last executing test programs: 22m2.707212828s ago: executing program 32 (id=233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x2, 0x2}, [{0x8, 0x4}], {0x2}, {0x2}}, 0x2c, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x2) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x50000) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0xc0001, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000380)=0x15) ioctl$TCSETS(r4, 0x40384708, &(0x7f00000003c0)={0x4, 0x7, 0xe, 0x5, 0x1, "0000000100"}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x465, 0x0, 0x8, 0x4, 0x0, @broadcast, @empty}}}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="85000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) listen(r5, 0xfff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a05000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 13m38.432664267s ago: executing program 1 (id=1120): waitid(0x1, 0x0, 0x0, 0x1000008, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000080)={0x40, 0x9}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x44}}, 0x8000) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x3, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4c050) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640), 0x5c}, 0x123) socket$inet_tcp(0x2, 0x1, 0x0) inotify_init() openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1c3040, 0x0) open$dir(0x0, 0x0, 0x0) r3 = open$dir(&(0x7f0000000400)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f0000000540)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000640)={0x1f, @none}, 0x8) listen(r5, 0x3) 13m31.922302919s ago: executing program 5 (id=1129): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000000380)=""/102392, 0x18ff8) set_mempolicy(0x6, &(0x7f00000193c0)=0x8000000000000001, 0xe0) mkdirat(0xffffffffffffff9c, &(0x7f0000019400)='./mnt\x00', 0x1ff) r6 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000019440)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f00000194c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f00000198c0)={r7, 0x9, 0x1, [0x7ff, 0xe1, 0x1f9, 0x10000, 0x100000000], [0x2, 0x7, 0x8, 0x3, 0x3, 0x100, 0xbe2e, 0x7, 0x2, 0xfffffffffffffffe, 0x8, 0x7, 0x8, 0x4, 0x2ed1, 0x8, 0x58d7, 0x3, 0x5, 0x7, 0x4, 0xfffffffffffffff7, 0x7d, 0x31cdef52, 0x7, 0x40, 0x6, 0xfffffffffffff000, 0x3, 0xff, 0x1, 0x8, 0x0, 0x696, 0x7, 0x7bee, 0x7, 0x5, 0x3, 0x3, 0xfffffffffffffd0e, 0x9, 0x8, 0x3709, 0xf991, 0x9, 0x3, 0xffffffffffffff6d, 0x8, 0x1, 0x5, 0x3, 0x2, 0xffffffffffffffff, 0xff, 0x8ae1, 0x9, 0x7, 0x52ea, 0x4, 0x6, 0x1ff, 0x6, 0x401, 0x7, 0x400, 0x7, 0x2, 0x602af74b, 0x1, 0x7, 0x9, 0x6, 0xd, 0x8789, 0x7, 0x8, 0x0, 0x2, 0xfffffffffffff7b6, 0x3, 0x7ea, 0x800, 0xfffffffffffffff7, 0x5d1, 0x7fffffffffffffff, 0x6, 0x7, 0x0, 0x401, 0x2, 0x7, 0x3ff, 0x7, 0x80000001, 0x3, 0x3, 0x2, 0xd, 0x10, 0x6, 0x8, 0x8, 0x6, 0x2, 0x9, 0x1, 0x3, 0x7, 0x7fffffff, 0x56b, 0x7fff, 0x8000, 0x7, 0x5, 0x6, 0x3, 0x400, 0xffffffffffffff7f, 0x7f, 0x6]}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000019d00)={0x10, 0x1}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000019d40)={0x10}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x5001}) 13m30.716150846s ago: executing program 5 (id=1130): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f00000000000000000000000000002000000010270000050000001000000010000000e8030000e80300a700200000000000000000000014000000110001"], 0x128}}, 0x40) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) faccessat2(r2, &(0x7f00000001c0)='./file0\x00', 0x80, 0x1200) r3 = fsopen(&(0x7f0000000200)='proc\x00', 0x1) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@multiplanar_userptr={0x8d, 0x3, 0x4, 0x800, 0x0, {}, {0xa, 0x1, 0x6, 0xd, 0x6, 0x81, "d6715897"}, 0x0, 0x2, {&(0x7f00000002c0)=[{0x6, 0x56, {0x0}}, {0x5, 0x88f6506a, {0x0}, 0x2c9}]}, 0x3, 0x0, r4}) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) 13m23.762328169s ago: executing program 1 (id=1136): syz_socket_connect_nvme_tcp() r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi2\x00', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000480)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000004c0)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000500)={0x3, 0x0, [{0x10000, 0x82, &(0x7f0000000580)=""/130}, {0x2000, 0xee, &(0x7f0000000640)=""/238}, {0xd000, 0xf7, &(0x7f0000000740)=""/247}]}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000840)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000880)=""/61, 0x58000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='net/vlan/vlan0\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000940), 0x111}}, 0x20) exit(0x5) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000980)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000009c0)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x84, 0x0, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x8, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x9, 0x1, 0x4]}) ppoll(&(0x7f00000003c0)=[{r0, 0x80}], 0x1, &(0x7f0000000400), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c00000016"], 0xfc}}, 0x0) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbbbbbbbbbbbbb88a84d008100660008"], 0x36) 13m18.905170747s ago: executing program 1 (id=1140): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = socket$kcm(0xa, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'lblc\x00', 0x1d, 0x80002, 0x64}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e23, 0xdac098b1337ed02a, 0xcd, 0x4}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 13m18.814286338s ago: executing program 5 (id=1141): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0x64810887, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0xb3f97f6c43c4fec6, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002300)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000043c0)={0x20, 0x0, 0xfffffffffffffffe, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000006440), 0x2, 0x141102) writev(r1, &(0x7f0000006480)=[{&(0x7f00000064c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006580)={&(0x7f00000065c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000006600)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x48) socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000006640)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f00000066c0)={&(0x7f0000006700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000006780)={0x0, 0x0, &(0x7f00000067c0)={&(0x7f0000006800)=ANY=[@ANYBLOB="140000001000010000000000000000000500001f5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b0001006e756d67656e00001c0002800800024000000002080001400080001308000340000000010900020073797a3200000000140000001100010000000000000000000500000a"], 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000068c0)={0x0, 0x0, &(0x7f00000069c0), &(0x7f0000006a00), 0xfff, r3, 0x0, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) socket(0x2, 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0\x00', 0x22001, 0xa) syz_fuse_handle_req(r0, &(0x7f0000004440)="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", 0x2000, &(0x7f0000006900)={&(0x7f0000006500)={0x50, 0xffffffffffffffda, 0x20000000000002, {0x7, 0x2d, 0xa, 0x200000, 0x3, 0x2005, 0x8, 0x2000b, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r6, 0x6700000000000000) 13m15.090379184s ago: executing program 1 (id=1144): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x200000000000013f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000aabb86dd0000040002800c0caa80080011800400b48000"/46], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = io_uring_setup(0xf06, &(0x7f0000000500)={0x0, 0xefa6, 0x2000, 0x43, 0x8015d}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) read$FUSE(r2, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffd24) unshare(0x60600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000002640)={0x7, 0x24, 0x9, 0x0, 0x7fff}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x6, &(0x7f0000002680)=0xa636, 0x9, 0x0) r5 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) r7 = openat$cgroup(r6, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000002c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000300)=0x1, 0x12) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ffd000/0x2000)=nil, 0x3) splice(r4, 0xffffffffffffffff, r4, 0x0, 0x6, 0xa) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000002740), 0x0) accept4(r9, 0x0, 0x0, 0x800) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x3, 0x5004) epoll_create1(0x80000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000002780)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x40000000000002ed, 0x1c0800}) 13m14.855487679s ago: executing program 5 (id=1145): r0 = syz_socket_connect_nvme_tcp() r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi2\x00', 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000480)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000004c0)={0x1, r3}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000500)={0x3, 0x0, [{0x10000, 0x82, &(0x7f0000000580)=""/130}, {0x2000, 0xee, &(0x7f0000000640)=""/238}, {0xd000, 0xf7, &(0x7f0000000740)=""/247}]}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000840)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000880)=""/61, 0x58000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000008c0)='net/vlan/vlan0\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000940), 0x111}}, 0x20) exit(0x5) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000980)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000009c0)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x84, 0x0, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x1, 0x8002, 0x1000, 0x1007, 0xc72d, 0x8, 0xffffffff, 0x2009, 0x8, 0x4ce, 0xfffffffe, 0xfc, 0xed, 0x6, 0x8, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x20002f, 0xaf, 0x0, 0x9, 0x1, 0x4]}) ppoll(&(0x7f00000003c0)=[{r1, 0x80}], 0x1, &(0x7f0000000400), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bind$xdp(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfc}}, 0x0) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbbbbbbbbbbbbb88a84d008100660008"], 0x36) close(r0) 13m8.538075878s ago: executing program 5 (id=1149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000900)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f000001a800), 0x4000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f000001a840)='task\x00') getdents64(r5, &(0x7f000001a880)=""/83, 0x53) getdents(r5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 13m5.607875035s ago: executing program 5 (id=1151): waitid(0x1, 0x0, 0x0, 0x1000008, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000080)={0x40, 0x9}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x44}}, 0x8000) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x3, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4c050) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640), 0x5c}, 0x123) socket$inet_tcp(0x2, 0x1, 0x0) inotify_init() openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1c3040, 0x0) open$dir(0x0, 0x0, 0x0) r3 = open$dir(&(0x7f0000000400)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000900)='./file0\x00', 0x0, &(0x7f0000000980)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000640)={0x1f, @none}, 0x8) listen(r5, 0x3) 13m5.443118648s ago: executing program 1 (id=1152): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f0000000680)='devtmpfs\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000800)=""/102392, 0x18ff8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000019800), 0x42, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000019840), 0x2) r4 = memfd_create(&(0x7f0000019880)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000198c0)={r4, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000019900)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x3) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000019940)={0x0, 0x0, &(0x7f0000019980)=[{&(0x7f00000199c0)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_raw(0x1d, 0x3, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xb, &(0x7f0000000200)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000400)=0x20) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r8, 0x0) 13m1.531341177s ago: executing program 1 (id=1153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000500)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000540)={0x3, &(0x7f0000000580)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f00000006c0)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x0, 0xfffffffffffffff9) openat$comedi(0xffffffffffffff9c, 0x0, 0x100, 0x0) epoll_create1(0x0) r2 = add_key(&(0x7f0000000840)='encrypted\x00', &(0x7f0000001e00), &(0x7f0000001e40), 0xca, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$instantiate(0xc, r2, &(0x7f0000001e80)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '\xa9\x06\x00\x00\x00\b\x00\x00'}, 0x20, r2) add_key(&(0x7f0000001ec0)='encrypted\x00', &(0x7f0000001f00), &(0x7f0000001f40), 0xca, 0xfffffffffffffffe) syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x18, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x216d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708001a000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001980)=0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f00000019c0)=ANY=[@ANYBLOB="9feb010018000000000000008c0000008c000000060000000800000001000006040000000200000008000000010000000000000b010000000f0000000000000ba107160678ac8dff0002000000010000000100000005000000040000000d007335b889100594bc04010100000000000000080000000e0000000000000700000000000000000000000d0000000009000000000000070000000000305f616100"/170], &(0x7f0000001a80)=""/250, 0xaa, 0xfa, 0x1, 0x8000}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='270', 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='3', 0x4e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r0, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x10500, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x18, 0x3, &(0x7f0000000640)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xc, 0x5, 0x9, 0x100, 0xfffffffffffffff0}], &(0x7f0000000680)='GPL\x00', 0x7fff, 0x0, &(0x7f00000006c0), 0x40f00, 0x43, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0x1, 0xa6, 0xcb}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[r6, r5, r0, r7, r0], &(0x7f0000000800)=[{0x5, 0x3, 0xa, 0xb}, {0x5, 0x1, 0xa, 0xa}], 0x10, 0xe5}, 0x94) unshare(0x40000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x27, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x1, 0x7, 0x6, 0xffffffffffffffff}, @alu={0x7, 0x1, 0xa, 0x9, 0xa, 0x18, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000380)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000940)=""/4096, 0xabbb889adb1d1709, 0x40, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000001bc0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001c00)={0x3, 0x3, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001c40)=[{0x3, 0x4, 0x4, 0x2}], 0x10, 0x4}, 0x94) 13m1.200448171s ago: executing program 33 (id=1143): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f00000194c0)=0x80000000000003) bpf$PROG_LOAD(0x5, &(0x7f0000019500)={0x10, 0x16, &(0x7f00000195c0)=ANY=[@ANYBLOB], &(0x7f0000019800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) shutdown(0xffffffffffffffff, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000300)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000340)={&(0x7f0000019840)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) io_uring_setup(0x4c24, 0x0) 12m56.108395017s ago: executing program 34 (id=1147): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) open(&(0x7f0000000040)='./file0\x00', 0x28d00, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000003c0)={0x3, &(0x7f0000000400)=[{0x48, 0x33, 0x57}, {0x28, 0x1, 0xf7, 0xfffff010}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$sg(0x0, 0xa, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000480)={0x4d, 0x0}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000500)={0x0, 0x6d207ee5}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f00000005c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000640)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000740)={0x0, 0x3}, 0x8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 12m50.360169169s ago: executing program 35 (id=1151): waitid(0x1, 0x0, 0x0, 0x1000008, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000080)={0x40, 0x9}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141102) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x44}}, 0x8000) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x3, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4c050) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)='S8', 0x2}], 0x1}}], 0x1, 0x20008000) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640), 0x5c}, 0x123) socket$inet_tcp(0x2, 0x1, 0x0) inotify_init() openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1c3040, 0x0) open$dir(0x0, 0x0, 0x0) r3 = open$dir(&(0x7f0000000400)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000900)='./file0\x00', 0x0, &(0x7f0000000980)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000640)={0x1f, @none}, 0x8) listen(r5, 0x3) 12m45.563256926s ago: executing program 36 (id=1153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000500)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000540)={0x3, &(0x7f0000000580)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) keyctl$instantiate(0xc, 0x0, &(0x7f00000006c0)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xcb}, 0x0, 0xfffffffffffffff9) openat$comedi(0xffffffffffffff9c, 0x0, 0x100, 0x0) epoll_create1(0x0) r2 = add_key(&(0x7f0000000840)='encrypted\x00', &(0x7f0000001e00), &(0x7f0000001e40), 0xca, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$instantiate(0xc, r2, &(0x7f0000001e80)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '\xa9\x06\x00\x00\x00\b\x00\x00'}, 0x20, r2) add_key(&(0x7f0000001ec0)='encrypted\x00', &(0x7f0000001f00), &(0x7f0000001f40), 0xca, 0xfffffffffffffffe) syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x18, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x216d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708001a000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001980)=0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f00000019c0)=ANY=[@ANYBLOB="9feb010018000000000000008c0000008c000000060000000800000001000006040000000200000008000000010000000000000b010000000f0000000000000ba107160678ac8dff0002000000010000000100000005000000040000000d007335b889100594bc04010100000000000000080000000e0000000000000700000000000000000000000d0000000009000000000000070000000000305f616100"/170], &(0x7f0000001a80)=""/250, 0xaa, 0xfa, 0x1, 0x8000}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)='270', 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f00000004c0)='3', 0x4e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r0, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x10500, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x18, 0x3, &(0x7f0000000640)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xc, 0x5, 0x9, 0x100, 0xfffffffffffffff0}], &(0x7f0000000680)='GPL\x00', 0x7fff, 0x0, &(0x7f00000006c0), 0x40f00, 0x43, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x1, 0x1, 0xa6, 0xcb}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[r6, r5, r0, r7, r0], &(0x7f0000000800)=[{0x5, 0x3, 0xa, 0xb}, {0x5, 0x1, 0xa, 0xa}], 0x10, 0xe5}, 0x94) unshare(0x40000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x11, 0x27, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x1, 0x7, 0x6, 0xffffffffffffffff}, @alu={0x7, 0x1, 0xa, 0x9, 0xa, 0x18, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000380)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000940)=""/4096, 0xabbb889adb1d1709, 0x40, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000001bc0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001c00)={0x3, 0x3, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001c40)=[{0x3, 0x4, 0x4, 0x2}], 0x10, 0x4}, 0x94) 8m3.188431906s ago: executing program 6 (id=1711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_create_resource$futex(&(0x7f0000000280)=0x1) r2 = syz_create_resource$futex(&(0x7f00000002c0)) futex(r1, 0xb, 0x1, 0x0, r2, 0x1) r3 = syz_create_resource$futex(&(0x7f0000000300)=0x1) futex(r1, 0x4, 0x1, 0x0, r3, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r7, &(0x7f00000004c0)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x47, &(0x7f00000194c0)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000019500)={0x10, 0xf, 0x3}, 0x30, 0x0) landlock_restrict_self(r8, 0x0) 7m59.134679378s ago: executing program 6 (id=1716): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000680)='configfs\x00', 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x882) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) socket(0x10, 0x3, 0x4) fsopen(&(0x7f00000000c0)='overlay\x00', 0x1) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x161200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_sec\x00', &(0x7f0000000240)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0), 0x0) write(r3, &(0x7f0000000340)='file read \\-\\}/passwd task.uid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"!=\"/bin\"\n', 0x4c) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, &(0x7f0000000440)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mprotect(&(0x7f000020e000/0x1000)=nil, 0x1000, 0x200000d) unlink(&(0x7f0000000480)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x64) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 7m52.508941846s ago: executing program 6 (id=1729): socket$inet(0x2, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) fanotify_init(0x20, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x40000100) readv(r1, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = gettid() tkill(r4, 0x21) (fail_nth: 1) 7m51.939908861s ago: executing program 6 (id=1730): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) io_uring_setup(0xa0, &(0x7f0000000180)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r3 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000600)=""/196) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) semop(r3, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r3, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}], 0x2) 7m49.389681291s ago: executing program 6 (id=1735): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0xfffffffffffffffc, &(0x7f00000001c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000280)={0x0}) write(r0, &(0x7f0000000180)='sessname=s+ device_path=/', 0x19) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r2, &(0x7f0000000070)='.yz', 0x3) 7m48.792046795s ago: executing program 6 (id=1737): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01060000000000000000020000000900010073797a30000000002c000000030a01060000000000000000020000000900010073797a30000000000900030073797a300000000044000000090a01060000000000000000020000000900010073797a30000000000900020073797a300000000008000a400000000108000540000000040c0003400000002060000000060a010600000000001e0000020000000900010073797a30000000000900020073797a300000000034000480300001800b000100"], 0x118}}, 0x0) 7m33.040205753s ago: executing program 37 (id=1737): prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01060000000000000000020000000900010073797a30000000002c000000030a01060000000000000000020000000900010073797a30000000000900030073797a300000000044000000090a01060000000000000000020000000900010073797a30000000000900020073797a300000000008000a400000000108000540000000040c0003400000002060000000060a010600000000001e0000020000000900010073797a30000000000900020073797a300000000034000480300001800b000100"], 0x118}}, 0x0) 2m49.399917601s ago: executing program 3 (id=2506): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, 0x0, 0x42) unshare(0x22020600) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000140)={0x0, 0x79fb, 0x40000, 0x0, 0x111}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000500)=@IORING_OP_SENDMSG={0x9, 0x58, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x7, 0x40020, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x884) 2m47.412926364s ago: executing program 3 (id=2511): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x50) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x4000087, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x2c}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 2m44.03129146s ago: executing program 3 (id=2514): socket$nl_generic(0x10, 0x3, 0x10) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x40, 0x3}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='0', 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) landlock_restrict_self(r0, 0xe) (fail_nth: 2) 2m43.632029921s ago: executing program 3 (id=2517): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) close(0x3) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000005c0)=0x7ffffffd, 0x4) write$binfmt_script(r0, 0x0, 0x6f4000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 2m43.527534086s ago: executing program 3 (id=2518): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ef) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000740)=@v3={0x3000000, [{0x81, 0x3}, {0x4, 0x1ff}], 0xee01}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2c3) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) write(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 2m43.437920782s ago: executing program 3 (id=2519): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x502, 0x54) write(r1, 0x0, 0x0) 2m27.874824983s ago: executing program 38 (id=2519): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x502, 0x54) write(r1, 0x0, 0x0) 1m33.686303943s ago: executing program 4 (id=2729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x202) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m33.544040166s ago: executing program 4 (id=2730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2514"], 0x28}}, 0x24000880) (fail_nth: 1) 1m33.225323221s ago: executing program 4 (id=2731): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 1m31.664497162s ago: executing program 4 (id=2736): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0x64810887, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0xb3f97f6c43c4fec6, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002300)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000043c0)={0x20, 0x0, 0xfffffffffffffffe, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000006440), 0x2, 0x141102) writev(r1, &(0x7f0000006480)=[{&(0x7f00000064c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006580)={&(0x7f00000065c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000006600)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x48) socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000006640)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f00000066c0)={&(0x7f0000006700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000006780)={0x0, 0x0, &(0x7f00000067c0)={&(0x7f0000006800)=ANY=[@ANYBLOB="140000001000010000000000000000000500001f5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c0001800b0001006e756d67656e00001c0002800800024000000002080001400080001308000340000000010900020073797a3200000000140000001100010000000000000000000500000a"], 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000068c0)={0x0, 0x0, &(0x7f00000069c0), 0x0, 0xfff, r3, 0x0, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) socket(0x2, 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0\x00', 0x22001, 0xa) syz_fuse_handle_req(r0, &(0x7f0000004440)="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", 0x2000, &(0x7f0000006900)={&(0x7f0000006500)={0x50, 0xffffffffffffffda, 0x20000000000002, {0x7, 0x2d, 0xa, 0x200000, 0x3, 0x2005, 0x8, 0x2000b, 0x0, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r6, 0x6700000000000000) 1m28.610820392s ago: executing program 4 (id=2743): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0xc2b02) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='27', 0x2) request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='proc\x00', 0xfffffffffffffffd) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x32) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={"dd0379c4", 0x9, 0xff, 0xfe, 0x9, 0x7f9, "0b4cbb7380e4968436ecb3a6da699a", "cda9dc69", "94e3f0ee", "7d7248d2", ["0000000000000000008000", "9ac6fbcbdffd708805c8f40b", "000070006eefccdc006a0400", "128c9fed09547a2fa18e25a8"]}) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:hald_keymap_exec_t:s0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) setns(0xc9, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 1m27.083542185s ago: executing program 4 (id=2746): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='660', 0x3) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x44) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, &(0x7f0000000100)='$', 0x1, 0x20008005, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) 1m11.169383738s ago: executing program 39 (id=2746): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='660', 0x3) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x44) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, &(0x7f0000000100)='$', 0x1, 0x20008005, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) 19.198316639s ago: executing program 0 (id=2902): mkdirat(0xffffffffffffff9c, 0x0, 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', 0x0, &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdir(0x0, 0x13b) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x40, 0x2, 0x82}, &(0x7f0000000180)=0x0, 0x0, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, 0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup(r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='mtd0\x00', 0x1, 0x150) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, 'tracefs\x00', 0x3a, '*:@{\':', 0x3a, './trace'}, 0x35) chdir(&(0x7f0000000140)='./bus\x00') getdents64(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a0023004000000500"], 0x17) 17.188355039s ago: executing program 0 (id=2906): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x204900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000000)=0x2803, 0x4) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000180)) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f0000"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r7, 0x5607, 0x2d) r8 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r8, 0x560e, &(0x7f0000000140)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r9, 0x5606, 0x9) r10 = openat(0xffffffffffffffff, &(0x7f0000000440)='./proc\x00', 0x101042, 0x0) mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, r10, 0x8000000) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) 15.960416837s ago: executing program 0 (id=2915): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x0, {[@mptcp=@generic={0xae, 0x2}]}}}}}}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x4d}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a3000000000c8000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d84001280440001800a0001006c696d6974000000340002800c00024000000000000010030c000140000000000000008b0800054000000001080004400000000008000340000000002c0001800a0001006c696d69740000001c0002800c000240000000000000d2360c0001400000000000000007100001800c0001007061796c6f61640008000340000001"], 0x110}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff06a660001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 15.009360767s ago: executing program 8 (id=2918): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0xb0, 0x30, 0x9, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_bpf={0x98, 0x1, 0x0, 0x0, {{0x1f}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x7, 0x20000000, 0x2, 0x7}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x1d, 0x0, 0x41}, {0x9c, 0x4}, {0x3, 0xfd, 0x40}, {0x0, 0x3, 0x0, 0x10000000}, {0x0, 0x0, 0x8}, {0x5, 0x0, 0xf8, 0x8000}, {0x4, 0x8}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xb0}}, 0x0) syz_usb_connect$uac2(0x0, 0x8f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4147, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x0, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x1, 0x307, 0x4, 0x0, 0xf, 0x8001, 0x31}, @source_unit={0x8, 0x24, 0xa, 0x9, 0x0, 0x1, 0x10, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xffffffffffffff17, &(0x7f0000000000)=@string={0x10, 0x3, "d92b498292531df63e00bb3d7d8a"}}]}) 13.722999258s ago: executing program 0 (id=2919): capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r0 = fsopen(&(0x7f0000000100)='proc\x00', 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) link(0x0, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000140)=0x0) io_submit(r2, 0x2, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1ff, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x69db, r0, 0x0, 0x0, 0x5}]) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x8000, '\x00', 0x0, r3}, 0x50) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000380)={0x80000020}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='ramfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000700)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0, 0x7fe81e5246626bb5) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f00000007c0)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000800)={{0x1, 0x0, 0x400}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000840)=0x3, 0xac5) syz_clone3(&(0x7f0000000880)={0x23800000, &(0x7f0000000900)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000940)=0x0) io_submit(r9, 0x1, &(0x7f0000000980)=[&(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0x7, r8, 0x0}]) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000a00)={0x7, 0xffff, 0x0, 0x0, 0xe}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) lseek(r6, 0x141, 0x0) getdents64(r6, 0xfffffffffffffffe, 0x4a) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000001a00010000000000000000008400130000000000000000000000000000000000000000000000000000000000000000deffffffffffffff00000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300"/148], 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) 13.128040362s ago: executing program 7 (id=2921): socket$netlink(0x10, 0x3, 0x14) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453d9f9759e0c09e456844131b87ca896fd8a", 0xd1, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r5, r4, r5}, &(0x7f0000000500)=""/68, 0x44, &(0x7f0000000580)={&(0x7f00000005c0)={'sha3-512\x00'}}) (fail_nth: 2) 13.039659863s ago: executing program 2 (id=2922): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0400, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES8=r1], 0x128}, 0x4080) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x50}, 0xa0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000880)={r0}) setns(0xc9, 0x0) socket(0x8, 0x5, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2e, 0x1fdd1375bdd2e52f, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x390, 0x0, 0x0, 0x1000, 0xffffffff, r3, 0x0, 0x1a0}}}, &(0x7f0000000500)=0x0) syz_ublk_setup_queues(r5, r6, 0x0, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe707, 0x40, 0x1, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x655c, 0x2, 0x2, 0x337, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd0c4, 0x200, 0x1}}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='jffs2\x00', 0x800000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x1015, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f00000007c0)={0x0, &(0x7f0000000800)=[@enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18}, @code={0xa, 0x1d, {"48c704250840400000000000"}}], 0x65}) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_usb_connect(0x1, 0x2e, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010102abb502c5e03b12b7edd9a550ad2dd966082104fb04574e0102030109021c345bcd00e6200904150700022d13d61eca02ef39ed59b3f740571ca3bb2360bd43df163867781fe69f7d5de96344899c7772a8f61cb411d3913a2cebd2482f6bc8"], &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 11.824281233s ago: executing program 7 (id=2923): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) sched_setscheduler(0xffffffffffffffff, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000014c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, &(0x7f0000002500)={0x10001, 0x0, '\x00', @zc_export}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000025c0), 0x40000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000002600)='fd\x00') mkdirat(r6, &(0x7f0000002640)='./file0\x00', 0x21) ioctl$KVM_GET_DEBUGREGS(r6, 0x8080aea1, &(0x7f0000002680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000027c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c000000120000022bbd7000fcdbdf2500000000", @ANYRESOCT, @ANYBLOB="000001000080000024000e008000000000000000010000000000000007000000000000007f004c00000000003c002b8008000800", @ANYRES32, @ANYRESOCT=r4, @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="080003000200000008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r5, @ANYBLOB="08000100", @ANYRESDEC=0x0, @ANYBLOB="08002c000800001e000500000004001f000200"/28], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x4008800) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x24040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) socket(0x2a, 0x2, 0xfffffffb) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) 11.393475907s ago: executing program 0 (id=2924): socket$netlink(0x10, 0x3, 0x14) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000600)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000a00), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000a40), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000a80)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r4, 0x0, 0x41) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b00)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$inet6(0xa, 0x4, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0/file0\x00', 0x1010c0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r7}, &(0x7f0000000c80), 0x0}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) 10.796141863s ago: executing program 0 (id=2925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x10c43}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}]}}]}, 0x48}}, 0x0) 9.805782431s ago: executing program 40 (id=2925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x48, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x10c43}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}]}}]}, 0x48}}, 0x0) 9.658449789s ago: executing program 9 (id=2927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018010000756d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ff) mount(&(0x7f0000000880)=@filename='sysfs\x00', &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r3, &(0x7f0000000980)='0\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000a80)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000ac0)='1\n', 0x2) 9.551394216s ago: executing program 8 (id=2928): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f00000001c0)=[@nested_create_vm={0x12d, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xc2ad, 0x4}}], 0x38}) ioctl(0xffffffffffffffff, 0x40186f40, &(0x7f0000000200)) 9.54606291s ago: executing program 7 (id=2929): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000240), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0xfffa) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000340)={0x12}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000400)=0x8, 0x4) setns(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000100)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42003, 0x0) pipe2(0x0, 0x80000) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) setns(0xc9, 0x0) 9.43383514s ago: executing program 9 (id=2930): socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) prctl$PR_MCE_KILL(0x42, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) (fail_nth: 2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0xe, 0x4) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) 9.216139413s ago: executing program 8 (id=2931): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000004c0), 0x1, 0xae00) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000500)={&(0x7f0000002840)=[{0x1, 0x1000, 0x43, &(0x7f0000000000)="c6bd6ee97b54c47efabe397f82bfde80aae3a67a0532661ee34c58fe16a19a0a10e9746c06e8170ebb259ac5c715e73b48e467a2b47b0bad7039349976da0e5176b9f3"}, {0x9, 0x1010, 0x1000, &(0x7f0000000540)="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"}], 0x2}) 6.873427835s ago: executing program 2 (id=2932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000880), 0x1001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) r4 = accept4$tipc(r3, &(0x7f00000001c0), 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r6 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac3(r6, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)={0x0, 0x9, 0x10, "5e1232afa51b294c3e0e62acf4f7ab5d"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x84, 0x1, "17"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "001f40"}}) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='f2fs\x00', 0x10, &(0x7f0000000100)='barrier') ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000140)={0x0, 0x0, "4510259a6dcaa567318b644e20646b63"}) r8 = syz_open_dev$dvb_dvr(&(0x7f0000000840), 0x3, 0xa400) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r8, 0x6f2d, 0xff) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) syz_usb_control_io$uac3(r6, &(0x7f0000000540)={0x14, &(0x7f0000000440)={0x20, 0x22, 0x6a, {0x6a, 0x24, "6c0539bfcae21cf9ab172ce2a604b56490b4b357b19662a9e606588da82d39f0413a0b7b17497241ea86ce633b43aac78823cf2071a9e0adae9187b8764aed0151830f5bf0b2f7262e472ce9cec44f62e495728d0675ec4783cefdf9e5fba892164e43e2b932f10f"}}, &(0x7f00000004c0)={0x0, 0x3, 0x48, @string={0x48, 0x3, "040d12238763c47df4279a7030f26fc34b3e197828ab0187b23c93ca644a7c848c21afb717657b87f9bc1b9eb1e0ed02a71a20940702ed1ce04cdb02635fd7c9aaeca01cec56"}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000580)={0x20, 0xd, 0x68, "c2c77f35468d39982362f0b487acbcb970fa1d20e3f51f7de9fd49e02b026dfeb3742445ae0d629506c4e134c3d73dd45281e39f1bd29278809638d83c03bc8012e5b7633b3c0b700a7656847f9d1e53371b2f849fd8f684b218e569106c3c83989f700f21a197dd"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x7e}, &(0x7f0000000680)={0x20, 0x81, 0x1, "bd"}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "183c"}, &(0x7f0000000700)={0x20, 0x83, 0x3, "f120fe"}, &(0x7f0000000740)={0x20, 0x84, 0x4, "212831e9"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "93aa29"}}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000280)={0x24, r2, 0x400, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0) 6.801293566s ago: executing program 7 (id=2933): socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r2, 0x0, r4, 0x0, 0x2, 0x5) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40804) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0xffff, 0x100000}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000700), 0x10007, 0xbc03) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f0000000740)=""/133) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r3, &(0x7f0000000440)='27', 0x2) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3c, 0x0, 0x0) 6.747999386s ago: executing program 9 (id=2934): syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000680), 0x80000001, 0x4a001) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'macvtap0\x00', 0x400}) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000700)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30048085) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000002b40)={0x18, 0x0, r1, {0x9}}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = io_uring_setup(0x1a58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000900)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000a00)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000002b80)={{0x3a, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e24, 0x4, 'nq\x00', 0x2, 0x6, 0x6b}, {@private=0xa010102, 0x4e20, 0x0, 0x1, 0x2c6, 0x80}}, 0x44) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000a40)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000a80)={0x1, 0x0, [{0x6e0, 0x0, 0x8000000000001}]}) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000940)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r3, 0x0, 0x1, 0x9, &(0x7f0000000980), 0x18) write(r2, &(0x7f0000000840)='3', 0x4e) close(0x3) mknodat$null(r2, &(0x7f0000002c00)='./proc/thread-self/fail-nth\x00', 0x2000, 0x103) getsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000002c40)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x9}, &(0x7f0000002d00)=0x90) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000ac0)=0x34, 0x4) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x116, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x30, 0x8, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x860}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x27, 0x1e, 0x9}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x0, 0x2, 0x9, 0x0, 0x5}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x440a}}, {0x3d, &(0x7f00000001c0)=@string={0x3d, 0x3, "9e43fac7cc9635d9250b2bbaf1328a3e682b7537261cd8209cd3abf467290512e08541d21dad4c66095af16667fdfb772957c65fb6f5d3cccfc80e"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x449}}, {0x14, &(0x7f00000002c0)=@string={0x14, 0x3, "a3c807db3e8692bef375537634974877086f"}}, {0xf6, &(0x7f0000000340)=@string={0xf6, 0x3, "de887f72938f36e53af778086a3b111ddbcba94ffaa1040cc5473726b655f492eb6f889c10531951c33bdba4677f0c6aa4dfd0c2b930a0afa0e676d0a929c0aa506078b557af2303e9843a3fa4fc313c7cbbc3f7a13f225c4f84a98ac4c451ac3f0720e6f3b01348191e1e7331dc3c0247a2a3890c5484d74c05451b60fdee59dfea90bd0268a2bbe8c8a7b8763d5c3524601c99a810ed05d75dde89b3b27499fa54fe188d0d4a3e0cbce9650b8638abf9c9542f27329afd2e6be175a2ebe68073c771690e9a87547d9cb9bd29593cdd0f1ed4c2c3e8448b09274b0820e1afec635d601ed616bcf47d5854744299d8476075d75e"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "8699a9657d283f9aaeb3e553321c780a53b535d7bac28422edd38ff519e8"}}, {0xec, &(0x7f00000004c0)=@string={0xec, 0x3, "b5b75e57b437e6dc9f2b19c131861300f8ac2e7ba1d4236b8733e22dff983e3498f2c67bfcbbd3cb1e19a399965d8182e04d28d3f7f91aa4517be1786ffb8bfc426dddf288e9b4d5235c003ec01204f1b30e00fbdc4b76998fc32dd5a5d824352a4b8df94474cd335452106e3681e367ef40cf054d62ed342bb97d8f6f751a4b9b9b1db9fe896ad6405d8b7eeea475b6d799fabbe9aff212d104f40e2059bdd86559e0189bbec4061d467265d037a0993503dd8cdbd6a6a3e769103b29c1e3bbb560edabbe16b47bbb2c6cdec1c5cdad6c36631644f8108d4c8dcc8e08764f37d9abe590151de0fd020f"}}]}) 5.702245794s ago: executing program 8 (id=2935): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) tkill(0x0, 0x12) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$write2(0x11, &(0x7f0000000180)={0x81, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000001640)=""/4101, 0xffffffffffffffd6) listen(0xffffffffffffffff, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000100)={0x36, 0x70, 0x20000}, 0x20) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x40000010, 0x0, 0xffff}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000f3aa6ea) 3.646249365s ago: executing program 8 (id=2936): socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r0 = syz_io_uring_setup(0x315b, &(0x7f00000008c0)={0x0, 0xc7ca, 0x40, 0x0, 0x1c1}, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000a00)=[@ioring_restriction_register_op={0x0, 0x7}], 0x1) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f00000002c0), 0x1) syz_usb_connect(0x3, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904"], 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x7ffffffe) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_le_set_cig_params={{0x9c}, {0x0, 0x0, 0x4f}}}}, 0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0, 0x0) syz_io_uring_setup(0x5994, &(0x7f0000000040)={0x0, 0xd6af, 0x20000, 0x2, 0x31, 0x0, r0}, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200)) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[], 0x0) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000a40)) write(0xffffffffffffffff, 0x0, 0x0) 3.493932917s ago: executing program 2 (id=2937): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x20044002) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904080001020d0000052406000105240000000d241f0100000000030000000006241c"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000140)={0x8000, 0x0, 0x1001, 0x3, 0x8, {0xe1, 0x3000000}, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00') r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000180)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}], 0x1c) pread64(r3, &(0x7f0000000340)=""/102356, 0x18fd4, 0x200) close(r2) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x15) accept(r2, 0x0, 0x0) 3.38767095s ago: executing program 7 (id=2938): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='dyn']) r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000200)={0x34, &(0x7f0000000240)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) setreuid(0x0, 0xee00) syz_usb_control_io$lan78xx(r0, &(0x7f00000006c0)={0x14, &(0x7f00000005c0)={0x0, 0xc, 0xa9, {0xa9, 0x22, "d369c397c3f8abfed784f0527fbc20c307e78ba36d263b3c6909a289436154b53b0b2dab37d1d47491d2819c48b779e6fbead1dec226292b7bc0626c4a4428d54f5b609c2a584c3562bff88728119e29b1fbe465fce4703c0c97de9dbc546eb228a8deca4f597c9e9e9180a03ec928af537f26fc31cccdafdad4fc991983f23eab95316d20ad04ba7092c1248bc169d35a0dde663a450cad9fdcc3673c9b8cc310d590a2013108"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}}, &(0x7f0000000900)={0x34, &(0x7f0000000940)=ANY=[@ANYBLOB="400ab6000000a18bd31bc6cd901bff0eee1fe270140b2288fec92bf861c98e17f6b3ba14f367b2d2ba9aff796544687c4c38ae0900d24f5f4d2e048819786e18cb53a6f4cec7651ebdc28e635a7ef1a9eaf40b361891dcec2cc72d1a152973b942082484ebe92f2f23f5a7c471a950c90bd778ff5866828dff0020051468bf25a85836c463819be45fc08362f992f8cb190015be20fa094c23d23040b007d1e44d47850c935dc0acdd1698d8bd6507ae89431fcb94cf23db043f91ddd7812036a4da19803e0e"], &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x43}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000840)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000880)={0x40, 0xa0, 0x4, 0x1}, &(0x7f00000008c0)={0xc0, 0xa2, 0x2f, "fbeba5a6dee4ca2b535041e4977ad46459fb4a55950041196c2b48072695a29625541b0bc3dcf4228cd6e89cdf3059"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.470328999s ago: executing program 9 (id=2939): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018010000756d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ff) mount(&(0x7f0000000880)=@filename='sysfs\x00', &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r3, &(0x7f0000000980)='0\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000a80)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000ac0)='1\n', 0x2) 2.400427493s ago: executing program 2 (id=2940): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f00000001c0)=[@nested_create_vm={0x12d, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xc2ad, 0x4}}], 0x38}) ioctl(0xffffffffffffffff, 0x40186f40, &(0x7f0000000200)) 2.266881934s ago: executing program 2 (id=2941): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c00"], 0x128}}, 0x40) 2.265880855s ago: executing program 9 (id=2942): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x1, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xc06}}, &(0x7f0000000600)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000680)={0x1, r6}) close(r5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setns(0xc9, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x14, r8, 0x309, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0xff, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000040000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x4, 0x9, 0xfffffffffffffff7, 0x80000000, 0x100000001]}, &(0x7f0000000080)=0x78) 1.366022909s ago: executing program 9 (id=2943): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) 1.338796492s ago: executing program 2 (id=2944): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000004c0), 0x1, 0xae00) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000500)={&(0x7f0000002840)=[{0x1, 0x1000, 0x43, &(0x7f0000000000)="c6bd6ee97b54c47efabe397f82bfde80aae3a67a0532661ee34c58fe16a19a0a10e9746c06e8170ebb259ac5c715e73b48e467a2b47b0bad7039349976da0e5176b9f3"}, {0x9, 0x1010, 0x1000, &(0x7f0000000540)="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"}], 0x2}) 1.32039585s ago: executing program 8 (id=2945): syz_usb_connect(0x5, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="12011001ee3fb140b40a1100fbca0102030109022400010295109909044f0d"], 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r2, 0x205, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x3c}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x9, 0x4, 0xff, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000380)={0x20004, r7, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000400)={r10}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000440)={r10}) ioctl$DRM_IOCTL_PANTHOR_BO_MMAP_OFFSET(r5, 0xc0106446, &(0x7f0000000480)={r10}) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000180)={0x1d, r4}, 0x10, &(0x7f00000001c0)={&(0x7f0000000200)=@can={{0x0, 0x0, 0x0, 0x1}, 0x6, 0x1, 0x4, 0x0, "36e932da564405cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x20000000) ioctl$TCXONC(r0, 0x540a, 0x2) 0s ago: executing program 7 (id=2946): syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000680), 0x80000001, 0x4a001) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'macvtap0\x00', 0x400}) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000700)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30048085) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./proc\x00', &(0x7f00000007c0)='proc\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000002b40)={0x18, 0x0, r1, {0x9}}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = io_uring_setup(0x1a58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000900)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000a00)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000002b80)={{0x3a, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e24, 0x4, 'nq\x00', 0x2, 0x6, 0x6b}, {@private=0xa010102, 0x4e20, 0x0, 0x1, 0x2c6, 0x80}}, 0x44) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000a40)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000a80)={0x1, 0x0, [{0x6e0, 0x0, 0x8000000000001}]}) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000000940)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r3, 0x0, 0x1, 0x9, &(0x7f0000000980), 0x18) write(r2, &(0x7f0000000840)='3', 0x4e) close(0x3) mknodat$null(r2, &(0x7f0000002c00)='./proc/thread-self/fail-nth\x00', 0x2000, 0x103) getsockopt$inet_sctp_SCTP_PLPMTUD_PROBE_INTERVAL(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000002c40)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x9}, &(0x7f0000002d00)=0x90) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000ac0)=0x34, 0x4) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x116, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x30, 0x8, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x860}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x27, 0x1e, 0x9}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x0, 0x2, 0x9, 0x0, 0x5}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x440a}}, {0x3d, &(0x7f00000001c0)=@string={0x3d, 0x3, "9e43fac7cc9635d9250b2bbaf1328a3e682b7537261cd8209cd3abf467290512e08541d21dad4c66095af16667fdfb772957c65fb6f5d3cccfc80e"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x449}}, {0x14, &(0x7f00000002c0)=@string={0x14, 0x3, "a3c807db3e8692bef375537634974877086f"}}, {0xf6, &(0x7f0000000340)=@string={0xf6, 0x3, "de887f72938f36e53af778086a3b111ddbcba94ffaa1040cc5473726b655f492eb6f889c10531951c33bdba4677f0c6aa4dfd0c2b930a0afa0e676d0a929c0aa506078b557af2303e9843a3fa4fc313c7cbbc3f7a13f225c4f84a98ac4c451ac3f0720e6f3b01348191e1e7331dc3c0247a2a3890c5484d74c05451b60fdee59dfea90bd0268a2bbe8c8a7b8763d5c3524601c99a810ed05d75dde89b3b27499fa54fe188d0d4a3e0cbce9650b8638abf9c9542f27329afd2e6be175a2ebe68073c771690e9a87547d9cb9bd29593cdd0f1ed4c2c3e8448b09274b0820e1afec635d601ed616bcf47d5854744299d8476075d75e"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x20, &(0x7f0000000480)=@string={0x20, 0x3, "8699a9657d283f9aaeb3e553321c780a53b535d7bac28422edd38ff519e8"}}, {0xec, &(0x7f00000004c0)=@string={0xec, 0x3, "b5b75e57b437e6dc9f2b19c131861300f8ac2e7ba1d4236b8733e22dff983e3498f2c67bfcbbd3cb1e19a399965d8182e04d28d3f7f91aa4517be1786ffb8bfc426dddf288e9b4d5235c003ec01204f1b30e00fbdc4b76998fc32dd5a5d824352a4b8df94474cd335452106e3681e367ef40cf054d62ed342bb97d8f6f751a4b9b9b1db9fe896ad6405d8b7eeea475b6d799fabbe9aff212d104f40e2059bdd86559e0189bbec4061d467265d037a0993503dd8cdbd6a6a3e769103b29c1e3bbb560edabbe16b47bbb2c6cdec1c5cdad6c36631644f8108d4c8dcc8e08764f37d9abe590151de0fd020f"}}]}) kernel console output (not intermixed with test programs): 00007f3b76720090 R08: 0000000000000000 R09: 0000000000000000 [ 1475.946098][T18728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1475.946105][T18728] R13: 00007f3b75a26038 R14: 00007f3b75a25fa0 R15: 00007ffed50a1e68 [ 1475.946126][T18728] [ 1476.291270][ T30] audit: type=1400 audit(1792397664.203:1873): avc: denied { create } for pid=18729 comm="syz.4.2731" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1476.324700][ T30] audit: type=1400 audit(1792397664.243:1874): avc: denied { write } for pid=18729 comm="syz.4.2731" name="file0" dev="tmpfs" ino=3363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1476.324917][ T30] audit: type=1400 audit(1792397664.243:1875): avc: denied { open } for pid=18729 comm="syz.4.2731" path="/588/file0" dev="tmpfs" ino=3363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1476.330917][ T30] audit: type=1400 audit(1792397664.243:1876): avc: denied { ioctl } for pid=18729 comm="syz.4.2731" path="/588/file0" dev="tmpfs" ino=3363 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1476.871722][T14780] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1477.142555][T14780] usb 10-1: Using ep0 maxpacket: 8 [ 1477.177915][T14780] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1477.296877][T14780] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.296894][T14780] usb 10-1: Product: syz [ 1477.296903][T14780] usb 10-1: Manufacturer: syz [ 1477.296913][T14780] usb 10-1: SerialNumber: syz [ 1477.583271][T14780] usb 10-1: config 0 descriptor?? [ 1477.627658][T14780] gspca_main: se401-2.14.0 probing 047d:5003 [ 1477.750215][ T30] audit: type=1400 audit(1792397665.663:1877): avc: denied { unlink } for pid=5596 comm="syz-executor" name="file0" dev="tmpfs" ino=3363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1478.849334][T14780] input: se401 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input54 [ 1479.176238][T14780] usb 10-1: USB disconnect, device number 79 [ 1479.435484][T18749] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1480.899165][T18771] FAULT_INJECTION: forcing a failure. [ 1480.899165][T18771] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.899190][T18771] CPU: 0 UID: 0 PID: 18771 Comm: syz.2.2742 Tainted: G L syzkaller #0 PREEMPT(full) [ 1480.899207][T18771] Tainted: [L]=SOFTLOCKUP [ 1480.899211][T18771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1480.899219][T18771] Call Trace: [ 1480.899224][T18771] [ 1480.899229][T18771] dump_stack_lvl+0x100/0x190 [ 1480.899257][T18771] should_fail_ex.cold+0x5/0xa [ 1480.899274][T18771] should_failslab+0xc2/0x120 [ 1480.899293][T18771] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1480.899310][T18771] ? sock_alloc_inode+0x26/0x2c0 [ 1480.899326][T18771] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1480.899341][T18771] sock_alloc_inode+0x26/0x2c0 [ 1480.899354][T18771] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1480.899367][T18771] alloc_inode+0x68/0x250 [ 1480.899381][T18771] sock_alloc+0x44/0x280 [ 1480.899393][T18771] ? security_socket_create+0x7f/0x250 [ 1480.899410][T18771] __sock_create+0xc2/0x860 [ 1480.899431][T18771] __sys_socket+0x14d/0x260 [ 1480.899447][T18771] ? fput+0x7c/0x100 [ 1480.899464][T18771] ? __pfx___sys_socket+0x10/0x10 [ 1480.899480][T18771] ? ksys_write+0x1ac/0x250 [ 1480.899493][T18771] ? __pfx_ksys_write+0x10/0x10 [ 1480.899511][T18771] __x64_sys_socket+0x72/0xb0 [ 1480.899526][T18771] ? lockdep_hardirqs_on+0x7d/0x110 [ 1480.899543][T18771] do_syscall_64+0x123/0x790 [ 1480.899562][T18771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.899575][T18771] RIP: 0033:0x7fa40f19e559 [ 1480.899585][T18771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.899596][T18771] RSP: 002b:00007fa410065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1480.899609][T18771] RAX: ffffffffffffffda RBX: 00007fa40f425fa0 RCX: 00007fa40f19e559 [ 1480.899617][T18771] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 1480.899624][T18771] RBP: 00007fa410065090 R08: 0000000000000000 R09: 0000000000000000 [ 1480.899631][T18771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1480.899639][T18771] R13: 00007fa40f426038 R14: 00007fa40f425fa0 R15: 00007ffd448ab4a8 [ 1480.899655][T18771] [ 1480.899662][T18771] socket: no more sockets [ 1481.054600][ T10] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1481.172310][T18774] FAULT_INJECTION: forcing a failure. [ 1481.172310][T18774] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.172333][T18774] CPU: 0 UID: 0 PID: 18774 Comm: syz.4.2743 Tainted: G L syzkaller #0 PREEMPT(full) [ 1481.172352][T18774] Tainted: [L]=SOFTLOCKUP [ 1481.172357][T18774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1481.172365][T18774] Call Trace: [ 1481.172370][T18774] [ 1481.172375][T18774] dump_stack_lvl+0x100/0x190 [ 1481.172400][T18774] should_fail_ex.cold+0x5/0xa [ 1481.172419][T18774] should_failslab+0xc2/0x120 [ 1481.172438][T18774] __kmalloc_cache_noprof+0x91/0x6d0 [ 1481.172453][T18774] ? assoc_array_insert+0x262/0x32c0 [ 1481.172475][T18774] assoc_array_insert+0x262/0x32c0 [ 1481.172494][T18774] ? __key_instantiate_and_link+0x139/0x500 [ 1481.172520][T18774] ? __pfx_assoc_array_insert+0x10/0x10 [ 1481.172538][T18774] ? __pfx___might_resched+0x10/0x10 [ 1481.172552][T18774] ? keyring_free_preparse+0x9/0x10 [ 1481.172574][T18774] ? down_write+0x146/0x1f0 [ 1481.172590][T18774] __key_link_begin+0xf5/0x260 [ 1481.172605][T18774] key_link+0x103/0x390 [ 1481.172619][T18774] ? __pfx_key_link+0x10/0x10 [ 1481.172634][T18774] ? keyring_alloc+0x8e/0xc0 [ 1481.172648][T18774] call_sbin_request_key+0x3dd/0xd90 [ 1481.172669][T18774] ? __pfx_call_sbin_request_key+0x10/0x10 [ 1481.172687][T18774] ? key_instantiate_and_link+0x39d/0x4b0 [ 1481.172707][T18774] ? key_alloc+0xbb4/0x1310 [ 1481.172726][T18774] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 1481.172756][T18774] ? request_key_auth_new+0x732/0xb50 [ 1481.172776][T18774] ? __pfx_request_key_auth_new+0x10/0x10 [ 1481.172800][T18774] ? __pfx_call_sbin_request_key+0x10/0x10 [ 1481.172818][T18774] request_key_and_link+0x1115/0x1330 [ 1481.172839][T18774] ? __pfx_request_key_and_link+0x10/0x10 [ 1481.172855][T18774] ? __pfx___might_resched+0x10/0x10 [ 1481.172872][T18774] ? __pfx_dns_resolver_cmp+0x10/0x10 [ 1481.172885][T18774] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1481.172900][T18774] ? _copy_from_user+0x59/0xd0 [ 1481.172921][T18774] __do_sys_request_key+0x2a2/0x3c0 [ 1481.172937][T18774] ? __pfx___do_sys_request_key+0x10/0x10 [ 1481.172958][T18774] do_syscall_64+0x123/0x790 [ 1481.172978][T18774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.172992][T18774] RIP: 0033:0x7f3b7579e559 [ 1481.173002][T18774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.173015][T18774] RSP: 002b:00007f3b76720028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 1481.173027][T18774] RAX: ffffffffffffffda RBX: 00007f3b75a25fa0 RCX: 00007f3b7579e559 [ 1481.173036][T18774] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000240 [ 1481.173044][T18774] RBP: 00007f3b75835ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1481.173056][T18774] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 1481.173065][T18774] R13: 00007f3b75a26038 R14: 00007f3b75a25fa0 R15: 00007ffed50a1e68 [ 1481.173083][T18774] [ 1481.282444][ T10] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1481.313673][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.313688][ T10] usb 10-1: Product: syz [ 1481.313697][ T10] usb 10-1: Manufacturer: syz [ 1481.313706][ T10] usb 10-1: SerialNumber: syz [ 1481.654435][T18774] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18781] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[18774] [ 1482.259543][T18783] gadgetfs: bound to dummy_udc driver [ 1482.266579][T18783] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1482.290843][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1482.290875][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1482.805881][T12110] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x76 [ 1483.331464][T18791] netlink: 'syz.8.2748': attribute type 1 has an invalid length. [ 1483.415008][T18793] bond1: (slave veth0_to_bond): making interface the new active one [ 1483.415704][T18793] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1483.542162][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1483.544408][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1483.584321][T18791] macvlan2: entered promiscuous mode [ 1483.584334][T18791] macvlan2: entered allmulticast mode [ 1483.584643][T18791] bond1: entered promiscuous mode [ 1483.584653][T18791] veth0_to_bond: entered promiscuous mode [ 1483.585274][T18791] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1483.625812][T18791] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1483.625878][T18791] bond1: left promiscuous mode [ 1483.625888][T18791] veth0_to_bond: left promiscuous mode [ 1483.948060][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1483.948094][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1483.948412][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1483.989139][ T10] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1484.035725][ T10] usb 10-1: USB disconnect, device number 80 [ 1484.430553][ T30] audit: type=1400 audit(1792397672.343:1878): avc: denied { setopt } for pid=18803 comm="syz.7.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1484.495372][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.495404][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.602069][T14780] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1484.751870][T14780] usb 9-1: Using ep0 maxpacket: 32 [ 1484.753368][T14780] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1484.754519][T14780] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1484.754534][T14780] usb 9-1: config 0 has no interface number 0 [ 1484.757137][T14780] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.757164][T14780] usb 9-1: Product: syz [ 1484.757174][T14780] usb 9-1: Manufacturer: syz [ 1484.757183][T14780] usb 9-1: SerialNumber: syz [ 1484.760763][T14780] usb 9-1: config 0 descriptor?? [ 1485.231993][ T10] usb 10-1: new full-speed USB device number 81 using dummy_hcd [ 1485.260703][T14780] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1485.260722][T14780] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1485.464287][ T10] usb 10-1: not running at top speed; connect to a high speed hub [ 1485.464308][ T10] usb 10-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1485.466545][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.466572][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1485.466585][ T10] usb 10-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1485.466616][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.566661][ T10] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1485.602535][ T10] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1485.603512][ T10] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 88 [ 1485.603570][ T10] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1485.642588][ T10] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1485.664864][T18802] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1485.664878][T18802] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1485.664924][T18802] F2FS-fs (loop8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1485.664935][T18802] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 1485.934659][T14780] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1485.934812][T14780] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1485.974881][T14780] usb 9-1: USB disconnect, device number 49 [ 1486.340957][ T10] usb 10-1: USB disconnect, device number 81 [ 1486.370411][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1486.406443][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1486.406921][ T10] keyspan 10-1:1.0: device disconnected [ 1486.532646][T14780] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1486.685054][T14780] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1486.688672][T14780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.690142][T14780] usb 3-1: config 0 descriptor?? [ 1486.852050][ T10] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1486.925056][ T30] audit: type=1400 audit(1792397674.843:1879): avc: denied { write } for pid=18815 comm="syz.2.2757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1487.011981][ T10] usb 9-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1487.039004][ T10] usb 9-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1487.039020][ T10] usb 9-1: Product: syz [ 1487.039029][ T10] usb 9-1: Manufacturer: syz [ 1487.039038][ T10] usb 9-1: SerialNumber: syz [ 1487.181033][T14780] usb 3-1: Cannot set MAC address [ 1487.181147][T14780] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1487.202941][ T10] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1487.207837][T14780] usb 3-1: USB disconnect, device number 41 [ 1487.334340][T18818] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1487.562545][ T10] vp7045: USB control message 'in' went wrong. [ 1487.562558][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1487.562590][ T10] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1487.565411][ T10] usb 9-1: USB disconnect, device number 50 [ 1487.951984][T14780] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1488.093741][T18832] cramfs: checking physical address 0x000000002a700000 for linear cramfs image [ 1488.093909][T18832] cramfs: wrong magic [ 1488.120941][T14780] usb 10-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1488.131922][T14780] usb 10-1: config 1 has an invalid descriptor of length 190, skipping remainder of the config [ 1488.131948][T14780] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1488.131971][T14780] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.138582][T14780] ttusb_dec_send_command: command bulk message failed: error -22 [ 1488.138678][T14780] ttusb-dec 10-1:1.0: probe with driver ttusb-dec failed with error -22 [ 1488.226223][T18832] cramfs: wrong magic [ 1488.332669][T14780] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1488.482130][T14780] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1488.513357][T14780] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1488.513374][T14780] usb 3-1: Product: syz [ 1488.513383][T14780] usb 3-1: Manufacturer: syz [ 1488.513392][T14780] usb 3-1: SerialNumber: syz [ 1488.644173][T14780] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1488.647582][ T10] usb 10-1: USB disconnect, device number 82 [ 1488.727298][T18841] FAULT_INJECTION: forcing a failure. [ 1488.727298][T18841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1488.727319][T18841] CPU: 0 UID: 0 PID: 18841 Comm: syz.8.2768 Tainted: G L syzkaller #0 PREEMPT(full) [ 1488.727337][T18841] Tainted: [L]=SOFTLOCKUP [ 1488.727341][T18841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1488.727349][T18841] Call Trace: [ 1488.727353][T18841] [ 1488.727359][T18841] dump_stack_lvl+0x100/0x190 [ 1488.727381][T18841] should_fail_ex.cold+0x5/0xa [ 1488.727398][T18841] _copy_from_user+0x2e/0xd0 [ 1488.727417][T18841] copy_msghdr_from_user+0x9f/0x4c0 [ 1488.727435][T18841] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1488.727454][T18841] ? __lock_acquire+0x5c0/0x1f40 [ 1488.727472][T18841] ___sys_recvmsg+0xdd/0x1a0 [ 1488.727488][T18841] ? __pfx____sys_recvmsg+0x10/0x10 [ 1488.727504][T18841] ? lock_acquire+0x1d1/0x380 [ 1488.727530][T18841] do_recvmmsg+0x2f3/0x740 [ 1488.727549][T18841] ? __pfx_do_recvmmsg+0x10/0x10 [ 1488.727565][T18841] ? lock_acquire+0x1d1/0x380 [ 1488.727580][T18841] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1488.727602][T18841] ? __fget_files+0x21f/0x3d0 [ 1488.727623][T18841] __x64_sys_recvmmsg+0x22a/0x280 [ 1488.727638][T18841] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1488.727656][T18841] do_syscall_64+0x123/0x790 [ 1488.727675][T18841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.727687][T18841] RIP: 0033:0x7f541d59e559 [ 1488.727697][T18841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1488.727709][T18841] RSP: 002b:00007f541e4af028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1488.727721][T18841] RAX: ffffffffffffffda RBX: 00007f541d825fa0 RCX: 00007f541d59e559 [ 1488.727729][T18841] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000004 [ 1488.727737][T18841] RBP: 00007f541e4af090 R08: 0000000000000000 R09: 0000000000000000 [ 1488.727744][T18841] R10: 0000000000012002 R11: 0000000000000246 R12: 0000000000000001 [ 1488.727752][T18841] R13: 00007f541d826038 R14: 00007f541d825fa0 R15: 00007ffef2e97d58 [ 1488.727768][T18841] [ 1488.989911][T18833] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1489.206403][T14780] vp7045: USB control message 'in' went wrong. [ 1489.206416][T14780] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1489.206434][T14780] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1489.208675][T14780] usb 3-1: USB disconnect, device number 42 [ 1489.742288][ T10] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1490.334294][ T30] audit: type=1400 audit(1792397678.253:1880): avc: denied { bind } for pid=18868 comm="syz.9.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1490.334515][ T30] audit: type=1400 audit(1792397678.253:1881): avc: denied { connect } for pid=18868 comm="syz.9.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1490.385149][ T30] audit: type=1400 audit(1792397678.303:1882): avc: denied { accept } for pid=18868 comm="syz.9.2778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1490.421718][T14780] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1490.571864][T14780] usb 3-1: Using ep0 maxpacket: 32 [ 1490.572292][T14780] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1490.573112][T14780] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1490.573131][T14780] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1490.574674][T14780] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1490.574689][T14780] usb 3-1: Product: syz [ 1490.574698][T14780] usb 3-1: Manufacturer: syz [ 1490.574707][T14780] usb 3-1: SerialNumber: syz [ 1490.661601][T14780] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input55 [ 1490.884860][T14780] usb 3-1: USB disconnect, device number 43 [ 1490.884903][ C0] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1491.752959][T18858] Bluetooth: hci3: command 0x0406 tx timeout [ 1491.807569][T14780] appletouch 3-1:1.0: input: appletouch disconnected [ 1492.318801][T18889] FAULT_INJECTION: forcing a failure. [ 1492.318801][T18889] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.318825][T18889] CPU: 0 UID: 0 PID: 18889 Comm: syz.2.2782 Tainted: G L syzkaller #0 PREEMPT(full) [ 1492.318842][T18889] Tainted: [L]=SOFTLOCKUP [ 1492.318846][T18889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1492.318854][T18889] Call Trace: [ 1492.318859][T18889] [ 1492.318865][T18889] dump_stack_lvl+0x100/0x190 [ 1492.318887][T18889] should_fail_ex.cold+0x5/0xa [ 1492.318904][T18889] should_failslab+0xc2/0x120 [ 1492.318922][T18889] __kmalloc_noprof+0xfc/0x840 [ 1492.318938][T18889] ? bpf_test_init.isra.0+0x88/0x100 [ 1492.318958][T18889] bpf_test_init.isra.0+0x88/0x100 [ 1492.318977][T18889] bpf_prog_test_run_xdp+0x587/0x1670 [ 1492.319000][T18889] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1492.319023][T18889] ? fput+0x7c/0x100 [ 1492.319040][T18889] ? __bpf_prog_get+0x97/0x290 [ 1492.319058][T18889] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1492.319085][T18889] __sys_bpf+0x2265/0x4a30 [ 1492.319103][T18889] ? __pfx___sys_bpf+0x10/0x10 [ 1492.319115][T18889] ? find_held_lock+0x2b/0x80 [ 1492.319133][T18889] ? get_pid_task+0xfc/0x250 [ 1492.319149][T18889] ? get_pid_task+0xfc/0x250 [ 1492.319170][T18889] ? find_held_lock+0x2b/0x80 [ 1492.319191][T18889] ? rcu_read_lock_any_held+0x6a/0x90 [ 1492.319203][T18889] ? find_held_lock+0x2b/0x80 [ 1492.319219][T18889] ? ksys_write+0x190/0x250 [ 1492.319233][T18889] ? ksys_write+0x190/0x250 [ 1492.319247][T18889] ? lock_acquire+0x1d1/0x380 [ 1492.319271][T18889] ? fput+0x7c/0x100 [ 1492.319288][T18889] ? ksys_write+0x1ac/0x250 [ 1492.319304][T18889] ? __x64_sys_bpf+0xce/0x140 [ 1492.319316][T18889] __x64_sys_bpf+0xce/0x140 [ 1492.319330][T18889] ? do_syscall_64+0xae/0x790 [ 1492.319348][T18889] do_syscall_64+0x123/0x790 [ 1492.319367][T18889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.319379][T18889] RIP: 0033:0x7fa40f19e559 [ 1492.319392][T18889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1492.319403][T18889] RSP: 002b:00007fa410065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1492.319415][T18889] RAX: ffffffffffffffda RBX: 00007fa40f425fa0 RCX: 00007fa40f19e559 [ 1492.319423][T18889] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 1492.319431][T18889] RBP: 00007fa410065090 R08: 0000000000000000 R09: 0000000000000000 [ 1492.319437][T18889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1492.319445][T18889] R13: 00007fa40f426038 R14: 00007fa40f425fa0 R15: 00007ffd448ab4a8 [ 1492.319461][T18889] [ 1492.511741][T14780] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1492.661907][T14780] usb 10-1: Using ep0 maxpacket: 32 [ 1492.662463][T14780] usb 10-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1492.666050][T14780] usb 10-1: config index 0 descriptor too short (expected 19, got 18) [ 1492.668640][T14780] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.668654][T14780] usb 10-1: Product: syz [ 1492.668663][T14780] usb 10-1: Manufacturer: syz [ 1492.668672][T14780] usb 10-1: SerialNumber: syz [ 1492.670622][T14780] usb 10-1: config 0 descriptor?? [ 1492.737376][T14780] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1492.737401][T14780] dvb-usb: bulk message failed: -22 (2/0) [ 1492.772758][T14780] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1492.793540][T14780] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1492.793568][T14780] usb 10-1: media controller created [ 1492.869563][T14780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1493.004762][T14780] usb 10-1: selecting invalid altsetting 7 [ 1493.004776][T14780] cxusb: set interface failed [ 1493.004783][T14780] dvb-usb: bulk message failed: -22 (1/0) [ 1493.243122][T14780] DVB: Unable to find symbol lgdt330x_attach() [ 1493.243133][T14780] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1493.332042][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1493.466170][T14780] rc_core: IR keymap rc-dvico-portable not found [ 1493.466183][T14780] Registered IR keymap rc-empty [ 1493.466769][T14780] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 1493.467774][T14780] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input56 [ 1493.493984][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1493.516940][ T10] usb 3-1: config 1 has an invalid descriptor of length 190, skipping remainder of the config [ 1493.516972][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1493.516996][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.559115][T14780] dvb-usb: schedule remote query interval to 100 msecs. [ 1493.559128][T14780] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1493.597047][T14780] usb 10-1: USB disconnect, device number 84 [ 1493.599153][ T10] ttusb_dec_send_command: command bulk message failed: error -22 [ 1493.599247][ T10] ttusb-dec 3-1:1.0: probe with driver ttusb-dec failed with error -22 [ 1493.994077][T18906] netlink: 'syz.2.2783': attribute type 11 has an invalid length. [ 1494.085170][T14780] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1494.132107][T10497] usb 3-1: USB disconnect, device number 44 [ 1494.402000][T14780] usb 10-1: new full-speed USB device number 85 using dummy_hcd [ 1494.451609][ T30] audit: type=1400 audit(1792397682.363:1883): avc: denied { write } for pid=18892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1494.586438][T14780] usb 10-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1494.606843][T14780] usb 10-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1494.606859][T14780] usb 10-1: Product: syz [ 1494.606868][T14780] usb 10-1: Manufacturer: syz [ 1494.606884][T14780] usb 10-1: SerialNumber: syz [ 1494.650224][T14780] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1494.816237][ T30] audit: type=1400 audit(1792397682.733:1884): avc: denied { write } for pid=18926 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1494.896437][T18907] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1494.976335][T18928] netdevsim netdevsim2: Direct firmware load for . [ 1494.976335][T18928] failed with error -2 [ 1494.979222][ T30] audit: type=1400 audit(1792397682.893:1885): avc: denied { firmware_load } for pid=18927 comm="syz.2.2788" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1495.020203][T18928] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1495.020203][T18928] [ 1495.104501][T14780] vp7045: USB control message 'in' went wrong. [ 1495.104517][T14780] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1495.104543][T14780] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1495.143997][T14780] usb 10-1: USB disconnect, device number 85 [ 1495.554730][T18939] loop7: detected capacity change from 0 to 7 [ 1495.681299][T18939] Dev loop7: unable to read RDB block 7 [ 1495.681325][T18939] loop7: unable to read partition table [ 1495.681428][T18939] loop7: partition table beyond EOD, truncated [ 1495.681447][T18939] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1495.907982][T18940] Dev loop7: unable to read RDB block 7 [ 1495.908009][T18940] loop7: unable to read partition table [ 1495.908114][T18940] loop7: partition table beyond EOD, truncated [ 1496.666307][ T30] audit: type=1400 audit(1792397684.583:1886): avc: denied { watch_reads } for pid=18947 comm="syz.2.2792" path="/52/file1" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1496.821555][ T30] audit: type=1400 audit(1792397684.733:1887): avc: denied { write } for pid=18930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1496.849199][T10497] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1496.994907][T10497] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1496.997539][T10497] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.997555][T10497] usb 10-1: Product: syz [ 1496.997564][T10497] usb 10-1: Manufacturer: syz [ 1496.997573][T10497] usb 10-1: SerialNumber: syz [ 1497.151391][ T30] audit: type=1400 audit(1792397685.063:1888): avc: denied { write } for pid=18955 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1497.479827][T10497] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1497.479862][T10497] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1498.114666][ T30] audit: type=1400 audit(1792397686.033:1889): avc: denied { write } for pid=18961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1498.496143][ T30] audit: type=1400 audit(1792397686.413:1890): avc: denied { write } for pid=18973 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1499.327963][T10497] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1499.328618][T10497] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1499.382036][T14780] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1499.664468][T14780] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1499.665252][T14780] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1499.665282][T14780] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.665294][T14780] usb 3-1: config 0 has no interface number 0 [ 1499.667522][T14780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.667536][T14780] usb 3-1: Product: syz [ 1499.667559][T14780] usb 3-1: Manufacturer: syz [ 1499.667568][T14780] usb 3-1: SerialNumber: syz [ 1499.719163][T14780] usb 3-1: config 0 descriptor?? [ 1499.784583][T14780] hub 3-1:0.31: bad descriptor, ignoring hub [ 1499.795063][T14780] hub 3-1:0.31: probe with driver hub failed with error -5 [ 1499.812300][T14780] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1499.812338][T14780] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1499.812369][T14780] uvcvideo 3-1:0.31: Failed to create links for entity 32774 [ 1499.812379][T14780] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 1499.898538][T10497] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1499.898582][T10497] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1499.898897][T10497] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1499.938229][T10497] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1499.988939][T10497] usb 10-1: USB disconnect, device number 86 [ 1500.806128][ T30] audit: type=1400 audit(1792397688.723:1891): avc: denied { connect } for pid=18981 comm="syz.7.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1500.890197][T18858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1500.906003][T18858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1500.908345][T18858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1500.930415][T18858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1500.930866][T18858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1501.013459][T14780] usb 3-1: USB disconnect, device number 45 [ 1503.278285][T17895] Bluetooth: hci5: command tx timeout [ 1504.912866][T10497] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1505.031962][ T9494] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 1505.063337][T10497] usb 3-1: not running at top speed; connect to a high speed hub [ 1505.063356][T10497] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1505.065324][T10497] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.065352][T10497] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1505.065365][T10497] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1505.065388][T10497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.146140][T10497] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 1505.168263][T10497] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1505.171322][T10497] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 1505.171383][T10497] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 1505.195790][ T9494] usb 10-1: Using ep0 maxpacket: 32 [ 1505.202045][ T9494] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1505.214292][ T9494] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1505.214307][ T9494] usb 10-1: config 0 has no interface number 0 [ 1505.232963][ T9494] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.232978][ T9494] usb 10-1: Product: syz [ 1505.232987][ T9494] usb 10-1: Manufacturer: syz [ 1505.232997][ T9494] usb 10-1: SerialNumber: syz [ 1505.235147][ T9494] usb 10-1: config 0 descriptor?? [ 1505.274039][T10497] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1505.292803][T18858] Bluetooth: hci5: command tx timeout [ 1505.659977][ T9494] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1505.659999][ T9494] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1505.872131][T18988] rxe_eth0 speed is unknown, defaulting to 1000 [ 1505.979309][T10497] usb 3-1: USB disconnect, device number 46 [ 1506.014266][T10497] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1506.037903][T10497] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1506.038432][T10497] keyspan 3-1:1.0: device disconnected [ 1506.267952][ T9494] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1506.268096][ T9494] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1506.296197][ T9494] usb 10-1: USB disconnect, device number 87 [ 1506.517366][ T5851] bridge_slave_1: left allmulticast mode [ 1506.517384][ T5851] bridge_slave_1: left promiscuous mode [ 1506.517498][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.550746][ T5851] bridge_slave_0: left allmulticast mode [ 1506.550763][ T5851] bridge_slave_0: left promiscuous mode [ 1506.550871][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.696792][ T30] audit: type=1400 audit(1792397694.613:1892): avc: denied { mount } for pid=19015 comm="syz.2.2804" name="/" dev="autofs" ino=69470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1506.698526][T19016] FAULT_INJECTION: forcing a failure. [ 1506.698526][T19016] name failslab, interval 1, probability 0, space 0, times 0 [ 1506.698546][T19016] CPU: 0 UID: 0 PID: 19016 Comm: syz.2.2804 Tainted: G L syzkaller #0 PREEMPT(full) [ 1506.698563][T19016] Tainted: [L]=SOFTLOCKUP [ 1506.698568][T19016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1506.698576][T19016] Call Trace: [ 1506.698580][T19016] [ 1506.698585][T19016] dump_stack_lvl+0x100/0x190 [ 1506.698608][T19016] should_fail_ex.cold+0x5/0xa [ 1506.698626][T19016] should_failslab+0xc2/0x120 [ 1506.698651][T19016] __kmalloc_noprof+0xfc/0x840 [ 1506.698667][T19016] ? rcu_is_watching+0x13/0xc0 [ 1506.698685][T19016] ? tomoyo_encode2+0xfb/0x3c0 [ 1506.698707][T19016] tomoyo_encode2+0xfb/0x3c0 [ 1506.698728][T19016] tomoyo_encode+0x29/0x50 [ 1506.698745][T19016] tomoyo_realpath_from_path+0x18c/0x690 [ 1506.698760][T19016] tomoyo_path_number_perm+0x23c/0x580 [ 1506.698776][T19016] ? tomoyo_path_number_perm+0x22e/0x580 [ 1506.698792][T19016] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1506.698815][T19016] ? __lock_acquire+0x5c0/0x1f40 [ 1506.698837][T19016] ? __fget_files+0x34/0x3d0 [ 1506.698854][T19016] ? find_held_lock+0x2b/0x80 [ 1506.698871][T19016] ? hook_file_ioctl_common+0x140/0x440 [ 1506.698888][T19016] ? __fget_files+0x21f/0x3d0 [ 1506.698907][T19016] security_file_ioctl+0xd3/0x230 [ 1506.698927][T19016] __x64_sys_ioctl+0xb7/0x210 [ 1506.698943][T19016] do_syscall_64+0x123/0x790 [ 1506.698962][T19016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.698975][T19016] RIP: 0033:0x7fa40f19e559 [ 1506.698985][T19016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1506.698996][T19016] RSP: 002b:00007fa410065028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1506.699008][T19016] RAX: ffffffffffffffda RBX: 00007fa40f425fa0 RCX: 00007fa40f19e559 [ 1506.699016][T19016] RDX: 0000000000000000 RSI: 0000000080049370 RDI: 0000000000000007 [ 1506.699024][T19016] RBP: 00007fa410065090 R08: 0000000000000000 R09: 0000000000000000 [ 1506.699031][T19016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1506.699038][T19016] R13: 00007fa40f426038 R14: 00007fa40f425fa0 R15: 00007ffd448ab4a8 [ 1506.699055][T19016] [ 1506.699066][T19016] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1507.159476][T19026] netlink: 'syz.2.2805': attribute type 1 has an invalid length. [ 1507.234855][T19030] netlink: 'syz.8.2803': attribute type 1 has an invalid length. [ 1507.316877][ T5851] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1507.362128][T10497] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 1507.363742][ T5851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1507.364675][ T5851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1507.365171][ T5851] bond0 (unregistering): Released all slaves [ 1507.371900][T18858] Bluetooth: hci5: command tx timeout [ 1507.417435][ T5851] bond1 (unregistering): Released all slaves [ 1507.458446][ T5851] bond2 (unregistering): Released all slaves [ 1507.486700][ T5851] bond3 (unregistering): Released all slaves [ 1507.507395][ T30] audit: type=1400 audit(1792397695.423:1893): avc: denied { write } for pid=19013 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1507.545717][T10497] usb 10-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1507.548338][T10497] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.548365][T10497] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.588935][ T5851] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1507.603186][ T5851] bond4 (unregistering): Released all slaves [ 1507.689269][T10497] rtsx_usb 10-1:1.0: probe with driver rtsx_usb failed with error -22 [ 1507.729757][T19026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1507.790438][T18858] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 1507.790453][T18858] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 1507.808808][T19023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.809030][T19023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1507.810440][T10497] usb 10-1: USB disconnect, device number 88 [ 1507.880869][T19032] macvlan2: entered promiscuous mode [ 1507.880882][T19032] macvlan2: entered allmulticast mode [ 1507.881282][T19032] bond2: entered promiscuous mode [ 1507.881605][T19032] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1507.923722][ T30] audit: type=1400 audit(1792397695.843:1894): avc: denied { write } for pid=19039 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1507.928201][T19032] bond2: left promiscuous mode [ 1508.025565][ T5851] U: left promiscuous mode [ 1508.273545][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1508.485180][T19022] bond1: (slave erspan0): making interface the new active one [ 1508.506596][T19022] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 1508.617372][ T30] audit: type=1400 audit(1792397696.533:1895): avc: denied { read } for pid=19046 comm="syz.9.2808" name="/" dev="configfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1508.617405][ T30] audit: type=1400 audit(1792397696.533:1896): avc: denied { read open } for pid=19046 comm="syz.9.2808" path="/" dev="configfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1508.657723][ T30] audit: type=1400 audit(1792397696.543:1897): avc: denied { write } for pid=19048 comm="syz.9.2808" name="/" dev="configfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1508.657757][ T30] audit: type=1400 audit(1792397696.543:1898): avc: denied { create } for pid=19048 comm="syz.9.2808" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 1509.913108][T18858] Bluetooth: hci5: command tx timeout [ 1509.958099][T19055] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 1510.039333][T19058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2810'. [ 1511.254136][T19066] jffs2: notice: (19066) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1512.234897][ T30] audit: type=1400 audit(1792397700.153:1899): avc: denied { write } for pid=19065 comm="syz.2.2813" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1513.501979][T14780] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1513.705235][ T30] audit: type=1400 audit(1792397701.623:1900): avc: denied { ioctl } for pid=19078 comm="syz.9.2817" path="socket:[69651]" dev="sockfs" ino=69651 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1513.958114][T10497] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1513.994882][ T5851] hsr_slave_0: left promiscuous mode [ 1513.995254][ T5851] hsr_slave_1: left promiscuous mode [ 1513.995679][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1513.996016][ T5851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1514.858945][ T9494] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1514.980971][ T30] audit: type=1400 audit(1792397702.893:1901): avc: denied { write } for pid=19057 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1515.007635][T10497] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1515.020231][T10497] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.020247][T10497] usb 9-1: Product: syz [ 1515.020256][T10497] usb 9-1: Manufacturer: syz [ 1515.020265][T10497] usb 9-1: SerialNumber: syz [ 1515.047294][ T9494] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1515.049224][ T9494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.073082][ T9494] usb 3-1: config 0 descriptor?? [ 1515.221770][ T30] audit: type=1400 audit(1792397703.133:1902): avc: denied { write } for pid=19096 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1515.340204][ T5851] team0 (unregistering): Port device team_slave_1 removed [ 1515.357307][ T5851] team0 (unregistering): Port device team_slave_0 removed [ 1515.528232][T10497] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1515.528268][T10497] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1515.555508][T19083] openvswitch: netlink: Message has 32 unknown bytes. [ 1515.570163][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1515.677263][T18988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.677316][T18988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.677404][T18988] bridge_slave_0: entered allmulticast mode [ 1515.681255][T18988] bridge_slave_0: entered promiscuous mode [ 1515.714034][T18988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.714085][T18988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.714179][T18988] bridge_slave_1: entered allmulticast mode [ 1515.717931][T18988] bridge_slave_1: entered promiscuous mode [ 1515.837601][T18988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.853906][T18988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.868955][ T5851] IPVS: stop unused estimator thread 0... [ 1515.960586][T18988] team0: Port device team_slave_0 added [ 1515.992985][T18988] team0: Port device team_slave_1 added [ 1516.067333][T18988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.067362][T18988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.067376][T18988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.125111][T18988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.125122][T18988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1516.125136][T18988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1516.244544][ T30] audit: type=1400 audit(1792397704.163:1903): avc: denied { read } for pid=19112 comm="syz.9.2821" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1516.246664][ T30] audit: type=1400 audit(1792397704.163:1904): avc: denied { open } for pid=19112 comm="syz.9.2821" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1516.325769][T19113] FAULT_INJECTION: forcing a failure. [ 1516.325769][T19113] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.325791][T19113] CPU: 0 UID: 0 PID: 19113 Comm: syz.9.2821 Tainted: G L syzkaller #0 PREEMPT(full) [ 1516.325808][T19113] Tainted: [L]=SOFTLOCKUP [ 1516.325813][T19113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1516.325820][T19113] Call Trace: [ 1516.325825][T19113] [ 1516.325830][T19113] dump_stack_lvl+0x100/0x190 [ 1516.325853][T19113] should_fail_ex.cold+0x5/0xa [ 1516.325870][T19113] should_failslab+0xc2/0x120 [ 1516.325891][T19113] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1516.325907][T19113] ? __send_signal_locked+0x1d1/0x1430 [ 1516.325929][T19113] __send_signal_locked+0x1d1/0x1430 [ 1516.325951][T19113] send_signal_locked+0x15e/0xa00 [ 1516.325963][T19113] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1516.325980][T19113] ? __pfx_send_signal_locked+0x10/0x10 [ 1516.325992][T19113] ? lock_task_sighand+0x13c/0x340 [ 1516.326014][T19113] ? lock_task_sighand+0x146/0x340 [ 1516.326033][T19113] do_send_specific+0x1e8/0x360 [ 1516.326048][T19113] ? __pfx_do_send_specific+0x10/0x10 [ 1516.326063][T19113] ? __pfx_from_kuid_munged+0x10/0x10 [ 1516.326082][T19113] do_tkill+0x17f/0x200 [ 1516.326096][T19113] ? __pfx_do_tkill+0x10/0x10 [ 1516.326109][T19113] ? lockdep_softirqs_on+0xad/0x120 [ 1516.326130][T19113] __x64_sys_tkill+0x6b/0xa0 [ 1516.326146][T19113] do_syscall_64+0x123/0x790 [ 1516.326166][T19113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.326179][T19113] RIP: 0033:0x7f9dda39e559 [ 1516.326189][T19113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.326200][T19113] RSP: 002b:00007f9ddb2bc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 1516.326212][T19113] RAX: ffffffffffffffda RBX: 00007f9dda625fa0 RCX: 00007f9dda39e559 [ 1516.326220][T19113] RDX: 0000000000000000 RSI: 0000000000000021 RDI: 000000000000042a [ 1516.326227][T19113] RBP: 00007f9ddb2bc090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.326235][T19113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.326242][T19113] R13: 00007f9dda626038 R14: 00007f9dda625fa0 R15: 00007fffafbf7128 [ 1516.326259][T19113] [ 1516.635747][T18988] hsr_slave_0: entered promiscuous mode [ 1516.636316][T18988] hsr_slave_1: entered promiscuous mode [ 1516.730799][ T9494] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1516.731127][ T9494] [drm:udl_init] *ERROR* Selecting channel failed [ 1516.794691][ T9494] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 1516.794721][ T9494] [drm] Initialized udl on minor 1 [ 1516.800680][T19118] ip_tables: iptables: counters copy to user failed while replacing table [ 1516.815664][T10497] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1516.824687][T10497] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1516.858375][ T9494] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1516.858602][ T9494] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1516.890606][ T9494] usb 3-1: USB disconnect, device number 47 [ 1516.901071][T14775] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1517.019271][T19125] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2824'. [ 1517.251470][T10497] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1517.251524][T10497] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1517.252683][T10497] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1517.290396][T10497] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1517.319684][T10497] usb 9-1: USB disconnect, device number 51 [ 1517.425612][ T30] audit: type=1400 audit(1792397705.343:1905): avc: denied { write } for pid=19107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1517.471870][T14775] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1517.636788][T14775] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1517.636818][T14775] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1517.638309][T14775] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.638324][T14775] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1517.638349][T14775] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1517.639804][T14775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1517.639819][T14775] usb 3-1: Product: syz [ 1517.639832][T14775] usb 3-1: Manufacturer: syz [ 1517.717919][ T30] audit: type=1400 audit(1792397705.583:1906): avc: denied { write } for pid=19137 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1517.750758][T14775] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1517.936282][T14775] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC error code control 2 on unit 48: 0 (exp. 1). [ 1517.974086][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1518.961531][T14775] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 48: -71 (exp. 1). [ 1518.972858][T14775] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 48: -71 (exp. 1). [ 1518.973601][T14775] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 1518.973946][T14775] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 1518.974779][T14775] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 48: -71 (exp. 1). [ 1518.984690][T14775] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 1519.004584][T14775] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 1519.015943][T14775] uvcvideo 3-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1). [ 1519.047450][T14775] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 1519.062039][T14775] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 1519.075924][T14775] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 1519.077520][T14775] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 18 on unit 48: -71 (exp. 1). [ 1519.077683][T14775] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 1519.101915][ T9494] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1519.129819][T14775] usb 3-1: USB disconnect, device number 48 [ 1519.242974][ T9494] usb 9-1: device descriptor read/64, error -71 [ 1519.396629][T19151] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2828'. [ 1519.421741][ T10] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 1519.534156][ T9494] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1519.674739][ T10] usb 10-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1519.675501][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.675530][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.665284][ T9494] usb 9-1: device descriptor read/64, error -71 [ 1520.679217][ T10] rtsx_usb 10-1:1.0: probe with driver rtsx_usb failed with error -22 [ 1520.768794][T17895] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 1520.768811][T17895] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 1520.827735][ T9494] usb usb9-port1: attempt power cycle [ 1520.843894][T19143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1520.844130][T19143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.872378][T14780] usb 10-1: USB disconnect, device number 90 [ 1520.964920][T19163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=100 sclass=netlink_tcpdiag_socket pid=19163 comm=syz.7.2831 [ 1521.073803][ T30] audit: type=1400 audit(1792397708.993:1907): avc: denied { write } for pid=19145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1522.190493][T19174] tipc: Started in network mode [ 1522.190516][T19174] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 1522.190678][T19174] tipc: Enabled bearer , priority 1 [ 1522.381449][T18988] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1522.393245][ T30] audit: type=1400 audit(1792397710.313:1908): avc: denied { write } for pid=19172 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1522.438843][T18988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1522.439510][T18988] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1522.512708][T18988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1522.532407][T18988] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1522.563408][T18988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1522.563878][T18988] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1522.605701][T18988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1522.609858][T19182] FAULT_INJECTION: forcing a failure. [ 1522.609858][T19182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1522.609879][T19182] CPU: 0 UID: 0 PID: 19182 Comm: syz.8.2836 Tainted: G L syzkaller #0 PREEMPT(full) [ 1522.609898][T19182] Tainted: [L]=SOFTLOCKUP [ 1522.609903][T19182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1522.609911][T19182] Call Trace: [ 1522.609915][T19182] [ 1522.609920][T19182] dump_stack_lvl+0x100/0x190 [ 1522.609943][T19182] should_fail_ex.cold+0x5/0xa [ 1522.609961][T19182] _copy_to_user+0x32/0xd0 [ 1522.609980][T19182] simple_read_from_buffer+0xcb/0x170 [ 1522.610001][T19182] proc_fail_nth_read+0x1af/0x230 [ 1522.610020][T19182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1522.610045][T19182] ? rw_verify_area+0xce/0x6d0 [ 1522.610058][T19182] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1522.610075][T19182] vfs_read+0x1e4/0xb40 [ 1522.610090][T19182] ? lock_acquire+0x1d1/0x380 [ 1522.610104][T19182] ? __fget_files+0x34/0x3d0 [ 1522.610120][T19182] ? __pfx_vfs_read+0x10/0x10 [ 1522.610132][T19182] ? find_held_lock+0x2b/0x80 [ 1522.610150][T19182] ? __fget_files+0x215/0x3d0 [ 1522.610170][T19182] ? __fget_files+0x21f/0x3d0 [ 1522.610191][T19182] ksys_read+0x12a/0x250 [ 1522.610205][T19182] ? __pfx_ksys_read+0x10/0x10 [ 1522.610224][T19182] do_syscall_64+0x123/0x790 [ 1522.610244][T19182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.610257][T19182] RIP: 0033:0x7f541d55ed8e [ 1522.610267][T19182] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1522.610278][T19182] RSP: 002b:00007f541e4aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1522.610290][T19182] RAX: ffffffffffffffda RBX: 00007f541e4af6c0 RCX: 00007f541d55ed8e [ 1522.610298][T19182] RDX: 000000000000000f RSI: 00007f541e4af0a0 RDI: 0000000000000003 [ 1522.610305][T19182] RBP: 00007f541e4af090 R08: 0000000000000000 R09: 0000000000000000 [ 1522.610312][T19182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1522.610319][T19182] R13: 00007f541d826038 R14: 00007f541d825fa0 R15: 00007ffef2e97d58 [ 1522.610337][T19182] [ 1522.914072][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1523.087040][ T30] audit: type=1400 audit(1792397711.003:1909): avc: denied { remount } for pid=19194 comm="syz.8.2839" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1524.100547][T14780] tipc: Node number set to 43690 [ 1525.104008][T18988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1526.316805][T18988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1526.369207][T14509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.369261][T14509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1526.440665][T14507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.440718][T14507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.696889][T14775] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 1528.653881][T14775] usb 10-1: device descriptor read/64, error -71 [ 1528.828902][T19226] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2845'. [ 1528.830350][T19226] bond0: (slave bond_slave_0): Releasing backup interface [ 1528.871553][T19226] bond_slave_0: entered promiscuous mode [ 1528.871567][T19226] bond_slave_0: entered allmulticast mode [ 1528.912713][T14775] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 1528.992887][ T10] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1529.043139][T14775] usb 10-1: device descriptor read/64, error -71 [ 1529.304158][T14775] usb usb10-port1: attempt power cycle [ 1529.346556][ T10] usb 9-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1529.395489][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.395518][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.771921][T14775] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 1530.118584][ T10] rtsx_usb 9-1:1.0: probe with driver rtsx_usb failed with error -22 [ 1530.186333][T17895] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 1530.186365][T17895] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 1530.270704][T19220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1530.270963][T19220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.323201][T10503] usb 9-1: USB disconnect, device number 55 [ 1530.360464][T14775] usb 10-1: device descriptor read/8, error -71 [ 1530.415512][ T30] audit: type=1400 audit(1792397718.333:1910): avc: denied { write } for pid=19197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1531.791303][ T30] audit: type=1400 audit(1792397719.703:1911): avc: denied { write } for pid=19254 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1532.037806][T19262] FAULT_INJECTION: forcing a failure. [ 1532.037806][T19262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1532.037829][T19262] CPU: 0 UID: 0 PID: 19262 Comm: syz.8.2850 Tainted: G L syzkaller #0 PREEMPT(full) [ 1532.037845][T19262] Tainted: [L]=SOFTLOCKUP [ 1532.037850][T19262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1532.037857][T19262] Call Trace: [ 1532.037862][T19262] [ 1532.037867][T19262] dump_stack_lvl+0x100/0x190 [ 1532.037889][T19262] should_fail_ex.cold+0x5/0xa [ 1532.037907][T19262] _copy_to_iter+0x5a4/0x1720 [ 1532.037928][T19262] ? __pfx__copy_to_iter+0x10/0x10 [ 1532.037943][T19262] ? igmp_mc_seq_show+0x5a2/0x8c0 [ 1532.037955][T19262] ? igmp_mc_seq_show+0x5a8/0x8c0 [ 1532.037968][T19262] ? find_held_lock+0x2b/0x80 [ 1532.037986][T19262] ? igmp_mc_seq_stop+0xab/0x150 [ 1532.037997][T19262] ? igmp_mc_seq_stop+0xab/0x150 [ 1532.038013][T19262] seq_read_iter+0xdab/0x1270 [ 1532.038038][T19262] seq_read+0x344/0x4d0 [ 1532.038053][T19262] ? __pfx_seq_read+0x10/0x10 [ 1532.038068][T19262] ? get_pid_task+0x2a/0x250 [ 1532.038093][T19262] ? lock_acquire+0x1d1/0x380 [ 1532.038106][T19262] ? fdget_pos+0x2aa/0x380 [ 1532.038119][T19262] ? selinux_file_permission+0x8f/0x6d0 [ 1532.038141][T19262] ? __pfx_seq_read+0x10/0x10 [ 1532.038156][T19262] proc_reg_read+0x240/0x330 [ 1532.038170][T19262] ? __pfx_proc_reg_read+0x10/0x10 [ 1532.038184][T19262] vfs_read+0x1e4/0xb40 [ 1532.038199][T19262] ? lock_acquire+0x1d1/0x380 [ 1532.038212][T19262] ? __fget_files+0x34/0x3d0 [ 1532.038229][T19262] ? __pfx_vfs_read+0x10/0x10 [ 1532.038242][T19262] ? find_held_lock+0x2b/0x80 [ 1532.038259][T19262] ? __fget_files+0x215/0x3d0 [ 1532.038278][T19262] ? __fget_files+0x21f/0x3d0 [ 1532.038300][T19262] ksys_read+0x12a/0x250 [ 1532.038314][T19262] ? __pfx_ksys_read+0x10/0x10 [ 1532.038333][T19262] do_syscall_64+0x123/0x790 [ 1532.038353][T19262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.038365][T19262] RIP: 0033:0x7f541d59e559 [ 1532.038375][T19262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.038387][T19262] RSP: 002b:00007f541e48e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1532.038399][T19262] RAX: ffffffffffffffda RBX: 00007f541d826090 RCX: 00007f541d59e559 [ 1532.038408][T19262] RDX: 0000000000002020 RSI: 0000200000000040 RDI: 0000000000000008 [ 1532.038415][T19262] RBP: 00007f541e48e090 R08: 0000000000000000 R09: 0000000000000000 [ 1532.038422][T19262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1532.038430][T19262] R13: 00007f541d826128 R14: 00007f541d826090 R15: 00007ffef2e97d58 [ 1532.038447][T19262] [ 1532.664974][T18988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1532.873639][T19275] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2855'. [ 1532.967312][ T9494] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1533.536761][T18988] veth0_vlan: entered promiscuous mode [ 1533.572484][T18988] veth1_vlan: entered promiscuous mode [ 1533.633394][ T9494] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1533.636552][ T9494] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1533.636567][ T9494] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.636580][ T9494] usb 3-1: config 0 has no interface number 0 [ 1533.678895][ T9494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.678910][ T9494] usb 3-1: Product: syz [ 1533.678924][ T9494] usb 3-1: Manufacturer: syz [ 1533.678933][ T9494] usb 3-1: SerialNumber: syz [ 1533.700909][ T9494] usb 3-1: config 0 descriptor?? [ 1533.716309][T18988] veth0_macvtap: entered promiscuous mode [ 1533.729787][ T9494] hub 3-1:0.31: bad descriptor, ignoring hub [ 1533.729802][ T9494] hub 3-1:0.31: probe with driver hub failed with error -5 [ 1533.730682][ T9494] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1533.730719][ T9494] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1533.773855][ T9494] uvcvideo 3-1:0.31: Failed to create links for entity 32774 [ 1533.773869][ T9494] uvcvideo 3-1:0.31: Failed to register entities (-22). [ 1533.776702][T18988] veth1_macvtap: entered promiscuous mode [ 1533.844240][T18988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1533.860290][T18988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1533.997342][T12110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.997550][T12110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.997631][T12110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1533.997650][T12110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.053612][T14775] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1534.146537][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.146550][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.204782][T14775] usb 9-1: Using ep0 maxpacket: 8 [ 1534.208106][T14775] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1534.208867][T14775] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1534.208894][T14775] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1534.208908][T14775] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1534.208922][T14775] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1534.208936][T14775] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1534.208958][T14775] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.217323][T10503] usb 3-1: USB disconnect, device number 49 [ 1534.350191][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1534.350205][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1534.434988][T14775] usb 9-1: usb_control_msg returned -32 [ 1534.435014][T14775] usbtmc 9-1:16.0: can't read capabilities [ 1534.480469][ T30] audit: type=1400 audit(1792397722.393:1912): avc: denied { write } for pid=19268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1534.628983][ T30] audit: type=1400 audit(1792397722.543:1913): avc: denied { write } for pid=19292 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1534.791996][T14775] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1535.362139][T14775] usb 1-1: Using ep0 maxpacket: 32 [ 1535.447607][T14775] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1535.491171][T14775] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 1535.631761][T14775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.631779][T14775] usb 1-1: Product: syz [ 1535.631788][T14775] usb 1-1: Manufacturer: syz [ 1535.631796][T14775] usb 1-1: SerialNumber: syz [ 1535.966430][T14775] usb 1-1: config 0 descriptor?? [ 1535.992928][T14775] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1535.992955][T14775] dvb-usb: bulk message failed: -22 (2/0) [ 1536.089821][T14775] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1536.104010][T14775] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1536.104039][T14775] usb 1-1: media controller created [ 1536.157941][T14775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1536.229689][T14775] usb 1-1: selecting invalid altsetting 7 [ 1536.229703][T14775] cxusb: set interface failed [ 1536.229710][T14775] dvb-usb: bulk message failed: -22 (1/0) [ 1536.290340][ T30] audit: type=1400 audit(1792397724.203:1914): avc: denied { call } for pid=19305 comm="syz.2.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1536.379083][T14775] DVB: Unable to find symbol lgdt330x_attach() [ 1536.379093][T14775] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1536.537614][T14775] rc_core: IR keymap rc-dvico-portable not found [ 1536.537626][T14775] Registered IR keymap rc-empty [ 1536.538208][T14775] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1536.571523][T14775] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input57 [ 1536.583678][T14775] dvb-usb: schedule remote query interval to 100 msecs. [ 1536.583690][T14775] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1536.613034][T14775] usb 1-1: USB disconnect, device number 27 [ 1536.637454][ T30] audit: type=1400 audit(1792397724.553:1915): avc: denied { read } for pid=19317 comm="syz.7.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1536.781115][T14775] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1536.813177][T10503] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 1536.956529][ T30] audit: type=1400 audit(1792397724.873:1916): avc: denied { write } for pid=19296 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1536.987542][T10503] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1536.989830][T10503] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.015246][T10503] usb 10-1: config 0 descriptor?? [ 1537.028628][T19329] 9p: Bad value for 'wfdno' [ 1537.037921][T14775] usb 9-1: USB disconnect, device number 56 [ 1537.142642][ T9494] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1537.924205][ T9494] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1537.925411][ T9494] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.925452][ T9494] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1537.925473][ T9494] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1537.925488][ T9494] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1537.925511][ T9494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.929307][T19315] openvswitch: netlink: Message has 32 unknown bytes. [ 1538.105639][ T30] audit: type=1400 audit(1792397726.023:1917): avc: denied { write } for pid=19333 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1538.240817][T19337] input: syz0 as /devices/virtual/input/input58 [ 1538.416053][T10498] usb 3-1: USB disconnect, device number 50 [ 1539.140911][T10503] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1539.141412][T10503] [drm:udl_init] *ERROR* Selecting channel failed [ 1539.174868][ T30] audit: type=1400 audit(1792397727.093:1918): avc: denied { write } for pid=19349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1539.214510][T10503] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 1539.214525][T10503] [drm] Initialized udl on minor 1 [ 1539.218329][T10503] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1539.218553][T10503] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1539.259087][T10503] usb 10-1: USB disconnect, device number 95 [ 1539.267375][ T10] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1539.268499][ T10] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1539.475952][ T30] audit: type=1400 audit(1792397727.393:1919): avc: denied { write } for pid=19368 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1539.632368][ T9494] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1539.864148][ T9494] usb 3-1: Using ep0 maxpacket: 32 [ 1539.864781][ T9494] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1539.865674][ T9494] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1539.865696][ T9494] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1539.865717][ T9494] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1539.865733][ T9494] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1539.865750][ T9494] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1539.868871][ T9494] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1539.868886][ T9494] usb 3-1: Product: syz [ 1539.868895][ T9494] usb 3-1: Manufacturer: syz [ 1539.868904][ T9494] usb 3-1: SerialNumber: syz [ 1539.921073][ T9494] usb 3-1: config 0 descriptor?? [ 1539.937918][ T9494] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1540.701214][ T9494] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1540.729243][ T9494] usb 3-1: USB disconnect, device number 51 [ 1541.612182][ T9494] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1541.932941][T19387] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2877'. [ 1542.012290][T10503] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 1542.159968][T19396] nft_compat: unsupported protocol 60 [ 1542.856691][ T9494] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1542.856767][T10503] usb 10-1: Using ep0 maxpacket: 32 [ 1542.879279][T10503] usb 10-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1542.892302][T10503] usb 10-1: config index 0 descriptor too short (expected 19, got 18) [ 1542.899671][T10503] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.899696][T10503] usb 10-1: Product: syz [ 1542.899705][T10503] usb 10-1: Manufacturer: syz [ 1542.899714][T10503] usb 10-1: SerialNumber: syz [ 1542.938821][T10503] usb 10-1: config 0 descriptor?? [ 1542.952551][T10503] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1542.952576][T10503] dvb-usb: bulk message failed: -22 (2/0) [ 1542.993931][T10503] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1542.999045][T10503] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1542.999073][T10503] usb 10-1: media controller created [ 1543.038136][ T30] audit: type=1400 audit(1792397730.953:1920): avc: denied { write } for pid=19370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1543.065931][ T9494] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1543.078315][ T9494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.091445][ T9494] usb 3-1: config 0 descriptor?? [ 1543.106622][ T9494] pwc: Samsung MPC-C10 USB webcam detected. [ 1543.108655][T10503] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1543.175571][T10503] usb 10-1: selecting invalid altsetting 7 [ 1543.175584][T10503] cxusb: set interface failed [ 1543.175591][T10503] dvb-usb: bulk message failed: -22 (1/0) [ 1543.320606][T10503] DVB: Unable to find symbol lgdt330x_attach() [ 1543.320618][T10503] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1543.320723][ T9494] pwc: send_video_command error -71 [ 1543.320730][ T9494] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1543.320787][ T9494] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1543.371806][ T9494] usb 3-1: USB disconnect, device number 52 [ 1543.469596][ T30] audit: type=1400 audit(1792397731.383:1921): avc: denied { write } for pid=19404 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1543.494962][T10503] rc_core: IR keymap rc-dvico-portable not found [ 1543.494977][T10503] Registered IR keymap rc-empty [ 1543.495635][T10503] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 1543.496661][T10503] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input59 [ 1543.533793][T10503] dvb-usb: schedule remote query interval to 100 msecs. [ 1543.533805][T10503] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1543.560248][T10503] usb 10-1: USB disconnect, device number 96 [ 1543.685902][T10503] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1543.852562][ T9494] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1543.884743][ T30] audit: type=1400 audit(1792397731.803:1922): avc: denied { ioctl } for pid=19411 comm="syz.9.2884" path="socket:[71191]" dev="sockfs" ino=71191 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1543.887926][ T30] audit: type=1400 audit(1792397731.803:1923): avc: denied { bind } for pid=19411 comm="syz.9.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1543.888112][ T30] audit: type=1400 audit(1792397731.803:1924): avc: denied { connect } for pid=19411 comm="syz.9.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1544.015437][ T9494] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1544.017707][ T9494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.019939][ T9494] usb 3-1: config 0 descriptor?? [ 1544.049357][ T9494] pwc: Samsung MPC-C10 USB webcam detected. [ 1544.212052][T19419] /dev/sg0: Can't lookup blockdev [ 1544.214756][ T30] audit: type=1400 audit(1792397732.133:1925): avc: denied { mount } for pid=19415 comm="syz.9.2885" name="/" dev="rpc_pipefs" ino=71277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1544.552010][ T9494] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1544.552921][ T9494] pwc: recv_control_msg error -32 req 02 val 2700 [ 1544.553436][ T9494] pwc: recv_control_msg error -32 req 04 val 1700 [ 1544.553964][ T9494] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1544.554505][ T9494] pwc: recv_control_msg error -32 req 04 val 1000 [ 1544.555013][ T9494] pwc: recv_control_msg error -32 req 04 val 1300 [ 1544.555562][ T9494] pwc: recv_control_msg error -32 req 04 val 1400 [ 1544.556117][ T9494] pwc: recv_control_msg error -32 req 02 val 2000 [ 1544.556526][ T9494] pwc: recv_control_msg error -32 req 02 val 2100 [ 1544.556943][ T9494] pwc: recv_control_msg error -32 req 02 val 2200 [ 1544.557518][ T9494] pwc: recv_control_msg error -32 req 06 val 0600 [ 1545.668520][ T9494] pwc: recv_control_msg error -71 req 02 val 2500 [ 1545.683472][ T9494] pwc: recv_control_msg error -71 req 02 val 2400 [ 1545.684441][ T9494] pwc: recv_control_msg error -71 req 02 val 2600 [ 1545.685310][ T9494] pwc: recv_control_msg error -71 req 02 val 2900 [ 1545.686492][ T9494] pwc: recv_control_msg error -71 req 02 val 2800 [ 1545.687521][ T9494] pwc: recv_control_msg error -71 req 04 val 1100 [ 1545.687794][ T9494] pwc: recv_control_msg error -71 req 04 val 1200 [ 1545.690709][ T9494] pwc: Registered as video103. [ 1545.816170][ T9494] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input60 [ 1545.840721][ T9494] usb 3-1: USB disconnect, device number 53 [ 1545.918280][ T30] audit: type=1400 audit(1792397733.833:1926): avc: denied { unmount } for pid=11449 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1545.946707][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.946739][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.996238][T19431] FAULT_INJECTION: forcing a failure. [ 1545.996238][T19431] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.996260][T19431] CPU: 0 UID: 0 PID: 19431 Comm: syz.2.2886 Tainted: G L syzkaller #0 PREEMPT(full) [ 1545.996278][T19431] Tainted: [L]=SOFTLOCKUP [ 1545.996283][T19431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1545.996291][T19431] Call Trace: [ 1545.996296][T19431] [ 1545.996301][T19431] dump_stack_lvl+0x100/0x190 [ 1545.996322][T19431] should_fail_ex.cold+0x5/0xa [ 1545.996340][T19431] should_failslab+0xc2/0x120 [ 1545.996360][T19431] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 1545.996377][T19431] ? sock_alloc_inode+0x26/0x2c0 [ 1545.996393][T19431] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1545.996408][T19431] sock_alloc_inode+0x26/0x2c0 [ 1545.996422][T19431] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1545.996435][T19431] alloc_inode+0x68/0x250 [ 1545.996450][T19431] sock_alloc+0x44/0x280 [ 1545.996465][T19431] do_accept+0xf9/0x530 [ 1545.996481][T19431] ? do_raw_spin_lock+0x128/0x260 [ 1545.996498][T19431] ? __pfx_do_accept+0x10/0x10 [ 1545.996525][T19431] __sys_accept4+0x108/0x200 [ 1545.996542][T19431] ? __pfx___sys_accept4+0x10/0x10 [ 1545.996558][T19431] ? ksys_write+0x1ac/0x250 [ 1545.996573][T19431] ? __pfx_ksys_write+0x10/0x10 [ 1545.996590][T19431] __x64_sys_accept+0x74/0xb0 [ 1545.996606][T19431] ? lockdep_hardirqs_on+0x7d/0x110 [ 1545.996624][T19431] do_syscall_64+0x123/0x790 [ 1545.996643][T19431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.996655][T19431] RIP: 0033:0x7fa40f19e559 [ 1545.996666][T19431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1545.996678][T19431] RSP: 002b:00007fa410065028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1545.996690][T19431] RAX: ffffffffffffffda RBX: 00007fa40f425fa0 RCX: 00007fa40f19e559 [ 1545.996698][T19431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1545.996705][T19431] RBP: 00007fa410065090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.996712][T19431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.996719][T19431] R13: 00007fa40f426038 R14: 00007fa40f425fa0 R15: 00007ffd448ab4a8 [ 1545.996736][T19431] [ 1546.171563][ T30] audit: type=1400 audit(1792397734.083:1927): avc: denied { write } for pid=19409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1547.292855][T19437] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1547.293024][T19437] qnx6: wrong signature (magic) in superblock #1. [ 1547.293030][T19437] qnx6: unable to read the first superblock [ 1547.352529][T14775] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1547.378965][T19446] FAULT_INJECTION: forcing a failure. [ 1547.378965][T19446] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.378986][T19446] CPU: 0 UID: 0 PID: 19446 Comm: syz.7.2890 Tainted: G L syzkaller #0 PREEMPT(full) [ 1547.379002][T19446] Tainted: [L]=SOFTLOCKUP [ 1547.379007][T19446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1547.379015][T19446] Call Trace: [ 1547.379019][T19446] [ 1547.379024][T19446] dump_stack_lvl+0x100/0x190 [ 1547.379046][T19446] should_fail_ex.cold+0x5/0xa [ 1547.379064][T19446] should_failslab+0xc2/0x120 [ 1547.379082][T19446] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1547.379098][T19446] ? __send_signal_locked+0x1d1/0x1430 [ 1547.379123][T19446] __send_signal_locked+0x1d1/0x1430 [ 1547.379145][T19446] send_signal_locked+0x15e/0xa00 [ 1547.379163][T19446] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1547.379181][T19446] ? __pfx_send_signal_locked+0x10/0x10 [ 1547.379193][T19446] ? lock_task_sighand+0x13c/0x340 [ 1547.379215][T19446] ? lock_task_sighand+0x146/0x340 [ 1547.379245][T19446] do_send_specific+0x1e8/0x360 [ 1547.379260][T19446] ? __pfx_do_send_specific+0x10/0x10 [ 1547.379274][T19446] ? __pfx_from_kuid_munged+0x10/0x10 [ 1547.379294][T19446] do_tkill+0x17f/0x200 [ 1547.379308][T19446] ? __pfx_do_tkill+0x10/0x10 [ 1547.379326][T19446] ? __pfx_ksys_write+0x10/0x10 [ 1547.379344][T19446] __x64_sys_tkill+0x6b/0xa0 [ 1547.379360][T19446] do_syscall_64+0x123/0x790 [ 1547.379380][T19446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.379393][T19446] RIP: 0033:0x7f9412b9e559 [ 1547.379403][T19446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1547.379414][T19446] RSP: 002b:00007f94139b8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 1547.379426][T19446] RAX: ffffffffffffffda RBX: 00007f9412e25fa0 RCX: 00007f9412b9e559 [ 1547.379434][T19446] RDX: 0000000000000000 RSI: 0000000000000021 RDI: 0000000000000453 [ 1547.379441][T19446] RBP: 00007f94139b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.379449][T19446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.379456][T19446] R13: 00007f9412e26038 R14: 00007f9412e25fa0 R15: 00007ffff0d26668 [ 1547.379472][T19446] [ 1547.631927][T14775] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1547.651349][T14775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.651365][T14775] usb 1-1: Product: syz [ 1547.651374][T14775] usb 1-1: Manufacturer: syz [ 1547.651383][T14775] usb 1-1: SerialNumber: syz [ 1547.684335][T14775] ums-karma 1-1:1.0: USB Mass Storage device detected [ 1547.714217][T14775] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1547.714217][T14775] Please send a copy of this message to and [ 1547.786753][ T30] audit: type=1400 audit(1792397735.703:1928): avc: denied { write } for pid=19447 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1547.842857][T19451] netlink: 'syz.2.2892': attribute type 1 has an invalid length. [ 1548.203721][T14775] ums-karma 1-1:1.0: probe with driver ums-karma failed with error -5 [ 1548.227466][T14775] usb 1-1: USB disconnect, device number 28 [ 1548.281873][ T10] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 1548.511762][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1548.512178][ T10] usb 10-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1548.512917][ T10] usb 10-1: config index 0 descriptor too short (expected 19, got 18) [ 1548.514399][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.514418][ T10] usb 10-1: Product: syz [ 1548.515148][ T10] usb 10-1: Manufacturer: syz [ 1548.515159][ T10] usb 10-1: SerialNumber: syz [ 1548.572383][ T10] usb 10-1: config 0 descriptor?? [ 1548.574887][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1548.574911][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1548.605546][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1548.609465][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1548.609493][ T10] usb 10-1: media controller created [ 1548.657460][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1548.691015][ T10] usb 10-1: selecting invalid altsetting 7 [ 1548.691027][ T10] cxusb: set interface failed [ 1548.691034][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1548.806711][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 1548.806723][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1548.846030][T14775] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1548.962199][ T10] rc_core: IR keymap rc-dvico-portable not found [ 1548.962212][ T10] Registered IR keymap rc-empty [ 1548.962811][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 1548.966619][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input61 [ 1549.008064][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 1549.008076][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1549.011583][T14775] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1549.011610][T14775] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 1549.037170][T14775] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.037185][T14775] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1549.037215][T14775] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 7 [ 1549.084537][T14775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.084552][T14775] usb 3-1: Product: syz [ 1549.084561][T14775] usb 3-1: Manufacturer: Ж [ 1549.084570][T14775] usb 3-1: SerialNumber: syz [ 1549.089149][ T10] usb 10-1: USB disconnect, device number 97 [ 1549.255960][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1549.353353][T19466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2896'. [ 1549.353374][T19466] openvswitch: netlink: EtherType 0 is less than min 600 [ 1549.389368][T14775] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 1549.389398][T14775] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 1 [ 1549.389419][T14775] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1549.448545][T14775] usb 3-1: unit 2 not found! [ 1549.448561][T14775] usb 3-1: unit 0 not found! [ 1549.612716][T14775] usb 3-1: USB disconnect, device number 54 [ 1549.685233][T19224] udevd[19224]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1549.871620][ T30] audit: type=1400 audit(1792397737.783:1929): avc: denied { write } for pid=19467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1549.908430][ T30] audit: type=1400 audit(1792397737.823:1930): avc: denied { create } for pid=19474 comm="syz.7.2898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1550.112813][ T10] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1550.186760][ T30] audit: type=1400 audit(1792397738.103:1931): avc: denied { write } for pid=19497 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1550.266579][ T10] usb 10-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1550.267485][ T10] usb 10-1: config 1 has an invalid descriptor of length 190, skipping remainder of the config [ 1550.267511][ T10] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1550.267535][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.322714][ T10] ttusb_dec_send_command: command bulk message failed: error -22 [ 1550.322815][ T10] ttusb-dec 10-1:1.0: probe with driver ttusb-dec failed with error -22 [ 1551.539835][T19508] netlink: 'syz.9.2900': attribute type 11 has an invalid length. [ 1551.644373][T17895] Bluetooth: Wrong link type (-71) [ 1551.646460][ T9494] usb 10-1: USB disconnect, device number 98 [ 1551.944183][T10497] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1552.092128][T10497] usb 3-1: Using ep0 maxpacket: 16 [ 1552.094471][T10497] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1552.094497][T10497] usb 3-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 1552.096780][T10497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.096795][T10497] usb 3-1: Product: syz [ 1552.096804][T10497] usb 3-1: Manufacturer: syz [ 1552.096813][T10497] usb 3-1: SerialNumber: syz [ 1552.157845][T10497] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 1552.157862][T10497] usb 3-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 1552.157877][T10497] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1552.323048][T19525] netlink: 'syz.7.2905': attribute type 1 has an invalid length. [ 1552.331022][ T30] audit: type=1800 audit(1792397740.243:1932): pid=19513 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2904" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1552.375096][T10497] usb 3-1: failed to enable PITCH for EP 0x1 [ 1552.383470][T10497] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1552.440016][T19530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2906'. [ 1552.469302][ T30] audit: type=1400 audit(1792397740.364:1933): avc: denied { write } for pid=19514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1552.539975][T19529] bond2: (slave veth0_to_bond): Releasing active interface [ 1552.542949][T19530] bond_slave_0: entered promiscuous mode [ 1552.542962][T19530] bond_slave_0: entered allmulticast mode [ 1552.622417][T10497] usb 3-1: USB disconnect, device number 55 [ 1552.722538][T19199] udevd[19199]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1552.843196][ T30] audit: type=1400 audit(1792397740.720:1934): avc: denied { write } for pid=19537 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1553.041747][ T30] audit: type=1400 audit(1792397740.907:1935): avc: denied { remount } for pid=19544 comm="syz.2.2910" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1553.173404][T19550] FAULT_INJECTION: forcing a failure. [ 1553.173404][T19550] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.173426][T19550] CPU: 0 UID: 0 PID: 19550 Comm: syz.2.2912 Tainted: G L syzkaller #0 PREEMPT(full) [ 1553.173443][T19550] Tainted: [L]=SOFTLOCKUP [ 1553.173447][T19550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1553.173454][T19550] Call Trace: [ 1553.173459][T19550] [ 1553.173464][T19550] dump_stack_lvl+0x100/0x190 [ 1553.173486][T19550] should_fail_ex.cold+0x5/0xa [ 1553.173504][T19550] should_failslab+0xc2/0x120 [ 1553.173522][T19550] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1553.173538][T19550] ? __send_signal_locked+0x1d1/0x1430 [ 1553.173560][T19550] __send_signal_locked+0x1d1/0x1430 [ 1553.173581][T19550] send_signal_locked+0x15e/0xa00 [ 1553.173594][T19550] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1553.173612][T19550] ? __pfx_send_signal_locked+0x10/0x10 [ 1553.173624][T19550] ? lock_task_sighand+0x13c/0x340 [ 1553.173646][T19550] ? lock_task_sighand+0x146/0x340 [ 1553.173665][T19550] do_send_specific+0x1e8/0x360 [ 1553.173681][T19550] ? __pfx_do_send_specific+0x10/0x10 [ 1553.173695][T19550] ? __pfx_from_kuid_munged+0x10/0x10 [ 1553.173714][T19550] do_tkill+0x17f/0x200 [ 1553.173730][T19550] ? __pfx_do_tkill+0x10/0x10 [ 1553.173747][T19550] ? __pfx_ksys_write+0x10/0x10 [ 1553.173765][T19550] __x64_sys_tkill+0x6b/0xa0 [ 1553.173781][T19550] do_syscall_64+0x123/0x790 [ 1553.173800][T19550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.173813][T19550] RIP: 0033:0x7fa40f19e559 [ 1553.173823][T19550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.173835][T19550] RSP: 002b:00007fa410065028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 1553.173847][T19550] RAX: ffffffffffffffda RBX: 00007fa40f425fa0 RCX: 00007fa40f19e559 [ 1553.173855][T19550] RDX: 0000000000000000 RSI: 0000000000000021 RDI: 00000000000000d0 [ 1553.173862][T19550] RBP: 00007fa410065090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.173869][T19550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.173876][T19550] R13: 00007fa40f426038 R14: 00007fa40f425fa0 R15: 00007ffd448ab4a8 [ 1553.173893][T19550] [ 1554.251659][T19561] FAULT_INJECTION: forcing a failure. [ 1554.251659][T19561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1554.251685][T19561] CPU: 0 UID: 0 PID: 19561 Comm: syz.8.2916 Tainted: G L syzkaller #0 PREEMPT(full) [ 1554.251701][T19561] Tainted: [L]=SOFTLOCKUP [ 1554.251706][T19561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1554.251713][T19561] Call Trace: [ 1554.251718][T19561] [ 1554.251723][T19561] dump_stack_lvl+0x100/0x190 [ 1554.251745][T19561] should_fail_ex.cold+0x5/0xa [ 1554.251762][T19561] _copy_from_user+0x2e/0xd0 [ 1554.251780][T19561] do_ipt_set_ctl+0x9ac/0xcf0 [ 1554.251799][T19561] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1554.251824][T19561] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1554.251840][T19561] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1554.251857][T19561] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1554.251877][T19561] ? sockopt_release_sock+0x5c/0x70 [ 1554.251891][T19561] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1554.251916][T19561] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1554.251931][T19561] nf_setsockopt+0x8d/0xf0 [ 1554.251946][T19561] ip_setsockopt+0xcb/0xf0 [ 1554.251966][T19561] tcp_setsockopt+0xa7/0x100 [ 1554.251978][T19561] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1554.251994][T19561] do_sock_setsockopt+0xf3/0x1d0 [ 1554.252011][T19561] __sys_setsockopt+0x195/0x220 [ 1554.252026][T19561] __x64_sys_setsockopt+0xbd/0x160 [ 1554.252037][T19561] ? do_syscall_64+0xae/0x790 [ 1554.252054][T19561] ? lockdep_hardirqs_on+0x7d/0x110 [ 1554.252071][T19561] do_syscall_64+0x123/0x790 [ 1554.252090][T19561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.252103][T19561] RIP: 0033:0x7f541d59e559 [ 1554.252113][T19561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1554.252125][T19561] RSP: 002b:00007f541e4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1554.252137][T19561] RAX: ffffffffffffffda RBX: 00007f541d825fa0 RCX: 00007f541d59e559 [ 1554.252145][T19561] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 1554.252152][T19561] RBP: 00007f541e4af090 R08: 0000000000000398 R09: 0000000000000000 [ 1554.252159][T19561] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.252167][T19561] R13: 00007f541d826038 R14: 00007f541d825fa0 R15: 00007ffef2e97d58 [ 1554.252183][T19561] [ 1555.684155][T17895] Bluetooth: Wrong link type (-71) [ 1555.885618][ T30] audit: type=1400 audit(1792397743.573:1936): avc: denied { write } for pid=19546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1556.097415][ T30] audit: type=1400 audit(1792397743.760:1937): avc: denied { write } for pid=19581 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1557.164427][T19595] FAULT_INJECTION: forcing a failure. [ 1557.164427][T19595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.164451][T19595] CPU: 0 UID: 0 PID: 19595 Comm: syz.7.2921 Tainted: G L syzkaller #0 PREEMPT(full) [ 1557.164468][T19595] Tainted: [L]=SOFTLOCKUP [ 1557.164473][T19595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1557.164481][T19595] Call Trace: [ 1557.164485][T19595] [ 1557.164490][T19595] dump_stack_lvl+0x100/0x190 [ 1557.164519][T19595] should_fail_ex.cold+0x5/0xa [ 1557.164537][T19595] _copy_from_user+0x2e/0xd0 [ 1557.164555][T19595] __keyctl_dh_compute+0x1b6/0x10d0 [ 1557.164568][T19595] ? find_held_lock+0x2b/0x80 [ 1557.164587][T19595] ? get_pid_task+0xfc/0x250 [ 1557.164602][T19595] ? get_pid_task+0xfc/0x250 [ 1557.164619][T19595] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1557.164633][T19595] ? proc_fail_nth_write+0x9f/0x220 [ 1557.164656][T19595] ? lock_acquire+0x1d1/0x380 [ 1557.164669][T19595] ? __might_fault+0xc5/0x140 [ 1557.164692][T19595] keyctl_dh_compute+0xd9/0x140 [ 1557.164704][T19595] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1557.164720][T19595] ? ksys_write+0x1ac/0x250 [ 1557.164735][T19595] ? __pfx_ksys_write+0x10/0x10 [ 1557.164751][T19595] __do_sys_keyctl+0x464/0x5a0 [ 1557.164768][T19595] do_syscall_64+0x123/0x790 [ 1557.164788][T19595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.164801][T19595] RIP: 0033:0x7f9412b9e559 [ 1557.164812][T19595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.164823][T19595] RSP: 002b:00007f9410df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1557.164835][T19595] RAX: ffffffffffffffda RBX: 00007f9412e26180 RCX: 00007f9412b9e559 [ 1557.164843][T19595] RDX: 0000200000000500 RSI: 00002000000004c0 RDI: 0000000000000017 [ 1557.164851][T19595] RBP: 00007f9410df6090 R08: 0000200000000580 R09: 0000000000000000 [ 1557.164858][T19595] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000001 [ 1557.164866][T19595] R13: 00007f9412e26218 R14: 00007f9412e26180 R15: 00007ffff0d26668 [ 1557.164882][T19595] [ 1557.887723][T19605] jffs2: notice: (19605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1557.912016][ T30] audit: type=1400 audit(1792397745.463:1938): avc: denied { read } for pid=19593 comm="syz.2.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1557.939602][ T30] audit: type=1400 audit(1792397745.491:1939): avc: denied { setattr } for pid=19593 comm="syz.2.2922" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1557.997964][T10497] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1558.158596][T10497] usb 10-1: Using ep0 maxpacket: 8 [ 1558.160057][T10497] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1558.162495][T10497] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1558.162510][T10497] usb 10-1: config 0 has no interface number 0 [ 1558.162532][T10497] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1558.162546][T10497] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1558.162561][T10497] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1558.162576][T10497] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1558.162601][T10497] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.164145][T10497] usb 10-1: config 0 descriptor?? [ 1558.290963][T10497] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1558.536084][T19614] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2918'. [ 1558.542129][T19582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.542452][T19582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.618247][ T9494] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 1558.757052][ T9494] usb 3-1: device descriptor read/64, error -71 [ 1558.789119][T10497] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1558.950065][T10497] usb 9-1: New USB device found, idVendor=0e41, idProduct=4147, bcdDevice= 0.40 [ 1558.951419][T10497] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1558.954852][T10497] usb 9-1: string descriptor 0 read error: -22 [ 1558.954921][T10497] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.013534][ T9494] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 1559.040225][T10497] usb 9-1: unit 0 not found! [ 1559.046852][ T30] audit: type=1400 audit(1792397746.529:1940): avc: denied { write } for pid=19591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1559.087461][T10497] usb 9-1: unit 15 not found! [ 1559.144932][T10503] usb 10-1: USB disconnect, device number 99 [ 1559.170787][ T9494] usb 3-1: device descriptor read/64, error -71 [ 1559.193635][T10503] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1559.280758][ T9494] usb usb3-port1: attempt power cycle [ 1559.330142][T14507] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.332300][T10497] snd_usb_toneport 9-1:1.1: Line 6 TonePort GX found [ 1559.332315][T10497] usb 9-1: selecting invalid altsetting 2 [ 1559.332326][T10497] snd_usb_toneport 9-1:1.1: set_interface failed [ 1559.332437][T10497] snd_usb_toneport 9-1:1.1: Line 6 TonePort GX now disconnected [ 1559.332527][T10497] snd_usb_toneport 9-1:1.1: probe with driver snd_usb_toneport failed with error -22 [ 1559.394478][T10497] snd_usb_toneport 9-1:1.2: Line 6 TonePort GX found [ 1559.394495][T10497] usb 9-1: selecting invalid altsetting 2 [ 1559.394505][T10497] snd_usb_toneport 9-1:1.2: set_interface failed [ 1559.394611][T10497] snd_usb_toneport 9-1:1.2: Line 6 TonePort GX now disconnected [ 1559.394698][T10497] snd_usb_toneport 9-1:1.2: probe with driver snd_usb_toneport failed with error -22 [ 1559.456737][T10497] usb 9-1: USB disconnect, device number 57 [ 1559.549678][ T30] audit: type=1400 audit(1792397746.988:1941): avc: denied { write } for pid=19623 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1559.658127][ T9494] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 1559.680352][ T9494] usb 3-1: device descriptor read/8, error -71 [ 1559.718661][T14507] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.933275][ T9494] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 1559.957180][ T9494] usb 3-1: device descriptor read/8, error -71 [ 1559.973703][T14507] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.124425][ T9494] usb usb3-port1: unable to enumerate USB device [ 1561.138920][T18858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1561.159997][T18858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1561.171593][T18858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1561.177240][T18858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1561.194752][T18858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1562.276803][T19644] FAULT_INJECTION: forcing a failure. [ 1562.276803][T19644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1562.276827][T19644] CPU: 0 UID: 0 PID: 19644 Comm: syz.9.2930 Tainted: G L syzkaller #0 PREEMPT(full) [ 1562.276845][T19644] Tainted: [L]=SOFTLOCKUP [ 1562.276849][T19644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1562.276857][T19644] Call Trace: [ 1562.276861][T19644] [ 1562.276867][T19644] dump_stack_lvl+0x100/0x190 [ 1562.276889][T19644] should_fail_ex.cold+0x5/0xa [ 1562.276907][T19644] _copy_to_user+0x32/0xd0 [ 1562.276926][T19644] simple_read_from_buffer+0xcb/0x170 [ 1562.276946][T19644] proc_fail_nth_read+0x1af/0x230 [ 1562.276965][T19644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1562.276983][T19644] ? rw_verify_area+0xce/0x6d0 [ 1562.276996][T19644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1562.277019][T19644] vfs_read+0x1e4/0xb40 [ 1562.277034][T19644] ? lock_acquire+0x1d1/0x380 [ 1562.277048][T19644] ? __fget_files+0x34/0x3d0 [ 1562.277065][T19644] ? __pfx_vfs_read+0x10/0x10 [ 1562.277077][T19644] ? find_held_lock+0x2b/0x80 [ 1562.277095][T19644] ? __fget_files+0x215/0x3d0 [ 1562.277115][T19644] ? __fget_files+0x21f/0x3d0 [ 1562.277136][T19644] ksys_read+0x12a/0x250 [ 1562.277150][T19644] ? __pfx_ksys_read+0x10/0x10 [ 1562.277169][T19644] do_syscall_64+0x123/0x790 [ 1562.277189][T19644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.277202][T19644] RIP: 0033:0x7f9dda35ed8e [ 1562.277215][T19644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1562.277226][T19644] RSP: 002b:00007f9ddb29afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1562.277238][T19644] RAX: ffffffffffffffda RBX: 00007f9ddb29b6c0 RCX: 00007f9dda35ed8e [ 1562.277246][T19644] RDX: 000000000000000f RSI: 00007f9ddb29b0a0 RDI: 0000000000000009 [ 1562.277254][T19644] RBP: 00007f9ddb29b090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.277261][T19644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1562.277268][T19644] R13: 00007f9dda626128 R14: 00007f9dda626090 R15: 00007fffafbf7128 [ 1562.277285][T19644] [ 1562.489020][T10497] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1562.652555][T14507] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.711996][T10497] usb 9-1: Using ep0 maxpacket: 32 [ 1562.714179][T10497] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1562.717293][T10497] usb 9-1: config index 0 descriptor too short (expected 19, got 18) [ 1562.722053][T10497] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.722068][T10497] usb 9-1: Product: syz [ 1562.722077][T10497] usb 9-1: Manufacturer: syz [ 1562.722086][T10497] usb 9-1: SerialNumber: syz [ 1562.762778][T10497] usb 9-1: config 0 descriptor?? [ 1562.791388][T10497] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1562.791414][T10497] dvb-usb: bulk message failed: -22 (2/0) [ 1562.817629][T10497] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1562.832547][T10497] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1562.832574][T10497] usb 9-1: media controller created [ 1562.901035][T10497] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1562.941376][T10497] usb 9-1: selecting invalid altsetting 7 [ 1562.941389][T10497] cxusb: set interface failed [ 1562.941397][T10497] dvb-usb: bulk message failed: -22 (1/0) [ 1562.992713][T19647] dvb-usb: bulk message failed: -22 (70/0) [ 1563.073140][T10497] DVB: Unable to find symbol lgdt330x_attach() [ 1563.073151][T10497] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1563.150451][ T9494] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1563.150813][T10503] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1563.245030][ T30] audit: type=1400 audit(1792397750.449:1942): avc: denied { write } for pid=19626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1563.273848][T10497] rc_core: IR keymap rc-dvico-portable not found [ 1563.273860][T10497] Registered IR keymap rc-empty [ 1563.274465][T10497] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 1563.308607][T10497] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input63 [ 1563.323147][T10503] usb 10-1: Using ep0 maxpacket: 32 [ 1563.323243][ T9494] usb 3-1: Using ep0 maxpacket: 32 [ 1563.334742][ T9494] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1563.335154][T10503] usb 10-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1563.335835][ T9494] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1563.335850][ T9494] usb 3-1: config 0 has no interface number 0 [ 1563.338239][ T9494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.338254][ T9494] usb 3-1: Product: syz [ 1563.338263][ T9494] usb 3-1: Manufacturer: syz [ 1563.338272][ T9494] usb 3-1: SerialNumber: syz [ 1563.341827][T10497] dvb-usb: schedule remote query interval to 100 msecs. [ 1563.341840][T10497] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1563.410418][T10503] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.410436][T10503] usb 10-1: Product: syz [ 1563.410445][T10503] usb 10-1: Manufacturer: syz [ 1563.410454][T10503] usb 10-1: SerialNumber: syz [ 1563.450143][T18858] Bluetooth: hci0: command tx timeout [ 1563.463276][ T9494] usb 3-1: config 0 descriptor?? [ 1563.477360][T14507] bridge_slave_1: left allmulticast mode [ 1563.477377][T14507] bridge_slave_1: left promiscuous mode [ 1563.477491][T14507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.480732][T10497] usb 9-1: USB disconnect, device number 58 [ 1563.511191][T10503] usb 10-1: config 0 descriptor?? [ 1563.542078][T10503] usb 10-1: selecting invalid altsetting 3 [ 1563.542097][T10503] comedi comedi5: could not set alternate setting 3 in high speed [ 1563.542108][T10503] usbdux 10-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1563.576195][T14507] bridge_slave_0: left allmulticast mode [ 1563.576214][T14507] bridge_slave_0: left promiscuous mode [ 1563.591051][T14507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.597663][T10503] usbdux 10-1:0.0: probe with driver usbdux failed with error -22 [ 1563.804708][T10497] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1564.225159][ T9494] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1564.225181][ T9494] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1564.831098][T19657] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1564.831115][T19657] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1564.831181][T19657] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1564.831192][T19657] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1565.084380][ T10] usb 10-1: USB disconnect, device number 100 [ 1565.126123][ T30] audit: type=1400 audit(1792397752.208:1943): avc: denied { write } for pid=19675 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1565.313812][ T9494] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1565.313941][ T9494] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1565.351433][ T9494] usb 3-1: USB disconnect, device number 60 [ 1565.673193][T18858] Bluetooth: hci0: command tx timeout [ 1565.675073][T14507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1565.723745][T14507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1565.745966][T14507] bond0 (unregistering): Released all slaves [ 1566.173093][ T30] audit: type=1400 audit(1792397753.190:1944): avc: denied { write } for pid=19686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1566.227915][T19636] rxe_eth0 speed is unknown, defaulting to 1000 [ 1566.271701][T14775] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1566.350644][ T30] audit: type=1400 audit(1792397753.358:1945): avc: denied { write } for pid=19705 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1566.380774][T10503] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1566.433004][T14775] usb 9-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1566.433796][T14775] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.433824][T14775] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.550293][T10503] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1566.551103][T10503] usb 3-1: config 1 has an invalid interface number: 8 but max is 1 [ 1566.551119][T10503] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.551131][T10503] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1566.551143][T10503] usb 3-1: config 1 has no interface number 0 [ 1566.551184][T10503] usb 3-1: config 1 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1566.551829][T14775] rtsx_usb 9-1:1.0: probe with driver rtsx_usb failed with error -22 [ 1566.553134][T10503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.553149][T10503] usb 3-1: Product: syz [ 1566.553158][T10503] usb 3-1: Manufacturer: syz [ 1566.553167][T10503] usb 3-1: SerialNumber: syz [ 1566.657006][T10503] cdc_ncm 3-1:1.8: CDC Union missing and no IAD found [ 1566.657038][T10503] cdc_ncm 3-1:1.8: bind() failure [ 1566.659051][T18858] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 1566.659066][T18858] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 1566.663889][T19695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1566.664116][T19695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1566.736435][T10503] usb 9-1: USB disconnect, device number 59 [ 1566.962404][T10503] usb 3-1: USB disconnect, device number 61 [ 1567.166758][T14507] hsr_slave_0: left promiscuous mode [ 1567.179544][T14507] hsr_slave_1: left promiscuous mode [ 1567.180064][T14507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1567.180077][T14507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1567.206219][T14507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1567.206232][T14507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1567.258468][T14507] veth1_macvtap: left promiscuous mode [ 1567.258550][T14507] veth0_macvtap: left promiscuous mode [ 1567.258601][T14507] veth1_vlan: left promiscuous mode [ 1567.258636][T14507] veth0_vlan: left promiscuous mode [ 1567.975786][T18858] Bluetooth: hci0: command tx timeout [ 1568.042802][ T30] audit: type=1400 audit(1792397754.902:1946): avc: denied { getopt } for pid=19724 comm="syz.9.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1568.332008][ T30] audit: type=1400 audit(1792397755.211:1947): avc: denied { write } for pid=19711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1568.453274][T14775] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1568.453358][T10503] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1568.526213][ T30] audit: type=1400 audit(1792397755.389:1948): avc: denied { write } for pid=19737 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1568.612781][T10503] usb 3-1: Using ep0 maxpacket: 32 [ 1568.613271][T10503] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1568.613421][T14775] usb 9-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 1568.614250][T10503] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 1568.614432][T14775] usb 9-1: config 2 has an invalid interface number: 79 but max is 0 [ 1568.614474][T14775] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1568.614486][T14775] usb 9-1: config 2 has no interface number 0 [ 1568.614501][T14775] usb 9-1: config 2 interface 79 has no altsetting 0 [ 1568.616078][T10503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.616092][T10503] usb 3-1: Product: syz [ 1568.616101][T10503] usb 3-1: Manufacturer: syz [ 1568.616110][T10503] usb 3-1: SerialNumber: syz [ 1568.621458][T14775] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.621472][T14775] usb 9-1: Product: syz [ 1568.621481][T14775] usb 9-1: Manufacturer: syz [ 1568.621490][T14775] usb 9-1: SerialNumber: syz [ 1568.675824][T10503] usb 3-1: config 0 descriptor?? [ 1568.747530][T10503] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1568.747556][T10503] dvb-usb: bulk message failed: -22 (2/0) [ 1568.771743][T10503] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1568.785924][T10503] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1568.785954][T10503] usb 3-1: media controller created [ 1568.824078][T10503] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1568.862879][T10503] usb 3-1: selecting invalid altsetting 7 [ 1568.862891][T10503] cxusb: set interface failed [ 1568.862898][T10503] dvb-usb: bulk message failed: -22 (1/0) [ 1568.949480][T10503] DVB: Unable to find symbol lgdt330x_attach() [ 1568.949491][T10503] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1568.960763][T19732] dvb-usb: bulk message failed: -22 (70/0) [ 1569.072177][T10503] rc_core: IR keymap rc-dvico-portable not found [ 1569.072188][T10503] Registered IR keymap rc-empty [ 1569.072845][T10503] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1569.078562][T10503] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input64 [ 1569.081662][T10503] dvb-usb: schedule remote query interval to 100 msecs. [ 1569.081675][T10503] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1569.082040][ T30] audit: type=1400 audit(1792397755.912:1949): avc: denied { ioctl } for pid=19728 comm="syz.8.2945" path="/dev/ptyr5" dev="devtmpfs" ino=140 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1569.173391][T10503] usb 3-1: USB disconnect, device number 62 [ 1569.324596][T10503] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1569.437128][ T32] INFO: task syz.3.2519:17731 blocked for more than 144 seconds. [ 1569.437160][ T32] Tainted: G L syzkaller #0 [ 1569.437168][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1569.437173][ T32] task:syz.3.2519 state:D stack:28280 pid:17731 tgid:17727 ppid:14843 task_flags:0x400040 flags:0x00080002 [ 1569.437211][ T32] Call Trace: [ 1569.437216][ T32] [ 1569.437223][ T32] __schedule+0x1259/0x6920 [ 1569.437245][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1569.437264][ T32] ? irqentry_exit+0x2c9/0xa90 [ 1569.437311][ T32] ? __pfx___schedule+0x10/0x10 [ 1569.437326][ T32] ? find_held_lock+0x2b/0x80 [ 1569.437344][ T32] ? schedule+0x225/0x2c0 [ 1569.437363][ T32] schedule+0xdd/0x2c0 [ 1569.437378][ T32] schedule_preempt_disabled+0x13/0x30 [ 1569.437394][ T32] __mutex_lock+0xccb/0x1bd0 [ 1569.437412][ T32] ? write_ports+0xa5/0xcc0 [ 1569.437424][ T32] ? nfsctl_transaction_write+0xcd/0x1a0 [ 1569.437454][ T32] ? ksys_write+0x12a/0x250 [ 1569.437469][ T32] ? do_syscall_64+0x123/0x790 [ 1569.437487][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1569.437513][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1569.437529][ T32] ? write_ports+0xa5/0xcc0 [ 1569.437540][ T32] write_ports+0xa5/0xcc0 [ 1569.437553][ T32] ? __pfx_write_ports+0x10/0x10 [ 1569.437564][ T32] ? lock_acquire+0x1d1/0x380 [ 1569.437649][ T32] ? __might_fault+0xc5/0x140 [ 1569.437664][ T32] ? find_held_lock+0x2b/0x80 [ 1569.437681][ T32] ? __might_fault+0xc5/0x140 [ 1569.437692][ T32] ? __might_fault+0xc5/0x140 [ 1569.437707][ T32] ? __pfx_write_ports+0x10/0x10 [ 1569.437719][ T32] ? __pfx_write_ports+0x10/0x10 [ 1569.437743][ T32] ? _copy_from_user+0x59/0xd0 [ 1569.437762][ T32] ? __pfx_write_ports+0x10/0x10 [ 1569.437773][ T32] nfsctl_transaction_write+0x106/0x1a0 [ 1569.437792][ T32] vfs_write+0x2aa/0x1050 [ 1569.437808][ T32] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1569.437825][ T32] ? lock_acquire+0x1d1/0x380 [ 1569.437838][ T32] ? __fget_files+0x34/0x3d0 [ 1569.437855][ T32] ? __pfx_vfs_write+0x10/0x10 [ 1569.437883][ T32] ? find_held_lock+0x2b/0x80 [ 1569.437902][ T32] ? __fget_files+0x215/0x3d0 [ 1569.437922][ T32] ? __fget_files+0x21f/0x3d0 [ 1569.437943][ T32] ksys_write+0x12a/0x250 [ 1569.437957][ T32] ? __pfx_ksys_write+0x10/0x10 [ 1569.437977][ T32] do_syscall_64+0x123/0x790 [ 1569.437996][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.438025][ T32] RIP: 0033:0x7f1e9fd9e559 [ 1569.438036][ T32] RSP: 002b:00007f1e9dff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1569.438048][ T32] RAX: ffffffffffffffda RBX: 00007f1ea0026090 RCX: 00007f1e9fd9e559 [ 1569.438056][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1569.438064][ T32] RBP: 00007f1e9fe35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1569.438071][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1569.438078][ T32] R13: 00007f1ea0026128 R14: 00007f1ea0026090 R15: 00007fffa55a3ce8 [ 1569.438096][ T32] [ 1569.438128][ T32] [ 1569.438128][ T32] Showing all locks held in the system: [ 1569.438138][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1569.438166][ T32] #0: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1569.438202][ T32] locks held by kworker/u8:2/43: 3, on CPU#0: [ 1569.438210][ T32] #0: ffff88801d094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1569.438237][ T32] #1: ffffc90000b37d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1569.438263][ T32] #2: ffffffff91cd5fc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1569.438330][ T32] locks held by dhcpcd/5262: 1, on CPU#0: [ 1569.438339][ T32] #0: ffffffff91cd5fc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 1569.438370][ T32] locks held by getty/5354: 2, on CPU#0: [ 1569.438378][ T32] #0: ffff88803687b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1569.438409][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1569.438456][ T32] locks held by kworker/0:18/10503: 3, on CPU#0: [ 1569.438465][ T32] #0: ffff88801d10c540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1569.438492][ T32] #1: ffffc900035dfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1569.438519][ T32] #2: ffff88802be311d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1569.438548][ T32] locks held by syz-executor/11400: 4, last CPU#0: [ 1569.438556][ T32] #0: ffffffff8ff3df90 (dup_mmap_sem){++++}-{0:0}, at: copy_process+0x5079/0x8430 [ 1569.438595][ T32] #1: ffff888073c65900 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 1569.438628][ T32] #2: ffff88801d087180 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 1569.438662][ T32] #3: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1569.440396][ T32] locks held by syz-executor/11449: 2, last CPU#0: [ 1569.440405][ T32] #0: ffff88808beec460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 1569.440452][ T32] #1: ffffffff8fdec620 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1569.440487][ T32] locks held by kworker/u8:13/14507: 5, last CPU#0: [ 1569.440496][ T32] #0: ffff88801e2e0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1569.440522][ T32] #1: ffffc900048dfd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1569.440548][ T32] #2: ffffffff91cbd488 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1569.440595][ T32] #3: ffffffff91cd5fc0 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x92/0x890 [ 1569.440624][ T32] #4: ffff8880528e1e48 (&net->mpls.platform_mutex){+.+.}-{4:4}, at: mpls_dev_notify+0x7b/0x920 [ 1569.440658][ T32] locks held by kworker/0:0/14775: 4, on CPU#0: [ 1569.440666][ T32] #0: ffff88801d10c540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1569.440692][ T32] #1: ffffc90003fdfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1569.440736][ T32] #2: ffff88802c0f01d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1569.440765][ T32] #3: ffff888022bd91d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 1569.440795][ T32] locks held by syz.3.2519/17728: 3, on CPU#0: [ 1569.440804][ T32] #0: ffff888022361430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1569.440829][ T32] #1: ffff88803729e460 (sb_writers#22){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1569.440879][ T32] #2: ffffffff90289e20 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1569.440905][ T32] locks held by syz.3.2519/17731: 3, on CPU#0: [ 1569.440914][ T32] #0: ffff88807c4b6ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1569.440939][ T32] #1: ffff88803729e460 (sb_writers#22){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1569.440969][ T32] #2: ffffffff90289e20 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 1569.442172][ T32] locks held by udevd/19622: 4, on CPU#0: [ 1569.442181][ T32] #0: ffff888077b6f758 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 1569.442213][ T32] #1: ffff888034de3c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 1569.442246][ T32] #2: ffff88802bad94b8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 1569.442304][ T32] #3: ffff888022bd91d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1569.442337][ T32] locks held by syz-executor/19636: 2, on CPU#0: [ 1569.442346][ T32] #0: ffffffff9245ba68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 1569.442377][ T32] #1: ffffffff91cd5fc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 1569.442410][ T32] locks held by syz.8.2945/19731: 2, on CPU#0: [ 1569.442431][ T32] #0: ffffffff91d84e08 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1569.442458][ T32] #1: ffffffff91cd5fc0 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_set_doit+0x3c6/0x1050 [ 1569.443297][ T32] [ 1569.443301][ T32] ============================================= [ 1569.443301][ T32] [ 1569.443318][ T32] NMI backtrace for cpu 0 [ 1569.443328][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1569.443344][ T32] Tainted: [L]=SOFTLOCKUP [ 1569.443348][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1569.443356][ T32] Call Trace: [ 1569.443360][ T32] [ 1569.443365][ T32] dump_stack_lvl+0x100/0x190 [ 1569.443385][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1569.443405][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1569.443420][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1569.443437][ T32] sys_info+0x141/0x190 [ 1569.443449][ T32] watchdog+0xcb1/0x1030 [ 1569.443468][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1569.443484][ T32] ? __pfx_watchdog+0x10/0x10 [ 1569.443499][ T32] ? __kthread_parkme+0x18f/0x230 [ 1569.443516][ T32] ? kthread+0x13a/0x450 [ 1569.443531][ T32] ? __pfx_watchdog+0x10/0x10 [ 1569.443545][ T32] kthread+0x373/0x450 [ 1569.443560][ T32] ? __pfx_kthread+0x10/0x10 [ 1569.443576][ T32] ret_from_fork+0x730/0xd60 [ 1569.443590][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1569.443604][ T32] ? __switch_to+0x800/0x10f0 [ 1569.443621][ T32] ? __pfx_kthread+0x10/0x10 [ 1569.443638][ T32] ret_from_fork_asm+0x1a/0x30 [ 1569.443659][ T32] [ 1569.443683][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1570.337353][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1570.347999][ T32] Tainted: [L]=SOFTLOCKUP [ 1570.352291][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1570.362317][ T32] Call Trace: [ 1570.365573][ T32] [ 1570.368480][ T32] dump_stack_lvl+0x100/0x190 [ 1570.373141][ T32] vpanic+0x553/0x970 [ 1570.377094][ T32] ? __pfx_vpanic+0x10/0x10 [ 1570.381586][ T32] panic+0xd1/0xe0 [ 1570.385277][ T32] ? __pfx_panic+0x10/0x10 [ 1570.389664][ T32] ? nmi_cpu_backtrace+0x79/0x200 [ 1570.394664][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 1570.400788][ T32] ? watchdog.cold+0x1ec/0x234 [ 1570.405526][ T32] watchdog.cold+0x1fd/0x234 [ 1570.410108][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1570.415889][ T32] ? __pfx_watchdog+0x10/0x10 [ 1570.420542][ T32] ? __kthread_parkme+0x18f/0x230 [ 1570.425544][ T32] ? kthread+0x13a/0x450 [ 1570.429770][ T32] ? __pfx_watchdog+0x10/0x10 [ 1570.434420][ T32] kthread+0x373/0x450 [ 1570.438478][ T32] ? __pfx_kthread+0x10/0x10 [ 1570.443044][ T32] ret_from_fork+0x730/0xd60 [ 1570.447623][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1570.452707][ T32] ? __switch_to+0x800/0x10f0 [ 1570.457361][ T32] ? __pfx_kthread+0x10/0x10 [ 1570.461926][ T32] ret_from_fork_asm+0x1a/0x30 [ 1570.466670][ T32] [ 1570.469718][ T32] Kernel Offset: disabled [ 1570.474034][ T32] Rebooting in 86400 seconds..