last executing test programs: 2m59.325272011s ago: executing program 1 (id=228): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c7fd, &(0x7f0000e68000)={0x2, 0x4e2b, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x20048009) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat2$dir(0xffffff9c, &(0x7f0000000140)='./cgroup/../file0/file0/file0\x00', &(0x7f00000002c0)={0x800, 0x0, 0x5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000028c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2a8, 0x16, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x144, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfe}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x104, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x31c}}, 0x20048001) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdir(0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0xff) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000000640)=@vmx={0x109, 0x0, 0xffde, {0x50000, 0x58000, {}, 0x0, 0x1}, {"d07ee5110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100008000", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) 2m58.64912037s ago: executing program 1 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000040)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c000000226cbb0cfaa99f7ff6d8c522430224cbdab979a658f818e4c105debd8245bf6d7202fc7246008571b67766862574b7fbdee3d228339bedcc2d2a83e0a51f01a156c05d020817bb976622e5fb021c710d5589420845b58b9ecbca61900a7679b5e030d04b02c21495a44212372eb4249fbf6cfc869347293cbade67c244834074c1fdc4076b3b7ae0a2136550c334e3037f311164331cde6c3336db0b1c5b2aadbc4f3d786d855872f7892d70f70b34914e4f65acab52acf3ef0a843aceb3936bd239177a10cd9cbbec84bea6978e0f194b68d3ae3de982b0698311e2d6ed911d3b9dc98c24bb3ce363f969b676cefd333a32f8950eeef19c2fb1527700a88131ddef384540daeb90648af6be5b5dec1dd9836ebc54b228de7773e27eec9615bfb4efd86222bc55cf3fb127e61626ced9018e72597e355e41cfa4df93086e", @ANYRES16=r5], 0x4c}}, 0x10004000) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) fanotify_init(0x79, 0x101000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) r6 = socket$kcm(0x21, 0x2, 0xa) syz_emit_ethernet(0x22, &(0x7f00000007c0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x14, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}, @broadcast}}}}}, 0x0) sendmsg$kcm(r6, 0x0, 0xfc40) 2m57.719836149s ago: executing program 1 (id=235): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000780)={0x0, 0x3, 0x30}, &(0x7f00000007c0)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18100000ff970000d29d85cac958991c6a0100000000"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2m56.787049726s ago: executing program 1 (id=239): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x240002) readv(r1, &(0x7f0000001280)=[{&(0x7f0000000040)=""/93, 0x5d}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/87, 0x57}, {&(0x7f00000011c0)=""/146, 0x92}], 0x6) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone(0x4ea03400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m53.602959833s ago: executing program 1 (id=249): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x4480, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m53.212517326s ago: executing program 1 (id=250): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x20, 0x17, 0x2, "aaaf"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x27) r4 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) 2m37.512389824s ago: executing program 32 (id=250): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000003c0)={0x20, 0x17, 0x2, "aaaf"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x27) r4 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, 0x0, 0x0, r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) 5.21316388s ago: executing program 4 (id=1273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000a40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x0, 0xb1, 0x8, 0x8, 0x9}, 0xe0, &(0x7f0000000600)={0x5, 0xf, 0xe0, 0x4, [@generic={0xc1, 0x10, 0xa, "2e42f347e0c496ede799e2afeebff9887b539dee66b1ea1e49964508b7de7db74192c3e9984ff9d4fd65b0df219a19cb8ef3e5d887d29722342bcdc4b271e72808222d84321e0c93cc6b114fdbef917d2f1f85d8e308a54ecb9c244f4207c3b6b6482b8fa64386d8c8cfc039d800ea153cf4804e1d41f468626276c6036ae6ae0abae47e59c5c8f2c1f30f339c8f3aea81afab1b6441956228de78defd89a5accf055bd504a1196d5a510509e16b0a08f922799b4d37debb5b361f04f149"}, @generic={0x3, 0x10, 0xa}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8a, "09257aa581c32ac9ea5b702f6aeab103"}]}, 0x6, [{0x7d, &(0x7f0000000700)=@string={0x7d, 0x3, "fef63a71768ccbb7ea1454916f62eb610925dedfeb00c3c5d2d47dd9b8022685776cb6818187d3566bb76a163101648a625ef28a1e98f47c678308600a5107229f86f787d23f3c70e81bebe6113e3e411173be21c59437ab804ef4ffc7e103a8e49443cbfa68caacb6d412b39410ea7ab5de4bac7da7764b63aadd"}}, {0xc1, &(0x7f0000000780)=@string={0xc1, 0x3, "f4384efbcf4ade3a746d0738b55ef3501690ad2ce39aadf01f25d8a0b974487ea9a8b7882e5cb5d89b6c78600661649dde9e7936d54ff5abe7c0f8a24350fe7a6b431142c3bb4fcc6919b2c80f3cbe5af149af3727e3ed367c51dc93576786e438020ed8cac513af6ae7ae5d91bd24bee612cf700acb8956e5ceda9d11f5b2691c2dd4ef694cd2c6830173a1a34c6b88c1aeba17916295fb3edbb731567b376160a26b0d428cedaafab039bd9bd1832373c286b0e7e9daaa7879e6f68e1fa1"}}, {0xdd, &(0x7f0000000880)=@string={0xdd, 0x3, "90280bb3af7097ec8232eeddb791c1d5face18b7e1c634322d8f462d038932edf917d0467b18d2bef1d87ad6203a20800f228cd24af8efaa1bf3782afed113988d396c7630f29e0099446c208d168b7d57b2adc7967c0631f0d10457c84e7b408c4e7eb3787f130bb0278c0b6bb3d5767b3a9f43dde1be99fd92246ef76a49afc911c5e172db0745d1864cf64d4508676185ca7f0582b245416e52c39623c00ae81028ce037271d22ab0985bef469a79d5db35acc2ba24cb2cb757861680da21020d990574d79579f501538a1491fba6b3edf3f27f95885d49a544"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xc09}}, {0x5, &(0x7f00000009c0)=@string={0x5, 0x3, "54527f"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0xc01}}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0403000000dc770000ab39fe57fa"], 0xf) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r6, 0xffffffffffffffff, 0x31, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r7, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xfffffff8, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, 0x0, &(0x7f0000000380)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c00078008001240aa0600000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.724346132s ago: executing program 5 (id=1276): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000005c0)=@proc, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e88500000070000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f00000000c0)={0x2, 0x5e}) splice(r4, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r7, 0xe) dup2(r2, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r8 = socket(0x3, 0x3, 0x9) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 4.539814658s ago: executing program 3 (id=1278): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df4", 0x9c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094", 0xc0}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9198877e4e9d920ff", 0xea}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000002, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405668, &(0x7f0000000140)={0x6, 0x0, 0x1, "0000087ababc000000000000164d97526b15030000000000380700000004f9bf", 0xf6b487ba}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0xffffffffffffffb8) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.489093042s ago: executing program 4 (id=1279): r0 = syz_io_uring_setup(0x478e, &(0x7f0000000400)={0x0, 0xc593, 0x8, 0x1, 0x309}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000540), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x20, 0xb, 0x98, "c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a058c108d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a8850c0209c00666486cce5de49a22ed54e944581d84d8a36b11a07d18b06a733e0e74bedd5dc96e20d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f06"}, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) sendfile(r3, r2, 0x0, 0x23b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001c00010029bd7000fedb8c1f07000000", @ANYRES32=r5, @ANYBLOB="8000ff0a0a000200aaaaaaaaaa0c"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x7f, 0x404002) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406200c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0xc020, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x3}}]}, 0x24}}, 0x20004980) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000000)={@random="733d51b38210", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x19, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1, [{0x0, 0x0, "5695c3"}]}}}}}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xffffffffffffff53, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000735500000000000000000000feff000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000005b00"/144]}, 0x108) r9 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r9, 0x4014563c, &(0x7f0000000100)={0x9, {0xab, 0x829, 0xfc8, 0xb}}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000000c0)=""/84) 4.427992445s ago: executing program 3 (id=1280): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe10, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4a8}, 0x94) prlimit64(0x0, 0x9, &(0x7f0000000040)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x10000}, 0x28) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYRES64=r1, @ANYRES32, @ANYBLOB="09612bc4d0121634151dda3d06f37b35552acfe0c7cb8efcf65cfee77cf3debb3bb450103cbfbc7d"], 0x88) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f000077f000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x8031, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x59) mount(0x0, 0x0, 0x0, 0x3005, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000440)={0xc9, 0x0, 0xc}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x4) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0xfffffffffffffe37) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000100)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @timestamp, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x89100060, 0x0, 0xff46) 4.416639957s ago: executing program 3 (id=1281): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x420, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r4) getsockname$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xb, 0x7f, 0xd}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2400c010) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000100), 0x8) listen(0xffffffffffffffff, 0xff) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c910"], 0x15) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, 0x0, 0x20000040) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r8, r9, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r7, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r8, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) 3.880653931s ago: executing program 4 (id=1284): r0 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) fchdir(r1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0x17) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) (async) setpgid(0x0, r5) (async) unshare(0x6020400) (async) fchdir(r4) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r8, 0xaea2, 0x5) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r9) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="240003"], 0x10e0}}, 0x0) 3.814722379s ago: executing program 5 (id=1286): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000001) io_setup(0xff, &(0x7f0000000380)) 3.756902427s ago: executing program 3 (id=1287): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r0, 0x10000000005, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r4, 0x8b1a, &(0x7f0000000040)) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001540)={r2, r3, 0x25, 0x5, @val=@iter={&(0x7f00000002c0)=@map_fd=r0, 0x10}}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000240)=0x1) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4002805}, 0xc0) syz_usb_connect(0x0, 0x2d, &(0x7f0000001580)=ANY=[@ANYBLOB="120100026171b610240430cf27350102030109021b00010008000f0904f6ff0152e1ef0b09050b10ff030c07000c9e52cb824ec19d95500ff1a107ca02a479dd1e5ae15e67ebbff519ac538e706b564edfcf7a1f818b635410253706673b5802fa5a44ebd14c248d30a1a87f03d00b726f4932b6f581ad6eb9d17d2e2a8cb2be1d742b8e075e77fef69eca07fafeebecb0a6f332cf6ae353ff715ebfb52e6f1da5fed860d036b11aefedf2dce306a5e40504c6cfb9f920c892cf0df83d8f1d3b852e1ff830541a1926cf4018ef977970e21e8c8a891678ffc5"], 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)={0x14, 0x38, 0x301, 0x70bd27, 0xfffffffc, {0x4, 0x0, 0xec0}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x400c000) 3.738265961s ago: executing program 4 (id=1288): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x4e}, 0x28) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed50004"], 0x11) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.152827675s ago: executing program 3 (id=1291): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x1000002, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x6, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001300010027bd70000000000007000000", @ANYRES32=r12, @ANYBLOB="00000000020000000c001a800800058004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r14, r15, r16, 0x0) r17 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r17, 0x24, &(0x7f0000000400)={0x0, 0x2, 0x7ffffffffffffffc, 0x2}) syz_io_uring_submit(r4, r9, r16, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x28, 0x0, r17, 0x0, &(0x7f0000000100)='./file0\x00', 0x20, 0x100, 0x12345}) r18 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r18, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r18, 0x112, 0xa, &(0x7f0000000040)=0x1, 0x4) write(r18, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 2.848126201s ago: executing program 2 (id=1294): r0 = syz_io_uring_setup(0x478e, &(0x7f0000000400)={0x0, 0xc593, 0x8, 0x1, 0x309}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000540), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x20, 0xb, 0x98, "c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a058c108d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a8850c0209c00666486cce5de49a22ed54e944581d84d8a36b11a07d18b06a733e0e74bedd5dc96e20d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f06"}, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) sendfile(r3, r2, 0x0, 0x23b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001c00010029bd7000fedb8c1f07000000", @ANYRES32=r5, @ANYBLOB="8000ff0a0a000200aaaaaaaaaa0c"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x7f, 0x404002) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406200c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0xc020, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x3}}]}, 0x24}}, 0x20004980) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000000)={@random="733d51b38210", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x19, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1, [{0x0, 0x0, "5695c3"}]}}}}}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xffffffffffffff53, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000735500000000000000000000feff000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000005b00"/144]}, 0x108) r9 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r9, 0x4014563c, &(0x7f0000000100)={0x9, {0xab, 0x829, 0xfc8, 0xb}}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000000c0)=""/84) 2.834607072s ago: executing program 3 (id=1295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008fc04d80500000000000109022400010000e000090400000103000200092105000a0122280209058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x0, 0xb, 0x30, {0x30, 0x11, "998dca68a8dd897cd1c45d396c126f98e7f11e378564be4e56206fb83df2ca926922e6412a5e26431026fc2c44be"}}, &(0x7f0000000180)={0x0, 0x3, 0x46, @string={0x46, 0x3, "4ae7b6cfa9da2982bcb4c4bb05b23bcc8cb9b040938fd7a7d52057acf8717897cd878516c912698c59b73055c0d27012897d2890545965b6109d505ba57d4f4aae95de13"}}}, 0x0) syz_usb_control_io(r4, &(0x7f00000004c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2021290300"], 0x0, 0x0, 0x0, 0x0}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x38, {0x2, 0x4e22, @empty}, 'ip6gre0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000010327bd7000ffdbdf250200000800000000f9"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r7, 0x331, 0x70bd2c, 0x25dfdbfb, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000021000100"], 0x28}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f5"], 0x78) 2.108448063s ago: executing program 5 (id=1297): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000340)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x16044004) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000800000004003400c4cc881603000000290700cc91baf5ffcaf575612bd41f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x7c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa482}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_AF_SPEC={0x4c, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0xa, 0x0, 0x0, 0xc05}]}}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x4}, {0x8, 0x15, 0x0, 0x0, 0x30000000}, {0x8, 0x1d, 0x0, 0x0, 0x1}, {0x8, 0x4, 0x0, 0x0, 0x4}, {0x8, 0x20, 0x0, 0x0, 0x401}]}}, @AF_BRIDGE={0x4}]}, @IFLA_PROTO_DOWN={0x5}]}, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.985359999s ago: executing program 2 (id=1298): openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000100)={0x2, 0x1, [0x6, 0x8, 0x7, 0x0, 0x86b, 0x2, 0x27, 0x9]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xf0e2}, 0x3a, [0x8000, 0xc95a, 0x7, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x20, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x40000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1008005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xd, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x200, 0x7, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x4, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x6b9a, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x4, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.93676378s ago: executing program 5 (id=1299): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRESHEX=r0, @ANYBLOB="451e06dfef99b8abda81b11577f2b00a687853344dae9a881498c11e87c54e37fba421be36f538624851e4027a5d59902dd04dd96d40550e8206dc817f1c0a93214ed002e91330c4d6d3528e156b03cbaf8995bf09bb49d90714f5175897bb6a6e3ce01d21e6c7cbb46305683d88e5c76fad9d046b5f08e20b8568e22807efaea7d71b703896a1613e72ffa59a8e419e3a8d472b10b941f2887fc51a7477598dd8ba92b618d4397b41381c03d472ff83c039006a7593ca16536b8541d8827a32d921ccd3d7e57e3e5489543b230d733452e330311a1d468b0d774b32414b273bf42470c496b6204409b72b29265a6f75ee0bb1efb37f20c582b6393c62dcca3e098279ef17622e3d92bc2970a5e24e7c2faf34f6ba0d07a6570018fa51e4f19c89cb273670de5ff0e183f62cca7130722d6856b3483de668a2b0fb94d0401f5fd7ef6cada1bc1567fff8854c2d30aa723a6d17136feaeb328da6cbbd1bdc8135df9fbe8770f59a586cdedc913902faffd2bd422bf5a00bc431cf74502b53a5cddc63cfae41a0ec7559eb4e9c4a3d34100d75778b0060bad6d044fecb685bc99a5fb6d1860d03e4cfb1143a7ce53e0fbe223cb7ce92228281f77e1d56f2fc62476ad0a21f293cd4cf0cec22ff132d04490bf4d7eebc04b023ace16607a8b524fea075bb29ac02250c7cbd0f97ca678190fd4cdea852d8036eb967ad4b2f9abd2af77b221fa97a5ddb25bab69a4ba98c6c093894da56535ea779ef8e16f3cdd035ccbc8f113ab1799ff09631f0d151f519dcdc07bca657ba958aa334260f4b6bccfed20e819325b614b9cc351dea7c295703e1325a01fb5e89996e2971edb994f090414c07ac2796c6b43ebc43b0cbe6e9ad32d40b350a7daff02dfc6457883af6a4f37c78212d03541616d2eeae85e3d39e2a3c3cee97af6e7b366dceb954d1555ede78609f312590aa22d213366c267923f476da4257ddebe3a62b9214a0a97dfa0359d9b55aee36e5fce75bded8c4d2f507d40e7e311ee05574ce4b0602dbab2127650f855e65ef95ac870096e9545f8ce8a0cbe2edf5ad8b41d7830f23f4594b8f02f67c8c5445a6d56b81be2e1e7d63f7e597b37390b147abfc8e1dc5dc658dd50c6cc0d492b230cd2bb12467012218fdeda92e813d86163bc9733cf88ce93e4ca19d72c69cc44cb5cd5a807fc05ad8afc1c201b3ea38caf20898f9b4ba32da7cd049bc3039f146c3dece533b35c4a0c5370614b4cdedc6cc380e27a26770b5d46845ea95fb5e32e75ac6d587fb685efba7c4b60796a50412aaa32fcee4bac20ad7ddf903feae6701829afe63c70bc275f1e74b8a63b23775e0eef0b8a20519e17ce6cfddb049c9bf3865950fa07c3b3d2e4e7ac01f1f065a4c12ae84a5a035c4b516ae6aa778cba31118893a12e92198b365703f3435349477f05c6083b3165d6eaecfc6bda6c1c6bebdc21fe21795035e9519fe0e4bc3c42b5e7e2076884d06160ed487439d9d6aaa0fbc210fe85965c4c97071f83f9497d5d4664866a297d4269aac548db94326d393dabd8989361cf5f4767635552bf900fcf53da9b7d5facf6b3c5f8f10f3818d53428521c36b6f57279d1bd7b2e1d4d9d29b237102812fd672b88e53be84f8bc0a5f1cbc444dbd900f9da52a8502660d69124054f93b6d7d3ae96c1b4f713a2f941f5825e89cf465d9d9588d981c907270539354584d0f7c9e0fe15118f1f4b891b9d7a24f38eeedb2f14d8ca177c6248feed006446fb8b5507b7d153535d849fb97915743cb7101a4ad5dd923ae3872ca6d5a9071c799f9529796d0de5806a8ae5d83d9a7a88c38b106adb2a04ded58d25d6c9ddd1aefdc13f00735f348aa1f0a3642f26b9022149540f26799116cb5b11197cc300fbf744927d6608eeb1c986cbdbaa7f28a389f0987a10119fa1baae3b7cf17d51938137280cbbcdc2a977bbe2b14bb0dafba9282dfcd10d6bbef10aa191eebaf9978dc17fb2fce08800c86fd399d468aff6fd905f4f5156afa4d6cf903eb06fa90ee5b03d63969763ad0c08de9d29b2ca9fc2f7eeed4a4e6417ad32848da8b00656c3e21091349d35bfb5ec6ab8957f41d84169152ddce18e42a02e03321475824a134d747ecacbf88d18df917ea39643f177d6b5712231a47e07b78c97c4c1a4ea24ffba8ac0c412431d3702e346652e7b98144ddfb49085338f59867ff89f3882472088eb6f77c608553eee2fee8d91a493d56d410273b4d95bdcd8edbe227304638c200e76a333c22853fec2481eec8c224e5895b0b9522630df5cc416ebd50f9e66fd04548c3dfb8d86c0299e6acd877ce2c718f167fa056f6f9dfa19c0813c6c8660a226aae4066ffcccb280645145e414c88f46e62a056e0ed469f3fde5e2509855982ae5990cde146b68d753c1786e2d17a0b8f956f3bcdb6cb928a702779676cde7de59868cece15ae699df66fbc94db3de1c52aa834cdfaea1d8bd824f3f7ce20a69b5210a13462fdef659515b5b0d17c7171af25953b9f396ce374d2bc5167d77361945577749ad1ef65e80fb37b2953364428d196a12703828cb362635790252e133afc0bcaaf700a4ec1e275d663561b576e42841442bee8425891cf99b9d4e9465d139690555fe61fae9932ebe620da0a186bafedf2997c954987c115bb7c593a639cca126a78a6e8174a89abec1c82e695b1388b36d89f76009bb58abf34a6825e2ac0602c3bd10d2d2a275c095972bb7c1af61711649859160489a76823e9825a7f38c29ea8ee92ca16fe2f91275a9ba9743ab19815cd628e752af8629c36e7b92debfaf9ca86a0392ab9fb463aee54a1877879e7349919376f4bd48f0b0be946372f32079830a78b48fef8ebc4351195a07c9a374e03eaf68370b8860be5e7ac80e6232471d5998d70023b403c7c5aa30f28a0bd745cefca554ed5853c9c0a9f24305c4db05b77aa3778f5aa6ef446f864ffebfdd0b7627263164c1e5002dae040d07d2c2cf74d826f0f3bf0cbf7048e3e8e0f59d1ab016d50e82d93922d1b2f493f1f1b27ffcf7c020906f2b7c5618e9c9163796a029a713bbd9139a313ff461a05276d34c0789149d90c5ecf5ce1d0f3e78def081ef93d7463ea5cf1c3a5f89f9f350335e58622d9296e30c42e7ea4be8c2d8fe017ace3c4fd6dffd66f1e7b624da7b332fc7a3b05445769f2b3b6881023e4d99a678eb300f3200569a49c9407874444103bdf2d95b0985d847a6e899d171d78a7d80e05b15183526d738ea26381c350c5c33f027d654233919a7a57e84d9deeb7fc45c007d86e19bd2115c271dd3d4e2712535f87e92a126601c7b3d4f12a476a3c349c9e2f471551094757999962e8ed364c782813e7c98fc1b200767b6fb799106b203fc17613642c8c5905b229e04837931120cc1180cad656ecc6eb66239eb4b231e0599a2b21caff5e996640d384b8c37ce61220e855fb8241cb2f47e55677190a60e293e04815b9f467833cedd627cc936f5f490b37fbdc11a78c92ce80cb2e0ee4eee5eb8afe921a6fd0f7a635c82ef66c6fe98a82bc05cfb4ed848052a9fc15f090038b0f7412e048704f20aba794b9da5cfd79772521b78a1e98a9dd6a51e3b63d19bb4606d4edc25fb6c56639a22404e0e2abac091c03dd1419d91e2752b52c75c8df6a7954a742e24667755736707a021fa80811c39c3aebc572e8404ac2aa5b78351d4f48fee207f9c27711c87c9a971b0b4a629fe7d434d1b0ecd82dd0e8e09af2af776e32e799a0e18c329edc227b01b28fbecf9b81a5709e3d3701e85ff5514d1dd4767a1c2238177e155feaaad603082067c2645e8564118be62b2792333170eb2fdbc212495c73dda4f988199bd35fd74da4f78376dd0e99d7951d7c9cf3dc38522b2650c7a7bace4f483117eae09cb0ec8d2fabd34a61a8cf396ab3fea88d9d81031fd4db5bb841cb3a46effcefd3e7f14506c8d560583fa5e5081dc5b9ee3d1d1ec057c022cd8e648c2b0d256eddeac5ab937aefee96dc131d662171dfb91bcb857e5084c74cd5986258f984deba92200164ca27bce1ce040a36639b08894da5a6ca237f30d6adc76ee07343b8fcb08bd9e5160080a09a861779cd1ee9897ed9040268988596742cdaaa352b142c8c29ce5680848857ddd2f3a5b59195bfd4a5814178bff498b0909689d28908b74fe4874b6c476aa253b3b1fd1af1ec541267bf5cfdc06e5147d85e533a79fdc0329d30523e8101f58449c439498faf388b63a6a9aaac5625452de8b5ea8d1dbdb38e3ff111b6eb456f8181298ab1160266b04b2696eca6ce1a6c4b207dd4e6fe881fc3cf4f1cc1b2305ad69b2983dd37e8a1e5ac8a04c336800c38556867d0f0ea1a2ec64ce98fa299bd737119f210f8dc7de01a637196245f0a0989d50bfb6175209b3a6cd4041af5d2ae53e8fc10ee2fa50149d51a48688963bde593611580af6f5c31e9bc280d40ffab241d8cffff0385799b45ccc5e7da3dab1b59b0c996939bdce1178271a3bec7e10720fe0a7ea5e0d11139c6ebfeae14426ea7d53a9dd19741bc2d3d32dcd9fb5341e44abf250798e36952650ae1b41c2f4b9436fd37b7b14e9490ce715a2a75a84734d56cac37a0d017ebde638e272225e6b44a423ff65bfe284f1b4b945c471548ab3bdb3b9129085c144acd6a5bce6b2bff8dba36692914a9acfafd32b54593dd54ae45d12e64e2d518ab909e562ae2ef37fce2b4858c99692367125c0d1529b4f25b43094315417e8df4a45df2e1ee8b5bfa8ec0e569ad8cedaed23ef39875bc877e9999e379407015c88d45e62f199d50d7cff8df75abc91f3573870d6e6cdaab4c4f539dcd2fb3f10c8ab772cc2ab8498b6ae9c5ae18f48b3362a2faf7a4cc8d3969e461191a2c66dece473b211fda8bffb99d9fa7459c39f5a8ba02b94aa609af5f87427761653b5d13dfa447dbc6849d476fb1e07df96ad205a567cc95fd697ec07c10bbb4b72c1565e5860420de724901f9d606f7509c743541601ac7db77490a16e4789d77e843b4fc24f3d0e7d1b4f32b20187574a47eed211d0ccb861dece2cc9e298512691b4c450a1499ce57526e776e5eb620571aa014e81a632c7fe6356e182b3644167a8c5889f6cb14420f19f69782065335793a13de730b783d72fcf47030904378947decaa3eb9f2916d7c21b9a6488f8cd77abd9fbcca42202d0fb899c52235cde36bf49345c4d4417b3d396dcc937c9d80ae2375e53d44aa59844667a5c97c652158c1ad038079d8899bdf04fd5386016af9c41aea7407d79bede842a0f11ab7815d321dc09fde071e2f0ef79fa84b21646b53df506bf852839d4bf52b7cc2c52fb9e0e212e8eeae33145318ec9dcb3a9eb923ac680b40dd7dc8a7daa71830178872e455a3886fb0b1e7dbad2634cbb51a208df77835b53291d9fbc30382c7daae5fa23d4d5860bc1b23997dedbd15e1da7676bab35ccea3c4fea6183e76a2ffbaa8c8360d011877c1252cc91754855f610ee99f9f3e77501e4baa20a0df1a9d03e396e24a9f0a06f7a9661d85d93d3e75c632323e1c0ea0d63eaa869c7b613a1c76d1e782ac013f02e29445332f459ce03f7909bdfab6308584804fae4b217141dda1056371993f391969b01431b72b38604b5a22c008f872227e58456d694f8eb0e0f43387c4dfa693cd5eee6a104f2b096ba1899a4a2a5771cddb26529957ac1cdd200a09b584bd6d62f90d1f07f628d2b3d886df75281717766c321904aa09e6f544cc429740961a674e1f445226bf42759ea04a92", @ANYRESOCT=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000060000000000000000000000b70b0000000000807b8af8ff00000000b7080000000000007b8aef4000000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYBLOB="a4bdd4ad108e121734fc09e3fee9796281d809a4678e3c", @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e00000000180002800c0002001200000017000000060001000100000008000500", @ANYRES32=r1, @ANYBLOB="08c6f0af974c97253569c158b9388e42450091d2dcf440a963ba828c176ebac7ddba5f3800600e47b0a2ca2f1261663bfc783b5dd1ec8328ede64f8ddfdd44f76b974a3f31d8d7ff10283f523b9470e7db3599c2b02fe381fa9c8c"], 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) r2 = syz_usb_connect$hid(0x2, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xfc, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xd, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60000002009a3a00fe8000000000000000000000000000bbfc00000000000000000000000000000108029078000000006000081000002f0000000000000000000000ffff00000000fc020000000000000000000000000000bb3ee1db6658b021d112706299896674d00eaa48ce458d155e8e5e81abaa72ee584f66f58902159b47f728a89276d90f638d3209d51a09760f37a21f02dc0f4c28e4456c417c9c8d8e7878c3b54518c51165a68e1801d003824a5fa53c79e0776dc1580392bcdbe79185"], 0x0) setsockopt$sock_timeval(r0, 0x1, 0x56, &(0x7f0000000100)={0x0, 0x2710}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="ff000000030101020000000000000000000000000800034000000400", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r6, &(0x7f0000000100)=ANY=[@ANYRES64], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r5, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x4000040) openat$comedi(0xffffff9c, 0x0, 0x2c83, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r9, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r10}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) 1.872369915s ago: executing program 2 (id=1300): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_connect(0x4, 0xcc9, &(0x7f0000003a40)=ANY=[@ANYBLOB="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"], &(0x7f0000001a40)={0xa, &(0x7f0000001900)={0xa, 0x6, 0x200, 0x2, 0xc8, 0x5, 0xe7, 0x4}, 0xf, &(0x7f0000001940)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x66, 0x9, 0x6}]}, 0x3, [{0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x816}}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) syz_usb_connect$midi(0x3, 0xb2, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x1, 0x1, 0x3, 0x60, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x0, 0x3, [@midi_out_jack={0xd, 0x24, 0x3, 0x0, 0x9, 0x3, [{0x8, 0x9}, {0x1, 0x1}, {0x0, 0xb}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x2, 0x8}, @midi_out_jack={0x19, 0x24, 0x3, 0x0, 0x7, 0x9, [{0x2, 0x8}, {0x4, 0x3e}, {0x4, 0x5}, {0x1}, {0x5, 0x6}, {0x28, 0x5}, {0x6, 0x9}, {0xfb, 0xa8}, {0x2, 0xa}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x1, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x0, 0x2}, @midi_out_jack={0x19, 0x24, 0x3, 0x1, 0x9, 0x9, [{0xe, 0x8}, {0x80, 0x5}, {0xb, 0x1}, {0x6, 0x3}, {0x0, 0x4d}, {0x7b, 0x3}, {0x5, 0x8}, {0x62, 0x8}, {0x0, 0x81}], 0xd}], [{{0x9, 0x5, 0xa, 0x4, 0x10, 0x5, 0x0, 0xb6, {0x12, 0x25, 0x1, 0xe, "0bfcc8ed034a7ee3fdd5f6bdb439"}}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x9, 0x5, 0x3b, {0xb, 0x25, 0x1, 0x7, "948bb6bb05558e"}}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x10, 0x2, 0x9, {0x5, 0x25, 0x1, 0x1, '%'}}}]}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x7b, 0x8, 0x0, 0x8}, 0x191, &(0x7f0000000400)={0x5, 0xf, 0x191, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x60, 0x7, 0x5, 0xf2}, @generic={0x62, 0x10, 0x3, "98693767ee50988b23de7f3fe7be4ff453b13b2ea96dca92609042d3a6ae13f90bc77b77e231e7a8be19459ae61459eb6ce4cd51b397ad338ca2784bef60d3d4d10ed19cbe8302ac21adf1928c9e4a0df9448575a77054677c0aaa05c780e8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x9, 0x80}, @ptm_cap={0x3}, @generic={0xfa, 0x10, 0x3, "818d56962bfb945634aeebab204f7e189056197f3adc7fafa442df7e0074d0ba3b8290407cb24690b7972a7ef5115abdc16a0dc547b34368eba30e1693884462e32990aa6ad2482e572943fb42a5e30409cf5fb6493981f873be54fe6f02c88516cf76bc10e50db1b6723dea9c1bfc71c373c8e481764c4e7bb90fd77e5a88b8741231bf509943188d8b069c8021dbe5125a0412ab460b722ad84cab9f1b980d34ff1f1e0ec8e2639b424f08bf2efe73b91c47850b24a5ce6556d4ebe90163bceb5b52dfdb45feb30b250afd057cedb8ddce76b501df3fe5ffc3471e03c148366bd2873687bf0f14971cc41061010c922475f55baff201"}, @ssp_cap={0x18, 0x10, 0xa, 0xff, 0x3, 0x7fff946, 0x0, 0x7f, [0x0, 0x1013f0f, 0xff00ff]}]}, 0x5, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x65, &(0x7f0000000600)=@string={0x65, 0x3, "ebcf0ff6149c8a41efd0cba3b2edb97b5a46b0dac6670caae42b662c8ecdfc0cf5a5239995851bbc9ec73da6da7a2bb248daf326dbac2923b237c0408900a03e34731f289ce81acbe99bf5f9291f7a038133d66de0623ce1a5978988d293ed1e0a2bcc"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc07}}, {0x100, &(0x7f0000000700)=@string={0x100, 0x3, "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"}}]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006640)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) timerfd_gettime(r3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$FUSE(r3, &(0x7f000000b180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000002540)={0x18, 0x0, r4, {0x8}}, 0x18) r5 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd=r3, 0x6, 0x0, 0x0, 0x8, 0x1, {0x0, r9}}) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000880)={0x0, 0xa34d, 0x10641, 0x0, 0x31, 0x0, r3}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcd7c, 0x10, 0x3, 0x1d9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20, 0x1, 0x17e, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x85801, 0x2000, 0x1, 0x11c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x469, 0x400, 0x1, 0x6d}, 0xffffffffffffffff, 0x0, 0x0}], 0x4, &(0x7f0000003800)={0x2e, 0xa, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r9, '\x00', {0x4, 0x497, 0x0, 0x0}}, &(0x7f0000003880)) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe, 0x30, r3, 0x10000000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000038c0)={0x0}, 0x0) syz_ublk_add_dev(r3, r6, r10, r11, &(0x7f0000003980)={0x2e, 0x3c, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003940)=@new_dev={0x2, 0x8a1, 0x0, 0x0, 0x1000, 0xffffffff, r12}}}, &(0x7f0000003a00)) syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00"], &(0x7f0000000b80)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0x0, 0x64, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.610327141s ago: executing program 4 (id=1301): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(r5, 0x0, r6, 0x0, 0x1100000000f336, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000100)={0x2, 0x1, [0x6, 0x8, 0x7, 0x0, 0x86b, 0x2, 0x27, 0x9]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xf0e2}, 0x3a, [0x8000, 0xc95a, 0x7, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x20, 0xd, 0x2, 0x4, 0x1, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x40000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1008005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xd, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x200, 0x7, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x4, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x6b9a, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x4, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.299258157s ago: executing program 0 (id=1306): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) fchdir(r1) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) (async) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) fchdir(r1) (async) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x28) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) (async) 1.169039738s ago: executing program 2 (id=1307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d01, 0x0, 0x800000000000001}]}) setresuid(0xee01, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf25050000000500380000fcffff07003c0006080000"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, 0x0, 0x80042, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000000)=""/104, 0x68) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.168458079s ago: executing program 5 (id=1308): r0 = syz_io_uring_setup(0x478e, &(0x7f0000000400)={0x0, 0xc593, 0x8, 0x1, 0x309}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000540), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x20, 0xb, 0x98, "c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a058c108d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a8850c0209c00666486cce5de49a22ed54e944581d84d8a36b11a07d18b06a733e0e74bedd5dc96e20d568063e3a03d2022bc51789235883a09bd5073072cba5301b7611831e7a59f06"}, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) sendfile(r3, r2, 0x0, 0x23b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001c00010029bd7000fedb8c1f07000000", @ANYRES32=r5, @ANYBLOB="8000ff0a0a000200aaaaaaaaaa0c"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x7f, 0x404002) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0) socket(0x10, 0x3, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x3}}]}, 0x24}}, 0x20004980) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000000)={@random="733d51b38210", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x19, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast1, [{0x0, 0x0, "5695c3"}]}}}}}}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xffffffffffffff53, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000735500000000000000000000feff000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000005b00"/144]}, 0x108) r9 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r9, 0x4014563c, &(0x7f0000000100)={0x9, {0xab, 0x829, 0xfc8, 0xb}}) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f00000000c0)=""/84) 1.165986515s ago: executing program 0 (id=1309): chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0, 0x27}], 0x2, 0x0, 0x5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCCONS(r0, 0x541d) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb}, 0xc) fchdir(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f00000002c0)={0x6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}]}) 767.77731ms ago: executing program 4 (id=1310): syz_usb_connect(0x5, 0x36, &(0x7f0000000440)=ANY=[], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) getsockname$packet(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000001780)='*', 0x1}], 0x1}, 0x810) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x524, &(0x7f0000000440)={0x0, 0xf32e, 0x800, 0xc, 0x254}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r8, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f7250a7f2b47bb80aa5a350a3182f32f4c7153cee9b2cd0502f1fc7fcc7a074a01168ab16d6b60fb4fafed74ce3c5fda388f3a20d022b47ed90a9e8917eafb12af8e5e393854ba0415694d91ddeeb213e940e60c8b542ccc82b7e87d", 0xce}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c", 0xffffff26}, {&(0x7f0000000100)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32", 0x2b}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000180)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5", 0x4a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681", 0xb0}], 0x6, 0x0, 0x0, 0x24040880}], 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) 535.961039ms ago: executing program 2 (id=1311): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @random="2f85344e913f", 'team_slave_0\x00'}}, 0x1e) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$sock(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000380)="315542c5372b63d2a332ce2dc7cbac6c59654a388ad63661cf0e453d75bb24c2c72749d3424fc4924cd6460582b3ccbf1ad0b160062cc0c2", 0x38}, {&(0x7f0000000180)="39a6d6ba72a65fc1328b98462c4f3391b5d159ff7176bccb66ff2164d30897d0e9dbbbcd60a343b3857ad4f8b045071a7a70000000000000", 0x38}, {&(0x7f0000000540)="314055ccd5c2a99c7d94b19bfcd5dd7b25fb66a09a109eca003bf650c018d37f2a9d32081df57fa11b38617dc9c07948e7cd9a3eceda97d8e19d1dcd395f45d03b4309f97d5c64859642df6824137262bed7113432eed13bbbcdb3b78381", 0x5e}, {&(0x7f00000005c0)="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", 0xfd}, {&(0x7f00000006c0)="e444182720177c2b91ef6791e001f8160838ac1dfbdad8b92fdbcc388250d51c9ce6b2c23adf1a7d894e53e0389075115f4c1d700f00d591002a1fc68cc7068562d857ecda75839cbe39a715103171d78855fd747364c79282c769860e55f2a03bc545779365725cc305d84757f8c9d7de792f80efcc133380f2fe26670334d42419a654f55ae5af79ab57464aaeec633eecf34b99f35265948240f83accf23f7655de82e2415e928f0557ee6cb85dd6ac919d0b49c4851ad7b272969038930cc3dcd146e5a7917782e929828a29a0bd01972c4fb0a0635169eb71b7c20e2f864dcd92d438776be9f791f4c2", 0xec}, {0x0}, {&(0x7f0000000e00)="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", 0x149}, {&(0x7f0000000940)="8ec5edd0194e6b3e46de53ee840d37db6b22afbf2b5d3a41c240b7089e2b541a379f49412dfa24b18225b01d1e0cf5c03fe11d1fe63fa600755f2b546e6953faedb4e8ffaf92150970d65cb000bfe21a4c2d72b30face21b117cc5e6d6089168d507b65fb8dff25927dafb40ab9ffe5c6790610306408cc0f79081e196f3103ae867be004e54c1668ca994d2069bd672f632d98acb9a61801c6ba178136e9c9767536b6575d02e439e0401b72d3c6f7a302ed7f92dca59d4c14036055c1f3f338e75a85b94ab7ee14ca5a31b8724", 0xce}, {&(0x7f0000000a40)="56d68d897f5609c473bc311ce8bf37dc73e14a865ebcde23a76f4133350e816bbfc2d439bea8adef552952f7eed02b06ceaeb8ed705a8d52a34a776c8e53cae91da780f104c0979a91a00a51340c312def01d7851674f263a4f0376dfe57ea6348f5ebdecaf035cc2fc93dcfe94499761996aa78f9005e9bcce7df7a77360c16", 0x80}], 0x9}, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001cc0), 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) lseek(0xffffffffffffffff, 0xfc, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r6, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) listns(&(0x7f0000000000)={0x20, 0x0, 0x3, 0x8000000}, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0xfffffffffffffffe) 472.446578ms ago: executing program 5 (id=1312): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000005c0)=@proc, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f00000000c0)={0x2, 0x5e}) splice(r4, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r7, 0xe) dup2(r2, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r8 = socket(0x3, 0x3, 0x9) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 331.238701ms ago: executing program 0 (id=1313): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000005c0)=@proc, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f00000000c0)={0x2, 0x5e}) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r5, 0xe) dup2(r2, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x3, 0x3, 0x9) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 159.775148ms ago: executing program 0 (id=1314): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) r3 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x1000002, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x6, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001300010027bd70000000000007000000", @ANYRES32=r12, @ANYBLOB="00000000020000000c001a800800058004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r14, r15, r16, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x8000000000000001, 0x0, 0x0, 0x10, 0x1, {0x2}}) r17 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r17, 0x24, &(0x7f0000000400)={0x0, 0x2, 0x7ffffffffffffffc, 0x2}) syz_io_uring_submit(r4, r9, r16, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x28, 0x0, r17, 0x0, &(0x7f0000000100)='./file0\x00', 0x20, 0x100, 0x12345}) recvmsg(r2, &(0x7f0000000600)={0x0, 0x8, 0x0}, 0x0) r18 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r18, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r18, 0x112, 0xa, &(0x7f0000000040)=0x1, 0x4) write(r18, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 54.656549ms ago: executing program 2 (id=1315): syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) socket$kcm(0x2d, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) socket$kcm(0x2d, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3fffffc, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @remote, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 52.346168ms ago: executing program 0 (id=1316): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x1000002, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x6, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001300010027bd70000000000007000000", @ANYRES32=r12, @ANYBLOB="00000000020000000c001a800800058004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r14, r15, r16, 0x0) r17 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r17, 0x24, &(0x7f0000000400)={0x0, 0x2, 0x7ffffffffffffffc, 0x2}) syz_io_uring_submit(r4, r9, r16, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x28, 0x0, r17, 0x0, &(0x7f0000000100)='./file0\x00', 0x20, 0x100, 0x12345}) r18 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r18, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r18, 0x112, 0xa, &(0x7f0000000040)=0x1, 0x4) write(r18, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 0s ago: executing program 0 (id=1317): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4e}, 0x28) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0x100, 0x6, 0xfffffffffffffffe, 0x5, 0x8, 0x4, 0x80000000, 0x80000, 0x2, 0x1, 0x100, 0xfffffffffffffffc, 0x0, 0x2000000000000, 0x8, 0x3, 0x1, 0x6, 0x0, 0x0, 0x816, 0x80000001, 0x37, 0x6}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed50004"], 0x11) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) request_key(&(0x7f0000000340)='user\x00', 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r4, &(0x7f0000000100)="02699327102c44160c057027ead53e21ff4e4ebe8656d514473920adbb6de2dcfdb8e8c4b47034", 0x27, 0x80, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): B device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 206.371935][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.380035][ T10] usb 6-1: Product: syz [ 206.384631][ T10] usb 6-1: Manufacturer: syz [ 206.389325][ T10] usb 6-1: SerialNumber: syz [ 206.399631][ T10] usb 6-1: config 0 descriptor?? [ 206.780577][ T10] usb 6-1: USB disconnect, device number 6 [ 207.978897][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.054447][ T29] usb 4-1: config 0 has no interfaces? [ 208.089577][ T29] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 208.132707][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.162172][ T29] usb 4-1: Product: syz [ 208.175217][ T29] usb 4-1: Manufacturer: syz [ 208.194616][ T29] usb 4-1: SerialNumber: syz [ 208.215277][ T29] usb 4-1: config 0 descriptor?? [ 208.308507][ T29] usb 4-1: can't set config #0, error -71 [ 208.327531][ T29] usb 4-1: USB disconnect, device number 27 [ 208.334080][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 208.503059][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 208.535360][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 208.561383][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.584429][ T10] usb 5-1: config 0 has no interface number 0 [ 208.591358][ T5629] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 208.643161][ T10] usb 5-1: config 0 interface 1 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.762872][ T10] usb 5-1: config 0 interface 1 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.778683][ T10] usb 5-1: config 0 interface 1 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 208.926612][ T10] usb 5-1: config 0 interface 1 has no altsetting 0 [ 208.940754][ T10] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 208.949936][ T5629] usb 3-1: Using ep0 maxpacket: 16 [ 208.961799][ T5629] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.974841][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.983856][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.996349][ T10] usb 5-1: config 0 descriptor?? [ 209.003720][ T5629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.013983][ T5629] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 209.031148][ T5629] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.045531][ T5629] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.054838][ T5629] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.074690][ T5629] usb 3-1: Manufacturer: syz [ 209.084412][ T5629] usb 3-1: config 0 descriptor?? [ 209.575395][ T10] hid (null): unknown global tag 0xa3 [ 209.681210][ T5629] rc_core: IR keymap rc-hauppauge not found [ 209.773091][ T50] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 209.787931][ T5629] Registered IR keymap rc-empty [ 209.802496][ T10] uclogic 0003:28BD:0078.0001: pen parameters not found [ 209.817476][ T10] uclogic 0003:28BD:0078.0001: interface is invalid, ignoring [ 209.827515][ T5629] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 209.846447][ T10] usb 5-1: USB disconnect, device number 35 [ 209.873185][ T5629] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 209.934829][ T5629] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 210.011037][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 210.012242][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 210.026737][ T5629] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 210.030300][ T7542] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.046890][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 210.234072][ T7543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.235084][ T7542] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 210.269996][ T7543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.278616][ T5629] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.321720][ T5629] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.341111][ T5629] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.361244][ T5629] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.411085][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 210.438924][ T5629] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.458232][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.477736][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 210.480323][ T7542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.489028][ T9] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 210.498084][ T7542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.508444][ T5629] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.520464][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.528791][ T9] usb 6-1: Product: syz [ 210.533292][ T5629] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.540822][ T9] usb 6-1: Manufacturer: syz [ 210.545834][ T9] usb 6-1: SerialNumber: syz [ 210.551175][ T5629] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.560923][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.571089][ T5629] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.579324][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.589065][ T9] usb 6-1: config 0 descriptor?? [ 210.601348][ T5629] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.627303][ T5629] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 210.636315][ T5629] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 210.650785][ T5629] usb 3-1: USB disconnect, device number 31 [ 210.692565][ T7556] netlink: 44 bytes leftover after parsing attributes in process `syz.3.419'. [ 210.703681][ T7556] netlink: 55 bytes leftover after parsing attributes in process `syz.3.419'. [ 210.712192][ T5350] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 210.712604][ T7556] netlink: 'syz.3.419': attribute type 6 has an invalid length. [ 210.734390][ T7556] 8021q: VLANs not supported on ipvlan0 [ 210.856313][ T7555] futex_wake_op: syz.4.421 tries to shift op by 144; fix this program [ 210.985195][ T7555] overlayfs: failed to resolve './file1': -2 [ 211.221305][ T5350] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 212.683711][ T5350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.693539][ T5350] usb 1-1: Product: syz [ 212.699383][ T5350] usb 1-1: Manufacturer: syz [ 212.705879][ T5350] usb 1-1: SerialNumber: syz [ 212.733620][ T5629] usb 6-1: USB disconnect, device number 7 [ 213.204276][ T7563] ubi: mtd0 is already attached to ubi16 [ 213.216689][ T7563] netlink: 'syz.3.423': attribute type 10 has an invalid length. [ 213.224479][ T7563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.423'. [ 213.234167][ T7563] bridge0: port 3(veth1_macvtap) entered blocking state [ 213.241145][ T7563] bridge0: port 3(veth1_macvtap) entered disabled state [ 213.248165][ T7563] veth1_macvtap: entered allmulticast mode [ 213.255055][ T7563] veth1_macvtap: left allmulticast mode [ 213.260866][ T7563] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 213.332067][ T9] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 213.401488][ T5629] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 213.424617][ T5350] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 213.457930][ T5350] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 213.502025][ T9] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 213.531354][ T5625] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 213.531632][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.553367][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.569223][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.601123][ T5629] usb 6-1: Using ep0 maxpacket: 16 [ 213.672285][ T5629] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.715881][ T9] usbtmc 3-1:16.0: bulk endpoints not found [ 213.716500][ T5625] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.752529][ T5629] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.756250][ T5625] usb 4-1: config 0 has no interfaces? [ 213.770495][ T5629] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 213.776335][ T5625] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 213.791891][ T5625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.800386][ T5625] usb 4-1: Product: syz [ 213.805451][ T5629] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 213.812049][ T5625] usb 4-1: Manufacturer: syz [ 213.820186][ T5625] usb 4-1: SerialNumber: syz [ 213.821451][ T7551] netlink: 'syz.0.420': attribute type 25 has an invalid length. [ 213.860474][ T5629] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.871481][ T5625] usb 4-1: config 0 descriptor?? [ 213.877399][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 213.916342][ T5629] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 213.944861][ T7551] netlink: 'syz.0.420': attribute type 25 has an invalid length. [ 213.967387][ T5629] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 213.981138][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 214.000544][ T5629] usb 6-1: Manufacturer: syz [ 214.016373][ T5629] usb 6-1: config 0 descriptor?? [ 214.096057][ T5625] usb 4-1: USB disconnect, device number 28 [ 214.386313][ T50] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 214.621372][ T5629] rc_core: IR keymap rc-hauppauge not found [ 214.988979][ T5629] Registered IR keymap rc-empty [ 214.994434][ T5629] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.008093][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.424'. [ 215.017112][ T7585] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.030077][ T5629] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.038070][ T7585] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 215.052036][ T5629] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 215.069934][ T5629] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 215.087623][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.103336][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.111696][ T5629] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.130132][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.141250][ T5629] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.149931][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.171106][ T5629] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.183353][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.193043][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.211171][ T5629] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.241136][ T5629] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.261066][ T5629] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.291059][ T5629] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.323151][ T5629] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.344021][ T5629] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.381525][ T5629] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 215.571518][ T5629] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 215.589754][ T5629] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 215.746795][ T5629] usb 6-1: USB disconnect, device number 8 [ 215.803837][ T5350] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 215.842639][ T5350] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 215.857096][ T5350] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 215.870329][ T5350] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 215.883222][ T5350] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 215.957104][ T5350] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 215.982911][ T7594] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48 sclass=netlink_xfrm_socket pid=7594 comm=syz.0.429 [ 216.019128][ T30] audit: type=1400 audit(1780951739.400:567): avc: denied { ioctl } for pid=7593 comm="syz.0.429" path="socket:[16708]" dev="sockfs" ino=16708 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.085781][ T5350] usb 1-1: USB disconnect, device number 24 [ 216.145113][ T5625] usb 3-1: USB disconnect, device number 32 [ 216.821207][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.432'. [ 216.952487][ T7605] FAULT_INJECTION: forcing a failure. [ 216.952487][ T7605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.987105][ T7605] CPU: 0 UID: 0 PID: 7605 Comm: syz.5.432 Tainted: G L syzkaller #0 PREEMPT(full) [ 216.987134][ T7605] Tainted: [L]=SOFTLOCKUP [ 216.987140][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 216.987149][ T7605] Call Trace: [ 216.987155][ T7605] [ 216.987161][ T7605] dump_stack_lvl+0x100/0x190 [ 216.987186][ T7605] should_fail_ex.cold+0x5/0xa [ 216.987209][ T7605] _copy_to_user+0x32/0xd0 [ 216.987231][ T7605] simple_read_from_buffer+0xcb/0x170 [ 216.987254][ T7605] proc_fail_nth_read+0x1af/0x230 [ 216.987274][ T7605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.987295][ T7605] ? rw_verify_area+0xce/0x6d0 [ 216.987311][ T7605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.987330][ T7605] vfs_read+0x1e4/0xb30 [ 216.987352][ T7605] ? __pfx_vfs_read+0x10/0x10 [ 216.987370][ T7605] ? __fget_files+0x215/0x3d0 [ 216.987397][ T7605] ? __fget_files+0x21f/0x3d0 [ 216.987426][ T7605] ksys_read+0x12a/0x250 [ 216.987445][ T7605] ? __pfx_ksys_read+0x10/0x10 [ 216.987466][ T7605] ? rcu_is_watching+0x12/0xc0 [ 216.987495][ T7605] do_syscall_64+0x115/0x870 [ 216.987517][ T7605] ? clear_bhb_loop+0x40/0x90 [ 216.987540][ T7605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.987558][ T7605] RIP: 0033:0x7fde8375d68e [ 216.987573][ T7605] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.987589][ T7605] RSP: 002b:00007fde84705fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.987606][ T7605] RAX: ffffffffffffffda RBX: 00007fde847066c0 RCX: 00007fde8375d68e [ 216.987617][ T7605] RDX: 000000000000000f RSI: 00007fde847060a0 RDI: 0000000000000007 [ 216.987627][ T7605] RBP: 00007fde84706090 R08: 0000000000000000 R09: 0000000000000000 [ 216.987637][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.987646][ T7605] R13: 00007fde83a16128 R14: 00007fde83a16090 R15: 00007ffe19f1dac8 [ 216.987672][ T7605] [ 217.214944][ T5625] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 217.347578][ T30] audit: type=1400 audit(1780951740.690:568): avc: denied { read } for pid=7608 comm="syz.2.433" laddr=::ac14:14aa lport=56992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 217.427470][ T7621] random: crng reseeded on system resumption [ 217.794740][ T30] audit: type=1400 audit(1780951740.810:569): avc: denied { write } for pid=7614 comm="syz.3.436" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 217.851155][ T30] audit: type=1400 audit(1780951740.810:570): avc: denied { open } for pid=7614 comm="syz.3.436" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 217.943684][ T7625] ubi: mtd0 is already attached to ubi16 [ 217.944608][ T5625] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.951355][ T7625] netlink: 'syz.4.438': attribute type 10 has an invalid length. [ 217.968166][ T7625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.438'. [ 217.977948][ T7625] bridge0: port 3(veth1_macvtap) entered blocking state [ 217.985479][ T7625] bridge0: port 3(veth1_macvtap) entered disabled state [ 217.993378][ T7625] veth1_macvtap: entered allmulticast mode [ 218.020994][ T7625] veth1_macvtap: left allmulticast mode [ 218.028605][ T7625] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 218.290398][ T5625] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 218.320400][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'. [ 218.333799][ T5625] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 218.349238][ T5625] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 218.391863][ T5625] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.417390][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.449005][ T5625] usb 1-1: Product: syz [ 218.469911][ T5625] usb 1-1: Manufacturer: syz [ 218.487782][ T5625] usb 1-1: SerialNumber: syz [ 218.495801][ T30] audit: type=1400 audit(1780951741.880:571): avc: denied { create } for pid=7628 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 218.535827][ T5625] cdc_mbim 1-1:1.0: skipping garbage [ 218.561078][ T2169] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 218.578528][ T50] Bluetooth: hci0: unexpected event for opcode 0x080c [ 218.671034][ T5629] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 218.754829][ T2169] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.783048][ T2169] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 218.831056][ T5629] usb 3-1: Using ep0 maxpacket: 16 [ 218.838571][ T5629] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 218.847512][ T5629] usb 3-1: config 0 has no interface number 0 [ 218.847648][ T2169] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 218.864562][ T2169] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.892621][ T2169] usb 5-1: Product: syz [ 218.915076][ T2169] usb 5-1: Manufacturer: syz [ 218.924614][ T5629] usb 3-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 218.956079][ T2169] usb 5-1: SerialNumber: syz [ 218.969799][ T5629] usb 3-1: config 0 interface 246 has no altsetting 0 [ 218.997950][ T2169] usb 5-1: config 0 descriptor?? [ 219.330553][ T5629] usb 3-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 219.350297][ T5629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.397380][ T50] Bluetooth: hci5: unexpected event 0x01 length: 4 > 1 [ 219.402126][ T5629] usb 3-1: Product: syz [ 219.437043][ T5629] usb 3-1: Manufacturer: syz [ 219.459555][ T5629] usb 3-1: SerialNumber: syz [ 219.465185][ T7638] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 219.493613][ T5629] usb 3-1: config 0 descriptor?? [ 219.558560][ T5807] usb 5-1: USB disconnect, device number 36 [ 219.810082][ T5629] usb 3-1: USB disconnect, device number 33 [ 221.691083][ T5350] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 224.299683][ T7678] No control pipe specified [ 225.482889][ T5625] cdc_mbim 1-1:1.0: bind() failure [ 225.544990][ T5629] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 225.584684][ T5625] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 225.599004][ T5625] cdc_ncm 1-1:1.1: bind() failure [ 226.046188][ T50] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 226.115525][ T5629] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.249962][ T5629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 226.294271][ T5629] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 226.305903][ T5629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 226.333543][ T5629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 226.379874][ T5629] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 226.421374][ T5629] usb 4-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 226.440606][ T5629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.674725][ T5629] usb 4-1: config 0 descriptor?? [ 226.695589][ T5629] appledisplay 4-1:0.0: Submitting URB failed [ 226.715874][ T5629] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -5 [ 226.729381][ T7698] netlink: 'syz.4.452': attribute type 10 has an invalid length. [ 226.737149][ T7698] netlink: 40 bytes leftover after parsing attributes in process `syz.4.452'. [ 226.746113][ T7698] bridge0: port 3(veth1_macvtap) entered blocking state [ 226.753856][ T7698] bridge0: port 3(veth1_macvtap) entered disabled state [ 226.760878][ T7698] veth1_macvtap: entered allmulticast mode [ 226.767637][ T7698] veth1_macvtap: left allmulticast mode [ 226.773513][ T7698] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 226.946145][ T5629] usb 4-1: USB disconnect, device number 29 [ 227.040754][ T7713] 9p: Bad value for 'wfdno' [ 227.071389][ T5350] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 227.260675][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 227.359069][ T5625] usb 1-1: USB disconnect, device number 25 [ 227.379297][ T5350] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.420076][ T5350] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.445992][ T5350] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 227.475217][ T5350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.492218][ T5350] usb 5-1: Product: syz [ 227.502767][ T5350] usb 5-1: Manufacturer: syz [ 227.514365][ T5350] usb 5-1: SerialNumber: syz [ 227.564203][ T5350] usb 5-1: config 0 descriptor?? [ 227.946477][ T2169] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 228.101112][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 228.111122][ T2169] usb 4-1: Using ep0 maxpacket: 16 [ 228.122068][ T2169] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 228.131163][ T2169] usb 4-1: config 0 has no interface number 0 [ 228.572488][ T2169] usb 4-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 228.572821][ T5629] usb 5-1: USB disconnect, device number 38 [ 228.583849][ T2169] usb 4-1: config 0 interface 246 has no altsetting 0 [ 228.607362][ T2169] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 228.617848][ T2169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.629795][ T2169] usb 4-1: Product: syz [ 228.634876][ T2169] usb 4-1: Manufacturer: syz [ 228.639536][ T2169] usb 4-1: SerialNumber: syz [ 228.758623][ T2169] usb 4-1: config 0 descriptor?? [ 228.800365][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 228.873705][ T9] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 229.018105][ T9] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 229.049612][ T9] usb 3-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 229.057182][ T2169] usb 4-1: USB disconnect, device number 30 [ 229.084721][ T9] usb 3-1: config 166 has no interface number 0 [ 229.101852][ T9] usb 3-1: config 166 has no interface number 1 [ 229.109230][ T9] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 229.131220][ T9] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 229.146592][ T9] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 229.279837][ T9] usb 3-1: config 166 interface 34 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 229.299921][ T9] usb 3-1: config 166 interface 177 has no altsetting 0 [ 229.336938][ T9] usb 3-1: config 166 interface 34 has no altsetting 0 [ 229.515651][ T7740] No control pipe specified [ 229.627607][ T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 229.705965][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.727877][ T9] usb 3-1: Product: syz [ 229.750777][ T9] usb 3-1: Manufacturer: syz [ 229.769210][ T9] usb 3-1: SerialNumber: syz [ 230.176253][ T30] audit: type=1400 audit(1780951753.560:572): avc: denied { read } for pid=7748 comm="syz.5.463" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 230.223191][ T50] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 230.275497][ T30] audit: type=1400 audit(1780951753.560:573): avc: denied { open } for pid=7748 comm="syz.5.463" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 231.046271][ T9] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 231.656616][ T9] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 231.730302][ T9] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 231.750174][ T9] uvcvideo 3-1:166.34: No valid video chain found. [ 231.777784][ T9] usb 3-1: USB disconnect, device number 34 [ 232.841385][ T5625] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 233.595767][ T9] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 233.634998][ T5625] usb 5-1: device descriptor read/64, error -71 [ 233.799137][ T7793] ubi: mtd0 is already attached to ubi16 [ 233.813222][ T7793] netlink: 'syz.3.472': attribute type 10 has an invalid length. [ 233.821197][ T7793] netlink: 40 bytes leftover after parsing attributes in process `syz.3.472'. [ 233.831067][ T7793] bridge0: port 3(veth1_macvtap) entered blocking state [ 233.838586][ T7793] bridge0: port 3(veth1_macvtap) entered disabled state [ 233.847939][ T7793] veth1_macvtap: entered allmulticast mode [ 233.902365][ T5625] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 233.905158][ T7793] veth1_macvtap: left allmulticast mode [ 233.922716][ T7793] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 234.037471][ T9] usb 3-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config [ 234.057948][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.084505][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 234.099290][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.128631][ T9] usb 3-1: config 0 descriptor?? [ 234.181042][ T5625] usb 5-1: device descriptor read/64, error -71 [ 234.212848][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 234.261026][ T804] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 234.301248][ T5625] usb usb5-port1: attempt power cycle [ 234.422698][ T804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.436568][ T804] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.449821][ T804] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 234.459153][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.467950][ T804] usb 4-1: Product: syz [ 234.471724][ T2169] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 234.472251][ T804] usb 4-1: Manufacturer: syz [ 234.484348][ T30] audit: type=1400 audit(1780951757.860:574): avc: denied { read write } for pid=7804 comm="syz.4.477" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.507577][ T5807] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 234.515350][ T30] audit: type=1400 audit(1780951757.860:575): avc: denied { open } for pid=7804 comm="syz.4.477" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.538621][ T804] usb 4-1: SerialNumber: syz [ 234.546272][ T804] usb 4-1: config 0 descriptor?? [ 234.558685][ T30] audit: type=1400 audit(1780951757.900:576): avc: denied { ioctl } for pid=7804 comm="syz.4.477" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.651154][ T2169] usb 6-1: Using ep0 maxpacket: 16 [ 234.657497][ T2169] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.667983][ T2169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.679370][ T2169] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 234.689688][ T2169] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 234.691096][ T5807] usb 1-1: Using ep0 maxpacket: 16 [ 234.699479][ T2169] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.706381][ T5807] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 234.721676][ T2169] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 234.726552][ T5807] usb 1-1: config 0 has no interface number 0 [ 234.735804][ T7807] CUSE: unknown device info "" [ 234.741566][ T5807] usb 1-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 234.747799][ T7807] CUSE: unknown device info "" [ 234.757997][ T5807] usb 1-1: config 0 interface 246 has no altsetting 0 [ 234.762486][ T2169] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 234.762507][ T2169] usb 6-1: Manufacturer: syz [ 234.764478][ T2169] usb 6-1: config 0 descriptor?? [ 234.772169][ T5807] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 234.796357][ T7807] CUSE: unknown device info "" [ 234.801641][ T7807] CUSE: unknown device info "" [ 234.807852][ T7807] CUSE: unknown device info "ÿ" [ 234.813226][ T7807] CUSE: unknown device info "" [ 234.818202][ T7807] CUSE: unknown device info "" [ 234.824326][ T7807] CUSE: unknown device info "ÿ" [ 234.829429][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.838821][ T5807] usb 1-1: Product: syz [ 234.844291][ T7807] CUSE: DEVNAME unspecified [ 234.848836][ T5807] usb 1-1: Manufacturer: syz [ 234.854387][ T5807] usb 1-1: SerialNumber: syz [ 234.854720][ T29] usb 4-1: USB disconnect, device number 31 [ 234.868038][ T5807] usb 1-1: config 0 descriptor?? [ 235.082254][ T2169] rc_core: IR keymap rc-hauppauge not found [ 235.093959][ T2169] Registered IR keymap rc-empty [ 235.103156][ T2169] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 235.113344][ T5807] usb 1-1: USB disconnect, device number 26 [ 235.131098][ T2169] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 235.163042][ T2169] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 235.176806][ T2169] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input11 [ 235.190842][ T2169] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 235.221180][ T2169] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 235.241321][ T2169] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 235.271082][ T2169] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 235.298493][ T2169] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 235.321204][ T2169] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 235.329785][ T30] audit: type=1400 audit(1780951758.710:577): avc: denied { connect } for pid=7811 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 235.351294][ T2169] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 235.363817][ T30] audit: type=1400 audit(1780951758.750:578): avc: denied { read } for pid=7811 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 235.391681][ T2169] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 235.412755][ T2169] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 235.436916][ T30] audit: type=1400 audit(1780951758.820:579): avc: denied { create } for pid=7811 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 235.461183][ T2169] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 235.476675][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.476'. [ 235.495225][ T7801] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.508514][ T2169] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 235.516562][ T7801] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 235.544675][ T2169] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 235.546008][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.584226][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.618460][ T30] audit: type=1404 audit(1780951759.000:580): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 235.680568][ T30] audit: type=1400 audit(1780951759.040:581): avc: denied { getattr } for pid=7816 comm="syz.3.479" path="socket:[17163]" dev="sockfs" ino=17163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 235.745756][ T30] audit: type=1400 audit(1780951759.050:582): avc: denied { create } for pid=7816 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 235.782560][ T30] audit: type=1400 audit(1780951759.090:583): avc: denied { read write } for pid=7800 comm="syz.5.476" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 235.807358][ T30] audit: type=1400 audit(1780951759.120:584): avc: denied { read } for pid=7800 comm="syz.5.476" name="event4" dev="devtmpfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 235.810352][ T2169] usb 6-1: USB disconnect, device number 9 [ 235.892188][ T804] usb 3-1: USB disconnect, device number 35 [ 235.904827][ T30] audit: type=1400 audit(1780951759.130:585): avc: denied { read write } for pid=7800 comm="syz.5.476" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 235.946474][ T30] audit: type=1400 audit(1780951759.160:586): avc: denied { create } for pid=7800 comm="syz.5.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 236.495346][ T7840] netlink: 'syz.5.487': attribute type 25 has an invalid length. [ 236.522293][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.487'. [ 236.622930][ T7847] netem: change failed [ 236.635577][ T7848] netem: change failed [ 236.683971][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.694131][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.703591][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.712457][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.780197][ T7845] netlink: 'syz.4.489': attribute type 10 has an invalid length. [ 236.792676][ T7845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.489'. [ 236.803466][ T7845] bridge0: port 3(veth1_macvtap) entered blocking state [ 236.822664][ T7845] bridge0: port 3(veth1_macvtap) entered disabled state [ 236.830111][ T7845] veth1_macvtap: entered allmulticast mode [ 236.840812][ T7845] veth1_macvtap: left allmulticast mode [ 236.854439][ T7845] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 236.983071][ T7857] CUSE: unknown device info "" [ 236.988670][ T7857] CUSE: unknown device info "" [ 236.994888][ T7857] CUSE: unknown device info "" [ 236.999751][ T7857] CUSE: unknown device info "" [ 237.005548][ T7857] CUSE: unknown device info "ÿ" [ 237.010481][ T7857] CUSE: unknown device info "" [ 237.015922][ T7857] CUSE: unknown device info "" [ 237.020794][ T7857] CUSE: unknown device info "ÿ" [ 237.025821][ T7857] CUSE: DEVNAME unspecified [ 237.876439][ T7883] netlink: 'syz.3.504': attribute type 25 has an invalid length. [ 237.885423][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 237.909326][ T7883] netlink: 'syz.3.504': attribute type 25 has an invalid length. [ 237.909942][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.930514][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.939484][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 237.944358][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.978733][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.304389][ T50] Bluetooth: hci3: unexpected event for opcode 0x080c [ 238.479891][ T7891] trusted_key: encrypted_key: master key parameter ' ªÇbH' is invalid [ 240.335784][ T30] kauditd_printk_skb: 496 callbacks suppressed [ 240.335800][ T30] audit: type=1400 audit(1780951763.720:1083): avc: denied { read write } for pid=7950 comm="syz.4.530" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 240.396555][ T30] audit: type=1400 audit(1780951763.770:1084): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 240.460257][ T30] audit: type=1400 audit(1780951763.820:1085): avc: denied { read write } for pid=5616 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 240.522570][ T30] audit: type=1400 audit(1780951763.910:1086): avc: denied { read } for pid=7954 comm="syz.4.532" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 240.524525][ T30] audit: type=1400 audit(1780951763.910:1087): avc: denied { create } for pid=7954 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 240.540264][ T30] audit: type=1400 audit(1780951763.910:1088): avc: denied { read write } for pid=5619 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 240.625739][ T30] audit: type=1400 audit(1780951763.980:1089): avc: denied { create } for pid=7954 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 240.694974][ T30] audit: type=1400 audit(1780951763.990:1090): avc: denied { allowed } for pid=7954 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 240.695018][ T30] audit: type=1400 audit(1780951763.990:1091): avc: denied { create } for pid=7954 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 240.696778][ T30] audit: type=1400 audit(1780951763.990:1092): avc: denied { allowed } for pid=7954 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 241.014325][ T7961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.014421][ T7961] batadv_slave_1: entered promiscuous mode [ 241.451286][ T7978] netlink: 'syz.2.542': attribute type 25 has an invalid length. [ 241.473370][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 241.496421][ T7978] netlink: 'syz.2.542': attribute type 25 has an invalid length. [ 241.519415][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 242.049181][ T7998] netlink: 36 bytes leftover after parsing attributes in process `syz.5.548'. [ 242.070728][ T7999] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7999 comm=syz.3.549 [ 242.158765][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 242.182036][ T8001] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 242.206545][ T8001] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 242.474053][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.481874][ T8010] batadv_slave_1: entered promiscuous mode [ 242.710517][ T8016] syz.3.556 uses obsolete (PF_INET,SOCK_PACKET) [ 242.788453][ T8020] 8021q: VLANs not supported on ipvlan0 [ 243.164319][ T8034] netlink: 'syz.0.563': attribute type 4 has an invalid length. [ 243.206181][ T8034] netlink: 'syz.0.563': attribute type 4 has an invalid length. [ 244.296772][ T8061] FAULT_INJECTION: forcing a failure. [ 244.296772][ T8061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.312672][ T8061] CPU: 0 UID: 0 PID: 8061 Comm: syz.5.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.312699][ T8061] Tainted: [L]=SOFTLOCKUP [ 244.312705][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.312714][ T8061] Call Trace: [ 244.312719][ T8061] [ 244.312725][ T8061] dump_stack_lvl+0x100/0x190 [ 244.312751][ T8061] should_fail_ex.cold+0x5/0xa [ 244.312774][ T8061] _copy_from_user+0x2e/0xd0 [ 244.312795][ T8061] kstrtouint_from_user+0xd6/0x1d0 [ 244.312819][ T8061] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 244.312842][ T8061] ? __lock_acquire+0x4a5/0x2630 [ 244.312866][ T8061] ? lock_acquire+0x1b1/0x370 [ 244.312888][ T8061] proc_fail_nth_write+0x83/0x220 [ 244.312907][ T8061] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 244.312931][ T8061] vfs_write+0x2aa/0x1070 [ 244.312953][ T8061] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 244.312973][ T8061] ? __pfx_vfs_write+0x10/0x10 [ 244.312996][ T8061] ? __fget_files+0x215/0x3d0 [ 244.313023][ T8061] ? __fget_files+0x21f/0x3d0 [ 244.313050][ T8061] ksys_write+0x12a/0x250 [ 244.313068][ T8061] ? __pfx_ksys_write+0x10/0x10 [ 244.313086][ T8061] ? rcu_is_watching+0x12/0xc0 [ 244.313114][ T8061] do_syscall_64+0x115/0x870 [ 244.313135][ T8061] ? clear_bhb_loop+0x40/0x90 [ 244.313156][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.313173][ T8061] RIP: 0033:0x7fde8375d68e [ 244.313187][ T8061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 244.313202][ T8061] RSP: 002b:00007fde84726fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.313218][ T8061] RAX: ffffffffffffffda RBX: 00007fde847276c0 RCX: 00007fde8375d68e [ 244.313229][ T8061] RDX: 0000000000000001 RSI: 00007fde847270a0 RDI: 0000000000000005 [ 244.313239][ T8061] RBP: 00007fde84727090 R08: 0000000000000000 R09: 0000000000000000 [ 244.313248][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.313258][ T8061] R13: 00007fde83a16038 R14: 00007fde83a15fa0 R15: 00007ffe19f1dac8 [ 244.313283][ T8061] [ 245.341838][ T30] kauditd_printk_skb: 1719 callbacks suppressed [ 245.341853][ T30] audit: type=1326 audit(1780951768.730:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.4.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7eff5455d68e code=0x7ffc0000 [ 245.375890][ T30] audit: type=1326 audit(1780951768.760:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.4.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7eff5455d68e code=0x7ffc0000 [ 245.414158][ T30] audit: type=1400 audit(1780951768.760:2812): avc: denied { create } for pid=8083 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 245.460194][ T30] audit: type=1400 audit(1780951768.760:2813): avc: denied { execmem } for pid=8083 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 245.481082][ T30] audit: type=1326 audit(1780951768.790:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.4.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7eff5455d68e code=0x7ffc0000 [ 245.528636][ T30] audit: type=1326 audit(1780951768.790:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.4.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7eff5455d68e code=0x7ffc0000 [ 245.583028][ T8089] audit: audit_backlog=65 > audit_backlog_limit=64 [ 245.583511][ T8088] audit: audit_backlog=65 > audit_backlog_limit=64 [ 245.591728][ T8089] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 245.603932][ T30] audit: type=1326 audit(1780951768.790:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8035 comm="syz.4.564" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7eff5455d68e code=0x7ffc0000 [ 245.639267][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.583'. [ 246.007706][ T50] Bluetooth: hci3: unexpected event for opcode 0x080c [ 246.035891][ T8096] trusted_key: encrypted_key: master key parameter ' ªÇbH' is invalid [ 246.680698][ T8111] trusted_key: encrypted_key: master key parameter ' ªÇbH' is invalid [ 246.716813][ T50] Bluetooth: hci2: unexpected event for opcode 0x080c [ 246.724126][ T8112] trusted_key: encrypted_key: master key parameter ' ªÇbH' is invalid [ 248.406906][ T50] Bluetooth: hci2: unexpected event for opcode 0x080c [ 248.428913][ T8152] trusted_key: encrypted_key: master key parameter ' ªÇbH' is invalid [ 250.129924][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.139714][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.357710][ T30] kauditd_printk_skb: 887 callbacks suppressed [ 250.357742][ T30] audit: type=1400 audit(1780951773.740:3701): avc: denied { read } for pid=8196 comm="syz.4.622" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 250.405843][ T30] audit: type=1400 audit(1780951773.770:3702): avc: denied { read write } for pid=6929 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.464956][ T30] audit: type=1400 audit(1780951773.850:3703): avc: denied { read } for pid=8198 comm="syz.5.623" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 250.510346][ T30] audit: type=1400 audit(1780951773.890:3704): avc: denied { read write } for pid=5616 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 250.539018][ T30] audit: type=1400 audit(1780951773.920:3705): avc: denied { create } for pid=8198 comm="syz.5.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 250.564441][ T30] audit: type=1400 audit(1780951773.950:3706): avc: denied { create } for pid=8198 comm="syz.5.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 250.588688][ T30] audit: type=1400 audit(1780951773.970:3707): avc: denied { allowed } for pid=8198 comm="syz.5.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 250.613013][ T30] audit: type=1400 audit(1780951774.000:3708): avc: denied { create } for pid=8198 comm="syz.5.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 250.634966][ T30] audit: type=1400 audit(1780951774.000:3709): avc: denied { allowed } for pid=8198 comm="syz.5.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 250.689059][ T30] audit: type=1400 audit(1780951774.040:3710): avc: denied { read } for pid=8200 comm="syz.4.624" dev="nsfs" ino=4026532807 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 251.698608][ T8227] netlink: 48 bytes leftover after parsing attributes in process `syz.4.635'. [ 251.900673][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 251.916025][ T8234] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 251.935499][ T8234] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 254.183853][ T8283] capability: warning: `syz.5.657' uses 32-bit capabilities (legacy support in use) [ 255.370019][ T30] kauditd_printk_skb: 463 callbacks suppressed [ 255.370035][ T30] audit: type=1400 audit(1780951778.750:4174): avc: denied { read write } for pid=5619 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.437858][ T30] audit: type=1400 audit(1780951778.820:4175): avc: denied { create } for pid=8319 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 255.458998][ T30] audit: type=1400 audit(1780951778.820:4176): avc: denied { create } for pid=8319 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 255.544807][ T30] audit: type=1400 audit(1780951778.850:4177): avc: denied { create } for pid=8319 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 255.613272][ T30] audit: type=1400 audit(1780951778.870:4178): avc: denied { map_create } for pid=8319 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 255.676081][ T30] audit: type=1400 audit(1780951778.870:4179): avc: denied { map_create } for pid=8319 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 255.730077][ T30] audit: type=1400 audit(1780951778.870:4180): avc: denied { map_create } for pid=8319 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 255.797249][ T30] audit: type=1400 audit(1780951778.870:4181): avc: denied { read } for pid=8319 comm="syz.2.674" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 255.832584][ T30] audit: type=1400 audit(1780951778.930:4182): avc: denied { read write } for pid=6929 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 255.884516][ T30] audit: type=1400 audit(1780951778.940:4183): avc: denied { execute } for pid=8314 comm="syz.4.673" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 258.098386][ T8373] netlink: 'syz.0.695': attribute type 25 has an invalid length. [ 258.124763][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 258.162662][ T8373] netlink: 'syz.0.695': attribute type 25 has an invalid length. [ 258.193426][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 258.826641][ T8385] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8388] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8385] [ 258.852902][ T8385] FAULT_INJECTION: forcing a failure. [ 258.852902][ T8385] name failslab, interval 1, probability 0, space 0, times 0 [ 258.896814][ T8385] CPU: 0 UID: 0 PID: 8385 Comm: syz.3.700 Tainted: G L syzkaller #0 PREEMPT(full) [ 258.896841][ T8385] Tainted: [L]=SOFTLOCKUP [ 258.896845][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.896851][ T8385] Call Trace: [ 258.896856][ T8385] [ 258.896861][ T8385] dump_stack_lvl+0x100/0x190 [ 258.896878][ T8385] should_fail_ex.cold+0x5/0xa [ 258.896894][ T8385] ? tomoyo_realpath_from_path+0xb6/0x690 [ 258.896913][ T8385] should_failslab+0xc2/0x120 [ 258.896926][ T8385] __kmalloc_noprof+0xe0/0x850 [ 258.896943][ T8385] ? kfree+0x1dd/0x6c0 [ 258.896960][ T8385] tomoyo_realpath_from_path+0xb6/0x690 [ 258.896981][ T8385] tomoyo_path_number_perm+0x23c/0x580 [ 258.896998][ T8385] ? tomoyo_path_number_perm+0x22e/0x580 [ 258.897021][ T8385] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 258.897062][ T8385] ? find_held_lock+0x2b/0x80 [ 258.897072][ T8385] ? __fget_files+0x215/0x3d0 [ 258.897086][ T8385] ? hook_file_ioctl_common+0x149/0x410 [ 258.897097][ T8385] ? __fget_files+0x215/0x3d0 [ 258.897113][ T8385] ? __fget_files+0x21f/0x3d0 [ 258.897129][ T8385] security_file_ioctl+0xd3/0x230 [ 258.897146][ T8385] __x64_sys_ioctl+0xb7/0x210 [ 258.897159][ T8385] do_syscall_64+0x115/0x870 [ 258.897173][ T8385] ? clear_bhb_loop+0x40/0x90 [ 258.897187][ T8385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.897198][ T8385] RIP: 0033:0x7fe90c39ce59 [ 258.897211][ T8385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.897227][ T8385] RSP: 002b:00007fe90d18d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.897244][ T8385] RAX: ffffffffffffffda RBX: 00007fe90c615fa0 RCX: 00007fe90c39ce59 [ 258.897252][ T8385] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 258.897259][ T8385] RBP: 00007fe90d18d090 R08: 0000000000000000 R09: 0000000000000000 [ 258.897265][ T8385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.897271][ T8385] R13: 00007fe90c616038 R14: 00007fe90c615fa0 R15: 00007ffc94e90558 [ 258.897286][ T8385] [ 258.899823][ T8385] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.625735][ T8405] netlink: 32 bytes leftover after parsing attributes in process `syz.3.707'. [ 260.083758][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.706'. [ 260.358071][ T8414] netlink: 'syz.2.711': attribute type 25 has an invalid length. [ 260.407887][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 260.445943][ T30] kauditd_printk_skb: 344 callbacks suppressed [ 260.445959][ T30] audit: type=1400 audit(1780951783.830:4528): avc: denied { create } for pid=8415 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 260.447962][ T8414] netlink: 'syz.2.711': attribute type 25 has an invalid length. [ 260.533306][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 260.543962][ T30] audit: type=1400 audit(1780951783.920:4529): avc: denied { create } for pid=8415 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 260.634418][ T30] audit: type=1400 audit(1780951783.920:4530): avc: denied { create } for pid=8415 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 260.724433][ T30] audit: type=1400 audit(1780951783.920:4531): avc: denied { create } for pid=8415 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 260.802362][ T30] audit: type=1400 audit(1780951783.930:4532): avc: denied { create } for pid=8415 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 260.877219][ T30] audit: type=1400 audit(1780951783.930:4533): avc: denied { create } for pid=8415 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 260.944586][ T30] audit: type=1400 audit(1780951783.950:4534): avc: denied { read write } for pid=8415 comm="syz.3.712" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 261.041020][ T30] audit: type=1400 audit(1780951783.960:4535): avc: denied { read write } for pid=5616 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 261.104287][ T30] audit: type=1400 audit(1780951783.960:4536): avc: denied { create } for pid=8415 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 261.175482][ T30] audit: type=1400 audit(1780951783.960:4537): avc: denied { create } for pid=8415 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 261.832558][ T8439] netlink: 'syz.3.722': attribute type 25 has an invalid length. [ 261.843524][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 261.854436][ T8439] netlink: 'syz.3.722': attribute type 25 has an invalid length. [ 261.862822][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.722'. [ 261.982843][ T8442] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 262.658190][ T8456] netlink: 'syz.3.728': attribute type 25 has an invalid length. [ 262.681695][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 262.726490][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 262.783517][ T8456] netlink: 'syz.3.728': attribute type 25 has an invalid length. [ 263.956048][ T8483] __nla_validate_parse: 1 callbacks suppressed [ 263.956064][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 263.997550][ T8483] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.025594][ T8483] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 264.329798][ T8496] FAULT_INJECTION: forcing a failure. [ 264.329798][ T8496] name failslab, interval 1, probability 0, space 0, times 0 [ 264.347267][ T8496] CPU: 1 UID: 0 PID: 8496 Comm: syz.2.745 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.347300][ T8496] Tainted: [L]=SOFTLOCKUP [ 264.347306][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 264.347316][ T8496] Call Trace: [ 264.347321][ T8496] [ 264.347328][ T8496] dump_stack_lvl+0x100/0x190 [ 264.347352][ T8496] should_fail_ex.cold+0x5/0xa [ 264.347374][ T8496] should_failslab+0xc2/0x120 [ 264.347393][ T8496] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 264.347417][ T8496] ? do_getname+0x35/0x390 [ 264.347446][ T8496] do_getname+0x35/0x390 [ 264.347471][ T8496] user_path_at+0x26/0x60 [ 264.347491][ T8496] __x64_sys_mount+0x1fb/0x310 [ 264.347515][ T8496] ? __pfx___x64_sys_mount+0x10/0x10 [ 264.347541][ T8496] ? rcu_is_watching+0x12/0xc0 [ 264.347569][ T8496] do_syscall_64+0x115/0x870 [ 264.347590][ T8496] ? clear_bhb_loop+0x40/0x90 [ 264.347609][ T8496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.347626][ T8496] RIP: 0033:0x7f31b779ce59 [ 264.347640][ T8496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.347656][ T8496] RSP: 002b:00007f31b85ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 264.347672][ T8496] RAX: ffffffffffffffda RBX: 00007f31b7a15fa0 RCX: 00007f31b779ce59 [ 264.347682][ T8496] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 264.347692][ T8496] RBP: 00007f31b85ee090 R08: 0000200000000180 R09: 0000000000000000 [ 264.347701][ T8496] R10: 00000000003b80ed R11: 0000000000000246 R12: 0000000000000001 [ 264.347711][ T8496] R13: 00007f31b7a16038 R14: 00007f31b7a15fa0 R15: 00007ffce088a4e8 [ 264.347733][ T8496] [ 264.587314][ T8502] netlink: 'syz.0.747': attribute type 25 has an invalid length. [ 264.595133][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 264.604414][ T8502] netlink: 'syz.0.747': attribute type 25 has an invalid length. [ 264.613808][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 265.750485][ T30] kauditd_printk_skb: 400 callbacks suppressed [ 265.750510][ T30] audit: type=1400 audit(1780951789.130:4938): avc: denied { read write } for pid=5619 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 265.813384][ T30] audit: type=1400 audit(1780951789.200:4939): avc: denied { execmem } for pid=8521 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 265.857006][ T30] audit: type=1400 audit(1780951789.220:4940): avc: denied { create } for pid=8521 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 265.930576][ T30] audit: type=1400 audit(1780951789.220:4941): avc: denied { create } for pid=8521 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 265.959706][ T30] audit: type=1400 audit(1780951789.220:4942): avc: denied { create } for pid=8521 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 266.110130][ T30] audit: type=1400 audit(1780951789.220:4943): avc: denied { create } for pid=8521 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 266.199444][ T30] audit: type=1400 audit(1780951789.220:4944): avc: denied { audit_write } for pid=8521 comm="syz.2.754" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 266.221094][ T30] audit: type=1400 audit(1780951789.220:4945): avc: denied { create } for pid=8521 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 266.241808][ T30] audit: type=1400 audit(1780951789.220:4946): avc: denied { prog_load } for pid=8521 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 266.314975][ T30] audit: type=1400 audit(1780951789.220:4947): avc: denied { create } for pid=8521 comm="syz.2.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 266.455494][ T8541] netlink: 'syz.0.762': attribute type 25 has an invalid length. [ 266.464558][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 266.475326][ T8541] netlink: 'syz.0.762': attribute type 25 has an invalid length. [ 266.485037][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 268.073439][ T8578] netlink: 'syz.0.775': attribute type 21 has an invalid length. [ 268.095618][ T8578] netlink: 128 bytes leftover after parsing attributes in process `syz.0.775'. [ 268.126880][ T8578] netlink: 'syz.0.775': attribute type 4 has an invalid length. [ 268.150069][ T8578] netlink: 'syz.0.775': attribute type 5 has an invalid length. [ 268.170841][ T8578] netlink: 3 bytes leftover after parsing attributes in process `syz.0.775'. [ 270.635430][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 270.797964][ T30] kauditd_printk_skb: 362 callbacks suppressed [ 270.798006][ T30] audit: type=1400 audit(1780951794.180:5310): avc: denied { read write } for pid=6929 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 270.838747][ T30] audit: type=1400 audit(1780951794.220:5311): avc: denied { create } for pid=8700 comm="syz.5.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 270.858620][ T30] audit: type=1400 audit(1780951794.220:5312): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 270.937237][ T30] audit: type=1400 audit(1780951794.320:5313): avc: denied { read write } for pid=8702 comm="syz.3.831" name="virtual_nci" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 270.992784][ T30] audit: type=1400 audit(1780951794.320:5314): avc: denied { create } for pid=8702 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 271.012643][ T30] audit: type=1400 audit(1780951794.360:5315): avc: denied { append } for pid=8700 comm="syz.5.830" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 271.044259][ T30] audit: type=1400 audit(1780951794.360:5316): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 271.111473][ T30] audit: type=1400 audit(1780951794.470:5317): avc: denied { create } for pid=8705 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 271.131770][ T30] audit: type=1400 audit(1780951794.480:5318): avc: denied { create } for pid=8705 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 271.154300][ T30] audit: type=1400 audit(1780951794.500:5319): avc: denied { read write } for pid=5616 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 271.262481][ T8708] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.579101][ T8726] mmap: syz.3.841 (8726): VmData 37466112 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 273.358126][ T8779] FAULT_INJECTION: forcing a failure. [ 273.358126][ T8779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.474752][ T8779] CPU: 0 UID: 0 PID: 8779 Comm: syz.3.860 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.474785][ T8779] Tainted: [L]=SOFTLOCKUP [ 273.474791][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.474800][ T8779] Call Trace: [ 273.474807][ T8779] [ 273.474813][ T8779] dump_stack_lvl+0x100/0x190 [ 273.474840][ T8779] should_fail_ex.cold+0x5/0xa [ 273.474864][ T8779] _copy_from_user+0x2e/0xd0 [ 273.474887][ T8779] kstrtouint_from_user+0xd6/0x1d0 [ 273.474913][ T8779] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 273.474938][ T8779] ? __lock_acquire+0x4a5/0x2630 [ 273.474964][ T8779] ? lock_acquire+0x1b1/0x370 [ 273.474989][ T8779] proc_fail_nth_write+0x83/0x220 [ 273.475009][ T8779] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 273.475035][ T8779] vfs_write+0x2aa/0x1070 [ 273.475056][ T8779] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 273.475077][ T8779] ? __pfx_vfs_write+0x10/0x10 [ 273.475096][ T8779] ? __fget_files+0x215/0x3d0 [ 273.475123][ T8779] ? __fget_files+0x21f/0x3d0 [ 273.475152][ T8779] ksys_write+0x12a/0x250 [ 273.475170][ T8779] ? __pfx_ksys_write+0x10/0x10 [ 273.475191][ T8779] ? rcu_is_watching+0x12/0xc0 [ 273.475220][ T8779] do_syscall_64+0x115/0x870 [ 273.475247][ T8779] ? clear_bhb_loop+0x40/0x90 [ 273.475269][ T8779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.475286][ T8779] RIP: 0033:0x7fe90c35d68e [ 273.475300][ T8779] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.475316][ T8779] RSP: 002b:00007fe90d18cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.475333][ T8779] RAX: ffffffffffffffda RBX: 00007fe90d18d6c0 RCX: 00007fe90c35d68e [ 273.475344][ T8779] RDX: 0000000000000001 RSI: 00007fe90d18d0a0 RDI: 0000000000000004 [ 273.475353][ T8779] RBP: 00007fe90d18d090 R08: 0000000000000000 R09: 0000000000000000 [ 273.475363][ T8779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.475372][ T8779] R13: 00007fe90c616038 R14: 00007fe90c615fa0 R15: 00007ffc94e90558 [ 273.475397][ T8779] [ 275.126859][ T8810] FAULT_INJECTION: forcing a failure. [ 275.126859][ T8810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.160393][ T8810] CPU: 0 UID: 0 PID: 8810 Comm: syz.4.872 Tainted: G L syzkaller #0 PREEMPT(full) [ 275.160425][ T8810] Tainted: [L]=SOFTLOCKUP [ 275.160431][ T8810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.160440][ T8810] Call Trace: [ 275.160446][ T8810] [ 275.160453][ T8810] dump_stack_lvl+0x100/0x190 [ 275.160480][ T8810] should_fail_ex.cold+0x5/0xa [ 275.160505][ T8810] _copy_to_user+0x32/0xd0 [ 275.160529][ T8810] simple_read_from_buffer+0xcb/0x170 [ 275.160554][ T8810] proc_fail_nth_read+0x1af/0x230 [ 275.160575][ T8810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.160595][ T8810] ? rw_verify_area+0xce/0x6d0 [ 275.160612][ T8810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.160629][ T8810] vfs_read+0x1e4/0xb30 [ 275.160652][ T8810] ? __pfx_vfs_read+0x10/0x10 [ 275.160670][ T8810] ? __fget_files+0x215/0x3d0 [ 275.160698][ T8810] ? __fget_files+0x21f/0x3d0 [ 275.160727][ T8810] ksys_read+0x12a/0x250 [ 275.160746][ T8810] ? __pfx_ksys_read+0x10/0x10 [ 275.160767][ T8810] ? rcu_is_watching+0x12/0xc0 [ 275.160796][ T8810] do_syscall_64+0x115/0x870 [ 275.160819][ T8810] ? clear_bhb_loop+0x40/0x90 [ 275.160840][ T8810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.160858][ T8810] RIP: 0033:0x7eff5455d68e [ 275.160874][ T8810] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 275.160890][ T8810] RSP: 002b:00007eff527d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.160919][ T8810] RAX: ffffffffffffffda RBX: 00007eff527d56c0 RCX: 00007eff5455d68e [ 275.160938][ T8810] RDX: 000000000000000f RSI: 00007eff527d50a0 RDI: 0000000000000005 [ 275.160957][ T8810] RBP: 00007eff527d5090 R08: 0000000000000000 R09: 0000000000000000 [ 275.160970][ T8810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.160979][ T8810] R13: 00007eff54816128 R14: 00007eff54816090 R15: 00007ffce1d8d118 [ 275.160999][ T8810] [ 275.816507][ T30] kauditd_printk_skb: 275 callbacks suppressed [ 275.816524][ T30] audit: type=1400 audit(1780951799.200:5595): avc: denied { allowed } for pid=8827 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 275.824575][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 275.856251][ T8830] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.864221][ T30] audit: type=1400 audit(1780951799.200:5596): avc: denied { allowed } for pid=8828 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 275.868177][ T8830] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 275.895229][ T30] audit: type=1400 audit(1780951799.200:5597): avc: denied { read write } for pid=8828 comm="syz.3.880" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 275.925646][ T30] audit: type=1400 audit(1780951799.200:5598): avc: denied { read } for pid=8828 comm="syz.3.880" dev="nsfs" ino=4026532991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 275.947526][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 275.956326][ T8829] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.969569][ T30] audit: type=1400 audit(1780951799.240:5599): avc: denied { read write } for pid=8827 comm="syz.2.881" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 275.977507][ T8829] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 275.999815][ T30] audit: type=1400 audit(1780951799.240:5600): avc: denied { read } for pid=8827 comm="syz.2.881" dev="nsfs" ino=4026533224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 276.050165][ T30] audit: type=1400 audit(1780951799.340:5601): avc: denied { read write } for pid=8828 comm="syz.3.880" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 276.076458][ T30] audit: type=1400 audit(1780951799.350:5602): avc: denied { read write } for pid=8827 comm="syz.2.881" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 276.100223][ T30] audit: type=1400 audit(1780951799.350:5603): avc: denied { read write } for pid=8827 comm="syz.2.881" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 276.125557][ T30] audit: type=1400 audit(1780951799.400:5604): avc: denied { read write } for pid=8828 comm="syz.3.880" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 280.036862][ T8930] FAULT_INJECTION: forcing a failure. [ 280.036862][ T8930] name failslab, interval 1, probability 0, space 0, times 0 [ 280.072473][ T8930] CPU: 1 UID: 0 PID: 8930 Comm: syz.5.922 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.072501][ T8930] Tainted: [L]=SOFTLOCKUP [ 280.072507][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 280.072516][ T8930] Call Trace: [ 280.072522][ T8930] [ 280.072528][ T8930] dump_stack_lvl+0x100/0x190 [ 280.072555][ T8930] should_fail_ex.cold+0x5/0xa [ 280.072579][ T8930] should_failslab+0xc2/0x120 [ 280.072599][ T8930] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 280.072624][ T8930] ? alloc_empty_file+0x5b/0x1c0 [ 280.072649][ T8930] ? __pfx_stack_trace_save+0x10/0x10 [ 280.072670][ T8930] alloc_empty_file+0x5b/0x1c0 [ 280.072695][ T8930] path_openat+0xe8/0x31a0 [ 280.072720][ T8930] ? kasan_save_stack+0x3f/0x50 [ 280.072734][ T8930] ? kasan_save_stack+0x30/0x50 [ 280.072748][ T8930] ? kasan_save_track+0x14/0x30 [ 280.072762][ T8930] ? __kasan_slab_alloc+0x89/0x90 [ 280.072778][ T8930] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 280.072808][ T8930] ? do_getname+0x35/0x390 [ 280.072831][ T8930] ? do_sys_openat2+0xc5/0x1e0 [ 280.072856][ T8930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.072877][ T8930] ? __pfx_path_openat+0x10/0x10 [ 280.072907][ T8930] do_file_open+0x20e/0x430 [ 280.072931][ T8930] ? __pfx_do_file_open+0x10/0x10 [ 280.072970][ T8930] ? alloc_fd+0x476/0x790 [ 280.072994][ T8930] ? do_getname+0x191/0x390 [ 280.073021][ T8930] do_sys_openat2+0x10d/0x1e0 [ 280.073046][ T8930] ? __pfx_do_sys_openat2+0x10/0x10 [ 280.073069][ T8930] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.073101][ T8930] ? __fget_files+0x21f/0x3d0 [ 280.073126][ T8930] __x64_sys_openat+0x12d/0x210 [ 280.073152][ T8930] ? __pfx___x64_sys_openat+0x10/0x10 [ 280.073177][ T8930] ? ksys_write+0x1ac/0x250 [ 280.073199][ T8930] ? rcu_is_watching+0x12/0xc0 [ 280.073227][ T8930] do_syscall_64+0x115/0x870 [ 280.073248][ T8930] ? clear_bhb_loop+0x40/0x90 [ 280.073268][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.073286][ T8930] RIP: 0033:0x7fde8379ce59 [ 280.073301][ T8930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.073317][ T8930] RSP: 002b:00007fde84727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 280.073333][ T8930] RAX: ffffffffffffffda RBX: 00007fde83a15fa0 RCX: 00007fde8379ce59 [ 280.073345][ T8930] RDX: 0000000000022043 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 280.073355][ T8930] RBP: 00007fde84727090 R08: 0000000000000000 R09: 0000000000000000 [ 280.073365][ T8930] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000001 [ 280.073375][ T8930] R13: 00007fde83a16038 R14: 00007fde83a15fa0 R15: 00007ffe19f1dac8 [ 280.073398][ T8930] [ 280.430947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 280.547953][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.927'. [ 280.857059][ T30] kauditd_printk_skb: 293 callbacks suppressed [ 280.857076][ T30] audit: type=1400 audit(1780951804.240:5898): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.942531][ T30] audit: type=1400 audit(1780951804.290:5899): avc: denied { read write } for pid=5619 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 281.003984][ T30] audit: type=1400 audit(1780951804.320:5900): avc: denied { read } for pid=8956 comm="syz.2.934" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 281.059874][ T30] audit: type=1400 audit(1780951804.320:5901): avc: denied { create } for pid=8951 comm="syz.4.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 281.126400][ T30] audit: type=1400 audit(1780951804.330:5902): avc: denied { prog_load } for pid=8953 comm="syz.0.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 281.182580][ T30] audit: type=1400 audit(1780951804.350:5903): avc: denied { execmem } for pid=8951 comm="syz.4.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 281.238635][ T30] audit: type=1400 audit(1780951804.380:5904): avc: denied { read } for pid=8959 comm="syz.3.933" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 281.307383][ T30] audit: type=1400 audit(1780951804.380:5905): avc: denied { read write } for pid=8959 comm="syz.3.933" name="video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 281.381798][ T30] audit: type=1400 audit(1780951804.380:5906): avc: denied { map_create } for pid=8959 comm="syz.3.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 281.444965][ T30] audit: type=1400 audit(1780951804.390:5907): avc: denied { execmem } for pid=8953 comm="syz.0.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 281.664914][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.938'. [ 282.422786][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.949'. [ 283.168802][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.960'. [ 283.959524][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'. [ 285.873544][ T30] kauditd_printk_skb: 397 callbacks suppressed [ 285.873559][ T30] audit: type=1400 audit(1780951809.260:6303): avc: denied { read write } for pid=6929 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 285.965984][ T30] audit: type=1400 audit(1780951809.330:6304): avc: denied { read } for pid=9110 comm="syz.2.996" dev="nsfs" ino=4026533224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 286.011880][ T30] audit: type=1400 audit(1780951809.340:6305): avc: denied { read write } for pid=9110 comm="syz.2.996" name="qrtr-tun" dev="devtmpfs" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 286.046297][ T30] audit: type=1400 audit(1780951809.340:6306): avc: denied { create } for pid=9110 comm="syz.2.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 286.067945][ T30] audit: type=1400 audit(1780951809.340:6307): avc: denied { create } for pid=9110 comm="syz.2.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 286.088175][ T30] audit: type=1400 audit(1780951809.340:6308): avc: denied { create } for pid=9110 comm="syz.2.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 286.169384][ T30] audit: type=1400 audit(1780951809.340:6309): avc: denied { map_create } for pid=9110 comm="syz.2.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 286.223449][ T30] audit: type=1400 audit(1780951809.340:6310): avc: denied { read } for pid=9110 comm="syz.2.996" dev="nsfs" ino=4026533224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 286.223495][ T30] audit: type=1400 audit(1780951809.380:6311): avc: denied { read } for pid=9111 comm="syz.0.998" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 286.223531][ T30] audit: type=1400 audit(1780951809.380:6312): avc: denied { read } for pid=9111 comm="syz.0.998" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 288.041024][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 288.160819][ T9170] FAULT_INJECTION: forcing a failure. [ 288.160819][ T9170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.201176][ T9170] CPU: 1 UID: 0 PID: 9170 Comm: syz.5.1019 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.201207][ T9170] Tainted: [L]=SOFTLOCKUP [ 288.201212][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.201222][ T9170] Call Trace: [ 288.201228][ T9170] [ 288.201235][ T9170] dump_stack_lvl+0x100/0x190 [ 288.201260][ T9170] should_fail_ex.cold+0x5/0xa [ 288.201284][ T9170] _copy_from_user+0x2e/0xd0 [ 288.201306][ T9170] vt_ioctl+0xd6e/0x31a0 [ 288.201334][ T9170] ? __pfx_vt_ioctl+0x10/0x10 [ 288.201356][ T9170] ? find_held_lock+0x2b/0x80 [ 288.201386][ T9170] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 288.201409][ T9170] ? __pfx_vt_ioctl+0x10/0x10 [ 288.201433][ T9170] tty_ioctl+0x26a/0x1640 [ 288.201454][ T9170] ? __pfx_tty_ioctl+0x10/0x10 [ 288.201473][ T9170] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 288.201507][ T9170] ? __fget_files+0x215/0x3d0 [ 288.201528][ T9170] ? hook_file_ioctl_common+0x149/0x410 [ 288.201553][ T9170] ? selinux_file_ioctl+0x13b/0x290 [ 288.201578][ T9170] ? selinux_file_ioctl+0xb6/0x290 [ 288.201603][ T9170] ? __pfx_tty_ioctl+0x10/0x10 [ 288.201623][ T9170] __x64_sys_ioctl+0x18e/0x210 [ 288.201643][ T9170] do_syscall_64+0x115/0x870 [ 288.201665][ T9170] ? clear_bhb_loop+0x40/0x90 [ 288.201686][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.201709][ T9170] RIP: 0033:0x7fde8379ce59 [ 288.201724][ T9170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.201739][ T9170] RSP: 002b:00007fde84727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.201756][ T9170] RAX: ffffffffffffffda RBX: 00007fde83a15fa0 RCX: 00007fde8379ce59 [ 288.201767][ T9170] RDX: 0000200000000840 RSI: 0000000000004b72 RDI: 0000000000000003 [ 288.201777][ T9170] RBP: 00007fde84727090 R08: 0000000000000000 R09: 0000000000000000 [ 288.201787][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.201797][ T9170] R13: 00007fde83a16038 R14: 00007fde83a15fa0 R15: 00007ffe19f1dac8 [ 288.201819][ T9170] [ 288.295061][ T9173] Process accounting resumed [ 288.737651][ T9190] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1024'. [ 288.810714][ T9192] ±ÿÿÿòÿÿÿòÿÿ: renamed from lo (while UP) [ 288.964485][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1027'. [ 289.146343][ T9204] netlink: 'syz.4.1030': attribute type 1 has an invalid length. [ 289.154112][ T9204] netlink: 'syz.4.1030': attribute type 2 has an invalid length. [ 289.403841][ T9211] tls_set_device_offload_rx: netdev not found [ 290.905104][ T30] kauditd_printk_skb: 367 callbacks suppressed [ 290.905133][ T30] audit: type=1400 audit(1780951814.290:6680): avc: denied { mounton } for pid=9263 comm="syz.2.1054" path="/203/bus" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 290.935644][ T9264] FAULT_INJECTION: forcing a failure. [ 290.935644][ T9264] name failslab, interval 1, probability 0, space 0, times 0 [ 290.953671][ T9264] CPU: 0 UID: 0 PID: 9264 Comm: syz.2.1054 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.953701][ T9264] Tainted: [L]=SOFTLOCKUP [ 290.953706][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 290.953716][ T9264] Call Trace: [ 290.953721][ T9264] [ 290.953728][ T9264] dump_stack_lvl+0x100/0x190 [ 290.953754][ T9264] should_fail_ex.cold+0x5/0xa [ 290.953780][ T9264] should_failslab+0xc2/0x120 [ 290.953814][ T9264] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 290.953841][ T9264] ? __d_alloc+0x34/0xa40 [ 290.953870][ T9264] __d_alloc+0x34/0xa40 [ 290.953897][ T9264] d_alloc+0x4a/0x1e0 [ 290.953923][ T9264] lookup_one_qstr_excl+0x171/0x250 [ 290.953957][ T9264] ? mnt_want_write+0x161/0x450 [ 290.953979][ T9264] filename_create+0x1cf/0x400 [ 290.953998][ T9264] ? __pfx_filename_create+0x10/0x10 [ 290.954026][ T9264] filename_mknodat+0x190/0x7f0 [ 290.954054][ T9264] ? __pfx_filename_mknodat+0x10/0x10 [ 290.954077][ T9264] ? strncpy_from_user+0x19d/0x2d0 [ 290.954102][ T9264] ? do_getname+0x191/0x390 [ 290.954130][ T9264] __x64_sys_mknodat+0xb5/0xf0 [ 290.954159][ T9264] do_syscall_64+0x115/0x870 [ 290.954181][ T9264] ? clear_bhb_loop+0x40/0x90 [ 290.954202][ T9264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.954220][ T9264] RIP: 0033:0x7f31b779ce59 [ 290.954235][ T9264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.954251][ T9264] RSP: 002b:00007f31b85ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 290.954269][ T9264] RAX: ffffffffffffffda RBX: 00007f31b7a15fa0 RCX: 00007f31b779ce59 [ 290.954279][ T9264] RDX: 00000000000021c0 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 290.954290][ T9264] RBP: 00007f31b85ee090 R08: 0000000000000000 R09: 0000000000000000 [ 290.954299][ T9264] R10: 0000000000000103 R11: 0000000000000246 R12: 0000000000000001 [ 290.954308][ T9264] R13: 00007f31b7a16038 R14: 00007f31b7a15fa0 R15: 00007ffce088a4e8 [ 290.954330][ T9264] [ 291.172189][ T30] audit: type=1400 audit(1780951814.550:6681): avc: denied { execute } for pid=9265 comm="syz.5.1055" name="file0" dev="tmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 291.194352][ T30] audit: type=1400 audit(1780951814.560:6682): avc: denied { create } for pid=9265 comm="syz.5.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 291.213870][ T30] audit: type=1400 audit(1780951814.560:6683): avc: denied { map_create } for pid=9265 comm="syz.5.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 291.232949][ T30] audit: type=1400 audit(1780951814.560:6684): avc: denied { read } for pid=9265 comm="syz.5.1055" dev="nsfs" ino=4026532782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 291.286131][ T30] audit: type=1400 audit(1780951814.670:6685): avc: denied { execmem } for pid=9265 comm="syz.5.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 291.344851][ T30] audit: type=1400 audit(1780951814.730:6686): avc: denied { read write } for pid=5619 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 291.406851][ T30] audit: type=1400 audit(1780951814.790:6687): avc: denied { read write } for pid=5616 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 291.433050][ T30] audit: type=1400 audit(1780951814.790:6688): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 291.478647][ T30] audit: type=1400 audit(1780951814.860:6689): avc: denied { read write } for pid=9270 comm="syz.2.1056" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 291.512143][ T5617] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 291.512549][ T9275] FAULT_INJECTION: forcing a failure. [ 291.512549][ T9275] name failslab, interval 1, probability 0, space 0, times 0 [ 291.556922][ T9275] CPU: 1 UID: 0 PID: 9275 Comm: syz.0.1057 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.556952][ T9275] Tainted: [L]=SOFTLOCKUP [ 291.556959][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 291.556968][ T9275] Call Trace: [ 291.556974][ T9275] [ 291.556981][ T9275] dump_stack_lvl+0x100/0x190 [ 291.557007][ T9275] should_fail_ex.cold+0x5/0xa [ 291.557029][ T9275] ? tomoyo_encode2+0xfb/0x3c0 [ 291.557051][ T9275] should_failslab+0xc2/0x120 [ 291.557072][ T9275] __kmalloc_noprof+0xe0/0x850 [ 291.557099][ T9275] ? d_absolute_path+0x136/0x1b0 [ 291.557172][ T9275] tomoyo_encode2+0xfb/0x3c0 [ 291.557205][ T9275] tomoyo_encode+0x29/0x50 [ 291.557239][ T9275] tomoyo_realpath_from_path+0x18c/0x690 [ 291.557271][ T9275] tomoyo_path_number_perm+0x23c/0x580 [ 291.557293][ T9275] ? tomoyo_path_number_perm+0x22e/0x580 [ 291.557317][ T9275] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 291.557361][ T9275] ? find_held_lock+0x2b/0x80 [ 291.557378][ T9275] ? __fget_files+0x215/0x3d0 [ 291.557399][ T9275] ? hook_file_ioctl_common+0x149/0x410 [ 291.557417][ T9275] ? __fget_files+0x215/0x3d0 [ 291.557441][ T9275] ? __fget_files+0x21f/0x3d0 [ 291.557466][ T9275] security_file_ioctl+0xd3/0x230 [ 291.557492][ T9275] __x64_sys_ioctl+0xb7/0x210 [ 291.557513][ T9275] do_syscall_64+0x115/0x870 [ 291.557535][ T9275] ? clear_bhb_loop+0x40/0x90 [ 291.557556][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.557574][ T9275] RIP: 0033:0x7ff84ed9ce59 [ 291.557590][ T9275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.557606][ T9275] RSP: 002b:00007ff84fbfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 291.557624][ T9275] RAX: ffffffffffffffda RBX: 00007ff84f015fa0 RCX: 00007ff84ed9ce59 [ 291.557635][ T9275] RDX: 0000200000000040 RSI: 00000000a0044d07 RDI: 0000000000000003 [ 291.557645][ T9275] RBP: 00007ff84fbfc090 R08: 0000000000000000 R09: 0000000000000000 [ 291.557668][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.557678][ T9275] R13: 00007ff84f016038 R14: 00007ff84f015fa0 R15: 00007fff01fd71f8 [ 291.557701][ T9275] [ 291.557724][ T9275] ERROR: Out of memory at tomoyo_realpath_from_path. [ 292.572096][ T9299] futex_wake_op: syz.2.1067 tries to shift op by 144; fix this program [ 292.804776][ T9307] futex_wake_op: syz.0.1070 tries to shift op by 144; fix this program [ 292.867515][ T9308] FAULT_INJECTION: forcing a failure. [ 292.867515][ T9308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.883076][ T9308] CPU: 1 UID: 0 PID: 9308 Comm: syz.0.1070 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.883108][ T9308] Tainted: [L]=SOFTLOCKUP [ 292.883114][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.883123][ T9308] Call Trace: [ 292.883130][ T9308] [ 292.883136][ T9308] dump_stack_lvl+0x100/0x190 [ 292.883161][ T9308] should_fail_ex.cold+0x5/0xa [ 292.883185][ T9308] _copy_from_user+0x2e/0xd0 [ 292.883206][ T9308] memdup_user+0x6b/0xe0 [ 292.883224][ T9308] strndup_user+0x78/0xe0 [ 292.883241][ T9308] __x64_sys_mount+0x136/0x310 [ 292.883268][ T9308] ? __pfx___x64_sys_mount+0x10/0x10 [ 292.883294][ T9308] ? rcu_is_watching+0x12/0xc0 [ 292.883320][ T9308] do_syscall_64+0x115/0x870 [ 292.883342][ T9308] ? clear_bhb_loop+0x40/0x90 [ 292.883363][ T9308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.883379][ T9308] RIP: 0033:0x7ff84ed9ce59 [ 292.883394][ T9308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.883409][ T9308] RSP: 002b:00007ff84fbdb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 292.883426][ T9308] RAX: ffffffffffffffda RBX: 00007ff84f016090 RCX: 00007ff84ed9ce59 [ 292.883437][ T9308] RDX: 0000200000000080 RSI: 0000200000000100 RDI: 0000000000000000 [ 292.883446][ T9308] RBP: 00007ff84fbdb090 R08: 00002000000021c0 R09: 0000000000000000 [ 292.883456][ T9308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.883466][ T9308] R13: 00007ff84f016128 R14: 00007ff84f016090 R15: 00007fff01fd71f8 [ 292.883488][ T9308] [ 295.563768][ T5617] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 295.572877][ T5617] Bluetooth: hci3: Injecting HCI hardware error event [ 295.582314][ T50] Bluetooth: hci3: hardware error 0x00 [ 295.921168][ T30] kauditd_printk_skb: 370 callbacks suppressed [ 295.921186][ T30] audit: type=1400 audit(1780951819.300:7060): avc: denied { read write } for pid=9390 comm="syz.5.1102" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 296.015637][ T9394] CUSE: unknown device info "" [ 296.030565][ T9394] CUSE: unknown device info "" [ 296.045657][ T30] audit: type=1400 audit(1780951819.340:7061): avc: denied { mounton } for pid=9390 comm="syz.5.1102" path="/171/file0" dev="tmpfs" ino=903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 296.069798][ T9394] CUSE: unknown device info "" [ 296.113702][ T9394] CUSE: unknown device info "" [ 296.133958][ T9394] CUSE: unknown device info "ÿ" [ 296.143436][ T30] audit: type=1400 audit(1780951819.340:7062): avc: denied { mounton } for pid=9390 comm="syz.5.1102" path="/171/bus" dev="tmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 296.172205][ T9394] CUSE: unknown device info "" [ 296.185065][ T9394] CUSE: unknown device info "" [ 296.212036][ T9394] CUSE: unknown device info "ÿ" [ 296.234307][ T9394] CUSE: DEVNAME unspecified [ 296.242699][ T30] audit: type=1400 audit(1780951819.340:7063): avc: denied { prog_load } for pid=9390 comm="syz.5.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 296.294677][ T30] audit: type=1400 audit(1780951819.520:7064): avc: denied { read write } for pid=5619 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 296.345150][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'. [ 296.351188][ T30] audit: type=1400 audit(1780951819.560:7065): avc: denied { execmem } for pid=9397 comm="syz.2.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 296.412479][ T30] audit: type=1400 audit(1780951819.620:7066): avc: denied { create } for pid=9397 comm="syz.2.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 296.470450][ T30] audit: type=1400 audit(1780951819.620:7067): avc: denied { create } for pid=9397 comm="syz.2.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 296.529447][ T30] audit: type=1400 audit(1780951819.720:7068): avc: denied { map_create } for pid=9400 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 296.587886][ T30] audit: type=1400 audit(1780951819.720:7069): avc: denied { create } for pid=9400 comm="syz.0.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 297.102082][ T9410] netlink: 'syz.3.1108': attribute type 10 has an invalid length. [ 297.120282][ T9410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1108'. [ 297.142486][ T9410] bridge0: port 3(veth1_macvtap) entered blocking state [ 297.157272][ T9410] bridge0: port 3(veth1_macvtap) entered disabled state [ 297.183078][ T9410] veth1_macvtap: entered allmulticast mode [ 297.217484][ T9410] veth1_macvtap: left allmulticast mode [ 297.254184][ T9410] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 297.640981][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 298.428201][ T9438] CUSE: unknown device info "" [ 298.445265][ T9438] CUSE: unknown device info "" [ 298.489762][ T9438] CUSE: unknown device info "" [ 298.526672][ T9440] ip6gre1: entered promiscuous mode [ 298.547339][ T9438] CUSE: unknown device info "" [ 298.547359][ T9440] ip6gre1: entered allmulticast mode [ 298.580676][ T9438] CUSE: unknown device info "ÿ" [ 298.595739][ T9438] CUSE: unknown device info "" [ 298.609351][ T9438] CUSE: unknown device info "" [ 298.662007][ T9438] CUSE: unknown device info "ÿ" [ 298.691917][ T9438] CUSE: DEVNAME unspecified [ 298.859173][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1121'. [ 299.008541][ T9446] netlink: 'syz.0.1122': attribute type 25 has an invalid length. [ 299.039528][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 299.086089][ T9446] netlink: 'syz.0.1122': attribute type 25 has an invalid length. [ 299.131012][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 299.487559][ T9466] netlink: 'syz.2.1129': attribute type 10 has an invalid length. [ 299.506446][ T9466] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1129'. [ 299.524049][ T9466] bridge0: port 3(veth1_macvtap) entered blocking state [ 299.531881][ T9466] bridge0: port 3(veth1_macvtap) entered disabled state [ 299.542023][ T9466] veth1_macvtap: entered allmulticast mode [ 299.622890][ T9466] veth1_macvtap: left allmulticast mode [ 299.638832][ T9466] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 300.295430][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1134'. [ 301.030617][ T30] kauditd_printk_skb: 312 callbacks suppressed [ 301.030647][ T30] audit: type=1400 audit(1780951824.410:7382): avc: denied { read write } for pid=6929 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.068619][ T30] audit: type=1400 audit(1780951824.450:7383): avc: denied { read } for pid=9491 comm="syz.2.1139" dev="nsfs" ino=4026533224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 301.096798][ T30] audit: type=1400 audit(1780951824.480:7384): avc: denied { read } for pid=9496 comm="syz.5.1141" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 301.120128][ T30] audit: type=1400 audit(1780951824.500:7385): avc: denied { read } for pid=9496 comm="syz.5.1141" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 301.142900][ T30] audit: type=1400 audit(1780951824.520:7386): avc: denied { prog_load } for pid=9496 comm="syz.5.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 301.188775][ T30] audit: type=1400 audit(1780951824.570:7387): avc: denied { read write } for pid=6929 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.245740][ T30] audit: type=1400 audit(1780951824.600:7388): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 301.284515][ T30] audit: type=1400 audit(1780951824.670:7389): avc: denied { read write } for pid=9499 comm="syz.5.1142" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 301.341616][ T30] audit: type=1400 audit(1780951824.700:7390): avc: denied { read } for pid=9498 comm="syz.3.1143" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 301.366892][ T30] audit: type=1400 audit(1780951824.700:7391): avc: denied { read write } for pid=9498 comm="syz.3.1143" name="video7" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 301.606893][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'. [ 301.962672][ T9527] Cannot find set identified by id 0 to match [ 302.017699][ T9527] netlink: 'syz.2.1152': attribute type 8 has an invalid length. [ 302.593071][ T9540] ceph: No mds server is up or the cluster is laggy [ 302.676583][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 304.008088][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 304.119624][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1174'. [ 304.142009][ T9589] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.167851][ T9589] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 304.224105][ T9591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9591 comm=syz.3.1175 [ 305.063043][ T9615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1185'. [ 305.219486][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1187'. [ 306.031481][ T9635] IPVS: ip_vs_add_dest(): server weight less than zero [ 306.073043][ T9635] netlink: 'syz.3.1192': attribute type 25 has an invalid length. [ 306.102370][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'. [ 306.112758][ T30] kauditd_printk_skb: 312 callbacks suppressed [ 306.112774][ T30] audit: type=1400 audit(1780951829.490:7704): avc: denied { allowed } for pid=9636 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 306.152819][ T9635] netlink: 'syz.3.1192': attribute type 25 has an invalid length. [ 306.172608][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'. [ 306.190736][ T30] audit: type=1400 audit(1780951829.530:7705): avc: denied { read } for pid=9637 comm="syz.4.1194" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 306.243521][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'. [ 306.261002][ T30] audit: type=1400 audit(1780951829.530:7706): avc: denied { map_create } for pid=9637 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 306.293540][ T9639] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.320757][ T30] audit: type=1400 audit(1780951829.530:7707): avc: denied { prog_load } for pid=9637 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 306.347986][ T9639] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 306.398828][ T30] audit: type=1400 audit(1780951829.570:7708): avc: denied { create } for pid=9637 comm="syz.4.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=0 [ 306.458184][ T30] audit: type=1400 audit(1780951829.620:7709): avc: denied { read write } for pid=9636 comm="syz.2.1193" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 306.519346][ T30] audit: type=1400 audit(1780951829.620:7710): avc: denied { read } for pid=9636 comm="syz.2.1193" dev="nsfs" ino=4026533224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 306.590997][ T30] audit: type=1400 audit(1780951829.730:7711): avc: denied { read write } for pid=9636 comm="syz.2.1193" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 306.674301][ T30] audit: type=1400 audit(1780951829.730:7712): avc: denied { read write } for pid=9636 comm="syz.2.1193" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 306.732684][ T30] audit: type=1400 audit(1780951829.810:7713): avc: denied { create } for pid=9636 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 306.993883][ T9656] FAULT_INJECTION: forcing a failure. [ 306.993883][ T9656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.024843][ T9656] CPU: 1 UID: 0 PID: 9656 Comm: syz.0.1197 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.024871][ T9656] Tainted: [L]=SOFTLOCKUP [ 307.024876][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 307.024886][ T9656] Call Trace: [ 307.024891][ T9656] [ 307.024898][ T9656] dump_stack_lvl+0x100/0x190 [ 307.024924][ T9656] should_fail_ex.cold+0x5/0xa [ 307.024947][ T9656] _copy_from_user+0x2e/0xd0 [ 307.024969][ T9656] kstrtouint_from_user+0xd6/0x1d0 [ 307.024995][ T9656] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 307.025018][ T9656] ? __lock_acquire+0x4a5/0x2630 [ 307.025042][ T9656] ? lock_acquire+0x1b1/0x370 [ 307.025066][ T9656] proc_fail_nth_write+0x83/0x220 [ 307.025087][ T9656] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 307.025112][ T9656] vfs_write+0x2aa/0x1070 [ 307.025134][ T9656] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 307.025155][ T9656] ? __pfx_vfs_write+0x10/0x10 [ 307.025173][ T9656] ? __fget_files+0x215/0x3d0 [ 307.025201][ T9656] ? __fget_files+0x21f/0x3d0 [ 307.025229][ T9656] ksys_write+0x12a/0x250 [ 307.025248][ T9656] ? __pfx_ksys_write+0x10/0x10 [ 307.025269][ T9656] ? rcu_is_watching+0x12/0xc0 [ 307.025298][ T9656] do_syscall_64+0x115/0x870 [ 307.025320][ T9656] ? clear_bhb_loop+0x40/0x90 [ 307.025341][ T9656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.025359][ T9656] RIP: 0033:0x7ff84ed5d68e [ 307.025375][ T9656] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 307.025390][ T9656] RSP: 002b:00007ff84fbdafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 307.025408][ T9656] RAX: ffffffffffffffda RBX: 00007ff84fbdb6c0 RCX: 00007ff84ed5d68e [ 307.025419][ T9656] RDX: 0000000000000001 RSI: 00007ff84fbdb0a0 RDI: 000000000000000a [ 307.025428][ T9656] RBP: 00007ff84fbdb090 R08: 0000000000000000 R09: 0000000000000000 [ 307.025445][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.025455][ T9656] R13: 00007ff84f016128 R14: 00007ff84f016090 R15: 00007fff01fd71f8 [ 307.025479][ T9656] [ 307.253875][ T9658] netlink: 'syz.2.1200': attribute type 25 has an invalid length. [ 307.261780][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 308.454886][ T9687] FAULT_INJECTION: forcing a failure. [ 308.454886][ T9687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.525169][ T9689] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1211'. [ 308.555426][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'. [ 308.593768][ T9687] CPU: 1 UID: 0 PID: 9687 Comm: syz.5.1208 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.593795][ T9687] Tainted: [L]=SOFTLOCKUP [ 308.593801][ T9687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 308.593808][ T9687] Call Trace: [ 308.593812][ T9687] [ 308.593817][ T9687] dump_stack_lvl+0x100/0x190 [ 308.593834][ T9687] should_fail_ex.cold+0x5/0xa [ 308.593850][ T9687] _copy_to_user+0x32/0xd0 [ 308.593866][ T9687] simple_read_from_buffer+0xcb/0x170 [ 308.593882][ T9687] proc_fail_nth_read+0x1af/0x230 [ 308.593894][ T9687] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.593907][ T9687] ? rw_verify_area+0xce/0x6d0 [ 308.593918][ T9687] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 308.593930][ T9687] vfs_read+0x1e4/0xb30 [ 308.593943][ T9687] ? __pfx_vfs_read+0x10/0x10 [ 308.593954][ T9687] ? __fget_files+0x215/0x3d0 [ 308.593971][ T9687] ? __fget_files+0x21f/0x3d0 [ 308.593989][ T9687] ksys_read+0x12a/0x250 [ 308.594005][ T9687] ? __pfx_ksys_read+0x10/0x10 [ 308.594019][ T9687] ? rcu_is_watching+0x12/0xc0 [ 308.594037][ T9687] do_syscall_64+0x115/0x870 [ 308.594056][ T9687] ? clear_bhb_loop+0x40/0x90 [ 308.594078][ T9687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.594095][ T9687] RIP: 0033:0x7fde8375d68e [ 308.594110][ T9687] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 308.594126][ T9687] RSP: 002b:00007fde84705fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.594144][ T9687] RAX: ffffffffffffffda RBX: 00007fde847066c0 RCX: 00007fde8375d68e [ 308.594155][ T9687] RDX: 000000000000000f RSI: 00007fde847060a0 RDI: 0000000000000005 [ 308.594164][ T9687] RBP: 00007fde84706090 R08: 0000000000000000 R09: 0000000000000000 [ 308.594174][ T9687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.594184][ T9687] R13: 00007fde83a16128 R14: 00007fde83a16090 R15: 00007ffe19f1dac8 [ 308.594207][ T9687] [ 310.405786][ T9732] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1226'. [ 310.638786][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1231'. [ 310.668411][ T9742] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.698559][ T9742] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 311.124054][ T30] kauditd_printk_skb: 204 callbacks suppressed [ 311.124084][ T30] audit: type=1400 audit(1780951834.510:7918): avc: denied { map_create } for pid=9755 comm="syz.3.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 311.188713][ T30] audit: type=1400 audit(1780951834.510:7919): avc: denied { prog_load } for pid=9755 comm="syz.3.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 311.245880][ T30] audit: type=1400 audit(1780951834.630:7920): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 311.303887][ T30] audit: type=1400 audit(1780951834.690:7921): avc: denied { create } for pid=9757 comm="syz.3.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 311.394721][ T30] audit: type=1400 audit(1780951834.770:7922): avc: denied { read write } for pid=6929 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 311.467865][ T30] audit: type=1400 audit(1780951834.810:7923): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 311.510564][ T30] audit: type=1400 audit(1780951834.830:7924): avc: denied { create } for pid=9759 comm="syz.5.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 311.576737][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.584698][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.615002][ T30] audit: type=1400 audit(1780951834.830:7925): avc: denied { create } for pid=9759 comm="syz.5.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 311.649739][ T30] audit: type=1400 audit(1780951834.830:7926): avc: denied { prog_load } for pid=9759 comm="syz.5.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 311.687954][ T30] audit: type=1400 audit(1780951834.830:7927): avc: denied { read write } for pid=9759 comm="syz.5.1238" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 312.768414][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1248'. [ 313.737684][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1254'. [ 315.454557][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 315.474145][ T9829] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.488847][ T9829] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 316.067429][ T9841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9841 comm=syz.0.1269 [ 316.159919][ T9847] 8021q: VLANs not supported on wg0 [ 316.182576][ T30] kauditd_printk_skb: 198 callbacks suppressed [ 316.182596][ T30] audit: type=1400 audit(1780951839.560:8126): avc: denied { read write } for pid=5619 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 316.241346][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1271'. [ 316.250686][ T30] audit: type=1400 audit(1780951839.570:8127): avc: denied { read write } for pid=5615 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 316.276875][ T30] audit: type=1400 audit(1780951839.620:8128): avc: denied { map_create } for pid=9848 comm="syz.3.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.341901][ T30] audit: type=1400 audit(1780951839.620:8129): avc: denied { create } for pid=9848 comm="syz.3.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 316.365582][ T30] audit: type=1400 audit(1780951839.620:8130): avc: denied { prog_load } for pid=9848 comm="syz.3.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.432378][ T30] audit: type=1400 audit(1780951839.620:8131): avc: denied { module_request } for pid=9848 comm="syz.3.1271" kmod="netdev-veth1_to_hsr" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 316.478444][ T30] audit: type=1400 audit(1780951839.620:8132): avc: denied { sys_module } for pid=9848 comm="syz.3.1271" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 316.530250][ T50] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 316.533455][ T30] audit: type=1400 audit(1780951839.620:8133): avc: denied { prog_load } for pid=9848 comm="syz.3.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.564010][ T30] audit: type=1400 audit(1780951839.620:8134): avc: denied { prog_load } for pid=9848 comm="syz.3.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.587720][ T30] audit: type=1400 audit(1780951839.620:8135): avc: denied { read write } for pid=9848 comm="syz.3.1271" name="video3" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 316.822806][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1272'. [ 316.850966][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1272'. [ 317.258475][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1279'. [ 317.369069][ T50] Bluetooth: Unexpected continuation frame (len 16) [ 317.945883][ T9888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 318.029445][ T50] Bluetooth: hci2: unexpected event for opcode 0x0004 [ 319.026598][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1294'. [ 319.058434][ T9912] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.096629][ T9912] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 319.823537][ T9924] vlan2: entered promiscuous mode [ 319.830820][ T9924] bridge0: entered promiscuous mode [ 320.438552][ T9944] trusted_key: encrypted_key: insufficient parameters specified [ 320.502490][ T9944] trusted_key: encrypted_key: insufficient parameters specified [ 320.567674][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1308'. [ 320.591532][ T9951] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.603894][ T9951] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 321.192063][ T30] kauditd_printk_skb: 238 callbacks suppressed [ 321.192093][ T30] audit: type=1400 audit(1780951844.580:8374): avc: denied { create } for pid=9955 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 321.245057][ T30] audit: type=1400 audit(1780951844.610:8375): avc: denied { create } for pid=9955 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 321.275134][ T30] audit: type=1400 audit(1780951844.610:8376): avc: denied { create } for pid=9955 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 321.275203][ T30] audit: type=1400 audit(1780951844.610:8377): avc: denied { map_create } for pid=9955 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 321.275265][ T30] audit: type=1400 audit(1780951844.610:8378): avc: denied { map_create } for pid=9955 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 321.275397][ T30] audit: type=1400 audit(1780951844.610:8379): avc: denied { map_create } for pid=9955 comm="syz.2.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 321.275458][ T30] audit: type=1400 audit(1780951844.630:8380): avc: denied { read write } for pid=6929 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 321.275521][ T30] audit: type=1400 audit(1780951844.650:8381): avc: denied { read } for pid=9955 comm="syz.2.1311" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 321.275571][ T30] audit: type=1400 audit(1780951844.660:8382): avc: denied { read write } for pid=5616 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 321.339615][ T30] audit: type=1400 audit(1780951844.730:8383): avc: denied { read } for pid=9957 comm="syz.5.1312" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 426.799268][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 426.806239][ C1] rcu: 0-...!: (1 GPs behind) idle=8b4c/1/0x4000000000000000 softirq=38615/38616 fqs=1 [ 426.816655][ C1] rcu: (detected by 1, t=10502 jiffies, g=43789, q=432 ncpus=2) [ 426.824368][ C1] Sending NMI from CPU 1 to CPUs 0: [ 426.824393][ C0] NMI backtrace for cpu 0 [ 426.824407][ C0] CPU: 0 UID: 0 PID: 5807 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.824425][ C0] Tainted: [L]=SOFTLOCKUP [ 426.824430][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 426.824439][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 426.824460][ C0] RIP: 0010:match_held_lock+0x0/0xb0 [ 426.824479][ C0] Code: d2 01 8e e8 42 ce 98 f5 e8 fd 54 eb f5 e8 a8 50 5e f6 90 31 db eb b6 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <53> 48 89 fb 48 39 77 10 74 72 66 83 7f 22 1f 76 63 48 8b 46 08 48 [ 426.824492][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00000093 [ 426.824503][ C0] RAX: 0000000000000000 RBX: ffff88805e7d72c0 RCX: 0000000000000001 [ 426.824511][ C0] RDX: 0000000000000000 RSI: ffff88805e7d72c0 RDI: ffff8880325b8bb8 [ 426.824520][ C0] RBP: ffff8880325b8000 R08: 0000000000000005 R09: 0000000000000000 [ 426.824528][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 426.824536][ C0] R13: 0000000000000046 R14: ffff8880325b8bb8 R15: 0000000000000001 [ 426.824544][ C0] FS: 0000000000000000(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 426.824557][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 426.824565][ C0] CR2: 00007ff84ee4f156 CR3: 0000000084f4f000 CR4: 00000000003526f0 [ 426.824574][ C0] Call Trace: [ 426.824580][ C0] [ 426.824584][ C0] lock_is_held_type+0x9d/0x140 [ 426.824602][ C0] advance_sched+0x838/0xd20 [ 426.824621][ C0] ? find_held_lock+0x2b/0x80 [ 426.824635][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 426.824651][ C0] ? __pfx_advance_sched+0x10/0x10 [ 426.824669][ C0] __hrtimer_run_queues+0x470/0xa00 [ 426.824691][ C0] hrtimer_interrupt+0x3e5/0x940 [ 426.824714][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 426.824733][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 426.824748][ C0] [ 426.824753][ C0] [ 426.824757][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 426.824772][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 426.824787][ C0] Code: 05 fb 03 25 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 06 8e f2 0e 0f 82 a4 02 00 00 8b 35 8e c1 f2 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 03 25 12 0f 85 ed 02 00 00 48 83 c4 [ 426.824800][ C0] RSP: 0018:ffffc90004fd7b70 EFLAGS: 00000206 [ 426.824810][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000002 [ 426.824818][ C0] RDX: 0000000000000000 RSI: ffffffff8deea69a RDI: ffffffff8c1c4780 [ 426.824826][ C0] RBP: ffffffff8f970d18 R08: 000000007f7d7e8a R09: 00000000000007c8 [ 426.824835][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 426.824843][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 426.824856][ C0] ? __pfx___might_resched+0x10/0x10 [ 426.824875][ C0] _raw_spin_lock+0x2e/0x40 [ 426.824889][ C0] ? wg_ratelimiter_gc_entries+0x62/0x510 [ 426.824902][ C0] wg_ratelimiter_gc_entries+0x62/0x510 [ 426.824917][ C0] process_one_work+0xa0e/0x1980 [ 426.824937][ C0] ? __pfx_process_one_work+0x10/0x10 [ 426.824955][ C0] ? __pfx_wg_ratelimiter_gc_entries+0x10/0x10 [ 426.824975][ C0] worker_thread+0x5ef/0xe50 [ 426.824993][ C0] ? __pfx_worker_thread+0x10/0x10 [ 426.825009][ C0] ? kthread+0x13a/0x450 [ 426.825023][ C0] ? __pfx_worker_thread+0x10/0x10 [ 426.825037][ C0] kthread+0x370/0x450 [ 426.825051][ C0] ? __pfx_kthread+0x10/0x10 [ 426.825065][ C0] ret_from_fork+0x72b/0xd50 [ 426.825082][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 426.825098][ C0] ? __switch_to+0x800/0x1100 [ 426.825116][ C0] ? __pfx_kthread+0x10/0x10 [ 426.825129][ C0] ret_from_fork_asm+0x1a/0x30 [ 426.825152][ C0] [ 426.825387][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g43789 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 427.198434][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 427.208396][ C1] rcu: RCU grace-period kthread stack dump: [ 427.214266][ C1] task:rcu_preempt state:R running task stack:27992 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 427.227763][ C1] Call Trace: [ 427.231032][ C1] [ 427.233956][ C1] __schedule+0x1295/0x67a0 [ 427.238493][ C1] ? __pfx___schedule+0x10/0x10 [ 427.243336][ C1] ? find_held_lock+0x2b/0x80 [ 427.248005][ C1] ? schedule+0x2bf/0x390 [ 427.252328][ C1] schedule+0xdd/0x390 [ 427.256389][ C1] schedule_timeout+0x127/0x280 [ 427.261231][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 427.266591][ C1] ? __pfx_process_timeout+0x10/0x10 [ 427.271869][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 427.277669][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 427.283126][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 427.287889][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 427.293168][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 427.298097][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 427.303289][ C1] rcu_gp_kthread+0x179/0x230 [ 427.307959][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 427.313150][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 427.318952][ C1] ? __kthread_parkme+0x18c/0x230 [ 427.323977][ C1] ? kthread+0x13a/0x450 [ 427.328211][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 427.333414][ C1] kthread+0x370/0x450 [ 427.337499][ C1] ? __pfx_kthread+0x10/0x10 [ 427.342093][ C1] ret_from_fork+0x72b/0xd50 [ 427.346684][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 427.351800][ C1] ? __switch_to+0x800/0x1100 [ 427.356474][ C1] ? __pfx_kthread+0x10/0x10 [ 427.361060][ C1] ret_from_fork_asm+0x1a/0x30 [ 427.365833][ C1] [ 427.368839][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 427.375149][ C1] CPU: 1 UID: 0 PID: 9972 Comm: syz.0.1317 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.385986][ C1] Tainted: [L]=SOFTLOCKUP [ 427.390294][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 427.400334][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1700 [ 427.407003][ C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 a9 83 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 ff 83 e0 01 41 [ 427.426597][ C1] RSP: 0018:ffffc900056ef8a8 EFLAGS: 00000293 [ 427.432655][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc2dfd [ 427.440621][ C1] RDX: ffff888033454a80 RSI: ffffffff81fc2dd7 RDI: ffff888033454a80 [ 427.448578][ C1] RBP: ffff8880b8443560 R08: 0000000000000005 R09: 0000000000000000 [ 427.456540][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 427.464495][ C1] R13: ffffed10170886ad R14: 0000000000000001 R15: ffff8880b853c800 [ 427.472458][ C1] FS: 0000000000000000(0000) GS:ffff888124487000(0000) knlGS:0000000000000000 [ 427.481382][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.487958][ C1] CR2: 000000110c398aba CR3: 000000005c73e000 CR4: 00000000003526f0 [ 427.495920][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 427.503875][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 427.511836][ C1] Call Trace: [ 427.515102][ C1] [ 427.518024][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 427.523221][ C1] ? free_pgd_range+0x2a0/0x10d0 [ 427.528150][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 427.534487][ C1] ? rcu_is_watching+0x12/0xc0 [ 427.539254][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 427.544444][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 427.549563][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 427.554673][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 427.559779][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 427.565324][ C1] tlb_finish_mmu+0x3fe/0x810 [ 427.569999][ C1] exit_mmap+0x454/0xa10 [ 427.574237][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 427.579014][ C1] ? trace_contention_end+0x122/0x170 [ 427.584385][ C1] ? uprobe_clear_state+0x5f/0x260 [ 427.589492][ C1] ? uprobe_clear_state+0x5f/0x260 [ 427.594613][ C1] ? __lock_acquire+0x4a5/0x2630 [ 427.599554][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 427.605185][ C1] __mmput+0x12a/0x410 [ 427.609254][ C1] mmput+0x67/0x80 [ 427.612969][ C1] do_exit+0x8b2/0x2af0 [ 427.617116][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 427.622488][ C1] ? __pfx_do_exit+0x10/0x10 [ 427.627069][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 427.632443][ C1] do_group_exit+0xd5/0x2a0 [ 427.636955][ C1] __x64_sys_exit_group+0x3e/0x50 [ 427.642001][ C1] x64_sys_call+0x102c/0x1530 [ 427.646697][ C1] do_syscall_64+0x115/0x870 [ 427.651304][ C1] ? clear_bhb_loop+0x40/0x90 [ 427.655977][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.661862][ C1] RIP: 0033:0x7ff84ed9ce59 [ 427.666269][ C1] Code: Unable to access opcode bytes at 0x7ff84ed9ce2f. [ 427.673271][ C1] RSP: 002b:00007fff01fd7538 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 427.681675][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff84ed9ce59 [ 427.689636][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 427.697594][ C1] RBP: 00007fff01fd759c R08: 0000000000000000 R09: 00000000000927c0 [ 427.705558][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000010f [ 427.713516][ C1] R13: 00000000000927c0 R14: 000000000004e888 R15: 00007fff01fd75f0 [ 427.721510][ C1]