2m46.934724962s ago: executing program 8 (id=2213): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 32) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x400) (rerun: 32) setresuid(0x0, 0x0, 0x0) (async) shutdown(r3, 0x0) (async, rerun: 64) bind$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async, rerun: 64) connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async, rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[], 0xfe33) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) recvfrom(r1, &(0x7f0000000640)=""/125, 0x7d, 0x0, &(0x7f00000006c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x2, 0x1}}, 0x80) (async) r8 = socket(0x2a, 0x80000, 0x6) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000005a00010029bd7000000000001c000000040001"], 0x18}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0xa8000, 0x0) (async) close(r0) (async) r9 = syz_open_dev$sndpcmc(&(0x7f0000000740), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604111, &(0x7f0000000780)={0x0, [[0xffffffff, 0xffffff2e, 0xffffffff, 0x8001, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x80000000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4241, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0xc0884113, &(0x7f0000000a00)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x3, 0x200000000, 0xfffffff8, 0x2}) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x4, &(0x7f0000000b80)=@framed={{}, [@jmp={0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x60}]}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_START(r9, 0x4142, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PAUSE(r9, 0x40044145, &(0x7f0000000c00)=0x2) 2m31.305900504s ago: executing program 36 (id=2213): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 32) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x400) (rerun: 32) setresuid(0x0, 0x0, 0x0) (async) shutdown(r3, 0x0) (async, rerun: 64) bind$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async, rerun: 64) connect$bt_l2cap(r2, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async, rerun: 32) r6 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[], 0xfe33) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) close(0xffffffffffffffff) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) recvfrom(r1, &(0x7f0000000640)=""/125, 0x7d, 0x0, &(0x7f00000006c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x2, 0x1}}, 0x80) (async) r8 = socket(0x2a, 0x80000, 0x6) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000005a00010029bd7000000000001c000000040001"], 0x18}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0xa8000, 0x0) (async) close(r0) (async) r9 = syz_open_dev$sndpcmc(&(0x7f0000000740), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604111, &(0x7f0000000780)={0x0, [[0xffffffff, 0xffffff2e, 0xffffffff, 0x8001, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x80000000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4241, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async, rerun: 64) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0xc0884113, &(0x7f0000000a00)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x3, 0x200000000, 0xfffffff8, 0x2}) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0x4, &(0x7f0000000b80)=@framed={{}, [@jmp={0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x60}]}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4140, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_START(r9, 0x4142, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PAUSE(r9, 0x40044145, &(0x7f0000000c00)=0x2) 1m41.31856483s ago: executing program 7 (id=2368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000440)={{}, "28db70c5e816c871cffc8e58ef441f90c6c0e34b356ddcd050f0b66ecd3304b80ab74db82a7747346c6c222b46e4b2f61dc39493d13d09b064a43c1221160ad71d08059ff6264cb503d2bf6aa503b11d1733ebf384dd63cdce9318b73833a62aacaf0dc3b37da9b76e2e72dad3ea464b2fc8d477d894c895568854d6ee891e0ab96b84f0a6b3c3460204a71ac2ed05ded0ba557665c75a347191daa4356e8bcc84db204ec5645712029b712ac66fc2c0b4d65a9203d29156fc1b2b6f97b43094fc204f83c4f99ebdfd2f3a0e344c80dd03c329a5fb2cc961ebce3b0373ab38e5a01b7be0c5e16290b6b90dfd5eaafd2ba543c84f20e0f1aa076c27197e6dbfe2e9008b0fb04d8e41b46369b01164f64bbaa497262b3a8efae85529e7471595db2c8977aab0af0ee9853c6a5664df99fdf0cb3a9e427d19e8a0250e9cc30ae4596aefcf8c26875977fae70e7f6967320e06d110ec11cd71327e352e3d549e69064a1b10a15bfa7c2a99e3697d384a0b843fc4e6d1e93bec1dec25bfb0d0d2ff473d85f06a3aa42afff4c07dacec584623a041d964c0d0908a007dad4ce92749c79256e58867ca002aa353ff9bb21133acfc43b76c33e83bf99d6f641268f669a82f9b7400fa34d898c49099007f58952f560fac20e25df5f21cb2c4e6fbb90caa6023a2dcb5a4b4499da4a377331936d1b2da5de7955023d60ee876890072f709653140ae45d0a5fcc4311ad702af1099d6b00fcd90a5e9bfc6dce7758e30a35996712ce99c0721524de33c1d95b8814c861c3fc766596bb53c6d9145eb0f443e5337dded41b1f4d6e41343ece3ad433af30e445130374d6bea6748f2f2990d5ae97797f803d93f402e0d8d1e82742e2fc72d67460f38cacc1b505237b13d03163c8c7d1049306f59890f50059583c81c0ad119c2a744548ea331d29fc3f62f642ca6e0d08a0d85945dbfe7534f9a4461fb7e4a6a65ca97cfbdbb0a37ce583be05c0a076ae9dda0aa280f4937fdae41987103134c95c3c92f211967888a9d634f9bdb0052d3a6a4f8f6c4cc86d30197dd65b69908a310d926db7748d8e5bfe5baacd329234bec6225717f123df8c333ace0c0c44481d626a218efa1b18b32440cba2533d3c62e63e7ee00ea1cc20f0ea61dc016281665680d2188e6afc9ce9e226701fd04a8c9ea226e496befefe93aea811c86fdce325cfb430c2dc15aa28f2d3b7e1df49ebf7902cf53175957e8e5c8ff809dc23291d3279657f4d53318505bb93fd817f61d21500985a7b6174a3af4e1772ac08e6218107e97ab141079dc330cd95d3f4a01bb4f75b2b03c06f50436353c93f29efc3f04c98cfd3cf1b9a18e7c0c1fa564e2f431b227394382dadd7aa542dcf0a5d5fa8dcfe7c01a09fcf57f1e616d4ef1bfc2bef09fc553e0d1c10491743fc1226431a475a410b5ad1cc92a344b3e01d2a43a7c79da12fbe9196be2fe633f5d0b87e50094d5917a34626c624755c0be78596feb32b1f0200a21629a1c67461631bc218099b3e7e6d5cfb96ec9c09dcccdcaaf05b1c4001ac9ff9f51fdc5e89255cc9ff80ae5d36c62e7f2a01cc2cbcccd732e202d5de430706a3c66dd4a4bad9a887e3fdeb6c9a58afa427c392c6a3ac954e4200ad2758a8db464d678f8063f7161d35ebd9aca92c55b888e2cbf646c728239fd24c2848ec153b4cf41512a8e76976da6b6bda4a3d61450eeadcc3596ccdd3c6e1156aa80b11fe968bce3522ede2fae0f82045eea8085f01a0722532521152e849c20ed559ed119005037231592464e65f0c23f89491035edab7245c9cea8f88e645df76050f27dc4a97eb5a4cb6a73f8388311e15425f9c7ed05cd293aac310d10de0d8f2975fbdd655ba156824289910499397abe6e70fd751db919bdd5b517446639bbe76cac1f2563c841dda6f18a7dfa9de5d9afba4c2526e8347eb8f111771c22cc2f9593d360e0074ca3f4164610ce0f6f62b477f68c101e12dcfe6f6d40c9d28bb498a0603c505580a0316106a9f1813e582cd7ccd775fdaf085b8341a8298aba7b00450aabb3bc329ece7e7c0a5284de315181f04e5e46c94eef993cf9cd17fc8cbbdc4f6e4b8f6827a005d2c6052bdd98017ba2a795fb494c007fb79529bb7634ba7ad29132e3e1883a25ad1b4734fdcf7a0526daae776d174d95c418a1ff467e4d476a2a3e64e3c50eacc21b629ae819f180fad1c8241a86c09c261f71c693bb31a09e0acaf673fe353900f4d0f9168c1ff41a3ed3a9931644007930caed194b7f720172b5dedc7eee7a2bbb541ce7d7b097e16a63649be518226a6590f687ff4591b8af6483f4bb64b886e70997572e9bf7db29219f7fa612df48f800ef1a90c54f945dd22750cefd7e092027afa75a6e076a20da1d224b4f3713caa90b4a3df87dd491c007527ba7538d277b95eca16ea161cd767f8aa6cdefabdaee82f5496db85e3b990ce051cc2f78f3c373a1f6ce37157cd98558bc0bc10fa53b90b992fdd8f39baed46caa1f5f3d5260bb81d1bd49a691f59e5563c1374a70a0d6f651834a4677053cee0584f34b82bd44d55ace3bf5375fd430c1027cbd19c5e34b0802593cde24f7024935d01e2b7e5b4719ab4ca8c15def18892db9d521e22697e8a51f455262e93cd964aaf13c7053362a816d1d73b77fad84767ddf88b3b56cda5575405f2008300558105bee76714aadf90d7fbe7d8ebea1ec71c964f499c1cc29785d36cb7721c22fa4e4e2317bae8801c3c5b117ece4258415c2705ae29714078d2ccee81bfac83cdab40e688fe5faf844a3fa7af4850b6cb9cbaa4a47c58234420142d4c2227fbc14007ae95ee4a9c164446f59abe9dfc13a6f41c64e2739972e7466d159268a1e116a012779e8e669c9b069995ddcc72d610766dc1a378116c8f4594e283d24e13e419cf47f0747d27498a4bdce8ade9fc1ed1999b9d091361eaa40c6c7fbd0c6d542c344a37c4d84a501d1d96d4403c9ec6547e6f49001947ddddaa43e7852afdbd51d55dff512edcbfaf3c9cf00896f29c2923bb6d18471ec975bd89b45bb31399841229bce5d5a504609833a8ef0a17e30ccb50a2c7c4d971749b5f18cf3daed669a5d0b25e0c143b731e05e8e66c3a8d5aecf4bc72efb02357a8ff36ad3a0afd1178c42ba47abe8f78f33830013eba73f4504f08f2a8bb0f3087e6fb0eac4f2a0d442a1756079106b23e15468355f050c016a03eeaaf956c11797a97ae65dcb5a96f06ea89640024f4e83f3a575c232dc140c72b7e0633e5b7070ecd8841bbb8882fcc9bba52278956bd9d8ce0a148d19301ee9c875ff31af32b19e20570d17b5b08c3ab09fc94c9b83c61f840791d67a7d53fe3579257841b0a646176462063fc60367c64e4b3a0fd379faa23989f94b75f34b30795c3443ff2fb7d5857dbbab7fd71111a0c06623f730095c4737ef525e246ea4d1b7972f6b008684c3c1c0a9af28fc24d7c8f6597539cd7abaadb00e48c0f4f4ca000795191a1c38f310b4e545010676489b1876edfa3c78e1517f3884ccf81c10bdeb481797638959244695b6b64e9d88380b6f71963c109c5b8d57956d036e9fd9d747369b031698da43e83e7c188cf06dbe07d9037bcffffc203bb5788782af236dd0376a7ebce150774045a4f16caf240638d665f6f7453de666d3cac14bf0e724ba692efc578b1f1407028e03938ad944a108de9a7de2927c587bffb47447ce3db26cddecaaa319fcd7a1f73ce49f43d5e1da0d820d45c56a6d1ce03ae9dd1640945dfbb71f8478cb9540f4fb9303edf5d800ceba9674466bd44539a7a348bf6aa7eabf2cda231d7ab29701a1bb2877b86908d8458a4db0270890a4b8feb855a5d1fdb3b11f299582cd6328b607e296fafa5fe91ba6a71cd34720fcd38ae73432744e883ff8aa1ae9c05b209b55766004f4cb5226542bd754134ac1e2caeb204f5424622330eb89c227b4a093e42fe3900827942969d941aff1b88a434687f2a23997cd6e4f6faece38c7f733cf2e981bfc03bb6a91a78890bc4535331cf860180eb64515e0bb38debba8744022c50052479cbe9732b7912b1571067dad8ce09b5b38b25981dbaded1349e9a74bb54a1d8c366082626cd5f611e413ae1d48dd9e4551c7e60729014eec6ae59ce00b56abab6e36cac2331191fcb429bd7093349d288a9fee12a38bfb1b6180e9466c945aee6d0a44336cfa98f80695371ae1a0b9680f4ff0a9ec54efed0cf76b0649f364784af855eba923e1f8c0af59306316d9fa2a17bea02462c8531e320d744a4d582aa457e58730996d48e5c9c56d0d0e8f6ff552d6e915eb81043b47e5ba92e179c48df2dcdddd9b970be8a9955de43679a92344cd1c7a8e26f4f3be008ce2a0699033d34550a0eee65305bf13438d19e033946744c4b5ee1e467294d2bc5403cf89a5f356b13c488f7329ace2e0fb9c4889e29fd42f0cfa796a928a936d1a4be8745fb482587efbe8a28cd16c576e221a55f6b41d64b3e4163bb5d67f5e424f1674ab48be2c450f6721b72c308cc7301015d96a8e56e14818948ab7bd4749d7d6a506241cd1a420e4771b16f43115aa47c7cc5ab4e74d68d13af0437ad75db6829376925d356f56c20bcd46e0481d8988c2740217d96375b921ecbc425c1e59efdac8e5ad32e68f370d8cc5d55534b5f442e9d03209a4aa4c04498685eee4c57798473add239a3df411a9f4459e1038b277783f1206736068fb339eb077f4df31d9923eeb74384dd547f1c649e8c11514b71872ccf06a8aaf4173a0158aa3910eac85bbbb6f9c0a016808555ebedca458f4ebc823413bff704414bc9011c48ca56f1d0c09ae70bbec31f4d6d11a60bd847f41ce03f1064c33b099bfa19af0891f1e106145c4ed43a05b71e9f278be5a5ecdbac029796423cb1096f74ff68d1a77add3709c45e70c5d8a9b07644928e4330e5860a6f77e91342d60c261aa7b32367e284fbd21bd4479b64e9f61c2b5fcfcd35b5d9a8637be432df16926ec9ec835f6f83fc44aebf5716d4baa2cd691bb827979b7f751bde2ab998d760c41ea8ea4624c2d049e033da3539a81a1668f9d2e87e737e4c978892a000914fb8f9275b1fd6fce2abb2a555829ab8dcf148ecdd95bf050de0fd700a1f47afe3b9435193fb90ffefafc89d8d2940b390e2298330003ff5ba5d15b1d0e3cb0ed10f19f5569e6e7c8a600ddd30a58eea91a75483d35c8b4ea28843d97b0dff0f562b3bac94db753871ea3e0ed9f386fac032eb3d0bcb4855426fab30b8a13ef44a5477b8ee303c0107265c2f496f4bd78d84b92d5a35a4da8a0a93f6076f0142e757f94105993c2dab824f36734c0fecc1ad0cd96872d3245b37005d3802f8ccefda312cb71a71c1989df969fe0fb5922f6ee1cafde0e608695a592038afb2409f276ad6761899e95889c72a15ac6af82a821eb325670bd01145206d57793971458ff1d1131a51a446d53203a95f846ea5c18181a3725ff87a88e31e37644e6ede9ed6e7ea7a1409e83c59e0e0d2eb94f546f492a5c288a41079ea6d6dc1c1b9127f3e810cb483edc7f3f0e4f2fb730f58c202a51cce225f9cf196045ce3ef79f210e547916c8079f5f60d212dfa1a63add23c8cf80662a1f77892d8f2f13d98536a6bfc27c427041c4c204b47492694e0281ebd383cfcbe352ad653238abb14e8a9cd73745c166565711652c926bc6e649d53d198f9a61c6ccbe702717cd80a0660a5aedb5988f770aa0b3a52ef1187e46bcfe70992b684593ee0261af76"}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000001580)={0x1, @in6={{0xa, 0x4e21, 0x3, @private2, 0x6}}, 0x4e21}, &(0x7f0000001640)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001680)={r2, 0x25, "5f64ff27825b6d3476fee227c1f7c8160f11ce18a2e3f7bfcf303a51c65235b895dd32020c"}, &(0x7f00000016c0)=0x2d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$video(&(0x7f0000000240), 0x8, 0x101801) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000002c0)={0xa, 0x0, 0x0, {0x0, 0x759bc414, 0x800007, 0x20003}}) sendfile(r3, r3, &(0x7f0000000040)=0x3, 0x8000000000000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001700)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000001780)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x10, 0x4, &(0x7f00000018c0)=ANY=[], &(0x7f0000001900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000001940)=@file={0x1, './file0\x00'}, 0x6e) fchown(0xffffffffffffffff, 0x0, 0xee01) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x4004045) r6 = io_uring_setup(0x1b7e, &(0x7f0000001a00)={0x0, 0x970, 0x1f480, 0x0, 0x399}) r7 = add_key(&(0x7f0000001a80)='big_key\x00', &(0x7f0000001ac0)={'syz', 0x2}, &(0x7f0000001b00)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r7, &(0x7f0000001b40)=""/4096, 0x1000) keyctl$read(0xb, r7, &(0x7f0000002b40)=""/4096, 0x1000) io_uring_enter(r6, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) setxattr$incfs_id(&(0x7f00000018c0)='./file0\x00', &(0x7f0000003b40), &(0x7f0000003b80)={'0000000000000000000000000000000', 0x31}, 0x20, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010001000000000000001a0100000700210042420000300022802c000180080001000000000008000200e0a6240008000300a0b8250008000400409c000008000600d00700"], 0x4c}}, 0x0) 1m40.890237029s ago: executing program 7 (id=2369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4000010) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa101, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) syz_open_pts(r5, 0x8182) close_range(r4, 0xffffffffffffffff, 0x400000000000000) 1m40.106092621s ago: executing program 7 (id=2370): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x418, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:apt_var_log_t:s0\x00'}}}, {{@uncond, 0x0, 0x1b8, 0x1e8, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000080)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{@my=0x0, 0x2}, 0x1, 0x3, 0x3}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f00000006c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000c40)={@nfc={0x27, 0x0, 0x1, 0x3}, {0x0, 0x3d}, 0x0, 0x2c}, 0xa0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_create1(0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x900, 0x0, 0x0, &(0x7f0000000140)={0x1f}, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) listen(r1, 0x81010040) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c9b41, 0x8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="14"], &(0x7f0000000300), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'veth1_vlan\x00', &(0x7f0000000b80)=@ethtool_rxnfc={0x32, 0xb, 0x2, {0x0, @hdata="c3b467aca79221c2e4d626bfd283e0a10e23d2fa504990e9ce34004c56937b82a7c45294652cad4e6b3175264e735c411738e756", {0x0, @remote, 0x7f, 0xb6, [0x8, 0x7]}, @esp_ip6_spec={@empty, @remote, 0x9, 0x40}, {0x0, @link_local, 0x5, 0xd7, [0x1ff, 0xa]}, 0xad, 0xf1}}}) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000c40)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8, @remote, 0x8}], 0x2c) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x2dd, &(0x7f00000003c0)={@random="f34e88c4fe2b", @broadcast, @void, {@ipv4={0x800, @gre={{0xa, 0x4, 0x0, 0x39, 0x2cf, 0x64, 0x0, 0x4, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @rr={0x7, 0x13, 0x71, [@remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x93, 0x0, [0x2], "d99ab625249c911ba2814089179fcb4b435e499c78e4bcad5fb9046a7adbe6963cb602f2ccbd64c308024d7fe85e6a8b26a0f762a2b24e82e9280d1059dd1bfde18985fe12efc20040e2fb76b60a1c71f08c9d38d6ae0429788549dc5caca298f4d432730638db5c8e34bb5dc0b4b3f9127340af5bc0e3ccfc11a3b76c4d0a3845e26e61bf88b0ab05aa5731d8413fff52a58d"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x0, 0x4, 0x0], "6ba572d2f9aa0cd74730dcb188ee42f619fc4316e5174068cb2ca747c6ff065f965abe8333413193afa71effb6c367df74b564aac5db675943b87bdd5bda34f8896332e23510b36a9f98e2b30f46b6d0698b42cb63f2ec4ba8233da35dca6f4416e925d284adfadbd3dbf7834bd828e09ae0c06203a34a5a77732938954e44b88e88b68061605d8f195dea40624b7b6de47a7499eb2786b80e0d04"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x6], "d471fcac466da06d51c87a5f6851c8b2a4b77cb564761487bffdfb44fbc32a1d547833158708a2a940dcd0b6e7d412c25cc4bf5962395447b49618e0e3f0151528446d4c3ad82e702611e1627d59cfe4a851efe93d019f574dff9bd8b0a40346b59a86a64520841303ee2b93c215879d46bdd8243f84f1936f719172f7a3fdfa66214d0c0bf7405dd9a4866a3d3a5ae52d91771e6792d358b5796196aa961a4440edda9d50d4f154e78aec6572b044b4b47fe17bedd2ab4de78d1c4772ac9a86c18cee7eb94d60461739450b7c3574b3240d10268563956834e8ff"}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x5, 0x0, 0x1, 0x2, 0x0, 0x9}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x4, 0x2, 0x1, 0x0, 0x7, 0x4}, 0x2, {0x8, 0x9, 0x1, 0x8, 0x1, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "b3b9026e8e04154ea4161b5827c5998fd413abbf508ca9b7768665f6478a121d96b7bb5b789efa5b690ca87d61d4eb899beaa049d2b2f7f6a28791b3de8d45ba3f47618c7da9f37d07db3d6a85f950c5"}}}}}}, 0x0) 1m36.250169147s ago: executing program 7 (id=2375): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xbae1, 0x40, 0x3, 0x10000158}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x2d5, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x81}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x0, 0x80, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80, 0x0, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x20008000, 0x327, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x1, 0x20}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0x258}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x9, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) 1m35.646354092s ago: executing program 7 (id=2378): socket$nl_netfilter(0x10, 0x3, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x618080, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000004c0)='./sys/devices/system/cpu/smt/control\x00', 0x40, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendfile(r1, r0, 0x0, 0x4000000053d0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000300)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000340)={{0x32, @rand_addr=0x64010104, 0x19, 0x0, 'sed\x00', 0x4, 0x0, 0x2}, {@multicast1, 0x15, 0x0, 0xfe4e, 0x0, 0x5}}, 0x44) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x3, 0x0) r3 = socket(0x3a, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="0e9cbd8ee4", @ANYRES32=0x0, @ANYBLOB="0000000000000200"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000196c0)={{0x2, @local, 0x4e20, 0x4, 'nq\x00', 0x8, 0x7fff, 0x3e}, {@private=0xa010101, 0x4e20, 0x3, 0x7f, 0x8, 0x9}}, 0x44) getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000140)=0x6) listns(&(0x7f00000002c0)={0x20, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='127.0.0.1:file0\x00', 0x80100) r5 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r5, &(0x7f00000005c0)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f00000195c0)=0x7) set_mempolicy(0x6, 0x0, 0xe0) mkdirat(0xffffffffffffff9c, &(0x7f0000019640)='./mnt\x00', 0x1ff) mount(&(0x7f0000019680)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000540)='erofs\x00', 0xe2884a623666c6b3, &(0x7f0000019740)='a7.0.0.1,port=clien\x04\x00\x00\x00\x00\x00\x00\x007.0.0.1,minor \x00\x00\x00\x00\x00\x00') 1m33.542566009s ago: executing program 7 (id=2382): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m18.407912307s ago: executing program 37 (id=2382): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16.327918006s ago: executing program 9 (id=2592): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) r1 = syz_open_dev$video(&(0x7f0000000040), 0x80000000, 0x402) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x1, 0x2, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x804, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000010}, 0xc800) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000140)}, 0x400000}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000e00)={0x5, @sliced={0x5, [0x4, 0x5, 0xfffd, 0x6, 0x1, 0x6, 0x3, 0x3, 0x5, 0x1457, 0x0, 0x7ff, 0x8, 0x6, 0x5, 0xb, 0x5, 0xf72, 0x3, 0xfb91, 0x9e5, 0x3, 0x3ff, 0x6, 0x7fff, 0x8, 0x6, 0x1ff, 0x6, 0x33, 0x1, 0x513d, 0xbbb1, 0x6, 0x8, 0x5, 0x1, 0xa, 0x33ab, 0xffe, 0x1000, 0x7, 0xff, 0x1, 0x200, 0x4, 0x2, 0x7], 0x9}}) 16.242604689s ago: executing program 5 (id=2593): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000ec0)=""/102392, 0x18ff8) mount(&(0x7f0000019ec0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000019f00)='./cgroup\x00', &(0x7f0000019f40)='cramfs\x00', 0x208000, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) timer_settime(0x0, 0x1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000019f80)={'syz1\x00', {}, 0x0, [0x38, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffd, 0xfffffffd, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x624efc52], [0x80, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x80000000, 0x80000000, 0x0, 0x100, 0xfffffffe, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x200000, 0xfffffffd, 0xfffffffd, 0x0, 0xe5d3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9, 0x0, 0x3, 0x200000, 0x0, 0xffffffff, 0xfffffffb, 0x3, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80000003], [0x0, 0x0, 0x4, 0xffff, 0x0, 0x0, 0x2, 0x0, 0xfffff325, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffdffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x7, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x51, 0x3, 0x100, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x2, 0x0, 0xfaea, 0x100, 0x0, 0x0, 0x8006, 0x0, 0x0, 0x4, 0x20], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, 0x27, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xfffffce2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x40, 0xfffffffd, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x3, 0x0, 0xffff, 0x5, 0x1]}, 0x45c) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f000001a400), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f000001a440)={0xc4, 0x0, 0xa}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000001a4c0)={0x0, 0x0, &(0x7f000001a500)={&(0x7f000001a540)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x8, 0x10000000, 0x20001, 0xa}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8a}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f000001a5c0), 0x0, 0x0) ioctl(r6, 0x40186f40, &(0x7f000001a600)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046f41, &(0x7f000001a680)=0x20000) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ram0\x00', 0x101042, 0x15) 15.406352703s ago: executing program 5 (id=2594): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x82002, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x80) cachestat(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dvb_dvr(0x0, 0x0, 0x100) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x6, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x8, 0x0) 15.178753274s ago: executing program 0 (id=2596): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000001c0)=""/242, &(0x7f00000002c0)=0xf2) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000300)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000340)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0103}}}, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x60}}, 0x4) sendmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x143102) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3902, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x200000) 13.592987268s ago: executing program 0 (id=2598): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ftruncate(r1, 0x7) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x40, &(0x7f0000000180)={[{@redirect_dir_off}, {@userxattr}]}) mount(0x0, &(0x7f00000001c0)='./sys\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/lo/dev_id\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000440)='./sys/class/net/lo/dev_id\x00', r2, 0x4000, r2}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000580), 0x2, 0x8302) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x1000000000000244) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000000000ffffac1414bbfe80f2ffffff000000000000000000aa3a000200"], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./gadget\x00', &(0x7f0000000800)='gadgetfs\x00', 0x0, 0x0) listxattr(&(0x7f0000000840)='./sys\x00', &(0x7f0000000880)=""/106, 0x6a) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r5, &(0x7f0000000940)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(r5, &(0x7f0000000980)='./bus\x00', 0x84042, 0x0) 13.497458721s ago: executing program 9 (id=2599): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000193c0)=ANY=[@ANYRES32=r4], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000019400)={{r5, 0xffffffffffffffff}, &(0x7f0000019440), &(0x7f0000019480)}, 0x20) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000194c0)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000019500)={0x6, 0x4, &(0x7f00000195c0)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f0000019600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r8, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019640)={r9, r8, 0x25, 0x2, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000019680)={{r6}, &(0x7f00000196c0), &(0x7f0000019700)}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r10 = syz_clone(0x4084111, 0x0, 0x1d, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r10, 0x1, &(0x7f0000019740)={0x14, 0x1, 0xfee9}) close(0xffffffffffffffff) r11 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r11, 0x0, 0x4d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) 11.364563827s ago: executing program 9 (id=2600): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x83780) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000ec0)='memory.swap.max\x00', 0x2, 0x0) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x9) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000540)) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000003c0)={0x0, 0x4865}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={r7, 0x71be}, &(0x7f0000000480)=0x8) ioctl$XFS_IOC_FSGEOMETRY_V4(r4, 0x8070587c, &(0x7f00000002c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) sched_setscheduler(r8, 0x6, &(0x7f0000000380)=0x2) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e000000140002800800040000000020060002003000000008001f000500000008000400c20002"], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x488fa5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x1}}, 0x20) read$usbmon(r0, &(0x7f00000004c0)=""/106, 0x6a) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r9, 0xc0844123, &(0x7f00000001c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="74010000200001002cbd7000fb", @ANYRES32=0x0, @ANYRES16=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x174}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00'}) r12 = socket$inet_smc(0x2b, 0x1, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1e01}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 9.553408282s ago: executing program 0 (id=2603): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @private}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000000240)=""/150, 0x96}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000400)=""/139, 0x8b}], 0x6, 0xfff, 0x2, 0x30) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) 9.514086292s ago: executing program 3 (id=2604): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb50010000000000006002adf700303a0200000000000000000000ffffac1e0001ff0200000000000000000000000000010200901c08e55864fc0968b96a780000173dafff88c200056143dbe87d58b400032c00fe80080000000000000000bbfe8000000000000000000000006fa4cf6f90635056f7ab8b610df0e54f52993d56d64727f2ba3cd315db86b81b572e82a6cb1f357720879d0a72702ad6601bb5232c839f9b8a43afdc68234004723a936a806dc41ae76c84bfb3056d389d072c7149f1437fffa61a8472209b675575579880f001a3"], 0x0) 9.39056238s ago: executing program 3 (id=2606): r0 = socket$kcm(0x11, 0x3, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000009c0), 0x4) shutdown(0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) futex(0x0, 0x6, 0x1, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) select(0x40, &(0x7f0000000580)={0x7, 0x4, 0x0, 0x5, 0xfffffffffffffffc, 0x1e7, 0xffffffffffffffff, 0x9}, &(0x7f00000005c0)={0x9, 0x7, 0x7, 0x1, 0x200000000000000, 0x8, 0x1000, 0x3}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_emit_ethernet(0xbe, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00002000000119078000000000000000000004e20009c9078010000000200000018757863c4b857019c7a676c123c5676e276930c334d0ac2af0c06bde6f077f8ed08ad4d97143a85ff45187b0d1f67b1891a99e7570fb6092c45a71010a986c20c3aaabd6e47a7a3d9a2da906f818de3c8793f59c78e40a88c6c80ef5fb53bb079d94711f6c31a409efa6de3ef4c75d9967d4915432736e26d72d90c8e6479801e0173aedb791ec7a5"], 0x0) 8.35436208s ago: executing program 6 (id=2608): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000020100000900010073797a3000000000070002006c6f0000070003006c6f"], 0x30}}, 0x0) (fail_nth: 1) 8.288164919s ago: executing program 3 (id=2609): socket$igmp6(0xa, 0x3, 0x2) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x1d, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=@newtfilter={0x5f4, 0x2c, 0xd27, 0x70bd2d, 0xa000, {0x0, 0x0, 0x0, r4, {0x4, 0xc}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c8, 0x2, [@TCA_U32_POLICE={0x418, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x64cb}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x400, 0x10001, 0x5, 0x40, 0x8, 0x0, 0xbada, 0x4, 0x5, 0x3, 0x4e7e, 0x3, 0x2, 0x3, 0x80000000, 0x3, 0x8, 0x6, 0x566, 0x9, 0x8, 0x6, 0x2, 0x2, 0xedb, 0x8, 0x2, 0x3, 0x4, 0x0, 0xffff66f0, 0x74, 0xa2ab, 0xb4, 0x7, 0xf, 0x3, 0xfffffffc, 0x4, 0x401, 0x1, 0xb, 0x200, 0x2, 0x66e1, 0x3, 0x9, 0x7, 0x3, 0x7, 0x0, 0x365, 0x1000, 0xf9e, 0x3, 0x7a4d, 0xaba9, 0xfffffffa, 0x10, 0x4, 0x3, 0xa, 0x5, 0x81, 0x26, 0x3, 0x2, 0x4, 0xf, 0x7fffffff, 0x3ff, 0x8000, 0x1000, 0x445a, 0xe9, 0x1, 0x4, 0x0, 0x3ff, 0x7ff, 0x793f9503, 0x8e, 0x8001, 0x1, 0x4, 0x6, 0x7, 0x9, 0x7, 0x5, 0x1, 0x9, 0x1, 0x80000001, 0x6, 0xfd8, 0x9, 0x4, 0x8, 0x5, 0x6000000, 0xfffffff0, 0x33a, 0x1, 0x0, 0xfffffff7, 0x200, 0xffc0000, 0x81, 0x6, 0x3, 0x2, 0x1000, 0x5, 0xbf1, 0x8001, 0x7f, 0x40, 0x2, 0x55, 0x2ab6, 0xfffffff8, 0x0, 0x7, 0x2, 0x7, 0x800, 0x9, 0x101, 0xb, 0x6, 0x5, 0x5, 0x6, 0x1c6, 0x8, 0x6e20, 0x2c02, 0x1ff, 0x5e16332f, 0x0, 0xfffffffe, 0x4, 0x0, 0x9, 0x3, 0x9, 0x0, 0x2, 0x1, 0x3, 0x4, 0xffffff64, 0x1ff, 0x3233, 0x7f, 0x6, 0x101, 0x9, 0x2, 0x9, 0x1, 0x1, 0x8000, 0x401, 0x800, 0x8001, 0x4, 0x12ef, 0x9, 0x1bcf, 0x9, 0xd, 0x3, 0x4, 0x5, 0x7f, 0x8, 0x7, 0x6, 0x1, 0xff, 0x23e90, 0xff, 0x2, 0xfffff3e6, 0x6, 0xf, 0x7, 0x2, 0x6, 0x80, 0x8, 0xa66d, 0x4, 0x6, 0x200, 0x0, 0x7, 0xf, 0x7, 0xc4, 0x7, 0x1ff, 0x2, 0x1, 0xffff0001, 0x1, 0x2, 0xfffffff5, 0x6, 0x7d, 0x9, 0x7, 0x3, 0x1, 0x3ff, 0x1000, 0xb, 0xd, 0x80000000, 0x8, 0x2, 0x7, 0xa58d, 0xfffffff9, 0x7, 0x4, 0x7fff, 0xc, 0x0, 0x5, 0x1, 0x0, 0xf, 0x0, 0x81, 0x87, 0x8, 0x7fffffff, 0x6, 0x0, 0x4, 0x4, 0x100, 0x8001, 0xffffffff, 0xa, 0xa, 0x7da6, 0x9, 0x783, 0x1ff, 0xffffffff, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffa}]}, @TCA_U32_DIVISOR={0x8, 0x4, 0x4e}, @TCA_U32_SEL={0x1a4, 0x5, {0x10, 0x3c, 0x3, 0xb, 0x3ff, 0x8, 0x100, 0xa965, [{0x1, 0xcc, 0x5, 0x2}, {0xa70, 0x0, 0x3, 0xf}, {0x0, 0x2260, 0x3, 0x5}, {0xffffffff, 0x679, 0x1, 0x3}, {0x3, 0x10, 0xad8c, 0x8c}, {0x800, 0x6, 0x2, 0x1}, {0x3, 0x9, 0x3, 0xe5600000}, {0xc, 0x45, 0x6, 0x8}, {0x3, 0x1, 0x8}, {0x9, 0x1, 0x6, 0x936}, {0x200, 0xc, 0x40, 0x1867a073}, {0x2, 0x2, 0x7b, 0x6}, {0x4, 0x6, 0x9bd, 0x1}, {0x1, 0x3, 0x100, 0x2}, {0x7b2, 0x10001, 0x9f5b, 0x3}, {0x3, 0x1ff, 0x5}, {0xfff, 0xf63d, 0x401, 0xff}, {0x9, 0x5, 0x9, 0x75}, {0x1, 0x2, 0x7f, 0xfffffffc}, {0x9, 0x5, 0x2b6, 0x6}, {0x1, 0x3ff, 0x4, 0x2}, {0x100, 0x9, 0x0, 0x6}, {0x5, 0x9, 0x4, 0x8}, {0x3ff, 0x80, 0xf, 0x2}, {0x3, 0xdbf1, 0xfffffffd, 0x8}]}}]}}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x80}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x66, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000200000000000000000000000200004000000000000079800000000000000000000000100010100"/102], 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setpriority(0x0, 0x0, 0x3) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) writev(r5, &(0x7f0000000380)=[{&(0x7f00000003c0)='4', 0x1}], 0x1) read$FUSE(r5, 0x0, 0x0) r6 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r6, 0x0, 0xfffffffffffffee3, 0x1, 0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}}, 0x0) mq_timedreceive(r6, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000280)=""/87, 0x57, 0x1, 0x0) 7.912517539s ago: executing program 6 (id=2610): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000ec0)=""/102392, 0x18ff8) mount(&(0x7f0000019ec0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000019f00)='./cgroup\x00', &(0x7f0000019f40)='cramfs\x00', 0x208000, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) timer_settime(0x0, 0x1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000019f80)={'syz1\x00', {}, 0x0, [0x38, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x3, 0xfffffffd, 0xfffffffd, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x624efc52], [0x80, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x80000000, 0x80000000, 0x0, 0x100, 0xfffffffe, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x200000, 0xfffffffd, 0xfffffffd, 0x0, 0xe5d3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9, 0x0, 0x3, 0x200000, 0x0, 0xffffffff, 0xfffffffb, 0x3, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80000003], [0x0, 0x0, 0x4, 0xffff, 0x0, 0x0, 0x2, 0x0, 0xfffff325, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffdffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x7, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x51, 0x3, 0x100, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x2, 0x0, 0xfaea, 0x100, 0x0, 0x0, 0x8006, 0x0, 0x0, 0x4, 0x20], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, 0x27, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xfffffce2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x40, 0xfffffffd, 0x0, 0x7f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x3, 0x0, 0xffff, 0x5, 0x1]}, 0x45c) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f000001a400), 0xa0000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f000001a440)={0xc4, 0x0, 0xa}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000001a4c0)={0x0, 0x0, &(0x7f000001a500)={&(0x7f000001a540)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x8, 0x10000000, 0x20001, 0xa}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8a}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f000001a5c0), 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f000001a640), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40046f41, &(0x7f000001a680)=0x20000) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ram0\x00', 0x101042, 0x15) 7.07896178s ago: executing program 6 (id=2611): syz_open_dev$radio(&(0x7f0000000540), 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000140)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000180), 0x0) ioctl$MEMGETREGIONCOUNT(r0, 0x80044d07, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sec\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sec/safesetid/gid_allowlist_policy\x00', 0x0, 0x0) read(r2, 0x0, 0x0) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000d40)={0x0, 0x700}, &(0x7f0000000d80)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) r3 = getuid() keyctl$chown(0x4, 0x0, r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4a}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 6.883813228s ago: executing program 5 (id=2612): mknodat$md(0xffffffffffffff9c, &(0x7f00000001c0)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x2, 0x0) ioctl$STOP_ARRAY(r0, 0x932, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x1, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x80) ioctl$I2C_PEC(r1, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x0, 0x7, 0x4, &(0x7f0000000080)={0x1d, "146f060000000000000000000000000000000000000000000000000000000400"}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010f00000000000000006b00000008000300", @ANYRES32=0x0, @ANYBLOB="461aa495a700d4cedc8dc0203e41bdda00cf5eadb958a2f40fc78fe80664c2969af58d0e5b94eff56d8670ab9a1cd04019381b6d179f01559f0ceb75018b639860325c17e94c896d3a24cf16f2516298dacc6f4781760cd646c5beefdbd1c189dbfb9f3761c6903fc87db7cd"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000280)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write$binfmt_script(r5, &(0x7f0000000380)={'#! ', './mnt/module/block2mtd/parameters/block2mtd', [{0x20, '--+*!.V[)#-\x89%#!$([)^)},,&'}], 0xa, "4ec6fdb07f6cf2d1d72c"}, 0x53) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x40, 0x24, 0x601, 0x0, 0x1100, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x40}}, 0x0) writev(r0, &(0x7f0000001a80)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="0911017dd29eb0d8e31132fb83f66b18842909db31fcc24af5914b0285cf066f806a699b9fa451d86ded0dc6f131010906c70e77db7d51c6b2fea442efd438c6c47650bc177a75000e0319a05218c53cceb55bafc0851ee9f47786e568ca00e00a1c6f22b1c15314bb21b2cba4140ac00d6deff5148dbc0d6ddf5f37deb22eec8360cfb8e87e201ba3a791603bb7631197e0661949acdea62942801ba1a4f0533883988c9a1dc9f9caf235900f1896986527767355d96f177af4ba622f5ee62840abddf99eecaa21223e0ece17ba8b6425687373c84c774f76988a4e46072c0783487aea6dae07d9d955c8c15d83", 0xee}], 0x2) 6.392433225s ago: executing program 5 (id=2613): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x4000c0, 0x0) syz_io_uring_setup(0x6ff, &(0x7f0000000380)={0x0, 0xce1d, 0x1, 0x2, 0x9c}, &(0x7f0000000540), &(0x7f00000005c0), &(0x7f0000000600)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000700)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000740), 0x0, 0x0) read$msr(r4, &(0x7f0000000880)=""/102392, 0x18ff8) getpgid(r2) mkdir(&(0x7f0000019880)='./cgroup/../file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) getpid() mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000019b40)="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", 0x559, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000198c0)={0x11, 0x13, &(0x7f0000019980)=ANY=[@ANYBLOB="18080000000010000000000000000010851000000600000018000000", @ANYRES32], &(0x7f0000019a40)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000019a80)=0x40, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)) renameat2(r6, &(0x7f0000000580)='./cgroup\x00', r6, &(0x7f0000000780)='./cgroup\x00', 0x4) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000000000000200001302000000053e06fd"], &(0x7f0000000400)=""/236, 0x43, 0xec, 0x1}, 0x28) 6.3576226s ago: executing program 9 (id=2614): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000008050000010b"], 0x9) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80201, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000001080)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0x10, 0x0, 0x0, @by_dev={r3}, [@multipath={0x0, 0x884, 0x0, 0x98, 'multipath\x00', {'0', 0x20, '0', 0x20, 0x1, 0x20, 0x2, [{0x20, 'round-robin 0', 0x20, 0x1, 0x20, '1', [{0x20, @ram_num={'1:', 0x0}, ' 1000'}]}]}}]}) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000080)=0x8) 6.307856956s ago: executing program 0 (id=2615): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400"], 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000008c0)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000900)={0x1d, r2}, 0x10) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000007c0)={'/dev/syzrnull', 0x0}, 0x43, 0x0) vmsplice(r3, 0x0, 0x0, 0xc) write$binfmt_script(r1, &(0x7f0000000940), 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000800)={0x0, 0x1c, &(0x7f0000000840)=[@in6={0xa, 0x10, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000880)=@assoc_value={0x0}, &(0x7f0000000b00)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000b40)={r7, @in={{0x2, 0x4e20, @empty}}, 0x8, 0x6}, &(0x7f0000000c00)=0x90) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000740), 0x2800, 0x0) read$proc_mixer(r8, &(0x7f0000000780)=""/2, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000640)=0xe8) r10 = getegid() lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000480)='\x00', &(0x7f00000004c0), 0x101808, &(0x7f0000000980)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}, {@default_permissions}, {@default_permissions}, {@allow_other}, {@default_permissions}], [{@fowner_eq={'fowner', 0x3d, r11}}, {@obj_user={'obj_user', 0x3d, '{(:'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@obj_role={'obj_role', 0x3d, '-%+[]}--%'}}, {@dont_hash}, {@hash}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x35, 0x37, 0x64, 0x34, 0x35, 0x62, 0x66], 0x2d, [0x34, 0x0, 0x57, 0x35], 0x2d, [0x32, 0x65, 0x35, 0x65], 0x2d, [0x62, 0x35, 0x32, 0x33], 0x2d, [0x34, 0x38, 0x65, 0x64, 0x38, 0x30, 0x66, 0x31]}}}]}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="2030a1000000a122761d1e1172c3078a38d957df5b0cdd71a5a0eb646a998c1ac42d1ddf051adb0c4a395c49d3f5a85f8c141ee747cb31f0b222c162714eca04e506fe10865f269ff7ce56fdef220b5fcb3301ea3ac1b738e10b845e7982a4b02621458d3e5c70a60c43dfcb4fff23ce17147595305e26e6a5e0738ed01edc5a69e3ffa0bbf5a0c6922900010e51b116f39978e407eef284b0dddd747ff433"], &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x40, 0x8, 0x8b, "54dd5d55a426ae4eb97bbded88e75de42d37ff18734c9bfb85dde9255aacdc9292387f2c7235f70dd166c1a3cd3c371dfcdb41f2ae832d35451bc707072570f27180ad68e40dfe4f71de696810b7eb22a391961520905cd7c39569b3583d14048911878dae7901fe95c6c8e000fb98223300e918193b75f970b57b97107ba21e279b20b90cc43786c9c914"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x7, 0x3, 0x9, 0x7, 0x4, 0x9, 0x8, 0x1, 0x2, 0x10, 0xad, 0x6}}, &(0x7f0000000300)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x7}, &(0x7f00000003c0)={0x20, 0x89, 0x2, 0x1}}) sendmmsg$inet6(r4, &(0x7f0000003d80)=[{{&(0x7f0000000c40)={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000001040)=[{&(0x7f0000000c80)="153f74fe0cb8a58525e5baf0a18f2d1ae40459a2269d38937bb15c62b5b575991d620a559abeb5c06dee46bea541d7a2a147b8e921ae0b4eabb9e3efd6ac262ec41633302721f2b5d55d629b02fb58d2b06951f66053e683264f6eb9785decb650852a0b49c17aac05489663d129a5", 0x6f}, {&(0x7f0000000d00)="a28cde24acb6c6dea23963658f99def3837d77c92abce37d10a1253d1e640d3c93cb7ed3028542e7e750f1d90216f92a397111a19596dee5fe15155dc811c18e3f07b87d44bc2a8cab86abf22c775362e21aab9890ec34aa275081fdf89300fcedb8c7e2fb64852b69939f4a7e2c29bc6524e698a888d14cf6ca2aec69c1087fdfa1f1bc110b72fd03c5fd0c8c135a5a0229b68ccd4588d7cbfdc26e08e385871152150d9a2c30d42b5bd0be1b2735cd423719259becae4ffd15ae0b79bb3fd2", 0xc0}, {&(0x7f0000000dc0)="5a81201baf2c1c32af4eb0fbefb70be9e14f17b903e7431fdf01c2d486ebced9d205e5c143d1bc83011855242e1ffdbe74222efb7a07d4bd3411e6afee35c61d78", 0x41}, {&(0x7f0000000e40)="3391ff76de6138a579cd4c0f1c48d8ec3cb350c9ca60c4cc1383813b2db56f05430a128a4273f0a688fac88a66d998e63729be72de162145a75c58a777e1d1142ff1760bc1ad9d5e37a55da64b3f10b75dc1ee37f0f79cda84ca61eb8287198808785cb9839592cd19ddf4813502981d12bc1b956fdf4279551aea3f6097d1daf69b0abcffbe3f0b0f9c686faea38c9ea72f2584fd69482edc0eb8b566662edc1f7d52a2a995803a1aed16918c55330790bcf5d651d57d9226e14a2de401f6f66c49f71bb4ddf9ef6d6f7a535b5343a2e9", 0xd1}, {&(0x7f0000000f40)="2c9645afaee903f17bd96f4f968f0db1204f17024985f7877e582bca7b34724bb11cfc5a7ed1459af7079de058dcbc8a32cd2e48ba43cf85d339064117f236404d8003805d62eefb1a6af392cf2c8afdeff824db0044aba32ee38bcc68df0d0de214235af87f5b1c70e9ffe854f1a11c5e9467a76fb2a51a2124e61aaa92c2a0b0077b5d01c48481530206ef5a972454c689d6905d01422b163f6a9798aa9d99d8e8a3cf61e55cc884ba44800562aef59885d86cb3c72b8bd5f775b7d80cb168851080ce4b1655e5b36acd184a2eda18b175bdaa11f7b95046529bd9046ffe4f9b3d967d27d2b5f98df1da5f71235b", 0xef}], 0x5}}, {{&(0x7f00000010c0)={0xa, 0x4e22, 0x0, @empty, 0x4000000}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000001100)="ae3b127b3ff0a0b1d89f90bfc162471b94527cb903d49e139b9b0521aa89fff6d7043067d952ca9cb6ea6a36e4b5eddd6d8bc803ed0c010877852a06f354b66e3424e68ffe7cf237694bcf4a3123f67a134b69ffb2cdabc7cf1d7ea813a4ce9d24630f253839527af53dcf3e9fe579ef29aed52d454455dd36d01db374f51aabaa08a101e9adf52a4ed3a0c92cee43a3ab61efb48b56e913df3c70e18544aea2aa34e00cc98e", 0xa6}, {&(0x7f00000011c0)="6fc2a11ca07ca9c4d58c0bbaca80c80b6ea36ca70ca4a84f177215226fb773a8bda025c4222bda3965", 0x29}], 0x2, &(0x7f0000001240)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x0, 0x4, '\x00', [@pad1, @pad1, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x87, 0xe, 0x0, 0xee, 0x0, [@private2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @private0, @loopback]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}, r2}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x67, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x92ad}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @mcast1}]}}}], 0x158}}, {{&(0x7f00000013c0)={0xa, 0x4e21, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1ff}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001400)="562205690b571949ed0bbdbebe6f2da951e7d967572ebf826b536c52ac8dafb817f5302486ac2546dfaca005f56d4ae0342173623a336d2690c853c1b7366befc7799180707bf82910a32bb37dc2fe8d2c54e6dead42b89ef97c42f7744eeefb026a88fd6c95b7e5d8a43fa51450ca825250f703aa1c806e5f20ef5f1fd5905f79842292cb0c6b1c307aa709509c4ae4e4ae396e7fc468bad45991c6a2f1c2bcd239a8b865c14123b91935b4233c172a02d3051f64c373cab93b3f6fc75aaab90db58b76ab88d2ba2f47448a3cec2f869f906c755e037ccb1a880b019c4ed9037f6f8cb5c8b2ccc478475f", 0xeb}, {&(0x7f0000001500)="0640d8ee7eed2e6e0e2ac6198dc95dabe174b8ceb05e96751dd7c297ac70244231c87a549ef8a174a3e8931f2eb338d1bb97a803b5842e264b3d2b7ef83aefd1f0bfde4f2e839e7ceaf5847e911af51e1b200e7965c83f71038bda04be6e6c613f0cf1b12686abbe4e98f23c916f572824ed42b8abd0f28c7f287f7fc0f0991f82ce08ccf8b5c796047986f545bb4ed825578e0c1b78ccb68b23db072c94076eec02759cf3da0673c90c41f49dd3e4890115f432fe7be3f1a8a59234343517041b44a1ff44581382152b1fdf2823d0b0f6e24999ca5b73474d9b446182084ebf4e1e5cd236818ce205e194204db1fa081f680263fe3a24c8", 0xf8}, {&(0x7f0000001600)="08268dc50985d515b9ad7b41f2def41fcef97990bfa65c47bd59f6991651dd97f2f3af003235201ab5aa2acf193ffe550b2ee964986582444f01cad4dccf6a924da0e93ac0972650beb8ccb5ed7de813ff5c193c004105ea01e2e6a65d0c1fcc60fecf70a1d2fcc46b076361ec2ca7e394bbcb7b4f4d952ff61b31dec4083ba3b0fb4fdf84d175d51b1f03feb10fea7cebd16d7e48d79ac338f07f61eddce42527fa3b2999b95978016e56ab3adc1bec2fc8e4ca735eb47c061c6455fe9ddaaf6da8", 0xc2}, {&(0x7f0000001700)="172e6adb10abbe9b90a221d42ba88306ff1dae2afdb1eeca67edd05f843c739a324833409d7578f3b5adbb34c0a2dedf1ec7a27f64028df7ff365c3c2a9e4d44ed04173cd17dfe8d8365dc53cfc97f88c5570fbe71123c8216980d54831db5a8e9a9304ddcbeba0ce00b19d662bb0aaaec42d6a62c56b2a1d36f4599956bd6941e0513b1c560cd51a7eaf29e4e3c3814c41696dc74807e81b2f52f73d4301143401af369ee1054b488d23859295b7b51168aca74c99dd97fc3ef3f8f04df0dac17c7e9ceeebca681ad9b5ad26334219a1c7a788aa04e2a49ee3b697426c13f6f07b6", 0xe2}, {&(0x7f0000001800)="8efb4ce26163b741ef5944bac7d3dec9aec7aec6b620aa9d3546097f4f65a28dc823a397901740dc0043bad059e716ab02383ec41021e2c5c4c706d507e9a7dfc447f344ede2161bd21598f2c0544eb9692b031790b4e8c8c711cbe1946396596b765703402bfa0f0e284f59e13616b8b56fa73215991089e7cd9acd66575417859451ad3577357754cdac8a3242fba84f0507a8256c9bdfb17a58c949150c28b938b883678f934b8f73f5fd216811ebe9295fd469f3192b1445beea", 0xbc}, {&(0x7f00000018c0)}, {&(0x7f0000001900)="5d75d1c429ec64efb8a088d74d608727a6921fc52c09298eb0723040759e99b7197d19fa6e786877732f5c17eb98c39976eb40e9fabc9ef5b8c16c393156563ca732013bc58e63c18074f2b7ccd862eb076baec16187b1902c407e33da412b9af456a94adb751884939faf4580d46b8c2bdf", 0x72}, {&(0x7f0000001980)="8fbc85152fa5750619a9b3482940fcf250430c", 0x13}], 0x8, &(0x7f0000001a40)=[@tclass={{0x14, 0x29, 0x43, 0x4}}], 0x18}}, {{&(0x7f0000001a80)={0xa, 0x4e22, 0x7, @private2, 0x4}, 0x1c, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)="691331b2aed315a5f13f7ec4bc47c27651004954eac5b90dedcdb77c905505054ffb3e7e94fb72ebef00f4bd73e0702042bbb4635a2c3ebe91991f6bc87a0fb6b137eee0a3ba3299d460f9155e3a8fea76acc5b0bdc2e2aa9d0a15f9984155943788f583264746a20cd961d1d5b40c1a9408b2abf628e713d47af348d76dcb513b8a88c3b390d94efc9678420ddc4b66144060dede3836f4b2b9ce5749adb1d5d7ee9d61750ff6a0a7029b685ba5", 0xae}, {&(0x7f0000001b80)="74daa307ebbd0303a6b70bf2fd781baa5ee396384fbb83", 0x17}], 0x2, &(0x7f0000001c00)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x84, 0x9, '\x00', [@generic={0x1, 0x16, "5543f3a28392b522b48fb214558b8bfc68228d93853a"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo, @calipso={0x7, 0x28, {0x3, 0x8, 0x40, 0x1, [0xc568, 0xcfa, 0x613, 0x7]}}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3c, 0x4, 0x0, 0x7, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0xff, 0x6, 0x1, 0x2, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}}}], 0x100}}, {{&(0x7f0000001d00)={0xa, 0x4e20, 0x7, @mcast2, 0x7fffffff}, 0x1c, &(0x7f0000001e00)=[{&(0x7f0000001d40)="144e970ca4cc7d0311223c2d1e47d6da616b9dc3095500260409bef21857ff204c44fab8e154f9c674c5e8aa53f70a4c7cb29c939e9aa16224324dbf618b6274e558478a73b5bc2d04d3a9939fcf11154bb475d7f88091962f342877de04b1b733f7f4f8727415f7d6f1d77ab034ca423c69170dc9d9866c91eb25a3be584386751027070c58645f542af942479ca9085dd8caa5c9a08ab70c606a13", 0x9c}], 0x1, &(0x7f0000001e40)=[@rthdr={{0x58, 0x29, 0x39, {0x1, 0x8, 0x0, 0x9, 0x0, [@mcast2, @loopback, @empty, @private2]}}}, @dstopts={{0x20, 0x29, 0x37, {0x16, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x1, 0x2, 0x0, [@loopback]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x73, 0xa, 0x2, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x37}, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x4, 0x10, 0x2, 0x6, 0x0, [@mcast2, @local, @empty, @dev={0xfe, 0x80, '\x00', 0x34}, @private0, @dev={0xfe, 0x80, '\x00', 0xc}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x7f, 0x10, 0x0, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x3a, 0x5, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0xf9, 0x2, [0x81, 0xfffffffffffffff4, 0x3, 0xae34]}}, @ra]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3ff}}], 0x2c8}}, {{&(0x7f0000002140)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0xe8b3}, 0x1c, &(0x7f0000002680)=[{&(0x7f0000002180)="45355aadfb685a529e0b72dc9fad", 0xe}, {&(0x7f00000021c0)="f80337b30c6cd68c62adcedac2a01840ecab3fd41dde280f0bad69e9c38db4127a499be38222f06e3a2d0be175e6e2ea59afbf8afa55f836e3daa6db1c7f6b948b8345e65318", 0x46}, {&(0x7f0000002240)="dc2bd3f8fd3aa49c60a2188f8789b113af8c50ec91acd4432b8e2a45ae82518bff143441f4c1a6ac6235e7719289d509f8d8af8d923fea127b41343c75021e451edf3a65205ca46c5a47a56180db8855295e49da8ae22104fd110a9e2fcb7239fc307a425789c09f15cae09cb507c8121d9052222a4484c84eb58726cdb183994c71379739a13ca7cb5e276a4706b6dc1fc68b7d0e696f9f2ddecfd090538154a7832163548d20e4defa1ab848e1413ac079c02b20ab1ba2bc4e431c1db6681a5625a70f7eaacf45dff7730983b85999133ebb7f06fd242604616e9326aff013077eb88202", 0xe5}, {&(0x7f0000002340)}, {&(0x7f0000002380)="7dea15f0e627ba4ce050e58d0fd3035608f73cfbf8368fbdc142e3befdb70cd1fb976e4ce2227b71a0cf9ec2ef21f50d131b9015357766648ce43042a7ccc483d884bd986d6fe25155cd8d29bc8617206f3a28b4b5", 0x55}, {&(0x7f0000002400)="5cb5632494e380c2f3f58e624507f5a046eb75e66c247f316b0a3e8beda10c300396760e90e2fec6d40e67d1c0f9773c91940ce2a80bd4c0d6d4245e3e9d78d5d2aab15d521632e300d15d1435cedee8ff9cd6eb6f0179692bf91c9e7df5c528f6c00fb5c976d419a2d0553abaf8f8033173", 0x72}, {&(0x7f0000002480)="88119814b7817866fbf77e60f190b64ab4d2f4ee925f9e7afdc465070589cc250f7174d4f6bf4d681830e312e48a078dbf2fb558101481e15f22a109be8b518fc1b35bd0b0b8e158a910fda2ef951ae8bcce6cb05a96486ed5d53c689289dcc2356a193dd223d0fab0fc3d12b8108a6e2ff612eb3b2a9bc39e6129f240f6aa8b42b047a6c9f3f8c67851583838b7e6d97c11127568700c8e5bd64bf2c74aeea8dacad4dbbf53743f", 0xa8}, {&(0x7f0000002540)="9e819012470f3c0fb9f5bb523b7af1f9c1b06bb9391f0c4474565ff3d0d52db930533ab944def346525fa92e57174d06671195c3d9944a6e5902f0a233140843085c414346b7a6dbea078171c8db3e9fb2d8e213b3db8172496e438e36ea723a5aba335eee7269ae4d1c7f9495f74e19a8a5765905003cf8c1a015f8ebeb355c9ea84231978337dbbcdbad9b6c2fa4adf27c542a346c8f0045ab926929658185f597de702f89dc6ca3b2f1f2a1d2693b1d4e0a38d63700ea8a67c3b09f937de5ba1261cebbb9a8749cf62bbde3396c7c440fdd368fd09e8a399b2c3ea34257e32ce81df6152d972d32bbb9d920", 0xed}, {&(0x7f0000002640)="a81dc6c7b9dcd21909b26369421d18978dd58648a5b5abc56b490c3696bae37bbd3d4380333c1c502a490af1c9a1df7ddd", 0x31}], 0x9, &(0x7f0000002740)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x2b, 0x3, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x6, 0x9, [0xb]}}, @pad1, @jumbo={0xc2, 0x4, 0x8}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffffff}}, @hopopts_2292={{0x70, 0x29, 0x36, {0xc, 0xa, '\x00', [@calipso={0x7, 0x50, {0x2, 0x12, 0x3, 0x3, [0x400, 0x47, 0x80, 0x8000000000000000, 0x1, 0x0, 0x100000001, 0x3846, 0x1]}}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x1d, 0x2, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x2c, 0x9, '\x00', [@ra={0x5, 0x2, 0x8}, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x3, 0x0}}}, @jumbo={0xc2, 0x4, 0x4}, @pad1]}}}], 0x178}}, {{&(0x7f00000028c0)={0xa, 0x4e20, 0x7, @mcast2, 0x6d9}, 0x1c, &(0x7f0000003980)=[{&(0x7f0000002900)="3e37ae84874883749ffbd13f185a812917b1487e10cee8978e1907e793f8f533", 0x20}, {&(0x7f0000002940)="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", 0x1000}, {&(0x7f0000003940)="6a3994dc4741e4a51153ff3d376d4a2f351796ed0e53b77909924cf31c21b591555ac5239dd2feb7fd75038486613c", 0x2f}], 0x3, &(0x7f00000039c0)=[@tclass={{0x14, 0x29, 0x43, 0xfffffa4f}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x48}}, {{&(0x7f0000003a40)={0xa, 0x4e24, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}, 0x1c, &(0x7f0000003cc0)=[{&(0x7f0000003a80)="11e6d2b4ab4ae45c6fda3151fc9ed8c27b72b4dccd7598b17b5525b4151ea155b43a4169a077683610b519d632feced2c73023868d0313788db32fcc49731585ffde4702f8aa40aeeedb5dde3495d3184fcec5f3a57560ba6b428bd9574803daa1ea26e69f79f493d68521d95432e06c28bed2871bf7cb0fb29d51e1bce3d24934d1e8dbb8c3477fc42aab69bf6a11dc8ae8952e357d1dedeb8cea8b9195919f475f442501dfed4cc7f6ca4bb5c1b76bcaa74300db0c492aa95d325524daaa34092cb69b7ccd111e7e8adfa255a6df771750f3872297ca3920172ed781facb20fcb80fe1fdeba7324d021ff6e02f35", 0xef}, {&(0x7f0000003b80)="1512d96b77e42bbfdcc5a121506f4202b44c3f403e63738bff5e3a5da48e56df4c32461cea9e421d5686addb33670ccb750d4749aabec90772adeac7c70d8bab71ff0319a836ae2ed8b245a7e6268fd52afa7990eb1ab13bb076dc2674d0c9b8758b0bd5e980fbfe5ca9c54e71d36e0640418d10ac400184693f91fb6decd2969123f40f2b478f8b18e62cc4168e4500f63e22a97043abb823a25fe4f479b9da743a779b95fa7268e9b787bc9e9e72e228880efbb26edf8fe60d188947e94ba2fc6bef7ed25186631160", 0xca}, {&(0x7f0000003c80)="1839039be596c1", 0x7}], 0x3, &(0x7f0000003d00)=[@dontfrag={{0x14, 0x29, 0x3e, 0xe}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x2, 0x6, 0x0, [@local, @mcast1, @remote]}}}], 0x60}}], 0x8, 0x2040094) 5.474742232s ago: executing program 5 (id=2616): r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000340)={0x0, 0xc569, 0x10000, 0x2, 0x20e}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000580)}], 0x0, 0x2}, 0x20) 5.463657613s ago: executing program 3 (id=2617): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)={0x114, 0x32, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x5a, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic='\x00\x00\x00\x00\x00\x00\x00', @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a96ae52bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331", @typed={0xc, 0x0, 0x0, 0x0, @u64=0x79}]}]}, 0x114}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000e40)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000e80)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x6}}]}, 0x20}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x6}}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@gettfilter={0x5c, 0x2e, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0x10}, {0x9, 0xffe0}, {0x1, 0x8}}, [{0x8, 0xb, 0x87}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x132}, {0x8, 0xb, 0x1}, {0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1, 0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000080)={{0x0, 0x2, 0x4, 0x2, 0x3}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000001180), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000012c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300a00000014000000020a0500000000000000000000000008140000001100010000000000000000000000000a"], 0x5c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d4552000000080002400000000134000300"], 0x104}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d4552000000080002400000000134000300"], 0x104}}, 0x0) sendto$inet(r1, &(0x7f0000001740)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000001900)='westwood', 0x8) recvfrom$inet(r1, &(0x7f0000001940), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 4.980915602s ago: executing program 9 (id=2618): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1d2) mkdir(&(0x7f0000000040)='./file1\x00', 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='9p\x00', 0x0, &(0x7f0000000540)='%\\\xb8*}\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x28, r2, 0x5, 0x0, 0x21dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000380)={0x20, 0xb, 0x1, "f7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000180)='./bus\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x21c0, 0x103) 4.602969248s ago: executing program 6 (id=2619): r0 = socket$kcm(0x11, 0x3, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000009c0), 0x4) shutdown(0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) futex(0x0, 0x6, 0x1, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) select(0x40, &(0x7f0000000580)={0x7, 0x4, 0x0, 0x5, 0xfffffffffffffffc, 0x1e7, 0xffffffffffffffff, 0x9}, &(0x7f00000005c0)={0x9, 0x7, 0x7, 0x1, 0x200000000000000, 0x8, 0x1000, 0x3}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_emit_ethernet(0xbe, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00002000000119078000000000000000000004e20009c9078010000000200000018757863c4b857019c7a676c123c5676e276930c334d0ac2af0c06bde6f077f8ed08ad4d97143a85ff45187b0d1f67b1891a99e7570fb6092c45a71010a986c20c3aaabd6e47a7a3d9a2da906f818de3c8793f59c78e40a88c6c80ef5fb53bb079d94711f6c31a409efa6de3ef4c75d9967d4915432736e26d72d90c8e6479801e0173aedb791ec7a5"], 0x0) 3.638957104s ago: executing program 3 (id=2620): syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) clock_settime(0xfffffffb, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c001080"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x314, 0xffffffff, 0x0, 0x18c, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x9c, 0xc0, 0x0, {0x100000000000000}, [@common=@unspec=@connmark={{0x2c}, {0x5}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x33, {0xd4e}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb4, 0xf4, 0x0, {}, [@common=@unspec=@connlabel={{0x24}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x370) mount$fuse(0x0, 0x0, 0x0, 0x2000413, &(0x7f0000000840)=ANY=[]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000880)=0x7f, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000002040)=[{{&(0x7f00000020c0)={0xa, 0x4e24, 0xffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000002100)=[{&(0x7f0000002140)="ac", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) listen(r4, 0xfff) accept(r4, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r5) 3.458100874s ago: executing program 6 (id=2621): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000193c0)=ANY=[@ANYRES32=r4], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000019400)={{r5, 0xffffffffffffffff}, &(0x7f0000019440), &(0x7f0000019480)}, 0x20) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000194c0)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000019500)={0x6, 0x4, &(0x7f00000195c0)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f0000019600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r8, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019640)={r9, r8, 0x25, 0x2, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000019680)={{r6}, &(0x7f00000196c0), &(0x7f0000019700)}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r10 = syz_clone(0x4084111, 0x0, 0x1d, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r10, 0x1, &(0x7f0000019740)={0x14, 0x1, 0xfee9}) close(0xffffffffffffffff) r11 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r11, 0x0, 0x4d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) 681.15171ms ago: executing program 6 (id=2622): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x82002, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0)=0x80) cachestat(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dvb_dvr(0x0, 0x0, 0x100) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x6, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0x8, 0x0) 571.247231ms ago: executing program 5 (id=2623): setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x80) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x114, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x133e}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd1de}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xf4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x48}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x74d}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4c002}, 0x8000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000340)) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000003c0)=""/123, &(0x7f0000000440)=0x7b) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40840}, 0x8000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r2, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x2) clock_gettime(0x0, &(0x7f0000001b40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/220, 0xdc}], 0x1, &(0x7f0000000880)=""/201, 0xc9}, 0x1}, {{&(0x7f0000000980)=@caif, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, &(0x7f0000001a40)=""/115, 0x73}, 0x101}], 0x2, 0x41, &(0x7f0000001b80)={r3, r4+10000000}) ioctl(r0, 0x800, &(0x7f0000001bc0)="cec7cf31941f28fd9bba72dd3f99c1512c1435d1534e42f862f727cbbdbf0b4404156960ade7133109473a9e8f38ea4f1667216e6d492b9d2791f290f386b539f18c0b092fbc7043f34fdfc3189a3d04d0bfd999e7f3eb6c69fb027f3b08ae2a55fc25b138ce925fd10e580e88ce24471b8c4aa56fe87bd2efcf0c0952c129a54528f4d856beb734d6be172b46fa0d0caea554e32eca0e9187e334b30ab191317618f450d48331bead313d65f9fd7eac2f1fafdb42f3a3000f7efe889eeb05") r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001c80)='./binderfs/binder1\x00', 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x2a, &(0x7f0000001cc0)="8600323107700e317ffac3ef3151228ae9398ddd7c01a940840e405efe57224dfcb74f3ba57f0301b949e07b65d3e0a68d4fe83a7adca70205c52942f42539fbb122a47a34e6d4a637c7c91c", 0x4c) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'wg0\x00'}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000001d80)={0x9, 0x4, 0x40, 0x7, 0x9, 0xfffffff9}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x40, r6, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x202]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x55}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004804}, 0x24040085) fsetxattr$security_selinux(r5, &(0x7f0000001f40), &(0x7f0000001f80)='system_u:object_r:system_cron_spool_t:s0\x00', 0x29, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r1) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000002000)={0x10, 0x0, "276bedd64bd2d4bf080d59fcf78e0297"}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x40, r6, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x29}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x851) syz_emit_ethernet(0x4a, &(0x7f0000002140)={@empty, @link_local, @val={@val={0x88a8, 0x6, 0x1, 0x4}, {0x8100, 0x7, 0x1, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @mcast2, @local, @loopback}}}}, 0x0) syz_open_dev$video(&(0x7f00000021c0), 0xffffffffffffff7f, 0x101080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000002380)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x6c, r9, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x841) 381.808835ms ago: executing program 0 (id=2624): futex_waitv(&(0x7f0000000400)=[{0x0, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) 379.987456ms ago: executing program 9 (id=2625): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000040), 0x4) close(r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000140)={0x34, &(0x7f0000000180)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000001c0)={0x84, &(0x7f00000002c0)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000480)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6f874c37fadb9a65, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 68.811698ms ago: executing program 0 (id=2626): connect$pptp(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x87, 0x7ffc0204}]}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getresgid(&(0x7f0000005200), &(0x7f0000005240), &(0x7f0000005280)) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80580, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000680)={0x0, 0x8270, 0x400, 0x3, 0x2ca}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x7001}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000940)={'syzkaller0\x00', @multicast}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000980)=[{0x0}], 0x178) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x3, "abacd211119ca94c63377526aeb5ab2c0400000007558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000200)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25"}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000002c0)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r0, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x420ec1, 0x1b1) setns(0xc9, 0x0) r8 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x40106183, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) rseq(&(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1, 0x1, 0x4, 0x7}, 0x2}, 0x20, 0x1, 0x0) close_range(r1, r2, 0x0) ppoll(&(0x7f0000000280)=[{r7, 0x90}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000", @ANYBLOB="f10dcc5db56515"], 0x0, 0x34}, 0x28) 0s ago: executing program 3 (id=2627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1bf5b}}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r1, 0x719, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x880) kernel console output (not intermixed with test programs): ] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.497340][T15257] FAULT_INJECTION: forcing a failure. [ 1050.497340][T15257] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.497361][T15257] CPU: 0 UID: 0 PID: 15257 Comm: syz.0.2372 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.497379][T15257] Tainted: [L]=SOFTLOCKUP [ 1050.497384][T15257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1050.497391][T15257] Call Trace: [ 1050.497396][T15257] [ 1050.497401][T15257] dump_stack_lvl+0x100/0x190 [ 1050.497433][T15257] should_fail_ex.cold+0x5/0xa [ 1050.497454][T15257] should_failslab+0xc2/0x120 [ 1050.497469][T15257] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1050.497488][T15257] ? selinux_socket_create+0xe7/0x590 [ 1050.497503][T15257] ? sock_alloc_inode+0x26/0x2c0 [ 1050.497520][T15257] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1050.497535][T15257] sock_alloc_inode+0x26/0x2c0 [ 1050.497549][T15257] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1050.497563][T15257] alloc_inode+0x68/0x250 [ 1050.497581][T15257] sock_alloc+0x42/0x240 [ 1050.497595][T15257] __sock_create+0xc2/0x860 [ 1050.497612][T15257] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1050.497634][T15257] __sys_socketpair+0x170/0x580 [ 1050.497652][T15257] ? __pfx___sys_socketpair+0x10/0x10 [ 1050.497670][T15257] ? xfd_validate_state+0x129/0x190 [ 1050.497693][T15257] __x64_sys_socketpair+0x96/0x100 [ 1050.497711][T15257] ? lockdep_hardirqs_on+0x7d/0x110 [ 1050.497730][T15257] do_syscall_64+0x123/0x790 [ 1050.497750][T15257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.497763][T15257] RIP: 0033:0x7fcda39a0dfa [ 1050.497773][T15257] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.497785][T15257] RSP: 002b:00007fcda48d2f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1050.497798][T15257] RAX: ffffffffffffffda RBX: 00007fcda3c25f00 RCX: 00007fcda39a0dfa [ 1050.497806][T15257] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1050.497813][T15257] RBP: 00007fcda3a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1050.497820][T15257] R10: 00007fcda48d2f88 R11: 0000000000000246 R12: 0000000000000001 [ 1050.497828][T15257] R13: 00007fcda3c26038 R14: 00007fcda3c25fa0 R15: 00007ffc384fe1a8 [ 1050.497844][T15257] [ 1050.497851][T15257] socket: no more sockets [ 1052.011456][T15269] x_tables: duplicate underflow at hook 3 [ 1052.094287][T15275] FAULT_INJECTION: forcing a failure. [ 1052.094287][T15275] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.094309][T15275] CPU: 0 UID: 0 PID: 15275 Comm: syz.6.2374 Tainted: G L syzkaller #0 PREEMPT(full) [ 1052.094327][T15275] Tainted: [L]=SOFTLOCKUP [ 1052.094331][T15275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1052.094339][T15275] Call Trace: [ 1052.094343][T15275] [ 1052.094348][T15275] dump_stack_lvl+0x100/0x190 [ 1052.094372][T15275] should_fail_ex.cold+0x5/0xa [ 1052.094391][T15275] should_failslab+0xc2/0x120 [ 1052.094404][T15275] __kvmalloc_node_noprof+0x113/0x9b0 [ 1052.094423][T15275] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1052.094447][T15275] ? io_uring_setup.cold+0x1f4/0x1c7e [ 1052.094464][T15275] io_uring_setup.cold+0x1f4/0x1c7e [ 1052.094479][T15275] ? lock_acquire+0x1d1/0x380 [ 1052.094495][T15275] ? avc_has_perm_noaudit+0x56/0x470 [ 1052.094510][T15275] ? __pfx_io_uring_setup+0x10/0x10 [ 1052.094523][T15275] ? find_held_lock+0x2b/0x80 [ 1052.094535][T15275] ? avc_has_perm_noaudit+0x11e/0x470 [ 1052.094548][T15275] ? avc_has_perm_noaudit+0x11e/0x470 [ 1052.094572][T15275] ? ksys_write+0x1ac/0x250 [ 1052.094583][T15275] ? __pfx_ksys_write+0x10/0x10 [ 1052.094597][T15275] __x64_sys_io_uring_setup+0xc2/0x170 [ 1052.094612][T15275] do_syscall_64+0x123/0x790 [ 1052.094632][T15275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.094645][T15275] RIP: 0033:0x7f9d1539f559 [ 1052.094655][T15275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.094667][T15275] RSP: 002b:00007f9d16234ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1052.094680][T15275] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f9d1539f559 [ 1052.094687][T15275] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000002d5 [ 1052.094695][T15275] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 1052.094702][T15275] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 1052.094709][T15275] R13: 0000200000000890 R14: 00007f9d16234fd8 R15: 0000000000000000 [ 1052.094725][T15275] [ 1052.428935][ T30] audit: type=1400 audit(1793226846.347:4044): avc: denied { write } for pid=15252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1052.709922][ T30] audit: type=1400 audit(1793226846.627:4045): avc: denied { write } for pid=15292 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1052.818340][T15295] syzkaller0: entered promiscuous mode [ 1052.818356][T15295] syzkaller0: entered allmulticast mode [ 1052.988751][T15306] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1053.022023][T15309] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2371'. [ 1053.167290][ T30] audit: type=1800 audit(1793226847.087:4046): pid=15313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2378" name="control" dev="sysfs" ino=4874 res=0 errno=-22 [ 1053.205720][T15084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.662702][ T30] audit: type=1400 audit(1793226847.577:4047): avc: denied { write } for pid=15310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1053.745643][T15084] veth0_vlan: entered promiscuous mode [ 1053.766130][T15084] veth1_vlan: entered promiscuous mode [ 1053.828628][T15084] veth0_macvtap: entered promiscuous mode [ 1053.844273][T15084] veth1_macvtap: entered promiscuous mode [ 1053.975534][ T30] audit: type=1400 audit(1793226847.897:4048): avc: denied { write } for pid=15332 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1054.134535][T15336] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1054.161477][T15084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.195714][T15084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.232906][T14273] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.233275][T14273] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.233296][T14273] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.233314][T14273] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.375130][ T30] audit: type=1800 audit(1793226848.297:4049): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227125 res=0 errno=-22 [ 1055.108251][T14278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.108267][T14278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.110919][ T30] audit: type=1800 audit(1793226849.027:4050): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227251 res=0 errno=-22 [ 1055.256528][ T30] audit: type=1800 audit(1793226849.177:4051): pid=13156 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="warn_count" dev="sysfs" ino=53339 res=0 errno=-22 [ 1055.324381][T14277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.324396][T14277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.516351][T15336] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1056.550214][T15336] overlayfs: failed to look up (tracing) for ino (-66) [ 1056.575942][ T30] audit: type=1800 audit(1793226850.497:4052): pid=15356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2383" name="comp_algorithm" dev="sysfs" ino=20982 res=0 errno=-22 [ 1056.795362][ T30] audit: type=1400 audit(1793226850.717:4053): avc: denied { write } for pid=15343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.967178][ T30] audit: type=1400 audit(1793226851.887:4054): avc: denied { write } for pid=15375 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1058.042704][T15379] overlayfs: missing 'lowerdir' [ 1058.065525][ T30] audit: type=1800 audit(1793226851.987:4055): pid=15379 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2388" name="dev_id" dev="sysfs" ino=136706 res=0 errno=-22 [ 1060.471021][T15379] gadgetfs: bound to dummy_udc driver [ 1060.837886][T15400] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1061.247900][ T30] audit: type=1400 audit(1793226855.167:4056): avc: denied { write } for pid=15393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.316197][T15410] Illegal XDP return value 1093747025 on prog (id 117) dev syz_tun, expect packet loss! [ 1061.316219][T15410] FAULT_INJECTION: forcing a failure. [ 1061.316219][T15410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.316234][T15410] CPU: 0 UID: 0 PID: 15410 Comm: syz.5.2392 Tainted: G L syzkaller #0 PREEMPT(full) [ 1061.316250][T15410] Tainted: [L]=SOFTLOCKUP [ 1061.316255][T15410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1061.316263][T15410] Call Trace: [ 1061.316267][T15410] [ 1061.316272][T15410] dump_stack_lvl+0x100/0x190 [ 1061.316296][T15410] should_fail_ex.cold+0x5/0xa [ 1061.316314][T15410] _copy_to_user+0x32/0xd0 [ 1061.316329][T15410] simple_read_from_buffer+0xcb/0x170 [ 1061.316351][T15410] proc_fail_nth_read+0x1af/0x230 [ 1061.316367][T15410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1061.316382][T15410] ? rw_verify_area+0xce/0x6d0 [ 1061.316399][T15410] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1061.316413][T15410] vfs_read+0x1e4/0xb40 [ 1061.316432][T15410] ? lock_acquire+0x1d1/0x380 [ 1061.316447][T15410] ? __fget_files+0x34/0x3d0 [ 1061.316461][T15410] ? __pfx_vfs_read+0x10/0x10 [ 1061.316477][T15410] ? find_held_lock+0x2b/0x80 [ 1061.316490][T15410] ? __fget_files+0x215/0x3d0 [ 1061.316506][T15410] ? __fget_files+0x21f/0x3d0 [ 1061.316524][T15410] ksys_read+0x12a/0x250 [ 1061.316541][T15410] ? __pfx_ksys_read+0x10/0x10 [ 1061.316564][T15410] do_syscall_64+0x123/0x790 [ 1061.316584][T15410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.316597][T15410] RIP: 0033:0x7f5fa495fd8e [ 1061.316607][T15410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1061.316618][T15410] RSP: 002b:00007f5fa58e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1061.316631][T15410] RAX: ffffffffffffffda RBX: 00007f5fa58ea6c0 RCX: 00007f5fa495fd8e [ 1061.316639][T15410] RDX: 000000000000000f RSI: 00007f5fa58ea0a0 RDI: 0000000000000006 [ 1061.316646][T15410] RBP: 00007f5fa58ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.316653][T15410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.316660][T15410] R13: 00007f5fa4c26038 R14: 00007f5fa4c25fa0 R15: 00007ffc55a3cdc8 [ 1061.316676][T15410] [ 1061.649430][T15413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2385'. [ 1062.398732][T15417] ubi0: attaching mtd0 [ 1062.399530][T15417] ubi0: scanning is finished [ 1062.399553][T15417] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1062.456171][ T30] audit: type=1400 audit(1793226856.377:4057): avc: denied { write } for pid=15415 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1062.524183][T15417] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1062.679875][ T30] audit: type=1800 audit(1793226856.597:4058): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227586 res=0 errno=-22 [ 1062.717816][ T30] audit: type=1800 audit(1793226856.637:4059): pid=15395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227495 res=0 errno=-22 [ 1063.388532][T15429] ubi0: attaching mtd0 [ 1063.389373][T15429] ubi0: scanning is finished [ 1063.389396][T15429] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1063.494575][T15429] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1065.243671][T15452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2403'. [ 1066.242056][ T30] audit: type=1800 audit(1793226860.157:4060): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227645 res=0 errno=-22 [ 1066.980947][T15463] ubi0: attaching mtd0 [ 1066.981770][T15463] ubi0: scanning is finished [ 1066.981797][T15463] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1067.053857][T15463] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1067.227737][ T30] audit: type=1326 audit(1793226861.147:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15459 comm="syz.0.2404" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcda399f559 code=0x0 [ 1067.635728][ T30] audit: type=1400 audit(1793226861.557:4062): avc: denied { bind } for pid=15470 comm="syz.0.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1067.664625][ T30] audit: type=1400 audit(1793226861.577:4063): avc: denied { relabelfrom } for pid=15468 comm="syz.9.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1067.688550][ T30] audit: type=1400 audit(1793226861.607:4064): avc: denied { relabelto } for pid=15468 comm="syz.9.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1067.873828][T15471] rxe_eth0 speed is unknown, defaulting to 1000 [ 1067.954520][ T30] audit: type=1800 audit(1793226861.877:4065): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=228281 res=0 errno=-22 [ 1068.046168][ T30] audit: type=1800 audit(1793226861.967:4066): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=228530 res=0 errno=-22 [ 1068.348233][T15477] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1068.400968][ T30] audit: type=1800 audit(1793226862.317:4067): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31628 res=0 errno=-22 [ 1068.428738][ T30] audit: type=1800 audit(1793226862.347:4068): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31651 res=0 errno=-22 [ 1068.499176][T15482] FAULT_INJECTION: forcing a failure. [ 1068.499176][T15482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.499198][T15482] CPU: 0 UID: 0 PID: 15482 Comm: syz.6.2406 Tainted: G L syzkaller #0 PREEMPT(full) [ 1068.499220][T15482] Tainted: [L]=SOFTLOCKUP [ 1068.499225][T15482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1068.499232][T15482] Call Trace: [ 1068.499237][T15482] [ 1068.499242][T15482] dump_stack_lvl+0x100/0x190 [ 1068.499265][T15482] should_fail_ex.cold+0x5/0xa [ 1068.499283][T15482] _copy_from_user+0x2e/0xd0 [ 1068.499298][T15482] get_user_ifreq+0xe7/0x250 [ 1068.499313][T15482] sock_do_ioctl+0x16e/0x280 [ 1068.499328][T15482] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1068.499342][T15482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1068.499365][T15482] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1068.499382][T15482] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 1068.499403][T15482] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1068.499424][T15482] sock_ioctl+0x599/0x6b0 [ 1068.499444][T15482] ? __pfx_sock_ioctl+0x10/0x10 [ 1068.499464][T15482] ? selinux_file_ioctl+0x1e0/0x290 [ 1068.499482][T15482] ? selinux_file_ioctl+0x1e7/0x290 [ 1068.499501][T15482] ? __pfx_sock_ioctl+0x10/0x10 [ 1068.499518][T15482] __x64_sys_ioctl+0x18e/0x210 [ 1068.499537][T15482] do_syscall_64+0x123/0x790 [ 1068.499558][T15482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.499570][T15482] RIP: 0033:0x7f9d1539f559 [ 1068.499580][T15482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.499592][T15482] RSP: 002b:00007f9d16235028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1068.499604][T15482] RAX: ffffffffffffffda RBX: 00007f9d15625fa0 RCX: 00007f9d1539f559 [ 1068.499612][T15482] RDX: 0000200000000700 RSI: 0000000000008943 RDI: 0000000000000005 [ 1068.499619][T15482] RBP: 00007f9d16235090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.499626][T15482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.499633][T15482] R13: 00007f9d15626038 R14: 00007f9d15625fa0 R15: 00007ffd40d9f828 [ 1068.499649][T15482] [ 1068.735117][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1068.932930][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1068.935632][ T9] usb 10-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1068.936354][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 1068.936372][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 1068.937781][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.937795][ T9] usb 10-1: Product: syz [ 1068.937804][ T9] usb 10-1: Manufacturer: syz [ 1068.937813][ T9] usb 10-1: SerialNumber: syz [ 1068.939975][ T30] audit: type=1800 audit(1793226862.857:4069): pid=15396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=231612 res=0 errno=-22 [ 1068.941871][ T9] usb 10-1: config 0 descriptor?? [ 1069.879063][ T30] audit: type=1800 audit(1793226863.797:4070): pid=15396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=231644 res=0 errno=-22 [ 1070.035266][ T9] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1070.170017][ T10] usb 10-1: USB disconnect, device number 2 [ 1070.172627][T14279] usb 10-1: Failed to submit usb control message: -71 [ 1070.172647][T14279] usb 10-1: unable to send the bmi data to the device: -71 [ 1070.172657][T14279] usb 10-1: unable to get target info from device [ 1070.172666][T14279] usb 10-1: could not get target info (-71) [ 1070.172911][T14279] usb 10-1: could not probe fw (-71) [ 1071.204668][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1071.206130][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1071.224153][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1071.235048][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1071.235395][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1071.331450][T15513] FAULT_INJECTION: forcing a failure. [ 1071.331450][T15513] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.331472][T15513] CPU: 0 UID: 0 PID: 15513 Comm: syz.0.2418 Tainted: G L syzkaller #0 PREEMPT(full) [ 1071.331489][T15513] Tainted: [L]=SOFTLOCKUP [ 1071.331493][T15513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1071.331500][T15513] Call Trace: [ 1071.331505][T15513] [ 1071.331512][T15513] dump_stack_lvl+0x100/0x190 [ 1071.331535][T15513] should_fail_ex.cold+0x5/0xa [ 1071.331554][T15513] should_failslab+0xc2/0x120 [ 1071.331567][T15513] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1071.331586][T15513] ? fasync_helper+0x3d/0xd0 [ 1071.331606][T15513] fasync_helper+0x3d/0xd0 [ 1071.331623][T15513] sock_fasync+0x92/0x140 [ 1071.331639][T15513] ? __pfx_sock_fasync+0x10/0x10 [ 1071.331653][T15513] do_fcntl+0x4b7/0x16c0 [ 1071.331670][T15513] ? __pfx_do_fcntl+0x10/0x10 [ 1071.331691][T15513] ? selinux_file_fcntl+0xe5/0x170 [ 1071.331707][T15513] __x64_sys_fcntl+0x163/0x200 [ 1071.331725][T15513] do_syscall_64+0x123/0x790 [ 1071.331745][T15513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.331758][T15513] RIP: 0033:0x7fcda399f559 [ 1071.331768][T15513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.331779][T15513] RSP: 002b:00007fcda48d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1071.331791][T15513] RAX: ffffffffffffffda RBX: 00007fcda3c25fa0 RCX: 00007fcda399f559 [ 1071.331799][T15513] RDX: 0000000000002c00 RSI: 0000000000000004 RDI: 0000000000000003 [ 1071.331806][T15513] RBP: 00007fcda48d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.331814][T15513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.331821][T15513] R13: 00007fcda3c26038 R14: 00007fcda3c25fa0 R15: 00007ffc384fe1a8 [ 1071.331837][T15513] [ 1071.684292][T15520] FAULT_INJECTION: forcing a failure. [ 1071.684292][T15520] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.684313][T15520] CPU: 0 UID: 0 PID: 15520 Comm: syz.0.2420 Tainted: G L syzkaller #0 PREEMPT(full) [ 1071.684330][T15520] Tainted: [L]=SOFTLOCKUP [ 1071.684337][T15520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1071.684344][T15520] Call Trace: [ 1071.684349][T15520] [ 1071.684354][T15520] dump_stack_lvl+0x100/0x190 [ 1071.684377][T15520] should_fail_ex.cold+0x5/0xa [ 1071.684396][T15520] should_failslab+0xc2/0x120 [ 1071.684410][T15520] __kmalloc_noprof+0xfc/0x840 [ 1071.684426][T15520] ? rcu_is_watching+0x13/0xc0 [ 1071.684439][T15520] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1071.684455][T15520] tomoyo_realpath_from_path+0xb6/0x690 [ 1071.684471][T15520] tomoyo_path_number_perm+0x23c/0x580 [ 1071.684487][T15520] ? tomoyo_path_number_perm+0x22e/0x580 [ 1071.684505][T15520] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1071.684528][T15520] ? __lock_acquire+0x5c0/0x1f40 [ 1071.684551][T15520] ? __fget_files+0x34/0x3d0 [ 1071.684565][T15520] ? find_held_lock+0x2b/0x80 [ 1071.684577][T15520] ? hook_file_ioctl_common+0x140/0x440 [ 1071.684595][T15520] ? __fget_files+0x21f/0x3d0 [ 1071.684611][T15520] security_file_ioctl+0xd3/0x230 [ 1071.684629][T15520] __x64_sys_ioctl+0xb7/0x210 [ 1071.684649][T15520] do_syscall_64+0x123/0x790 [ 1071.684669][T15520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.684682][T15520] RIP: 0033:0x7fcda399f559 [ 1071.684692][T15520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.684704][T15520] RSP: 002b:00007fcda48d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1071.684716][T15520] RAX: ffffffffffffffda RBX: 00007fcda3c25fa0 RCX: 00007fcda399f559 [ 1071.684724][T15520] RDX: 00002000000007c0 RSI: 0000000040084149 RDI: 0000000000000003 [ 1071.684732][T15520] RBP: 00007fcda48d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.684739][T15520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.684746][T15520] R13: 00007fcda3c26038 R14: 00007fcda3c25fa0 R15: 00007ffc384fe1a8 [ 1071.684762][T15520] [ 1071.717056][T15520] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1072.276681][T15529] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1072.622871][T15507] rxe_eth0 speed is unknown, defaulting to 1000 [ 1073.276349][T15542] ubi0: attaching mtd0 [ 1073.277801][T15542] ubi0: scanning is finished [ 1073.277825][T15542] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1073.283887][ T5619] Bluetooth: hci3: command tx timeout [ 1073.345969][T15542] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1074.562825][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1075.081434][T15569] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1075.081446][T15569] overlayfs: missing 'lowerdir' [ 1075.105926][T15569] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2432'. [ 1075.105948][T15569] validate_nla: 55 callbacks suppressed [ 1075.105955][T15569] netlink: 'syz.5.2432': attribute type 7 has an invalid length. [ 1075.105962][T15569] netlink: 'syz.5.2432': attribute type 8 has an invalid length. [ 1075.105969][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2432'. [ 1075.191894][T15569] erspan0: entered promiscuous mode [ 1075.201298][T15569] gretap0: entered promiscuous mode [ 1075.208623][T15569] erspan0: left promiscuous mode [ 1075.219301][T15569] gretap0: left promiscuous mode [ 1075.278416][T15507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.278487][T15507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.278572][T15507] bridge_slave_0: entered allmulticast mode [ 1075.302869][T15507] bridge_slave_0: entered promiscuous mode [ 1075.311614][T15507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.314657][T15507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.314731][T15507] bridge_slave_1: entered allmulticast mode [ 1075.340515][T15507] bridge_slave_1: entered promiscuous mode [ 1075.363283][ T5619] Bluetooth: hci3: command tx timeout [ 1076.028688][T15507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.096336][T15507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.177463][T15507] team0: Port device team_slave_0 added [ 1076.189431][T15507] team0: Port device team_slave_1 added [ 1076.257008][T15507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1076.257021][T15507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.257036][T15507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1076.317121][T15507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.317133][T15507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.317148][T15507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.443956][T15507] hsr_slave_0: entered promiscuous mode [ 1076.454457][T15507] hsr_slave_1: entered promiscuous mode [ 1076.454749][T15507] debugfs: 'hsr0' already exists in 'hsr' [ 1076.454761][T15507] Cannot create hsr debugfs directory [ 1076.718300][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1076.718313][ T30] audit: type=1800 audit(1793226870.637:4083): pid=15507 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24554 res=0 errno=-13 [ 1076.809671][ T30] audit: type=1400 audit(1793226870.727:4084): avc: denied { write } for pid=15580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1077.019259][ T30] audit: type=1400 audit(1793226870.937:4085): avc: denied { write } for pid=15594 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1077.443153][ T5619] Bluetooth: hci3: command tx timeout [ 1077.570912][ T30] audit: type=1800 audit(1793226871.487:4086): pid=15507 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24553 res=0 errno=-13 [ 1077.598397][ T30] audit: type=1800 audit(1793226871.517:4087): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=240559 res=0 errno=-22 [ 1077.666931][ T30] audit: type=1400 audit(1793226871.587:4088): avc: denied { open } for pid=15608 comm="syz.9.2430" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=51094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1077.720580][ T30] audit: type=1400 audit(1793226871.637:4089): avc: denied { lock } for pid=15608 comm="syz.9.2430" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=51094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1077.880219][ T30] audit: type=1400 audit(1793226871.797:4090): avc: denied { write } for pid=15599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1077.906736][T13422] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1077.948823][T15507] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1077.951470][T15507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1077.952036][T15507] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1077.986748][T15507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1077.989021][T15507] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1077.991588][T15507] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1077.992076][T15507] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1078.025063][T15507] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1078.054185][T13422] usb 7-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1078.054932][T13422] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.054947][T13422] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1078.057394][T13422] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.057409][T13422] usb 7-1: Product: syz [ 1078.057418][T13422] usb 7-1: Manufacturer: syz [ 1078.057426][T13422] usb 7-1: SerialNumber: syz [ 1078.058739][T13422] usb 7-1: config 0 descriptor?? [ 1078.059772][ T30] audit: type=1800 audit(1793226871.977:4091): pid=15497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=240927 res=0 errno=-22 [ 1078.159324][ T30] audit: type=1800 audit(1793226872.077:4092): pid=15497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=240959 res=0 errno=-22 [ 1078.299750][T15507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.327576][T15507] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.342082][T14280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.342136][T14280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.376285][T14280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.376333][T14280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.541028][T15629] FAULT_INJECTION: forcing a failure. [ 1078.541028][T15629] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.541050][T15629] CPU: 0 UID: 0 PID: 15629 Comm: syz.0.2438 Tainted: G L syzkaller #0 PREEMPT(full) [ 1078.541067][T15629] Tainted: [L]=SOFTLOCKUP [ 1078.541071][T15629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1078.541079][T15629] Call Trace: [ 1078.541083][T15629] [ 1078.541088][T15629] dump_stack_lvl+0x100/0x190 [ 1078.541119][T15629] should_fail_ex.cold+0x5/0xa [ 1078.541137][T15629] should_failslab+0xc2/0x120 [ 1078.541150][T15629] __kmalloc_cache_noprof+0x91/0x6d0 [ 1078.541166][T15629] ? copy_mount_options+0x55/0x190 [ 1078.541187][T15629] copy_mount_options+0x55/0x190 [ 1078.541207][T15629] __x64_sys_mount+0x1ab/0x310 [ 1078.541224][T15629] ? __pfx___x64_sys_mount+0x10/0x10 [ 1078.541245][T15629] do_syscall_64+0x123/0x790 [ 1078.541265][T15629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.541278][T15629] RIP: 0033:0x7fcda399f559 [ 1078.541288][T15629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.541299][T15629] RSP: 002b:00007fcda48d3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1078.541312][T15629] RAX: ffffffffffffffda RBX: 00007fcda3c25fa0 RCX: 00007fcda399f559 [ 1078.541320][T15629] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 0000000000000000 [ 1078.541327][T15629] RBP: 00007fcda48d3090 R08: 0000200000000580 R09: 0000000000000000 [ 1078.541334][T15629] R10: 0000000000800008 R11: 0000000000000246 R12: 0000000000000001 [ 1078.541341][T15629] R13: 00007fcda3c26038 R14: 00007fcda3c25fa0 R15: 00007ffc384fe1a8 [ 1078.541357][T15629] [ 1079.529899][ T5619] Bluetooth: hci3: command tx timeout [ 1081.029951][T15654] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2442'. [ 1081.143496][ T936] usb 7-1: USB disconnect, device number 25 [ 1081.407834][T15507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.174135][T15673] ubi0: attaching mtd0 [ 1082.174925][T15673] ubi0: scanning is finished [ 1082.174949][T15673] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1082.232071][T15507] veth0_vlan: entered promiscuous mode [ 1082.271208][T15507] veth1_vlan: entered promiscuous mode [ 1082.294118][T15673] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1082.419401][T15507] veth0_macvtap: entered promiscuous mode [ 1082.444294][T15679] FAULT_INJECTION: forcing a failure. [ 1082.444294][T15679] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.444315][T15679] CPU: 0 UID: 0 PID: 15679 Comm: syz.5.2445 Tainted: G L syzkaller #0 PREEMPT(full) [ 1082.444333][T15679] Tainted: [L]=SOFTLOCKUP [ 1082.444337][T15679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1082.444344][T15679] Call Trace: [ 1082.444349][T15679] [ 1082.444354][T15679] dump_stack_lvl+0x100/0x190 [ 1082.444378][T15679] should_fail_ex.cold+0x5/0xa [ 1082.444397][T15679] should_failslab+0xc2/0x120 [ 1082.444411][T15679] __kmalloc_cache_noprof+0x91/0x6d0 [ 1082.444427][T15679] ? find_css_set+0x922/0x1ec0 [ 1082.444443][T15679] find_css_set+0x922/0x1ec0 [ 1082.444461][T15679] ? __pfx_find_css_set+0x10/0x10 [ 1082.444476][T15679] ? __lock_acquire+0x5c0/0x1f40 [ 1082.444502][T15679] cgroup_migrate_prepare_dst+0x10b/0x7f0 [ 1082.444521][T15679] cgroup_attach_task+0x3e4/0x770 [ 1082.444538][T15679] ? __pfx_cgroup_attach_task+0x10/0x10 [ 1082.444555][T15679] ? lock_acquire+0x1d1/0x380 [ 1082.444578][T15679] ? get_task_cred+0x189/0x360 [ 1082.444594][T15679] __cgroup1_procs_write.isra.0+0x2ce/0x420 [ 1082.444610][T15679] ? __pfx___cgroup1_procs_write.isra.0+0x10/0x10 [ 1082.444626][T15679] ? kernfs_root+0xf8/0x2a0 [ 1082.444645][T15679] cgroup_file_write+0x1e6/0x8a0 [ 1082.444657][T15679] ? __pfx_cgroup1_procs_write+0x10/0x10 [ 1082.444672][T15679] ? __pfx_cgroup_file_write+0x10/0x10 [ 1082.444684][T15679] ? __kmalloc_noprof+0x350/0x840 [ 1082.444705][T15679] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1082.444717][T15679] ? __pfx_cgroup_file_write+0x10/0x10 [ 1082.444731][T15679] vfs_write+0x6af/0x1050 [ 1082.444750][T15679] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1082.444764][T15679] ? __pfx_vfs_write+0x10/0x10 [ 1082.444781][T15679] ? find_held_lock+0x2b/0x80 [ 1082.444804][T15679] ksys_write+0x12a/0x250 [ 1082.444814][T15679] ? __pfx_ksys_write+0x10/0x10 [ 1082.444829][T15679] do_syscall_64+0x123/0x790 [ 1082.444850][T15679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.444863][T15679] RIP: 0033:0x7f5fa499f559 [ 1082.444873][T15679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.444885][T15679] RSP: 002b:00007f5fa58ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1082.444897][T15679] RAX: ffffffffffffffda RBX: 00007f5fa4c25fa0 RCX: 00007f5fa499f559 [ 1082.444905][T15679] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 000000000000000b [ 1082.444912][T15679] RBP: 00007f5fa58ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.444919][T15679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.444926][T15679] R13: 00007f5fa4c26038 R14: 00007f5fa4c25fa0 R15: 00007ffc55a3cdc8 [ 1082.444943][T15679] [ 1082.520533][T15507] veth1_macvtap: entered promiscuous mode [ 1082.782664][T15507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.810383][T15507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.875616][T14273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.876357][T14273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.876378][T14273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.876397][T14273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.968819][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1082.968831][ T30] audit: type=1800 audit(1793226876.887:4102): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=241030 res=0 errno=-22 [ 1083.011420][ T30] audit: type=1800 audit(1793226876.927:4103): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=241042 res=0 errno=-22 [ 1083.121293][T15561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.121307][T15561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.166881][ T30] audit: type=1800 audit(1793226877.087:4104): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=241175 res=0 errno=-22 [ 1083.495666][ T30] audit: type=1400 audit(1793226877.417:4105): avc: denied { write } for pid=15674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.602038][T15698] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2449'. [ 1083.718551][T14273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.718566][T14273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.801964][ T30] audit: type=1400 audit(1793226877.717:4106): avc: denied { write } for pid=15703 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1084.178387][T15712] openvswitch: netlink: Key type 16131 is out of range max 32 [ 1084.266242][T15698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=211 sclass=netlink_route_socket pid=15698 comm=syz.0.2449 [ 1085.332505][T15720] FAULT_INJECTION: forcing a failure. [ 1085.332505][T15720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.332525][T15720] CPU: 0 UID: 0 PID: 15720 Comm: syz.6.2447 Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.332542][T15720] Tainted: [L]=SOFTLOCKUP [ 1085.332547][T15720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1085.332554][T15720] Call Trace: [ 1085.332559][T15720] [ 1085.332563][T15720] dump_stack_lvl+0x100/0x190 [ 1085.332588][T15720] should_fail_ex.cold+0x5/0xa [ 1085.332607][T15720] _copy_to_user+0x32/0xd0 [ 1085.332622][T15720] simple_read_from_buffer+0xcb/0x170 [ 1085.332638][T15720] proc_fail_nth_read+0x1af/0x230 [ 1085.332654][T15720] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1085.332669][T15720] ? rw_verify_area+0xce/0x6d0 [ 1085.332686][T15720] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1085.332700][T15720] vfs_read+0x1e4/0xb40 [ 1085.332721][T15720] ? lock_acquire+0x1d1/0x380 [ 1085.332737][T15720] ? __fget_files+0x34/0x3d0 [ 1085.332751][T15720] ? __pfx_vfs_read+0x10/0x10 [ 1085.332768][T15720] ? find_held_lock+0x2b/0x80 [ 1085.332781][T15720] ? __fget_files+0x215/0x3d0 [ 1085.332797][T15720] ? __fget_files+0x21f/0x3d0 [ 1085.332814][T15720] ksys_read+0x12a/0x250 [ 1085.332832][T15720] ? __pfx_ksys_read+0x10/0x10 [ 1085.332855][T15720] do_syscall_64+0x123/0x790 [ 1085.332875][T15720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.332887][T15720] RIP: 0033:0x7f9d1535fd8e [ 1085.332897][T15720] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1085.332909][T15720] RSP: 002b:00007f9d16234fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1085.332921][T15720] RAX: ffffffffffffffda RBX: 00007f9d162356c0 RCX: 00007f9d1535fd8e [ 1085.332929][T15720] RDX: 000000000000000f RSI: 00007f9d162350a0 RDI: 000000000000000a [ 1085.332936][T15720] RBP: 00007f9d16235090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.332943][T15720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.332950][T15720] R13: 00007f9d15626038 R14: 00007f9d15625fa0 R15: 00007ffd40d9f828 [ 1085.332966][T15720] [ 1085.699815][ T30] audit: type=1400 audit(1793226879.617:4107): avc: denied { ioctl } for pid=15714 comm="syz.3.2415" path="socket:[51975]" dev="sockfs" ino=51975 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1086.503134][T15730] JFS: discard option not supported on device [ 1086.503771][T15730] Mount JFS Failure: -5 [ 1086.503779][T15730] jfs_mount failed w/return code = -5 [ 1086.542568][T15731] JFS: discard option not supported on device [ 1086.542693][T15731] Mount JFS Failure: -5 [ 1086.542699][T15731] jfs_mount failed w/return code = -5 [ 1086.923002][ T30] audit: type=1400 audit(1793226880.837:4108): avc: denied { mount } for pid=15740 comm="syz.5.2454" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1086.965472][ T30] audit: type=1800 audit(1793226880.887:4109): pid=15741 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2454" name="new_array" dev="sysfs" ino=61919 res=0 errno=-13 [ 1087.028913][ T30] audit: type=1400 audit(1793226880.947:4110): avc: denied { write } for pid=15710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1087.163245][ T30] audit: type=1800 audit(1793226881.077:4111): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=241466 res=0 errno=-22 [ 1087.221578][T15741] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1088.174381][T15761] FAULT_INJECTION: forcing a failure. [ 1088.174381][T15761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.174402][T15761] CPU: 0 UID: 0 PID: 15761 Comm: syz.6.2458 Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.174419][T15761] Tainted: [L]=SOFTLOCKUP [ 1088.174424][T15761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1088.174431][T15761] Call Trace: [ 1088.174435][T15761] [ 1088.174440][T15761] dump_stack_lvl+0x100/0x190 [ 1088.174464][T15761] should_fail_ex.cold+0x5/0xa [ 1088.174483][T15761] _copy_from_user+0x2e/0xd0 [ 1088.174498][T15761] bpf_test_init.isra.0+0xaf/0x100 [ 1088.174519][T15761] bpf_prog_test_run_xdp+0x587/0x1670 [ 1088.174537][T15761] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1088.174554][T15761] ? fput+0x7c/0x100 [ 1088.174569][T15761] ? __bpf_prog_get+0x97/0x290 [ 1088.174585][T15761] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1088.174597][T15761] __sys_bpf+0x1d13/0x4b60 [ 1088.174619][T15761] ? __pfx___sys_bpf+0x10/0x10 [ 1088.174636][T15761] ? find_held_lock+0x2b/0x80 [ 1088.174649][T15761] ? get_pid_task+0xfc/0x250 [ 1088.174667][T15761] ? get_pid_task+0xfc/0x250 [ 1088.174690][T15761] ? find_held_lock+0x2b/0x80 [ 1088.174706][T15761] ? rcu_read_lock_any_held+0x6a/0x90 [ 1088.174720][T15761] ? find_held_lock+0x2b/0x80 [ 1088.174731][T15761] ? ksys_write+0x190/0x250 [ 1088.174742][T15761] ? ksys_write+0x190/0x250 [ 1088.174752][T15761] ? lock_acquire+0x1d1/0x380 [ 1088.174777][T15761] ? fput+0x7c/0x100 [ 1088.174791][T15761] ? ksys_write+0x1ac/0x250 [ 1088.174803][T15761] ? __x64_sys_bpf+0xce/0x140 [ 1088.174813][T15761] __x64_sys_bpf+0xce/0x140 [ 1088.174824][T15761] ? do_syscall_64+0xae/0x790 [ 1088.174843][T15761] do_syscall_64+0x123/0x790 [ 1088.174863][T15761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.174875][T15761] RIP: 0033:0x7f9d1539f559 [ 1088.174886][T15761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1088.174897][T15761] RSP: 002b:00007f9d16235028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1088.174909][T15761] RAX: ffffffffffffffda RBX: 00007f9d15625fa0 RCX: 00007f9d1539f559 [ 1088.174917][T15761] RDX: 0000000000000050 RSI: 000020000001a700 RDI: 000000000000000a [ 1088.174924][T15761] RBP: 00007f9d16235090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.174931][T15761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.174938][T15761] R13: 00007f9d15626038 R14: 00007f9d15625fa0 R15: 00007ffd40d9f828 [ 1088.174954][T15761] [ 1089.193011][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1089.193025][ T30] audit: type=1800 audit(1793226883.107:4114): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15763 res=0 errno=-22 [ 1089.270066][ T30] audit: type=1800 audit(1793226883.187:4115): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15763 res=0 errno=-22 [ 1089.838627][ T30] audit: type=1800 audit(1793226883.757:4116): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=241523 res=0 errno=-22 [ 1089.842640][ T30] audit: type=1800 audit(1793226883.757:4117): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=241527 res=0 errno=-22 [ 1089.906502][ T30] audit: type=1400 audit(1793226883.827:4118): avc: denied { write } for pid=15759 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1090.004496][ T30] audit: type=1400 audit(1793226883.927:4119): avc: denied { unmount } for pid=6213 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1090.116698][ T30] audit: type=1800 audit(1793226884.037:4120): pid=15771 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2463" name="mem_sleep" dev="sysfs" ino=1413 res=0 errno=-22 [ 1090.152369][ T30] audit: type=1400 audit(1793226884.067:4121): avc: denied { read } for pid=15785 comm="syz.5.2465" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1090.178475][ T30] audit: type=1400 audit(1793226884.097:4122): avc: denied { open } for pid=15785 comm="syz.5.2465" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1090.224992][ T30] audit: type=1400 audit(1793226884.147:4123): avc: denied { ioctl } for pid=15785 comm="syz.5.2465" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1091.631224][T13423] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 1091.655357][T13423] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1091.835788][T15811] fido_id[15811]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1093.222125][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2475'. [ 1093.634886][T15855] FAULT_INJECTION: forcing a failure. [ 1093.634886][T15855] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.634907][T15855] CPU: 0 UID: 0 PID: 15855 Comm: syz.3.2479 Tainted: G L syzkaller #0 PREEMPT(full) [ 1093.634924][T15855] Tainted: [L]=SOFTLOCKUP [ 1093.634928][T15855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1093.634936][T15855] Call Trace: [ 1093.634940][T15855] [ 1093.634945][T15855] dump_stack_lvl+0x100/0x190 [ 1093.634968][T15855] should_fail_ex.cold+0x5/0xa [ 1093.634993][T15855] should_failslab+0xc2/0x120 [ 1093.635006][T15855] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1093.635024][T15855] ? __pud_alloc+0x4f6/0x690 [ 1093.635041][T15855] ? __pmd_alloc+0xbf/0x950 [ 1093.635061][T15855] __pmd_alloc+0xbf/0x950 [ 1093.635077][T15855] ? __pud_alloc+0x4fb/0x690 [ 1093.635096][T15855] __handle_mm_fault+0xa9d/0x2f60 [ 1093.635112][T15855] ? __pfx___handle_mm_fault+0x10/0x10 [ 1093.635124][T15855] ? __pfx_mt_find+0x10/0x10 [ 1093.635146][T15855] ? find_vma+0xbf/0x140 [ 1093.635162][T15855] ? __pfx_find_vma+0x10/0x10 [ 1093.635179][T15855] handle_mm_fault+0x363/0xa20 [ 1093.635195][T15855] do_user_addr_fault+0x745/0x12f0 [ 1093.635218][T15855] exc_page_fault+0x6f/0xd0 [ 1093.635236][T15855] asm_exc_page_fault+0x26/0x30 [ 1093.635248][T15855] RIP: 0010:__get_user_8+0x14/0x30 [ 1093.635264][T15855] Code: ca e9 00 b4 04 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca e9 cf b3 04 00 66 66 2e 0f 1f 84 00 00 00 [ 1093.635276][T15855] RSP: 0018:ffffc90004777ed8 EFLAGS: 00050287 [ 1093.635287][T15855] RAX: 0000200000000100 RBX: ffffc90004777f48 RCX: 0000000000000000 [ 1093.635295][T15855] RDX: 00007ffffffff000 RSI: ffffffff82694c81 RDI: ffffffff8c833580 [ 1093.635303][T15855] RBP: 0000200000000100 R08: 0000000000059b76 R09: 00000000000001d3 [ 1093.635310][T15855] R10: 0000000000000200 R11: 0000000000000000 R12: ffff88807b0e4b00 [ 1093.635317][T15855] R13: 0000000000000800 R14: 0000000000000000 R15: 0000000000000000 [ 1093.635329][T15855] ? __might_fault+0x111/0x140 [ 1093.635345][T15855] __x64_sys_io_setup+0x73/0x220 [ 1093.635365][T15855] do_syscall_64+0x123/0x790 [ 1093.635384][T15855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.635397][T15855] RIP: 0033:0x7ffb1ab9f559 [ 1093.635406][T15855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.635417][T15855] RSP: 002b:00007ffb1baa7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1093.635428][T15855] RAX: ffffffffffffffda RBX: 00007ffb1ae25fa0 RCX: 00007ffb1ab9f559 [ 1093.635436][T15855] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000800 [ 1093.635443][T15855] RBP: 00007ffb1baa7090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.635450][T15855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.635457][T15855] R13: 00007ffb1ae26038 R14: 00007ffb1ae25fa0 R15: 00007ffda2397848 [ 1093.635472][T15855] [ 1094.636520][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1094.636534][ T30] audit: type=1800 audit(1793226888.557:4131): pid=15851 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2478" name="file0" dev="overlay" ino=2926 res=0 errno=-22 [ 1095.606742][T15863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2481'. [ 1095.610945][ T30] audit: type=1800 audit(1793226889.527:4132): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31328 res=0 errno=-22 [ 1095.610974][ T30] audit: type=1800 audit(1793226889.527:4133): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31351 res=0 errno=-22 [ 1095.771137][ T30] audit: type=1400 audit(1793226889.687:4134): avc: denied { write } for pid=15841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.852785][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1096.041110][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1096.070007][ T10] usb 4-1: New USB device found: idVendor=0582, idProduct=0156, bcdDevice=0.40 [ 1096.184506][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.184525][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1096.272494][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.272511][ T10] usb 4-1: Product: syz [ 1096.272520][ T10] usb 4-1: Manufacturer: syz [ 1096.272529][ T10] usb 4-1: SerialNumber: syz [ 1096.549106][ T30] audit: type=1800 audit(1793226890.467:4135): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=241841 res=0 errno=-22 [ 1096.680273][T15863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.680492][T15863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.765121][ T30] audit: type=1800 audit(1793226890.687:4136): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=241873 res=0 errno=-22 [ 1096.770625][ T30] audit: type=1800 audit(1793226890.687:4137): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=241848 res=0 errno=-22 [ 1096.772622][ T10] usb 4-1: 0:2 : does not exist [ 1096.834702][T15880] CIFS: Witness protocol support is experimental [ 1096.834725][T15880] CIFS mount error: No usable UNC path provided in device string! [ 1096.834725][T15880] [ 1096.834897][T15880] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1096.835558][ T30] audit: type=1800 audit(1793226890.757:4138): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=241849 res=0 errno=-22 [ 1097.021897][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2483'. [ 1097.099016][ T30] audit: type=1800 audit(1793226891.017:4139): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=241870 res=0 errno=-22 [ 1097.100663][ T30] audit: type=1800 audit(1793226891.017:4140): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=241871 res=0 errno=-22 [ 1097.220302][ T10] usb 4-1: USB disconnect, device number 4 [ 1097.256984][T15886] udevd[15886]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1097.395416][T15899] overlayfs: failed to resolve 'work': -2 [ 1097.430939][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.135502][T15902] trusted_key: encrypted_key: insufficient parameters specified [ 1098.220612][T15901] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1098.220628][T15901] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1098.221052][T15901] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1098.221065][T15901] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1098.282945][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.307550][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.343794][ T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1098.344512][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.377073][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.394037][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.417106][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.445210][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.460833][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.482303][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.502196][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.517877][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1098.524233][ T10] usb 7-1: New USB device found: idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1098.538041][T13422] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1098.550845][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.566342][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.566357][ T10] usb 7-1: Product: syz [ 1098.566366][ T10] usb 7-1: Manufacturer: syz [ 1098.566375][ T10] usb 7-1: SerialNumber: syz [ 1098.584854][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.594559][ T10] usb 7-1: config 0 descriptor?? [ 1098.639693][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.664773][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.700919][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.722397][T13422] usb 10-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1098.734873][T13422] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.734899][T13422] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1098.734913][T13422] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1098.734933][T13422] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1098.734956][T13422] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.801390][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.820862][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.842315][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.895333][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.932551][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.960588][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1098.989691][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1099.023557][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1099.040274][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1099.073688][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1099.080690][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1099.122196][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1099.155328][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1099.202330][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1099.331182][T15899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1100.023729][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1100.023741][ T30] audit: type=1400 audit(1793226893.947:4164): avc: denied { write } for pid=15900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1100.164659][ T30] audit: type=1800 audit(1793226894.087:4165): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=242225 res=0 errno=-22 [ 1100.191992][ T30] audit: type=1800 audit(1793226894.117:4166): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=242229 res=0 errno=-22 [ 1100.353428][ T30] audit: type=1800 audit(1793226894.277:4167): pid=15949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2493" name="type" dev="sysfs" ino=64007 res=0 errno=-22 [ 1100.379045][T15949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2493'. [ 1100.396256][ T30] audit: type=1400 audit(1793226894.317:4168): avc: denied { write } for pid=15948 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1100.505385][ T936] usb 7-1: USB disconnect, device number 26 [ 1100.804883][ T30] audit: type=1400 audit(1793226894.727:4169): avc: denied { ioctl } for pid=15960 comm="syz.6.2496" path="socket:[52937]" dev="sockfs" ino=52937 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1100.986965][ T30] audit: type=1400 audit(1793226894.907:4170): avc: denied { write } for pid=15951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1101.120469][ T30] audit: type=1400 audit(1793226895.037:4171): avc: denied { write } for pid=15970 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1101.548582][ T30] audit: type=1400 audit(1793226895.467:4172): avc: denied { write } for pid=15972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1101.678522][ T30] audit: type=1400 audit(1793226895.597:4173): avc: denied { write } for pid=15987 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1101.929421][T15911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1102.106255][T13422] gud 10-1:1.0: USB-3: Failed to add properties (ret=-71) [ 1102.106284][T13422] gud 10-1:1.0: Failed to get connectors (error=-71) [ 1102.106299][T13422] gud 10-1:1.0: probe with driver gud failed with error -71 [ 1102.174599][T13422] usb 10-1: USB disconnect, device number 3 [ 1102.203748][T16006] FAULT_INJECTION: forcing a failure. [ 1102.203748][T16006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.203769][T16006] CPU: 0 UID: 0 PID: 16006 Comm: syz.5.2501 Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.203786][T16006] Tainted: [L]=SOFTLOCKUP [ 1102.203790][T16006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1102.203797][T16006] Call Trace: [ 1102.203803][T16006] [ 1102.203807][T16006] dump_stack_lvl+0x100/0x190 [ 1102.203831][T16006] should_fail_ex.cold+0x5/0xa [ 1102.203856][T16006] _copy_from_user+0x2e/0xd0 [ 1102.203871][T16006] iommufd_vfio_ioctl+0x5b4/0xef0 [ 1102.203889][T16006] ? __pfx_iommufd_vfio_ioctl+0x10/0x10 [ 1102.203905][T16006] ? tomoyo_path_number_perm+0x188/0x580 [ 1102.203929][T16006] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1102.203952][T16006] ? do_vfs_ioctl+0x226/0x13e0 [ 1102.203973][T16006] iommufd_fops_ioctl+0x459/0x520 [ 1102.203994][T16006] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1102.204012][T16006] ? __fget_files+0x34/0x3d0 [ 1102.204033][T16006] ? selinux_file_ioctl+0x1e0/0x290 [ 1102.204051][T16006] ? selinux_file_ioctl+0x1e7/0x290 [ 1102.204070][T16006] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1102.204090][T16006] __x64_sys_ioctl+0x18e/0x210 [ 1102.204110][T16006] do_syscall_64+0x123/0x790 [ 1102.204131][T16006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.204144][T16006] RIP: 0033:0x7f5fa499f559 [ 1102.204154][T16006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.204166][T16006] RSP: 002b:00007f5fa58ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1102.204179][T16006] RAX: ffffffffffffffda RBX: 00007f5fa4c25fa0 RCX: 00007f5fa499f559 [ 1102.204187][T16006] RDX: 0000200000000540 RSI: 0000000000003b70 RDI: 0000000000000003 [ 1102.204194][T16006] RBP: 00007f5fa58ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.204201][T16006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.204208][T16006] R13: 00007f5fa4c26038 R14: 00007f5fa4c25fa0 R15: 00007ffc55a3cdc8 [ 1102.204224][T16006] [ 1102.608371][T16015] FAULT_INJECTION: forcing a failure. [ 1102.608371][T16015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.608392][T16015] CPU: 0 UID: 0 PID: 16015 Comm: syz.5.2503 Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.608409][T16015] Tainted: [L]=SOFTLOCKUP [ 1102.608414][T16015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1102.608421][T16015] Call Trace: [ 1102.608426][T16015] [ 1102.608431][T16015] dump_stack_lvl+0x100/0x190 [ 1102.608455][T16015] should_fail_ex.cold+0x5/0xa [ 1102.608474][T16015] _copy_to_user+0x32/0xd0 [ 1102.608489][T16015] simple_read_from_buffer+0xcb/0x170 [ 1102.608505][T16015] proc_fail_nth_read+0x1af/0x230 [ 1102.608521][T16015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1102.608537][T16015] ? rw_verify_area+0xce/0x6d0 [ 1102.608553][T16015] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1102.608568][T16015] vfs_read+0x1e4/0xb40 [ 1102.608586][T16015] ? lock_acquire+0x1d1/0x380 [ 1102.608602][T16015] ? __fget_files+0x34/0x3d0 [ 1102.608615][T16015] ? __pfx_vfs_read+0x10/0x10 [ 1102.608635][T16015] ? find_held_lock+0x2b/0x80 [ 1102.608648][T16015] ? __fget_files+0x215/0x3d0 [ 1102.608663][T16015] ? __fget_files+0x21f/0x3d0 [ 1102.608681][T16015] ksys_read+0x12a/0x250 [ 1102.608699][T16015] ? __pfx_ksys_read+0x10/0x10 [ 1102.608721][T16015] do_syscall_64+0x123/0x790 [ 1102.608742][T16015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.608755][T16015] RIP: 0033:0x7f5fa495fd8e [ 1102.608764][T16015] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1102.608776][T16015] RSP: 002b:00007f5fa58e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1102.608788][T16015] RAX: ffffffffffffffda RBX: 00007f5fa58ea6c0 RCX: 00007f5fa495fd8e [ 1102.608796][T16015] RDX: 000000000000000f RSI: 00007f5fa58ea0a0 RDI: 0000000000000004 [ 1102.608803][T16015] RBP: 00007f5fa58ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.608810][T16015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.608817][T16015] R13: 00007f5fa4c26038 R14: 00007f5fa4c25fa0 R15: 00007ffc55a3cdc8 [ 1102.608833][T16015] [ 1102.956239][T16005] ip_tables: iptables: counters copy to user failed while replacing table [ 1103.225813][ T936] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1103.229427][ T936] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1103.310182][T16035] fuse: Bad value for 'fd' [ 1103.396651][T16037] fido_id[16037]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1103.399093][T13422] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1103.419068][T13422] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1103.611118][T16040] fido_id[16040]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1105.912641][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1105.912654][ T30] audit: type=1800 audit(1793226899.827:4182): pid=16056 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2510" name="softlockup_count" dev="sysfs" ino=64041 res=0 errno=-22 [ 1105.960189][ T30] audit: type=1400 audit(1793226899.877:4183): avc: denied { listen } for pid=16054 comm="syz.5.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1106.366489][T16073] FAULT_INJECTION: forcing a failure. [ 1106.366489][T16073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.366510][T16073] CPU: 0 UID: 0 PID: 16073 Comm: syz.5.2516 Tainted: G L syzkaller #0 PREEMPT(full) [ 1106.366527][T16073] Tainted: [L]=SOFTLOCKUP [ 1106.366532][T16073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1106.366539][T16073] Call Trace: [ 1106.366544][T16073] [ 1106.366550][T16073] dump_stack_lvl+0x100/0x190 [ 1106.366574][T16073] should_fail_ex.cold+0x5/0xa [ 1106.366593][T16073] _copy_to_user+0x32/0xd0 [ 1106.366608][T16073] simple_read_from_buffer+0xcb/0x170 [ 1106.366624][T16073] proc_fail_nth_read+0x1af/0x230 [ 1106.366639][T16073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1106.366655][T16073] ? rw_verify_area+0xce/0x6d0 [ 1106.366672][T16073] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1106.366689][T16073] vfs_read+0x1e4/0xb40 [ 1106.366707][T16073] ? lock_acquire+0x1d1/0x380 [ 1106.366723][T16073] ? __fget_files+0x34/0x3d0 [ 1106.366736][T16073] ? __pfx_vfs_read+0x10/0x10 [ 1106.366753][T16073] ? find_held_lock+0x2b/0x80 [ 1106.366766][T16073] ? __fget_files+0x215/0x3d0 [ 1106.366782][T16073] ? __fget_files+0x21f/0x3d0 [ 1106.366805][T16073] ksys_read+0x12a/0x250 [ 1106.366824][T16073] ? __pfx_ksys_read+0x10/0x10 [ 1106.366846][T16073] do_syscall_64+0x123/0x790 [ 1106.366867][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.366880][T16073] RIP: 0033:0x7f5fa495fd8e [ 1106.366890][T16073] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1106.366902][T16073] RSP: 002b:00007f5fa58e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1106.366914][T16073] RAX: ffffffffffffffda RBX: 00007f5fa58ea6c0 RCX: 00007f5fa495fd8e [ 1106.366922][T16073] RDX: 000000000000000f RSI: 00007f5fa58ea0a0 RDI: 0000000000000004 [ 1106.366930][T16073] RBP: 00007f5fa58ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.366937][T16073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1106.366944][T16073] R13: 00007f5fa4c26038 R14: 00007f5fa4c25fa0 R15: 00007ffc55a3cdc8 [ 1106.366960][T16073] [ 1107.919612][ T30] audit: type=1400 audit(1793226901.837:4184): avc: denied { ioctl } for pid=16098 comm="syz.3.2525" path="socket:[53679]" dev="sockfs" ino=53679 ioctlcmd=0x8004587d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1110.318752][ T30] audit: type=1800 audit(1793226904.237:4185): pid=16117 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2531" name="rebind" dev="sysfs" ino=41320 res=0 errno=-13 [ 1110.406496][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1110.507553][T16125] FAULT_INJECTION: forcing a failure. [ 1110.507553][T16125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.507574][T16125] CPU: 0 UID: 0 PID: 16125 Comm: syz.5.2532 Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.507594][T16125] Tainted: [L]=SOFTLOCKUP [ 1110.507599][T16125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1110.507606][T16125] Call Trace: [ 1110.507610][T16125] [ 1110.507615][T16125] dump_stack_lvl+0x100/0x190 [ 1110.507638][T16125] should_fail_ex.cold+0x5/0xa [ 1110.507657][T16125] _copy_to_user+0x32/0xd0 [ 1110.507673][T16125] simple_read_from_buffer+0xcb/0x170 [ 1110.507688][T16125] proc_fail_nth_read+0x1af/0x230 [ 1110.507704][T16125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1110.507720][T16125] ? rw_verify_area+0xce/0x6d0 [ 1110.507736][T16125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1110.507757][T16125] vfs_read+0x1e4/0xb40 [ 1110.507775][T16125] ? lock_acquire+0x1d1/0x380 [ 1110.507791][T16125] ? __fget_files+0x34/0x3d0 [ 1110.507805][T16125] ? __pfx_vfs_read+0x10/0x10 [ 1110.507821][T16125] ? find_held_lock+0x2b/0x80 [ 1110.507834][T16125] ? __fget_files+0x215/0x3d0 [ 1110.507850][T16125] ? __fget_files+0x21f/0x3d0 [ 1110.507868][T16125] ksys_read+0x12a/0x250 [ 1110.507886][T16125] ? __pfx_ksys_read+0x10/0x10 [ 1110.507908][T16125] do_syscall_64+0x123/0x790 [ 1110.507928][T16125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.507941][T16125] RIP: 0033:0x7f5fa495fd8e [ 1110.507951][T16125] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1110.507962][T16125] RSP: 002b:00007f5fa58e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1110.507974][T16125] RAX: ffffffffffffffda RBX: 00007f5fa58ea6c0 RCX: 00007f5fa495fd8e [ 1110.507982][T16125] RDX: 000000000000000f RSI: 00007f5fa58ea0a0 RDI: 0000000000000004 [ 1110.507989][T16125] RBP: 00007f5fa58ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.507996][T16125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.508003][T16125] R13: 00007f5fa4c26038 R14: 00007f5fa4c25fa0 R15: 00007ffc55a3cdc8 [ 1110.508019][T16125] [ 1110.750831][T16127] FAULT_INJECTION: forcing a failure. [ 1110.750831][T16127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.750852][T16127] CPU: 0 UID: 0 PID: 16127 Comm: syz.9.2534 Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.750869][T16127] Tainted: [L]=SOFTLOCKUP [ 1110.750874][T16127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1110.750881][T16127] Call Trace: [ 1110.750886][T16127] [ 1110.750892][T16127] dump_stack_lvl+0x100/0x190 [ 1110.750916][T16127] should_fail_ex.cold+0x5/0xa [ 1110.750935][T16127] _copy_from_user+0x2e/0xd0 [ 1110.750950][T16127] copy_msghdr_from_user+0x9f/0x4c0 [ 1110.750967][T16127] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1110.750988][T16127] ? lock_acquire+0x1d1/0x380 [ 1110.751005][T16127] ? get_pid_task+0x2a/0x250 [ 1110.751026][T16127] ___sys_sendmsg+0x106/0x1e0 [ 1110.751044][T16127] ? __pfx____sys_sendmsg+0x10/0x10 [ 1110.751061][T16127] ? get_pid_task+0x106/0x250 [ 1110.751089][T16127] ? find_held_lock+0x2b/0x80 [ 1110.751112][T16127] __sys_sendmsg+0x160/0x210 [ 1110.751125][T16127] ? __pfx___sys_sendmsg+0x10/0x10 [ 1110.751147][T16127] do_syscall_64+0x123/0x790 [ 1110.751167][T16127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.751180][T16127] RIP: 0033:0x7f8258d9f559 [ 1110.751191][T16127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.751204][T16127] RSP: 002b:00007f8259be5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1110.751216][T16127] RAX: ffffffffffffffda RBX: 00007f8259026090 RCX: 00007f8258d9f559 [ 1110.751224][T16127] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 1110.751232][T16127] RBP: 00007f8259be5090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.751239][T16127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.751246][T16127] R13: 00007f8259026128 R14: 00007f8259026090 R15: 00007ffe1dd6a2d8 [ 1110.751263][T16127] [ 1111.305251][T16135] FAULT_INJECTION: forcing a failure. [ 1111.305251][T16135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1111.305273][T16135] CPU: 0 UID: 0 PID: 16135 Comm: syz.5.2537 Tainted: G L syzkaller #0 PREEMPT(full) [ 1111.305290][T16135] Tainted: [L]=SOFTLOCKUP [ 1111.305294][T16135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1111.305301][T16135] Call Trace: [ 1111.305306][T16135] [ 1111.305312][T16135] dump_stack_lvl+0x100/0x190 [ 1111.305337][T16135] should_fail_ex.cold+0x5/0xa [ 1111.305355][T16135] _copy_from_user+0x2e/0xd0 [ 1111.305370][T16135] copy_msghdr_from_user+0x9f/0x4c0 [ 1111.305388][T16135] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1111.305408][T16135] ? lock_acquire+0x1d1/0x380 [ 1111.305427][T16135] ? get_pid_task+0x2a/0x250 [ 1111.305447][T16135] ___sys_sendmsg+0x106/0x1e0 [ 1111.305464][T16135] ? __pfx____sys_sendmsg+0x10/0x10 [ 1111.305481][T16135] ? get_pid_task+0x106/0x250 [ 1111.305505][T16135] ? find_held_lock+0x2b/0x80 [ 1111.305527][T16135] __sys_sendmsg+0x160/0x210 [ 1111.305540][T16135] ? __pfx___sys_sendmsg+0x10/0x10 [ 1111.305561][T16135] do_syscall_64+0x123/0x790 [ 1111.305581][T16135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.305594][T16135] RIP: 0033:0x7f5fa499f559 [ 1111.305605][T16135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1111.305616][T16135] RSP: 002b:00007f5fa58ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1111.305629][T16135] RAX: ffffffffffffffda RBX: 00007f5fa4c25fa0 RCX: 00007f5fa499f559 [ 1111.305637][T16135] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 1111.305644][T16135] RBP: 00007f5fa58ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.305652][T16135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.305659][T16135] R13: 00007f5fa4c26038 R14: 00007f5fa4c25fa0 R15: 00007ffc55a3cdc8 [ 1111.305674][T16135] [ 1112.415713][T16142] FAULT_INJECTION: forcing a failure. [ 1112.415713][T16142] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.415741][T16142] CPU: 0 UID: 0 PID: 16142 Comm: syz.6.2539 Tainted: G L syzkaller #0 PREEMPT(full) [ 1112.415759][T16142] Tainted: [L]=SOFTLOCKUP [ 1112.415763][T16142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1112.415770][T16142] Call Trace: [ 1112.415775][T16142] [ 1112.415781][T16142] dump_stack_lvl+0x100/0x190 [ 1112.415807][T16142] should_fail_ex.cold+0x5/0xa [ 1112.415827][T16142] should_failslab+0xc2/0x120 [ 1112.415841][T16142] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1112.415860][T16142] ? selinux_socket_create+0xe7/0x590 [ 1112.415875][T16142] ? sock_alloc_inode+0x26/0x2c0 [ 1112.415892][T16142] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1112.415907][T16142] sock_alloc_inode+0x26/0x2c0 [ 1112.415921][T16142] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1112.415934][T16142] alloc_inode+0x68/0x250 [ 1112.415953][T16142] sock_alloc+0x42/0x240 [ 1112.415967][T16142] __sock_create+0xc2/0x860 [ 1112.415984][T16142] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1112.416006][T16142] __sys_socketpair+0x170/0x580 [ 1112.416024][T16142] ? __pfx___sys_socketpair+0x10/0x10 [ 1112.416042][T16142] ? xfd_validate_state+0x129/0x190 [ 1112.416061][T16142] __x64_sys_socketpair+0x96/0x100 [ 1112.416078][T16142] ? lockdep_hardirqs_on+0x7d/0x110 [ 1112.416096][T16142] do_syscall_64+0x123/0x790 [ 1112.416117][T16142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.416130][T16142] RIP: 0033:0x7f9d153a0dfa [ 1112.416141][T16142] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.416153][T16142] RSP: 002b:00007f9d16234f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1112.416165][T16142] RAX: ffffffffffffffda RBX: 00007f9d15625f00 RCX: 00007f9d153a0dfa [ 1112.416173][T16142] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1112.416180][T16142] RBP: 00007f9d15436b20 R08: 0000000000000000 R09: 0000000000000000 [ 1112.416188][T16142] R10: 00007f9d16234f88 R11: 0000000000000246 R12: 0000000000000001 [ 1112.416195][T16142] R13: 00007f9d15626038 R14: 00007f9d15625fa0 R15: 00007ffd40d9f828 [ 1112.416210][T16142] [ 1112.416217][T16142] socket: no more sockets [ 1112.632840][T13422] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1113.326456][T13422] usb 10-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1113.581605][T13422] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.581624][T13422] usb 10-1: Product: syz [ 1113.581634][T13422] usb 10-1: Manufacturer: syz [ 1113.581643][T13422] usb 10-1: SerialNumber: syz [ 1113.751145][ T30] audit: type=1800 audit(1793226907.667:4186): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=242532 res=0 errno=-22 [ 1113.751389][T13422] usb 10-1: config 0 descriptor?? [ 1113.787663][ T30] audit: type=1800 audit(1793226907.707:4187): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=242564 res=0 errno=-22 [ 1113.812089][ T30] audit: type=1800 audit(1793226907.737:4188): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=242539 res=0 errno=-22 [ 1113.812119][ T30] audit: type=1800 audit(1793226907.737:4189): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=242540 res=0 errno=-22 [ 1113.857924][T13422] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1114.741667][T13422] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 1114.741683][T13422] sq905c 10-1:0.0: Reading version command failed [ 1114.741722][T13422] sq905c 10-1:0.0: probe with driver sq905c failed with error -110 [ 1114.768799][ T30] audit: type=1800 audit(1793226908.687:4190): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=242561 res=0 errno=-22 [ 1114.768830][ T30] audit: type=1800 audit(1793226908.687:4191): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=242562 res=0 errno=-22 [ 1114.768852][ T30] audit: type=1800 audit(1793226908.687:4192): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=242541 res=0 errno=-22 [ 1114.768874][ T30] audit: type=1800 audit(1793226908.687:4193): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=242563 res=0 errno=-22 [ 1114.943965][ T10] usb 10-1: USB disconnect, device number 4 [ 1115.213125][T13422] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1115.363205][T13422] usb 4-1: Using ep0 maxpacket: 32 [ 1115.371151][T13422] usb 4-1: New USB device found: idVendor=044e, idProduct=120b, bcdDevice=0.00 [ 1115.382432][T13422] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1115.382452][T13422] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1115.382468][T13422] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1115.382487][T13422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.426803][T13422] usb 4-1: config 0 descriptor?? [ 1115.431251][ T30] audit: type=1800 audit(1793226909.347:4194): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=242628 res=0 errno=-22 [ 1115.463440][ T30] audit: type=1800 audit(1793226909.387:4195): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=242657 res=0 errno=-22 [ 1115.637356][T16166] FAULT_INJECTION: forcing a failure. [ 1115.637356][T16166] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.637390][T16166] CPU: 0 UID: 0 PID: 16166 Comm: syz.6.2547 Tainted: G L syzkaller #0 PREEMPT(full) [ 1115.637408][T16166] Tainted: [L]=SOFTLOCKUP [ 1115.637412][T16166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1115.637420][T16166] Call Trace: [ 1115.637424][T16166] [ 1115.637429][T16166] dump_stack_lvl+0x100/0x190 [ 1115.637454][T16166] should_fail_ex.cold+0x5/0xa [ 1115.637472][T16166] should_failslab+0xc2/0x120 [ 1115.637485][T16166] __kmalloc_noprof+0xfc/0x840 [ 1115.637502][T16166] ? rcu_is_watching+0x13/0xc0 [ 1115.637517][T16166] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1115.637533][T16166] tomoyo_realpath_from_path+0xb6/0x690 [ 1115.637548][T16166] tomoyo_path_number_perm+0x23c/0x580 [ 1115.637565][T16166] ? tomoyo_path_number_perm+0x22e/0x580 [ 1115.637583][T16166] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1115.637606][T16166] ? __lock_acquire+0x5c0/0x1f40 [ 1115.637629][T16166] ? __fget_files+0x34/0x3d0 [ 1115.637643][T16166] ? find_held_lock+0x2b/0x80 [ 1115.637655][T16166] ? hook_file_ioctl_common+0x140/0x440 [ 1115.637673][T16166] ? __fget_files+0x21f/0x3d0 [ 1115.637694][T16166] security_file_ioctl+0xd3/0x230 [ 1115.637713][T16166] __x64_sys_ioctl+0xb7/0x210 [ 1115.637734][T16166] do_syscall_64+0x123/0x790 [ 1115.637754][T16166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.637767][T16166] RIP: 0033:0x7f9d1539f559 [ 1115.637777][T16166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.637789][T16166] RSP: 002b:00007f9d16235028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1115.637802][T16166] RAX: ffffffffffffffda RBX: 00007f9d15625fa0 RCX: 00007f9d1539f559 [ 1115.637809][T16166] RDX: 0000200000000780 RSI: 0000000040084146 RDI: 0000000000000003 [ 1115.637817][T16166] RBP: 00007f9d16235090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.637824][T16166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.637831][T16166] R13: 00007f9d15626038 R14: 00007f9d15625fa0 R15: 00007ffd40d9f828 [ 1115.637847][T16166] [ 1115.637863][T16166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1118.823395][T13422] hid-alps 0003:044E:120B.001A: failed to read command (-71) [ 1118.823427][T13422] hid-alps 0003:044E:120B.001A: failed to change TP mode (-71) [ 1118.825108][T13422] hid-alps 0003:044E:120B.001A: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.3-1/input0 [ 1118.864969][T13422] usb 4-1: USB disconnect, device number 5 [ 1118.879181][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1118.879192][ T30] audit: type=1800 audit(1793226912.797:4201): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=242726 res=0 errno=-22 [ 1119.604796][T16179] fido_id[16179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1120.063181][T16191] 9p: Bad value for 'rfdno' [ 1120.324095][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1121.044875][ T10] usb 4-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 1121.046954][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.046986][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1121.047002][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1121.047024][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.113409][ T30] audit: type=1800 audit(1793226915.037:4202): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=242790 res=0 errno=-22 [ 1121.140797][ T30] audit: type=1800 audit(1793226915.057:4203): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=242819 res=0 errno=-22 [ 1121.140828][ T30] audit: type=1800 audit(1793226915.057:4204): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=242797 res=0 errno=-22 [ 1121.140850][ T30] audit: type=1800 audit(1793226915.057:4205): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=242798 res=0 errno=-22 [ 1121.220426][ T30] audit: type=1800 audit(1793226915.137:4206): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=242799 res=0 errno=-22 [ 1121.265956][ T30] audit: type=1800 audit(1793226915.187:4207): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=242839 res=0 errno=-22 [ 1121.308309][ T10] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 1121.326801][T16197] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 1121.348036][ T10] usb 4-1: USB disconnect, device number 6 [ 1121.906254][T16199] FAULT_INJECTION: forcing a failure. [ 1121.906254][T16199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1121.906275][T16199] CPU: 0 UID: 0 PID: 16199 Comm: syz.9.2553 Tainted: G L syzkaller #0 PREEMPT(full) [ 1121.906293][T16199] Tainted: [L]=SOFTLOCKUP [ 1121.906297][T16199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1121.906305][T16199] Call Trace: [ 1121.906309][T16199] [ 1121.906314][T16199] dump_stack_lvl+0x100/0x190 [ 1121.906338][T16199] should_fail_ex.cold+0x5/0xa [ 1121.906357][T16199] _copy_from_user+0x2e/0xd0 [ 1121.906372][T16199] copy_msghdr_from_user+0x9f/0x4c0 [ 1121.906389][T16199] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1121.906409][T16199] ? lock_acquire+0x1d1/0x380 [ 1121.906425][T16199] ? get_pid_task+0x2a/0x250 [ 1121.906445][T16199] ___sys_sendmsg+0x106/0x1e0 [ 1121.906463][T16199] ? __pfx____sys_sendmsg+0x10/0x10 [ 1121.906479][T16199] ? get_pid_task+0x106/0x250 [ 1121.906503][T16199] ? find_held_lock+0x2b/0x80 [ 1121.906525][T16199] __sys_sendmsg+0x160/0x210 [ 1121.906538][T16199] ? __pfx___sys_sendmsg+0x10/0x10 [ 1121.906558][T16199] do_syscall_64+0x123/0x790 [ 1121.906579][T16199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.906591][T16199] RIP: 0033:0x7f8258d9f559 [ 1121.906602][T16199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.906614][T16199] RSP: 002b:00007f8259c06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1121.906626][T16199] RAX: ffffffffffffffda RBX: 00007f8259025fa0 RCX: 00007f8258d9f559 [ 1121.906634][T16199] RDX: 0000000000000000 RSI: 0000200000019680 RDI: 0000000000000008 [ 1121.906641][T16199] RBP: 00007f8259c06090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.906648][T16199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.906655][T16199] R13: 00007f8259026038 R14: 00007f8259025fa0 R15: 00007ffe1dd6a2d8 [ 1121.906670][T16199] [ 1122.645951][T16206] Couldn't find request waiting for DGID: 0c00:5a80:0800:2c00:0800:0000:7d16:9f91 [ 1123.409856][T16212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2558'. [ 1123.429623][T16212] bond0: entered promiscuous mode [ 1123.439412][T16212] gretap0: entered promiscuous mode [ 1123.439790][T16212] debugfs: 'hsr0' already exists in 'hsr' [ 1123.439802][T16212] Cannot create hsr debugfs directory [ 1123.439831][T16212] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1123.439842][T16212] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 1123.443773][ T30] audit: type=1800 audit(1793226917.367:4208): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243034 res=0 errno=-22 [ 1123.456845][ T30] audit: type=1800 audit(1793226917.377:4209): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=243038 res=0 errno=-22 [ 1124.111846][ T30] audit: type=1400 audit(1793226918.027:4210): avc: denied { getopt } for pid=16218 comm="syz.9.2560" lport=59742 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1124.112201][T13472] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1124.173345][ T30] audit: type=1800 audit(1793226918.097:4211): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=243042 res=0 errno=-22 [ 1124.199545][ T30] audit: type=1800 audit(1793226918.117:4212): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=243041 res=0 errno=-22 [ 1124.201381][T16212] hsr0: entered promiscuous mode [ 1124.234910][ T30] audit: type=1800 audit(1793226918.157:4213): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=243044 res=0 errno=-22 [ 1124.313179][T13472] usb 4-1: New USB device found: idVendor=0c70, idProduct=f003, bcdDevice=0.40 [ 1124.326460][T13472] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 33, using maximum allowed: 30 [ 1124.326485][T13472] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1124.326501][T13472] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1124.340655][T13472] usb 4-1: string descriptor 0 read error: -22 [ 1124.340716][T13472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.389479][ T30] audit: type=1800 audit(1793226918.307:4214): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243144 res=0 errno=-22 [ 1124.425996][ T30] audit: type=1800 audit(1793226918.347:4215): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=243173 res=0 errno=-22 [ 1124.452900][ T30] audit: type=1800 audit(1793226918.377:4216): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=243151 res=0 errno=-22 [ 1124.475529][ T30] audit: type=1800 audit(1793226918.397:4217): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=243114 res=0 errno=-22 [ 1124.507120][ T30] audit: type=1800 audit(1793226918.427:4218): pid=15750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=243118 res=0 errno=-22 [ 1124.510020][ T30] audit: type=1800 audit(1793226918.427:4219): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=243152 res=0 errno=-22 [ 1125.776985][T13472] aquacomputer_d5next 0003:0C70:F003.001B: unknown main item tag 0x0 [ 1125.777006][T13472] aquacomputer_d5next 0003:0C70:F003.001B: unknown main item tag 0x0 [ 1125.801210][T13472] aquacomputer_d5next 0003:0C70:F003.001B: unknown main item tag 0x0 [ 1125.801229][T13472] aquacomputer_d5next 0003:0C70:F003.001B: unknown main item tag 0x0 [ 1125.801242][T13472] aquacomputer_d5next 0003:0C70:F003.001B: unknown main item tag 0x0 [ 1125.801255][T13472] aquacomputer_d5next 0003:0C70:F003.001B: unknown main item tag 0x0 [ 1125.801269][T13472] aquacomputer_d5next 0003:0C70:F003.001B: unknown main item tag 0x0 [ 1125.801282][T13472] aquacomputer_d5next 0003:0C70:F003.001B: unknown main item tag 0x0 [ 1125.801295][T13472] aquacomputer_d5next 0003:0C70:F003.001B: unknown main item tag 0x0 [ 1125.801309][T13472] aquacomputer_d5next 0003:0C70:F003.001B: unknown main item tag 0x0 [ 1126.018392][T13472] aquacomputer_d5next 0003:0C70:F003.001B: hidraw0: USB HID vc.84 Device [HID 0c70:f003] on usb-dummy_hcd.3-1/input0 [ 1126.076832][T16220] hub 1-0:1.0: USB hub found [ 1126.077348][T16220] hub 1-0:1.0: 1 port detected [ 1126.111488][T13472] usb 4-1: USB disconnect, device number 7 [ 1126.131438][T16220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=16220 comm=syz.6.2564 [ 1126.131793][T16220] netlink: 'syz.6.2564': attribute type 4 has an invalid length. [ 1126.331929][T16232] fido_id[16232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1126.671745][T13472] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1126.881506][T16245] fido_id[16245]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1127.059630][T16252] input: syz0 as /devices/virtual/input/input35 [ 1127.269505][T16255] batman_adv: batadv0: Adding interface: macvlan2 [ 1127.269517][T16255] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.269534][T16255] batman_adv: batadv0: Interface activated: macvlan2 [ 1127.315114][T13472] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1127.472919][T13472] usb 1-1: Using ep0 maxpacket: 16 [ 1127.483578][T13472] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1127.483604][T13472] usb 1-1: New USB device found: idVendor=0009, idProduct=0000, bcdDevice=0.00 [ 1127.484387][T13472] usb 1-1: config 3 interface 1 has no altsetting 0 [ 1127.487578][T13472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1127.487593][T13472] usb 1-1: SerialNumber: syz [ 1127.595734][T16262] FAULT_INJECTION: forcing a failure. [ 1127.595734][T16262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1127.595754][T16262] CPU: 0 UID: 0 PID: 16262 Comm: syz.5.2571 Tainted: G L syzkaller #0 PREEMPT(full) [ 1127.595771][T16262] Tainted: [L]=SOFTLOCKUP [ 1127.595776][T16262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1127.595783][T16262] Call Trace: [ 1127.595787][T16262] [ 1127.595792][T16262] dump_stack_lvl+0x100/0x190 [ 1127.595816][T16262] should_fail_ex.cold+0x5/0xa [ 1127.595834][T16262] _copy_to_user+0x32/0xd0 [ 1127.595852][T16262] simple_read_from_buffer+0xcb/0x170 [ 1127.595868][T16262] proc_fail_nth_read+0x1af/0x230 [ 1127.595884][T16262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1127.595899][T16262] ? rw_verify_area+0xce/0x6d0 [ 1127.595916][T16262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1127.595930][T16262] vfs_read+0x1e4/0xb40 [ 1127.595949][T16262] ? lock_acquire+0x1d1/0x380 [ 1127.595965][T16262] ? __fget_files+0x34/0x3d0 [ 1127.595978][T16262] ? __pfx_vfs_read+0x10/0x10 [ 1127.595995][T16262] ? find_held_lock+0x2b/0x80 [ 1127.596007][T16262] ? __fget_files+0x215/0x3d0 [ 1127.596023][T16262] ? __fget_files+0x21f/0x3d0 [ 1127.596041][T16262] ksys_read+0x12a/0x250 [ 1127.596059][T16262] ? __pfx_ksys_read+0x10/0x10 [ 1127.596081][T16262] do_syscall_64+0x123/0x790 [ 1127.596102][T16262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.596114][T16262] RIP: 0033:0x7f5fa495fd8e [ 1127.596125][T16262] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1127.596137][T16262] RSP: 002b:00007f5fa58e9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1127.596149][T16262] RAX: ffffffffffffffda RBX: 00007f5fa58ea6c0 RCX: 00007f5fa495fd8e [ 1127.596156][T16262] RDX: 000000000000000f RSI: 00007f5fa58ea0a0 RDI: 0000000000000004 [ 1127.596163][T16262] RBP: 00007f5fa58ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.596171][T16262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.596178][T16262] R13: 00007f5fa4c26038 R14: 00007f5fa4c25fa0 R15: 00007ffc55a3cdc8 [ 1127.596193][T16262] [ 1127.931325][T13472] usb 1-1: selecting invalid altsetting 0 [ 1127.931578][T13472] rndis_host 1-1:3.0: probe with driver rndis_host failed with error -22 [ 1127.965896][T13472] usb 1-1: USB disconnect, device number 25 [ 1128.096741][T16268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1128.132117][T16272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1128.276870][T13472] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1128.382846][ T936] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1128.407676][T16286] fido_id[16286]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1128.544649][ T936] usb 4-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1128.548581][ T936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.548597][ T936] usb 4-1: Product: syz [ 1128.548606][ T936] usb 4-1: Manufacturer: syz [ 1128.548615][ T936] usb 4-1: SerialNumber: syz [ 1128.551784][ T936] usb 4-1: config 0 descriptor?? [ 1128.598056][ T936] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1128.629139][T16293] bridge1: entered promiscuous mode [ 1128.629179][T16293] bridge1: entered allmulticast mode [ 1128.830920][T16299] FAULT_INJECTION: forcing a failure. [ 1128.830920][T16299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1128.830942][T16299] CPU: 0 UID: 0 PID: 16299 Comm: syz.5.2579 Tainted: G L syzkaller #0 PREEMPT(full) [ 1128.830959][T16299] Tainted: [L]=SOFTLOCKUP [ 1128.830964][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1128.830971][T16299] Call Trace: [ 1128.830975][T16299] [ 1128.830980][T16299] dump_stack_lvl+0x100/0x190 [ 1128.831003][T16299] should_fail_ex.cold+0x5/0xa [ 1128.831022][T16299] _copy_from_user+0x2e/0xd0 [ 1128.831037][T16299] udmabuf_ioctl+0x112/0x300 [ 1128.831055][T16299] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1128.831077][T16299] ? selinux_file_ioctl+0x1e0/0x290 [ 1128.831095][T16299] ? selinux_file_ioctl+0x1e7/0x290 [ 1128.831114][T16299] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 1128.831132][T16299] __x64_sys_ioctl+0x18e/0x210 [ 1128.831152][T16299] do_syscall_64+0x123/0x790 [ 1128.831173][T16299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.831185][T16299] RIP: 0033:0x7f5fa499f559 [ 1128.831195][T16299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1128.831207][T16299] RSP: 002b:00007f5fa58ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1128.831219][T16299] RAX: ffffffffffffffda RBX: 00007f5fa4c25fa0 RCX: 00007f5fa499f559 [ 1128.831226][T16299] RDX: 0000200000000380 RSI: 0000000040187542 RDI: 0000000000000003 [ 1128.831234][T16299] RBP: 00007f5fa58ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1128.831241][T16299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1128.831248][T16299] R13: 00007f5fa4c26038 R14: 00007f5fa4c25fa0 R15: 00007ffc55a3cdc8 [ 1128.831264][T16299] [ 1129.048024][ T936] gspca_sq905c: sq905c_read: usb_control_msg failed (-32) [ 1129.048038][ T936] sq905c 4-1:0.0: Reading version command failed [ 1129.048073][ T936] sq905c 4-1:0.0: probe with driver sq905c failed with error -32 [ 1129.113080][ T936] usb 4-1: USB disconnect, device number 8 [ 1129.229246][T16305] jffs2: notice: (16305) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1129.256448][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1129.256460][ T30] audit: type=1400 audit(1793226923.177:4271): avc: denied { write } for pid=16304 comm="syz.0.2580" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1130.217411][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2582'. [ 1130.342271][ T30] audit: type=1400 audit(1793226924.257:4272): avc: denied { setopt } for pid=16315 comm="syz.3.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1131.209049][T16330] input: syz1 as /devices/virtual/input/input36 [ 1131.224315][ T30] audit: type=1800 audit(1793226925.127:4273): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244060 res=0 errno=-22 [ 1131.224345][ T30] audit: type=1800 audit(1793226925.137:4274): pid=16330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2587" name="current_clocksource" dev="sysfs" ino=4914 res=0 errno=-22 [ 1131.224368][ T30] audit: type=1804 audit(1793226925.137:4275): pid=16330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.2587" name="/newroot/426/sys/devices/system/clocksource/clocksource0/current_clocksource" dev="sysfs" ino=4914 res=1 errno=0 [ 1131.224393][ T30] audit: type=1400 audit(1793226925.137:4276): avc: denied { search } for pid=4970 comm="acpid" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="unconfined" [ 1131.224415][ T30] audit: type=1400 audit(1793226925.147:4277): avc: denied { search } for pid=4970 comm="acpid" name="/" dev="devtmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="unconfined" [ 1131.224500][T13472] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1131.252668][ T936] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1131.276649][ T30] audit: type=1800 audit(1793226925.177:4278): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=244075 res=0 errno=-22 [ 1131.276681][ T30] audit: type=1800 audit(1793226925.177:4279): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=244078 res=0 errno=-22 [ 1131.399655][ T30] audit: type=1800 audit(1793226925.327:4280): pid=15886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=244077 res=0 errno=-22 [ 1131.444983][T13472] usb 4-1: Using ep0 maxpacket: 16 [ 1131.453842][T13472] usb 4-1: New USB device found: idVendor=0457, idProduct=07da, bcdDevice=0.00 [ 1131.466349][T13472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.466369][T13472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.466383][T13472] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1131.466405][T13472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.467930][T13472] usb 4-1: config 0 descriptor?? [ 1131.495143][ T936] usb 1-1: New USB device found: idVendor=1e7d, idProduct=30d4, bcdDevice=0.01 [ 1131.535993][ T936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1131.536014][ T936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1131.536034][ T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.537186][ T936] usb 1-1: config 0 descriptor?? [ 1131.722615][T16333] bridge1: entered promiscuous mode [ 1131.722650][T16333] bridge1: entered allmulticast mode [ 1131.889381][T13472] hid_parser_main: 4009 callbacks suppressed [ 1131.889409][T13472] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 1131.889425][T13472] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 1131.889438][T13472] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 1131.889451][T13472] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 1131.889464][T13472] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 1131.889477][T13472] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 1131.889490][T13472] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 1131.889503][T13472] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 1131.889516][T13472] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 1131.889541][T13472] hid-multitouch 0003:0457:07DA.001E: unknown main item tag 0x0 [ 1131.986495][T13472] hid-multitouch 0003:0457:07DA.001E: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 1132.097088][T13472] usb 4-1: USB disconnect, device number 9 [ 1132.117252][T16341] fido_id[16341]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1132.181373][T16345] trusted_key: encrypted_key: insufficient parameters specified [ 1133.160038][T16354] ubi0: attaching mtd0 [ 1133.160932][T16354] ubi0: scanning is finished [ 1133.160957][T16354] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1133.223578][T16354] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1133.483212][ T936] usbhid 1-1:0.0: can't add hid device: -71 [ 1133.483270][ T936] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1133.503819][ T936] usb 1-1: USB disconnect, device number 26 [ 1133.627218][T16362] IPVS: length: 242 != 24 [ 1135.221436][T16374] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1137.921842][T16374] gadgetfs: bound to dummy_udc driver [ 1138.038060][T16392] loop2: detected capacity change from 0 to 7 [ 1138.054481][T16392] Dev loop2: unable to read RDB block 7 [ 1138.054502][T16392] loop2: AHDI p1 p2 p3 [ 1138.054513][T16392] loop2: partition table partially beyond EOD, truncated [ 1138.054619][T16392] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1138.054632][T16392] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1140.257244][ T936] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1140.334175][T16414] FAULT_INJECTION: forcing a failure. [ 1140.334175][T16414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.334196][T16414] CPU: 0 UID: 0 PID: 16414 Comm: syz.6.2608 Tainted: G L syzkaller #0 PREEMPT(full) [ 1140.334213][T16414] Tainted: [L]=SOFTLOCKUP [ 1140.334217][T16414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1140.334225][T16414] Call Trace: [ 1140.334230][T16414] [ 1140.334234][T16414] dump_stack_lvl+0x100/0x190 [ 1140.334258][T16414] should_fail_ex.cold+0x5/0xa [ 1140.334276][T16414] _copy_from_user+0x2e/0xd0 [ 1140.334291][T16414] copy_msghdr_from_user+0x9f/0x4c0 [ 1140.334309][T16414] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1140.334329][T16414] ? lock_acquire+0x1d1/0x380 [ 1140.334345][T16414] ? get_pid_task+0x2a/0x250 [ 1140.334365][T16414] ___sys_sendmsg+0x106/0x1e0 [ 1140.334382][T16414] ? __pfx____sys_sendmsg+0x10/0x10 [ 1140.334399][T16414] ? get_pid_task+0x106/0x250 [ 1140.334423][T16414] ? find_held_lock+0x2b/0x80 [ 1140.334445][T16414] __sys_sendmsg+0x160/0x210 [ 1140.334458][T16414] ? __pfx___sys_sendmsg+0x10/0x10 [ 1140.334478][T16414] do_syscall_64+0x123/0x790 [ 1140.334499][T16414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.334511][T16414] RIP: 0033:0x7f9d1539f559 [ 1140.334522][T16414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.334534][T16414] RSP: 002b:00007f9d16235028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1140.334546][T16414] RAX: ffffffffffffffda RBX: 00007f9d15625fa0 RCX: 00007f9d1539f559 [ 1140.334554][T16414] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1140.334567][T16414] RBP: 00007f9d16235090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.334574][T16414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.334581][T16414] R13: 00007f9d15626038 R14: 00007f9d15625fa0 R15: 00007ffd40d9f828 [ 1140.334597][T16414] [ 1140.484850][ T936] usb 1-1: Using ep0 maxpacket: 32 [ 1140.486213][ T936] usb 1-1: New USB device found: idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1140.621195][ T936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.621212][ T936] usb 1-1: Product: syz [ 1140.621222][ T936] usb 1-1: Manufacturer: syz [ 1140.621231][ T936] usb 1-1: SerialNumber: syz [ 1140.622547][ T936] usb 1-1: config 0 descriptor?? [ 1140.659815][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1140.659827][ T30] audit: type=1800 audit(1793226934.577:4305): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244672 res=0 errno=-22 [ 1140.700396][ T30] audit: type=1800 audit(1793226934.617:4306): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=244704 res=0 errno=-22 [ 1140.700431][ T30] audit: type=1800 audit(1793226934.617:4307): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=244679 res=0 errno=-22 [ 1140.700453][ T30] audit: type=1800 audit(1793226934.617:4308): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=244680 res=0 errno=-22 [ 1141.636050][ T936] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1141.636071][ T936] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1141.793770][ T30] audit: type=1400 audit(1793226935.707:4309): avc: denied { search } for pid=16425 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.793803][ T30] audit: type=1400 audit(1793226935.707:4310): avc: denied { search } for pid=16425 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.793828][ T30] audit: type=1400 audit(1793226935.707:4311): avc: denied { search } for pid=16425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.793851][ T30] audit: type=1400 audit(1793226935.707:4312): avc: denied { read } for pid=16425 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.820909][ T30] audit: type=1400 audit(1793226935.747:4313): avc: denied { read open } for pid=16425 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.847052][ T30] audit: type=1400 audit(1793226935.767:4314): avc: denied { getattr } for pid=16425 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.976420][ T936] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1142.006486][ T936] usb 1-1: USB disconnect, device number 27 [ 1142.034702][T16426] sctp: [Deprecated]: syz.9.2600 (pid 16426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1142.034702][T16426] Use struct sctp_sack_info instead [ 1142.099186][T16431] md: md5 stopped. [ 1142.159406][T16426] netlink: 296 bytes leftover after parsing attributes in process `syz.9.2600'. [ 1142.210509][T16426] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.222841][T16431] block2mtd: too many arguments [ 1142.250029][T16426] ip_tables: iptables: counters copy to user failed while replacing table [ 1143.343144][T16451] netlink: 'syz.3.2617': attribute type 1 has an invalid length. [ 1143.343158][T16451] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2617'. [ 1143.446730][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1143.472563][T16452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2617'. [ 1143.493700][T16441] block device autoloading is deprecated and will be removed. [ 1143.520524][T16441] device-mapper: multipath round-robin: repeat_count > 1 is deprecated, using 1 instead [ 1143.520807][T16441] device-mapper: table: table load rejected: including non-request-stackable devices [ 1143.520816][T16441] device-mapper: table: unable to determine table type [ 1143.618993][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1143.629725][ T10] usb 1-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1143.631968][ T10] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.658204][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.658222][ T10] usb 1-1: Product: syz [ 1143.658232][ T10] usb 1-1: Manufacturer: syz [ 1143.658241][ T10] usb 1-1: SerialNumber: syz [ 1143.689911][ T10] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1143.689955][ T10] imon 1-1:155.0: unable to initialize intf0, err -19 [ 1143.708264][T16455] xt_IDLETIMER: timeout value is zero [ 1143.753239][T16456] xt_IDLETIMER: timeout value is zero [ 1143.861600][T16461] 9pnet_virtio: no channels available for device /dev/loop9 [ 1144.205619][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1145.083072][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1145.083545][ T10] usb 10-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1145.086305][ T10] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1145.086324][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1145.133125][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.133142][ T10] usb 10-1: Product: syz [ 1145.133151][ T10] usb 10-1: Manufacturer: syz [ 1145.133159][ T10] usb 10-1: SerialNumber: syz [ 1145.145589][ T10] usb 10-1: config 0 descriptor?? [ 1145.174318][ T10] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1145.174341][ T10] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1147.384108][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 1147.384123][ T30] audit: type=1400 audit(1793226941.017:4416): avc: denied { map_create } for pid=16474 comm="syz.6.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1147.384154][ T30] audit: type=1400 audit(1793226941.027:4417): avc: denied { prog_run } for pid=16474 comm="syz.6.2621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1148.131152][ T10] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1148.147479][ T10] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1148.148711][ T10] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 1148.148722][ T10] em28xx 10-1:0.0: No AC97 audio processor [ 1148.177131][ T30] audit: type=1800 audit(1793226942.097:4418): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=245475 res=0 errno=-22 [ 1148.201809][ T30] audit: type=1800 audit(1793226942.127:4419): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=245476 res=0 errno=-22 [ 1148.202262][ T30] audit: type=1800 audit(1793226942.127:4420): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=245455 res=0 errno=-22 [ 1148.251661][ T30] audit: type=1800 audit(1793226942.177:4421): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=245477 res=0 errno=-22 [ 1148.278379][ T10] usb 10-1: USB disconnect, device number 5 [ 1148.279085][ T10] em28xx 10-1:0.0: Disconnecting em28xx [ 1148.280875][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2620'. [ 1148.281205][ T936] usb 1-1: USB disconnect, device number 28 [ 1148.351526][ T30] audit: type=1800 audit(1793226942.267:4422): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=245516 res=0 errno=-22 [ 1148.428469][ T30] audit: type=1400 audit(1793226942.337:4423): avc: denied { write } for pid=16472 comm="syz.3.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1148.428505][ T30] audit: type=1400 audit(1793226942.337:4424): avc: denied { connect } for pid=16472 comm="syz.3.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1148.428526][ T30] audit: type=1400 audit(1793226942.337:4425): avc: denied { name_connect } for pid=16472 comm="syz.3.2620" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1148.659541][ T10] em28xx: Freeing device [ 1148.794286][T16495] bridge0: entered promiscuous mode [ 1148.794303][T16495] bridge0: entered allmulticast mode [ 1148.806644][ T32] INFO: task syz.8.2213:14549 blocked for more than 143 seconds. [ 1148.806661][ T32] Tainted: G L syzkaller #0 [ 1148.806668][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1148.806673][ T32] task:syz.8.2213 state:D stack:28728 pid:14549 tgid:14548 ppid:13177 task_flags:0x400040 flags:0x00080002 [ 1148.806708][ T32] Call Trace: [ 1148.806712][ T32] [ 1148.806719][ T32] __schedule+0x125e/0x6990 [ 1148.806743][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1148.806768][ T32] ? __pfx___schedule+0x10/0x10 [ 1148.806783][ T32] ? find_held_lock+0x2b/0x80 [ 1148.806797][ T32] ? schedule+0x225/0x2c0 [ 1148.806816][ T32] schedule+0xdd/0x2c0 [ 1148.806832][ T32] schedule_preempt_disabled+0x13/0x30 [ 1148.806849][ T32] __mutex_lock+0xcca/0x1c10 [ 1148.806861][ T32] ? usbdev_open+0x1b6/0x860 [ 1148.806879][ T32] ? klist_put+0xcb/0x1d0 [ 1148.806894][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1148.806905][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1148.806921][ T32] ? kobject_put+0xb9/0x640 [ 1148.806938][ T32] ? __pfx_bus_find_device+0x10/0x10 [ 1148.806956][ T32] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1148.806972][ T32] ? usbdev_open+0x9d/0x860 [ 1148.806990][ T32] ? usbdev_open+0x1b6/0x860 [ 1148.807005][ T32] usbdev_open+0x1b6/0x860 [ 1148.807022][ T32] ? kobject_get_unless_zero+0x156/0x200 [ 1148.807037][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 1148.807052][ T32] ? chrdev_open+0x10b/0x6a0 [ 1148.807065][ T32] ? chrdev_open+0x10b/0x6a0 [ 1148.807080][ T32] ? __pfx_usbdev_open+0x10/0x10 [ 1148.807096][ T32] chrdev_open+0x234/0x6a0 [ 1148.807110][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1148.807124][ T32] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1148.807146][ T32] do_dentry_open+0x674/0x1470 [ 1148.807157][ T32] ? __pfx_chrdev_open+0x10/0x10 [ 1148.807173][ T32] vfs_open_consume+0xcc/0x460 [ 1148.807190][ T32] path_openat+0x1547/0x23f0 [ 1148.807207][ T32] ? __pfx_path_openat+0x10/0x10 [ 1148.807225][ T32] do_file_open+0x20e/0x430 [ 1148.807240][ T32] ? __pfx_do_file_open+0x10/0x10 [ 1148.807264][ T32] ? _raw_spin_unlock+0x28/0x50 [ 1148.807280][ T32] ? alloc_fd+0x471/0x7a0 [ 1148.807299][ T32] do_sys_openat2+0x163/0x1d0 [ 1148.807314][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 1148.807334][ T32] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1148.807357][ T32] __x64_sys_openat+0x12d/0x210 [ 1148.807373][ T32] ? __pfx___x64_sys_openat+0x10/0x10 [ 1148.807394][ T32] do_syscall_64+0x123/0x790 [ 1148.807414][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.807427][ T32] RIP: 0033:0x7f1d7bb5fd8e [ 1148.807438][ T32] RSP: 002b:00007f1d7cafcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1148.807449][ T32] RAX: ffffffffffffffda RBX: 00007f1d7cafd6c0 RCX: 00007f1d7bb5fd8e [ 1148.807457][ T32] RDX: 0000000000000002 RSI: 00007f1d7cafcc00 RDI: ffffffffffffff9c [ 1148.807465][ T32] RBP: 00007f1d7cafcc00 R08: 0000000000000000 R09: 0000000000000000 [ 1148.807472][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1148.807480][ T32] R13: 00007f1d7be26038 R14: 00007f1d7be25fa0 R15: 00007fff3fbed3d8 [ 1148.807495][ T32] [ 1148.807512][ T32] [ 1148.807512][ T32] Showing all locks held in the system: [ 1148.807518][ T32] locks held by kworker/0:1/10: 3, last CPU#0: [ 1148.807527][ T32] #0: ffff8880222fad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1148.807557][ T32] #1: ffffc900000f7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1148.807586][ T32] #2: ffff88802c5ba1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1148.807615][ T32] locks held by pr/ttyS0/31: 1, last CPU#0: [ 1148.807624][ T32] #0: ffffffff8ffd7718 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1148.807657][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1148.807665][ T32] #0: ffffffff8ffeb4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1148.807719][ T32] locks held by getty/5374: 2, on CPU#0: [ 1148.807728][ T32] #0: ffff88802ba2a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1148.807887][ T32] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 1148.807919][ T32] locks held by kworker/1:4/5721: 5, on CPU#1: [ 1148.807927][ T32] #0: ffff8880222fad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1148.807955][ T32] #1: ffffc90004357d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1148.807983][ T32] #2: ffff88802c2061d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1148.825586][ T32] #3: ffff8880256f41d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4c0 [ 1148.825617][ T32] #4: ffff888050a651a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4c0 [ 1148.825646][ T32] locks held by kworker/1:5/5724: 6, on CPU#1: [ 1148.825655][ T32] #0: ffff8880222fad48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1148.825684][ T32] #1: ffffc90004387d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1148.825712][ T32] #2: ffff88802c22e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1148.825738][ T32] #3: ffff888037eaf1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4c0 [ 1148.825766][ T32] #4: ffff88802c1dc1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4c0 [ 1148.825793][ T32] #5: ffffffff8fe8d968 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xab/0x250 [ 1148.825829][ T32] locks held by syz-executor/8873: 1, last CPU#0: [ 1148.825837][ T32] #0: ffff88807aa8a460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 1148.850745][ T32] locks held by syz.8.2213/14549: 1, on CPU#0: [ 1148.850756][ T32] #0: ffff88802c22e1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x860 [ 1148.850857][ T32] [ 1148.850861][ T32] ============================================= [ 1148.850861][ T32] [ 1148.850866][ T32] NMI backtrace for cpu 0 [ 1148.850877][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1148.850895][ T32] Tainted: [L]=SOFTLOCKUP [ 1148.850900][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1148.850907][ T32] Call Trace: [ 1148.850911][ T32] [ 1148.850916][ T32] dump_stack_lvl+0x100/0x190 [ 1148.850938][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1148.850951][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1148.850968][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1148.850986][ T32] sys_info+0x141/0x190 [ 1148.850999][ T32] watchdog+0xd0f/0x10c0 [ 1148.851014][ T32] ? __pfx_watchdog+0x10/0x10 [ 1148.851025][ T32] ? __kthread_parkme+0x18f/0x230 [ 1148.851044][ T32] ? kthread+0x13a/0x450 [ 1148.851055][ T32] ? __pfx_watchdog+0x10/0x10 [ 1148.851064][ T32] kthread+0x373/0x450 [ 1148.851075][ T32] ? __pfx_kthread+0x10/0x10 [ 1148.851087][ T32] ret_from_fork+0x730/0xd60 [ 1148.851103][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1148.851119][ T32] ? __switch_to+0x800/0x10e0 [ 1148.851130][ T32] ? __pfx_kthread+0x10/0x10 [ 1148.851142][ T32] ret_from_fork_asm+0x1a/0x30 [ 1148.851162][ T32] [ 1148.870868][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1149.509673][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1149.520406][ T32] Tainted: [L]=SOFTLOCKUP [ 1149.524698][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1149.534731][ T32] Call Trace: [ 1149.537986][ T32] [ 1149.540892][ T32] dump_stack_lvl+0x100/0x190 [ 1149.545550][ T32] vpanic+0x2dc/0x6f8 [ 1149.549512][ T32] panic+0xd1/0xe0 [ 1149.553204][ T32] ? __pfx_panic+0x10/0x10 [ 1149.557593][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1149.563733][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1149.569859][ T32] ? watchdog.cold+0x20/0x26d [ 1149.574509][ T32] watchdog.cold+0x31/0x26d [ 1149.578987][ T32] ? __pfx_watchdog+0x10/0x10 [ 1149.583642][ T32] ? __kthread_parkme+0x18f/0x230 [ 1149.588642][ T32] ? kthread+0x13a/0x450 [ 1149.592854][ T32] ? __pfx_watchdog+0x10/0x10 [ 1149.597497][ T32] kthread+0x373/0x450 [ 1149.601537][ T32] ? __pfx_kthread+0x10/0x10 [ 1149.606106][ T32] ret_from_fork+0x730/0xd60 [ 1149.610670][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1149.615755][ T32] ? __switch_to+0x800/0x10e0 [ 1149.620401][ T32] ? __pfx_kthread+0x10/0x10 [ 1149.624959][ T32] ret_from_fork_asm+0x1a/0x30 [ 1149.629702][ T32] [ 1149.632732][ T32] Kernel Offset: disabled [ 1149.637027][ T32] Rebooting in 86400 seconds..